THE CIA/AIC Triad 1.2

Question 1

Confidentiality

Answer 1

• Prevent disclosure of information to unauthorized individuals or systems.

Question 2

Integrity

Answer 2

• Messages cannot be modified.
• Data is stored and transferred as intended.
• Modifications to originally sent data will be identified.

Question 3

AIC - Availability

Answer 3

• Systems and networks must be kept up and running.
• Ensures access to the data at all times.

Question 4

The CIA/AIC Triad

Answer 4

• The fundamentals of security.
• Sometimes referred as the AIC triad

Question 5

How does ENCRYPTION ensure confidentiality?

Answer 5

• Encodes messages so only certain people can read it.

Question 6

How does ACCESS CONTROLS ensure confidentiality?

Answer 6

• Set limits on what someone has access to.
• Select restrict access to a resource.

Question 7

How does TWO-FACTOR AUTHENTICATION ensure confidentiality?

Answer 7

• Provides additional factors for authentication when accessing a system.
• Additional confirmation before information is disclosed.

Question 8

How is HASHING used to ensure integrity?

Answer 8

• The person sending the data will send the recipient the data and a hash of the data.
• Map data of an arbitrary length to data of a fixed length.
• The recipient will perform a similar hashing function of the received data.

Question 9

How can the application of DIGITAL SIGNATURES ensure integrity?

Answer 9

• Mathematical scheme to verify the integrity of data.
• Takes a Hash and encrypts with an asymmetrical algorithm. This ensures the data hasn’t changed and the confirms the intended recipient.

Question 10

How can the application of CERTIFICATES assist in integrity?

Answer 10

• Combine with a digital signature to verify an individual.
• Identifies devices and people to ensure intended recipient when transferring data.

Question 11

How does NON-REPUDIATION ensure integrity?

Answer 11

• Provides proof of integrity, can be asserted to be genuine.
• Ensures the received information is from the originating party.

Question 12

How does the REDUNDANCY ensure Availability?

Answer 12

• Build services that will always be available and up and running.
• This is combined with FAULT TOLERANCE.

Question 13

How does the application of FAULT TOLERANCE ensure availability?

Answer 13

• Systems will continue to run, even when a failure occurs.
• When one systems fails or shuts down another will continue the services.

Question 14

What is the prevalence of PATCH when ensuring availability?

Answer 14

• Provides stability of the system, and closes security holes that cold be potentially exploited.