Discuss ISC2 CSSLP Exam Topic 8 Question 38

You are responsible for network and information security at a metropolitan police station. The most important concern is that unauthorized parties are not able to access data. What is this called?

AConfidentiality

BAvailability

CIntegrity

DEncryption

Suggested Answer: A

The CIA (Confidentiality, Integrity, and Availability) triangle is concerned with three facets of security. Confidentiality is the concern that data

be secure from unauthorized access.

Answer B and C are incorrect. The CIA (Confidentiality, Integrity, and Availability) triangle is concerned with three facets of security.

Integrity is the concern that data not be altered without it being traceable. Availability is the concern that the data, while being secured, is

readily accessible.

Answer D is incorrect. Confidentiality may be implemented with encryption but encryption is just a technique to obtain confidentiality.

Get Premium CSSLP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

14 comments · newest first

Fredric 11 months ago

I thought encryption was the main focus here?

Johanna 12 months ago

Yup, confidentiality is key for sensitive data.

Zona 12 months ago

Wait, are we sure it's not integrity?

Delila 12 months ago

I agree, it's all about keeping info safe.

Pamella 1 year ago

That's definitely called confidentiality!

Shelba 1 year ago

I’m a bit confused; could it also be about integrity? I remember those terms being closely related.

Kenny 1 year ago

I practiced a similar question last week, and I think the answer was definitely confidentiality.

Christene 1 year ago

I'm not entirely sure, but I remember something about the CIA triad. Isn't confidentiality part of that?

Fannie 1 year ago

I think this is about keeping data safe from unauthorized access, which sounds like confidentiality, right?

Adelle 1 year ago

Okay, let me think this through. The question says the user wants to enable detailed monitoring, so I'm guessing that means the current launch config has it disabled. In that case, I think option D is the way to go - create a new launch config with detailed monitoring enabled and update the Auto Scaling group.

Irma 1 year ago

This one seems pretty straightforward. I'm pretty sure the answer is C - Yes/No.

Reid 1 year ago

I think the key is to focus on the level of complexity and scalability required for each web application. SAS is more basic, so simpler sites like a personal blog or test environment would work well there.

Dulce 1 year ago

Okay, let me think this through. The exhibit shows the top two models for each subset, so I'll need to analyze those to determine the most parsimonious one.

Ashlyn 1 year ago

Deploying sounds like it could affect the system, but I might be confusing it with something else. Configuring seems safer!

ISC2 CSSLP Exam - Topic 8 Question 38 Discussion