ITPEC FE Morning October 2021 Question 36
Which of the following properties for information security defined in ISO/IEC 27000:2018 refers to a guarantee that the message data received is the same as the message data sent?
Explanation
Integrity — the data received is exactly the data sent, with nothing altered, added or removed.
ISO/IEC 27000 defines integrity as the property of accuracy and completeness. For a message it means detecting any change in transit, for example with a hash or message authentication code, or a digital signature.
Answer (c)
Why not others:
- •(a) Availability — being accessible and usable on demand by an authorised entity; it says nothing about whether the content changed
- •(b) Confidentiality — not making information available or disclosing it to unauthorised parties; a message can be kept secret yet still be altered
- •(d) Non-repudiation — the ability to prove that an event happened and who caused it, so the sender cannot deny sending
Key rule: Confidentiality stops the wrong people reading, integrity stops data being changed unnoticed, availability keeps it usable when needed, and non-repudiation proves who did what.
Security · AI-written, may contain errors
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official FE past-paper collection or Report an issue.