nerdexam
CompTIA

SY0-301 · Question #637

Sara, a security administrator, manually hashes all network device configuration files daily and compares them to the previous days' hashes. Which of the following security concepts is Sara using?

The correct answer is C. Integrity. Comparing cryptographic hashes of configuration files over time is a data integrity check, detecting unauthorized or unexpected changes to those files.

General security concepts

Question

Sara, a security administrator, manually hashes all network device configuration files daily and compares them to the previous days' hashes. Which of the following security concepts is Sara using?

Options

  • AConfidentiality
  • BCompliance
  • CIntegrity
  • DAvailability

How the community answered

(29 responses)
  • B
    3% (1)
  • C
    93% (27)
  • D
    3% (1)

Why each option

Comparing cryptographic hashes of configuration files over time is a data integrity check, detecting unauthorized or unexpected changes to those files.

AConfidentiality

Confidentiality is about preventing unauthorized disclosure of data, not detecting whether data has been modified.

BCompliance

Compliance refers to adherence to regulations and policies; while hashing may support compliance, the specific action described is an integrity control.

CIntegrityCorrect

Integrity ensures that data has not been altered in an unauthorized manner. By hashing configuration files and comparing daily hashes, Sara can detect any modification - whether from an attacker, misconfiguration, or unauthorized change - because even a single-bit change produces a completely different hash value. This is a direct implementation of the integrity principle from the CIA triad.

DAvailability

Availability ensures systems and data are accessible when needed, which is unrelated to comparing file hashes.

Concept tested: Hash-based file integrity verification

Source: https://csrc.nist.gov/glossary/term/integrity

Topics

#file integrity#hashing#integrity monitoring#CIA triad

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice