📝 Network Security goals confidentiality integrity availability (13 MCQs)
📖 From Data Communication and Networks • 31. Cryptography and Network Security • 13 questions available
What is Network Security goals confidentiality integrity availability?
The three core goals of network security are confidentiality, which keeps data private; integrity, which ensures data is accurate and unaltered; and availability, which guarantees that authorized users can access systems and data when needed.
📝 All Network Security goals confidentiality integrity availability MCQs
Q1. Which of the following best defines confidentiality in information security?
📖 Explanation: Confidentiality is the principle that data must be kept secret from anyone who is not explicitly authorized. This means preventing any unauthorized party from reading, copying, or transmitting the information, which is precisely described by option B. The other options refer to integrity, availability, and accountability respectively.
Q2. If a system's confidentiality is compromised but its integrity remains intact, which security goal is most likely to be affected next?
📖 Explanation: When confidential data is exposed, attackers often exploit that exposure to disrupt services, leading to downtime or loss of access. While integrity remains unchanged, the immediate ripple effect is usually on availability, as the organization may need to shut down systems to contain the breach. Hence, availability is the most likely next victim.
Q3. How does confidentiality differ from integrity in terms of their primary protection focus?
📖 Explanation: Confidentiality’s core concern is preventing unauthorized parties from accessing data, i.e., stopping illicit disclosure. Integrity, on the other hand, ensures that data remains accurate and unaltered, focusing on correctness rather than secrecy. The other statements either mix the two goals or misstate their primary focus.
Q4. Applying the principle of least privilege most directly supports which security goal?
📖 Explanation: Least privilege restricts users to only the data and functions required for their role, thereby limiting exposure of sensitive information. This directly bolsters confidentiality by reducing the number of entities that can view or manipulate confidential data. While it can indirectly aid other goals, its primary impact is on confidentiality.
Q5. An organization encrypts all stored data but experiences a ransomware attack that locks users out. Which security goal is primarily violated?
📖 Explanation: Ransomware encrypts data and then denies access, which directly impacts the system’s ability to provide services when needed. Although the data remains confidential, the denial of access undermines availability. Integrity and authentication are not the primary concerns in this scenario, making availability the correct answer.
Q6. Which statement accurately reflects a common trade‑off between confidentiality and availability?
📖 Explanation: Implementing very strict access controls can limit legitimate users’ ability to obtain needed resources promptly, thereby reducing system availability. This trade‑off is well‑known: enhancing confidentiality through tighter controls can inadvertently slow down or block legitimate access, whereas the other statements are inaccurate generalizations.
Q7. If a company implements a digital signature scheme, which security goals are simultaneously addressed?
📖 Explanation: Digital signatures use cryptographic techniques to verify that a message has not been altered (integrity) and to bind the signer to the message (non‑repudiation). They do not encrypt the content, so confidentiality is not directly provided, nor do they guarantee system uptime or authentication alone.
Q8. During a DDoS attack, network traffic is flooded, causing service slowdown. Which security goal is under attack, and what mitigation aligns with that goal?
📖 Explanation: A Distributed Denial‑of‑Service (DDoS) attack overwhelms resources, directly threatening availability. Mitigating this threat typically involves traffic filtering techniques such as rate limiting, black‑hole routing, or scrubbing centers, which aim to restore or preserve service accessibility. Encryption, checksums, and multi‑factor authentication address other goals.
Q9. Contrast the impact of a breach that affects integrity versus one that affects confidentiality on stakeholder trust.
📖 Explanation: When data integrity is compromised, stakeholders can no longer rely on the correctness of the information, which often leads to a more severe loss of confidence than a confidentiality breach where the data is still correct but exposed. This makes integrity breaches generally perceived as more damaging to trust.
Q10. Which combination of controls best ensures all three core security goals (confidentiality, integrity, availability) for an online banking platform?
📖 Explanation: Encryption protects data from unauthorized disclosure (confidentiality), checksums or digital signatures verify that data has not been altered (integrity), and redundant servers provide fault tolerance to keep services running (availability). The other options address subsets of the goals but do not cover all three comprehensively.
Q11. Consider a system where integrity is enforced by cryptographic hash verification. If an attacker modifies a file but also recomputes the hash and updates the stored value, which security goal is still compromised, and why?
📖 Explanation: Even though the attacker updates the stored hash, the original verification process has been subverted; the system now trusts a maliciously altered file. This means the integrity guarantee—ensuring data has not been tampered with—is broken, regardless of the hash’s apparent correctness.
Q12. Evaluate the following statement: 'Implementing strict access controls inevitably reduces system availability.' Which of the following critiques most accurately challenges this claim?
📖 Explanation: The criticism acknowledges that while stringent controls can limit access, combining role‑based access with redundant infrastructure and well‑designed workflows can preserve or even enhance availability. Thus, strict access does not *inevitably* degrade availability; careful design mitigates the potential impact.
Q13. Synthesize a security policy that integrates confidentiality, integrity, and availability for a cloud‑based health records system, referencing specific technical controls and their interdependencies.
📖 Explanation: A comprehensive policy would encrypt patient records to protect confidentiality, employ digital signatures or hash‑based checksums to verify that records remain unaltered (integrity), and leverage auto‑scaling load balancers to ensure continuous access despite traffic spikes (availability). The controls reinforce each other, creating a balanced security posture.