The CIA Triad ISE Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company deploys IoT sensors in a public park to measure air quality. The data is non-sensitive and used for a public dashboard. The main requirement is that the dashboard remains accessible to citizens even during peak usage. Which approach best balances the CIA triad for this scenario?

   • APrioritize confidentiality by encrypting all data at rest and in transit
   • BPrioritize integrity by adding digital signatures to every reading
   • CTreat all three principles equally with maximum controls for each
   • DPrioritize availability by using redundant data feeds and scalable cloud hosting
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A retail chain uses IoT beacons to send promotional offers to customers' phones. The offers are not sensitive, but the system must be available during business hours. The marketing team wants to collect customer location data for analytics. What is the most appropriate security focus?

   • AEnsure availability of the beacon system during store hours and protect customer location data with appropriate access controls
   • BFocus only on availability because the offers are not sensitive
   • CFocus only on confidentiality because the offers are not sensitive
   • DDisable all security to maximize performance
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A smart grid operator must choose between investing in advanced encryption for meter data (confidentiality) or redundant communication paths (availability). The grid has a limited budget. Which approach best aligns with the operator's primary responsibility to keep the power grid stable?

   • APrioritize encryption because meter data is sensitive
   • BPrioritize redundant communication paths to ensure grid control messages are always delivered
   • CDefer both investments until a breach occurs
   • DSplit the budget evenly between encryption and redundancy
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A smart grid operator uses IoT sensors to monitor power distribution. The system must be highly available to prevent blackouts. However, a recent audit found that some sensor data is being corrupted due to transmission errors. The operator must decide how to allocate resources. What is the most appropriate priority?

   • AFocus only on integrity because corrupted data is dangerous
   • BImplement heavy encryption on all data, which also fixes integrity
   • CEnsure availability first, then add error-detection codes to maintain data integrity
   • DFocus only on availability and ignore the data corruption
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which statement correctly defines the CIA triad in the context of information security?

   • AA set of three encryption algorithms used to protect data at rest, in transit, and in use.
   • BA model that balances three core principles: confidentiality, integrity, and availability.
   • CA security standard that requires all systems to implement authentication, authorization, and accounting.
   • DA framework that ensures data is confidential, integral, and accessible only to authorized users.
   Reveal Solution Discussion Select an answer first