nerdexam
(ISC)2

CSSLP · Question #8

Which of the following cryptographic system services ensures that information will not be disclosed to any unauthorized person on a local network?

The correct answer is D. Confidentiality. Confidentiality is the cryptographic system service designed to prevent the unauthorized disclosure of information, ensuring that data is not revealed to unintended parties on a network.

Secure Software Concepts

Question

Which of the following cryptographic system services ensures that information will not be disclosed to any unauthorized person on a local network?

Options

  • AAuthentication
  • BIntegrity
  • CNon-repudiation
  • DConfidentiality

How the community answered

(25 responses)
  • A
    8% (2)
  • B
    4% (1)
  • D
    88% (22)

Why each option

Confidentiality is the cryptographic system service designed to prevent the unauthorized disclosure of information, ensuring that data is not revealed to unintended parties on a network.

AAuthentication

Authentication verifies the identity of users or systems but does not inherently prevent data disclosure once identity is established or if data is intercepted.

BIntegrity

Integrity ensures that information has not been altered or destroyed by unauthorized means, focusing on data accuracy and trustworthiness, not disclosure.

CNon-repudiation

Non-repudiation provides undeniable proof of an action's origin or delivery, preventing parties from falsely denying involvement, but does not prevent unauthorized disclosure.

DConfidentialityCorrect

Confidentiality ensures that information is accessible only to those authorized to have access and is protected from unauthorized disclosure. In a cryptographic system, this is typically achieved through encryption, rendering data unreadable to anyone without the appropriate decryption key, even if intercepted on a local network.

Concept tested: Cryptographic services - Confidentiality

Source: https://csrc.nist.gov/glossary/term/confidentiality

Topics

#Confidentiality#Cryptographic Services#Information Security Principles#Data Protection

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice