nerdexam
(ISC)2

CISSP-ISSAP · Question #9

Which of the following cryptographic system services ensures that information will not be (ISC)2 CISSP-ISSAP Exam disclosed to any unauthorized person on a local network?

The correct answer is D. Confidentiality. Confidentiality is the cryptographic service specifically designed to prevent unauthorized disclosure of information - it ensures that only intended recipients can read data, typically through encryption mechanisms like AES or RSA on a local network. Why the distractors are…

Security Architecture Modeling

Question

Which of the following cryptographic system services ensures that information will not be (ISC)2 CISSP-ISSAP Exam disclosed to any unauthorized person on a local network?

Options

  • AAuthentication
  • BNon-repudiation
  • CIntegrity
  • DConfidentiality

How the community answered

(64 responses)
  • A
    9% (6)
  • B
    2% (1)
  • C
    3% (2)
  • D
    86% (55)

Explanation

Confidentiality is the cryptographic service specifically designed to prevent unauthorized disclosure of information - it ensures that only intended recipients can read data, typically through encryption mechanisms like AES or RSA on a local network.

Why the distractors are wrong:

  • A. Authentication verifies who someone is (e.g., passwords, certificates), but does not prevent unauthorized parties from reading data once they have access.
  • B. Non-repudiation ensures a sender cannot deny having sent a message (via digital signatures), addressing accountability rather than secrecy.
  • C. Integrity ensures data has not been altered in transit (e.g., via hashing), but does not prevent unauthorized viewing of that data.

Memory tip: Use the CIA triad - Confidentiality, Integrity, Availability. Any question about preventing unauthorized disclosure or access maps directly to the C. If the question mentions "reading," "seeing," or "disclosure," think Confidentiality.

Topics

#Cryptographic Services#Confidentiality#Data Protection#Encryption

Community Discussion

No community discussion yet for this question.

Full CISSP-ISSAP Practice