GSEC · Question #150
Which of the following statements about the integrity concept of information security management are true? Each correct answer represents a complete solution. Choose three.
The correct answer is A. It ensures that unauthorized modifications are not made to data by authorized personnel or C. It ensures that internal information is consistent among all subentities and also consistent with the D. It ensures that modifications are not made to data by unauthorized personnel or processes. The integrity principle in information security ensures that data remains accurate, complete, and unmodified except through authorized processes. Accountability and non-repudiation - not integrity - cover individual behavior tracking.
Question
Which of the following statements about the integrity concept of information security management are true? Each correct answer represents a complete solution. Choose three.
Options
- AIt ensures that unauthorized modifications are not made to data by authorized personnel or
- BIt determines the actions and behaviors of a single individual within a system
- CIt ensures that internal information is consistent among all subentities and also consistent with the
- DIt ensures that modifications are not made to data by unauthorized personnel or processes.
How the community answered
(34 responses)- A71% (24)
- B29% (10)
Why each option
The integrity principle in information security ensures that data remains accurate, complete, and unmodified except through authorized processes. Accountability and non-repudiation - not integrity - cover individual behavior tracking.
Integrity controls also prevent authorized users from making unauthorized or inappropriate modifications, meaning even legitimate accounts must only alter data within their defined permissions.
Tracking the actions and behaviors of a single individual within a system describes the accountability or non-repudiation principle, not integrity.
Integrity requires that data remain internally consistent across all subsystems and accurately reflect the real-world state it represents, preventing partial or contradictory updates.
The most fundamental aspect of integrity is preventing unauthorized personnel or automated processes from modifying data without proper authorization.
Concept tested: CIA triad - integrity principle definition
Source: https://csrc.nist.gov/glossary/term/integrity
Topics
Community Discussion
No community discussion yet for this question.