ITPEC FE Morning April 2022 Question 42

Topic: Security

Which of the following is an appropriate combination of definitions I through IV for authenticity and reliability in ISO/IEC 27000:2018 (Information security management systems – Overview and vocabulary)?

[Definitions]

IProperty of consistent intended behavior and resultsIIProperty that an entity is what it claims to beIIIProperty of being accessible and usable on demand by an authorized entityIVProperty that information is not made available or disclosed to unauthorized individuals, entities, or processes
OptionAuthenticityReliability

Explanation

Authenticity is II, reliability is I — match each ISO/IEC 27000 definition to the property it defines.

DefinitionProperty
I: consistent intended behavior and resultsReliability
II: an entity is what it claims to beAuthenticity
III: accessible and usable on demand by an authorized entityAvailability
IV: not made available or disclosed to unauthorized partiesConfidentiality

Answer (b)

Why not others:

  • •(a) — gives authenticity definition I, which is reliability, and reliability definition III, which is availability
  • •(c) — gives reliability definition IV, which is confidentiality
  • •(d) — gives authenticity definition IV, confidentiality: keeping information secret is not proving that an entity is who it claims to be

Key rule: Beyond confidentiality, integrity and availability, ISO/IEC 27000 defines authenticity, accountability, non-repudiation and reliability; recognise each by its keyword: "claims to be", "traced to the entity", "cannot deny", "consistent behavior".

Security · AI-written, may contain errors

Practice this exam

This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official FE past-paper collection or Report an issue.