1.1 Describe the CIA Triad 200-201 Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A university's online exam system must be available during final exams. The system stores student answers and grades. After a recent power outage, some submitted answers were lost. Which combination of controls would best prevent this loss and ensure the system is available during the next exam window?

   • AIncrease the server's RAM and CPU to handle more concurrent users.
   • BDeploy redundant servers in an active-active cluster and write each answer to two independent storage systems.
   • CUse a UPS for the servers and perform daily backups to tape.
   • DRequire students to save their answers locally and upload them manually.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which scenario best illustrates a trade-off between confidentiality and availability?

   • AUsing a firewall to block all inbound traffic, which prevents unauthorized access but also blocks legitimate users
   • BAdding redundant servers to ensure uptime, which increases cost but does not affect data confidentiality
   • CImplementing strict access controls that limit who can view data, which reduces the risk of unauthorized disclosure
   • DImplementing strong encryption on a database, which makes it harder for authorized users to access data quickly
   Reveal Solution Discussion Select an answer first
4. 33expert · hard

   A cloud storage service must comply with a regulation that requires encryption of data at rest. The service also needs to provide fast search over the stored documents. The security architect is considering client-side encryption versus server-side encryption. Which consideration is most important when deciding between the two?

   • AServer-side encryption is always more secure because the provider manages the keys.
   • BServer-side encryption prevents the provider from accessing the data.
   • CClient-side encryption gives the customer control of the keys, but it can prevent the service from indexing the content for search.
   • DClient-side encryption is faster because it uses the customer's hardware.
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   Which security goal is primarily achieved by encrypting data at rest and in transit?

   • ANon-repudiation
   • BAvailability
   • CConfidentiality
   • DIntegrity
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A company's mobile workforce uses laptops that contain sensitive customer data. A laptop is stolen from a car. Which control would BEST protect the confidentiality of the data on the laptop?

   • AA tracking application that can locate the laptop.
   • BA BIOS password that prevents the laptop from booting.
   • CA remote wipe capability that erases the laptop when it is reported stolen.
   • DFull-disk encryption with a strong passphrase.
   Reveal Solution Discussion Select an answer first