CCP CIA Triad & Security Controls 2 — Questions and Answers
Question 1: A hospital's patient records system allows doctors to read files but not modify them without a second physician approval. Which CIA property does this dual-approval mechanism primarily protect?
- Confidentiality
- Integrity (Correct answer)
- Availability
- Authentication
Correct answer: Integrity
Requiring dual approval before modifying records protects integrity by preventing unauthorized or accidental alterations to critical data.
Question 2: Which type of security control is a fire suppression system installed in a data center?
- Detective
- Corrective
- Preventive (Correct answer)
- Deterrent
Correct answer: Preventive
A fire suppression system is a preventive control because it stops or limits damage before it fully occurs.
Question 3: An attacker intercepts encrypted communications but cannot read the content. Which CIA principle has been successfully preserved?
- Integrity
- Availability
- Confidentiality (Correct answer)
- Non-repudiation
Correct answer: Confidentiality
Encryption preserves confidentiality by ensuring that unauthorized parties cannot read intercepted data.
Question 4: A DDoS attack floods a web server, making it unreachable to legitimate users. Which CIA property is most directly violated?
- Confidentiality
- Integrity
- Availability (Correct answer)
- Accountability
Correct answer: Availability
A DDoS attack targets availability by overwhelming resources so legitimate users cannot access the system.
Question 5: Security logs that record all administrative actions taken on a system are an example of which control type?
- Preventive
- Deterrent
- Detective (Correct answer)
- Corrective
Correct answer: Detective
Audit logs are detective controls because they identify and record events after they occur for later analysis.
Question 6: Which of the following best describes a compensating control?
- A control that prevents a threat from occurring
- An alternative control used when a primary control cannot be implemented (Correct answer)
- A control that detects security incidents in real time
- A control that restores systems after an incident
Correct answer: An alternative control used when a primary control cannot be implemented
A compensating control is an alternative safeguard used when the primary control is not feasible or practical to implement.
Question 7: Hashing a file before and after transmission to verify it arrived unchanged primarily supports which CIA property?
- Availability
- Confidentiality
- Non-repudiation
- Integrity (Correct answer)
Correct answer: Integrity
Hashing verifies data integrity by detecting any modifications that occurred during storage or transmission.
CCP CIA Triad & Security Controls 2
A hospital's patient records system allows doctors to read files but not modify them without a second physician approval.
Which CIA property does this dual-approval mechanism primarily protect?