CAS-003 · Question #405
A security manager recently categorized an information system. During the categorization effort, the manager determined the loss of integrity of a specific information type would impact business…
The correct answer is C. Signing D. Validation. The question focuses specifically on integrity - ensuring data has not been tampered with or modified. Signing (C) uses cryptographic digital signatures to bind data to its origin; any modification to the signed data invalidates the signature, providing a strong integrity…
Question
A security manager recently categorized an information system. During the categorization effort, the manager determined the loss of integrity of a specific information type would impact business significantly. Based on this, the security manager recommends the implementation of several solutions. Which of the following, when combined, would BEST mitigate this risk? (Select TWO.)
Options
- AAccess control
- BWhitelisting
- CSigning
- DValidation
- EBoot attestation
How the community answered
(36 responses)- A8% (3)
- B17% (6)
- C69% (25)
- E6% (2)
Explanation
The question focuses specifically on integrity - ensuring data has not been tampered with or modified. Signing (C) uses cryptographic digital signatures to bind data to its origin; any modification to the signed data invalidates the signature, providing a strong integrity guarantee. Validation (D) ensures that data conforms to expected formats, values, and rules, detecting unauthorized or malformed modifications before they propagate. Together, signing provides a cryptographic proof of integrity at rest and in transit, while validation enforces integrity at input/output boundaries. Access control (A) limits who can touch data but does not detect if authorized users corrupt it. Whitelisting (B) is an application control, not an integrity mechanism. Boot attestation (E) addresses system integrity at startup, not data integrity.
Topics
Community Discussion
No community discussion yet for this question.