ITPEC IP October 2024 Question 44

Topic: Security

The decision is made to digitize a paper-based contact list that only some people are permitted to view, and to manage it as a contact file. Among the measures A through D below, which of the following is the list that contains all and only the appropriate measures against personal information leakage?

AA password for reading is set for the contact file.BThe contact file is encrypted.CThe servers that stores the contact file are configured in a redundant configuration.DAfter the contact list is digitized, the paper-based contact list is disposed of with a shredder.

Explanation

A, B, D — every measure that keeps an unauthorized person from reading the contact list, in any of its copies.

  • •A A reading password limits who can open the file: prevents leakage.
  • •B Encryption keeps the contents unreadable even if the file is copied or stolen: prevents leakage.
  • •C A redundant server configuration keeps the file available when a server fails; it does nothing to stop disclosure.
  • •D Shredding the paper original removes a copy that could otherwise be read or taken from the trash: prevents leakage.

Answer (c)

Why not others:

  • •(a) A, B — omits D, leaving the paper original as a leakage route
  • •(b) A, B, C — includes C, an availability measure, and omits D
  • •(d) C, D — includes C and drops A and B, the two controls that protect the file itself

Key rule: Leakage is a confidentiality problem, so count only access control, encryption and secure disposal; redundancy serves availability.

Security · AI-written, may contain errors

Practice this exam

This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.