SY0-301 · Question #637
Sara, a security administrator, manually hashes all network device configuration files daily and compares them to the previous days' hashes. Which of the following security concepts is Sara using?
The correct answer is C. Integrity. Comparing cryptographic hashes of configuration files over time is a data integrity check, detecting unauthorized or unexpected changes to those files.
Question
Sara, a security administrator, manually hashes all network device configuration files daily and compares them to the previous days' hashes. Which of the following security concepts is Sara using?
Options
- AConfidentiality
- BCompliance
- CIntegrity
- DAvailability
How the community answered
(29 responses)- B3% (1)
- C93% (27)
- D3% (1)
Why each option
Comparing cryptographic hashes of configuration files over time is a data integrity check, detecting unauthorized or unexpected changes to those files.
Confidentiality is about preventing unauthorized disclosure of data, not detecting whether data has been modified.
Compliance refers to adherence to regulations and policies; while hashing may support compliance, the specific action described is an integrity control.
Integrity ensures that data has not been altered in an unauthorized manner. By hashing configuration files and comparing daily hashes, Sara can detect any modification - whether from an attacker, misconfiguration, or unauthorized change - because even a single-bit change produces a completely different hash value. This is a direct implementation of the integrity principle from the CIA triad.
Availability ensures systems and data are accessible when needed, which is unrelated to comparing file hashes.
Concept tested: Hash-based file integrity verification
Source: https://csrc.nist.gov/glossary/term/integrity
Topics
Community Discussion
No community discussion yet for this question.