ISC2 CSSLP Exam - Topic 7 Question 41 Discussion

Actual exam question for ISC2's CSSLP exam

Question #: 41
Topic #: 7

Which of the following statements about the integrity concept of information security management are true? Each correct answer represents a complete solution. Choose three.

AIt ensures that unauthorized modifications are not made to data by authorized personnel or
processes.

BIt determines the actions and behaviors of a single individual within a system

CIt ensures that internal information is consistent among all subentities and also consistent
with the real-world, external situation.

DIt ensures that modifications are not made to data by unauthorized personnel or processes.

Show Suggested Answer

Suggested Answer: A, C, D

The following statements about the integrity concept of information security management are true:

It ensures that modifications are not made to data by unauthorized personnel or processes.

It ensures that unauthorized modifications are not made to data by authorized personnel or processes.

It ensures that internal information is consistent among all subentities and also consistent with the real-world, external situation.

Answer B is incorrect. Accountability determines the actions and behaviors of an individual within a system, and identifies that particular

individual. Audit trails and logs support accountability.

by Carmen at May 06, 2022, 01:02 AM

Limited Time Offer

25%

Off

Get Premium CSSLP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lelia

4 months ago

I thought integrity was just about data accuracy, not all this other stuff.

upvoted 0 times

...

Alpha

4 months ago

D is a must-have for integrity, totally agree!

upvoted 0 times

...

Karrie

4 months ago

Wait, are we sure B is relevant? Seems off.

upvoted 0 times

...

Avery

4 months ago

I think C is spot on too!

upvoted 0 times

...

Francine

5 months ago

A is definitely true, no doubt about it.

upvoted 0 times

...

Basilia

5 months ago

I practiced a similar question where the focus was on data consistency, so I feel like C could be a good choice too.

upvoted 0 times

...

Barrett

5 months ago

I think A and C might both be true, but I’m confused about how they relate to the overall concept of integrity.

upvoted 0 times

...

Lawana

5 months ago

I’m not entirely sure about B; it seems more focused on individual actions rather than data integrity itself.

upvoted 0 times

...

Cruz

5 months ago

I remember that integrity is about preventing unauthorized changes, so I think D is definitely correct.

upvoted 0 times

...

Ailene

5 months ago

This is a good test of my Citrix ADC knowledge. I'll methodically go through the options and match them to the descriptions provided in the question.

upvoted 0 times

...

Rickie

5 months ago

I think the calling number should just be the local format, so maybe it's option A? But I'm not entirely sure if we need to include the country code.

upvoted 0 times

...

Omega

5 months ago

I'm a bit confused on this one. Is it the firewall that's supposed to be the secure one? Or is that just part of the overall security system? I'll have to review my notes on network security.

upvoted 0 times

...