IPA IP 2023 Question 95

Topic: Security

A question IPA Japan published in 令和5年度 ITパスポート試験 公開問題 問95, translated into English. ITPEC is based on the same exams.

Among the descriptions concerning confidentiality, integrity, and availability in information security, which of the following lists all and only the examples in which integrity was not ensured?

AAn operator entered incorrect data, and inconsistencies arose in the customer list.BA shopping site was temporarily unavailable because of a system failure.CPersonal information of customers that was managed in a database was leaked.

Explanation

Only A, the customer list made inconsistent by wrong input — integrity means that information is accurate and complete.

  • •A: incorrect data entered by an operator left the customer list inconsistent, so the information is no longer accurate. Integrity was not ensured.
  • •B: the shopping site could not be used for a while because of a system failure. Availability was not ensured.
  • •C: customers' personal information leaked out of the database to people not authorized to see it. Confidentiality was not ensured.

Answer (a)

Why not others:

  • •(b) — adds B, a site that could not be used, which is a loss of availability; its data was not changed
  • •(c) — B alone is the availability example and contains no integrity loss
  • •(d) — C is a leak, a loss of confidentiality; the leaked data itself stayed correct

Key rule: Match each CIA property to its symptom: disclosure breaks confidentiality, wrong or altered data breaks integrity, and being unable to use the system or data when needed breaks availability.

Security · AI-written, may contain errors

Practice this exam

This question comes from the past questions IPA Japan publishes, translated into English by ITPEC Practice. ITPEC Practice is an independent study tool and is not affiliated with IPA or ITPEC. See the original paper (PDF) or Report an issue.