The CIA Triad ISE Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Why might an IoT system designer choose to prioritize integrity over availability in a specific application?

   • ABecause the system is low-cost and cannot afford redundant components.
   • BBecause the system handles sensitive personal data that must be protected from unauthorized access.
   • CBecause the system must be operational even during a network outage.
   • DBecause incorrect data could cause dangerous actions, such as a smart grid misbalancing the power load.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   In the CIA triad, what does the 'integrity' principle primarily ensure?

   • AData is available to authorized users whenever needed.
   • BData is encrypted using strong cryptographic algorithms.
   • CData is kept secret from unauthorized parties.
   • DData remains accurate and unaltered by unauthorized changes.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which security mechanism is most directly used to protect the confidentiality of IoT data transmitted over a network?

   • AHash-based message authentication codes (HMAC)
   • BDigital signatures
   • CIntrusion detection systems (IDS)
   • DEncryption protocols such as TLS
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A logistics company uses IoT sensors to track temperature-sensitive cargo. The sensors are battery-powered and have limited processing power. The company needs to ensure that temperature readings cannot be altered in transit, but also needs to maximize battery life. Which approach best balances integrity and resource constraints?

   • AStore all readings locally and upload them only at the destination
   • BTransmit readings without any protection to save power
   • CUse a lightweight message authentication code (MAC) on each reading
   • DUse full asymmetric encryption on every reading
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A hospital uses IoT infusion pumps that must be available for life-critical operations. The IT team is deciding between two configurations: one that maximizes security with frequent authentication and encryption, and one that minimizes latency to ensure quick response. What is the most appropriate approach?

   • ABalance security and availability by using strong but efficient authentication and encryption
   • BUse a single-factor authentication to speed up access
   • CPrioritize confidentiality by encrypting all data even if it adds delay
   • DPrioritize availability by disabling all security features to reduce latency
   Reveal Solution Discussion Select an answer first