IPA IP 2020 Question 87

Topic: Security

A question IPA Japan published in 令和2年度 10月 ITパスポート試験 公開問題 問87, translated into English. ITPEC is based on the same exams.

Which of the following is the appropriate combination of words to be inserted into blanks A and B in the following description concerning information security in ISMS?

Information security is the preservation of confidentiality, A and availability of information. In addition, it may also involve the preservation of other properties, such as B, accountability, non-repudiation, and reliability.

OptionAB

Explanation

A: integrity, B: authenticity — the definition of information security in ISO/IEC 27000, the vocabulary standard of ISMS.

ISO/IEC 27000 (JIS Q 27000 in Japan) defines information security as the preservation of the three core properties, the CIA:

  • •Confidentiality: only authorized people can access the information
  • •Integrity: the information is accurate and complete, not tampered with
  • •Availability: authorized people can use the information whenever they need it

It adds that other properties, namely authenticity, accountability, non-repudiation and reliability, can also be involved. Authenticity means an entity, such as a user or a piece of information, is what it claims to be.

Answer (a)

Why not others:

  • •(b) — serviceability, how easily a system can be maintained (the S of RASIS), is a measure of system dependability, not one of the properties in the definition
  • •(c) and (d) — maintainability, how easily a system can be restored or repaired, is likewise a dependability term; the core property beside confidentiality and availability is integrity

Key rule: Information security is confidentiality, integrity and availability, extended by authenticity, accountability, non-repudiation and reliability.

Security · AI-written, may contain errors

Practice this exam

This question comes from the past questions IPA Japan publishes, translated into English by ITPEC Practice. ITPEC Practice is an independent study tool and is not affiliated with IPA or ITPEC. See the original paper (PDF) or Report an issue.