SY0-301 Question #637: Real Exam Question with Answer & Explanation

The correct answer is C: Integrity. Comparing cryptographic hashes of configuration files over time is a data integrity check, detecting unauthorized or unexpected changes to those files.

Question

Sara, a security administrator, manually hashes all network device configuration files daily and compares them to the previous days' hashes. Which of the following security concepts is Sara using?

Options

AConfidentiality
BCompliance
CIntegrity
DAvailability

Explanation

Comparing cryptographic hashes of configuration files over time is a data integrity check, detecting unauthorized or unexpected changes to those files.

Common mistakes.

A. Confidentiality is about preventing unauthorized disclosure of data, not detecting whether data has been modified.
B. Compliance refers to adherence to regulations and policies; while hashing may support compliance, the specific action described is an integrity control.
D. Availability ensures systems and data are accessible when needed, which is unrelated to comparing file hashes.

Concept tested. Hash-based file integrity verification

Reference. https://csrc.nist.gov/glossary/term/integrity

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice