ITPEC IP April 2019 Question 45
Company A has decided to digitize a paper list of customers and manage customers by using electronic data. Which of the following is an appropriate method for preventing information leakage from the electronic data of the customer list?
Explanation
Encrypting the data — encrypted data cannot be read without the key, so a leaked copy of the customer list stays confidential.
Information leakage is a breach of confidentiality, and encryption protects confidentiality directly: if the file is copied, stolen on a lost PC or sent to the wrong person, whoever obtains it without the decryption key sees only ciphertext. The key must be kept apart from the data.
Answer (d)
Why not others:
- •(a) Digital signature — proves who created the data and that it was not altered (authenticity, integrity); the signed data remains readable
- •(b) Backups — protect against losing the data (availability); each extra copy is one more copy that could leak
- •(c) RAID disk — keeps the data available when a disk fails; it does not hide the content
Key rule: Match the measure to the property: encryption for confidentiality, digital signatures for integrity and authenticity, backups and RAID for availability.
Security · AI-written, may contain errors
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.