IPA IP 2024 Question 75
A question IPA Japan published in 令和6年度 ITパスポート試験 公開問題 問75, translated into English. ITPEC is based on the same exams.
Which of the following is the appropriate combination of confidentiality, integrity, and availability, which are the three elements of information security, and the examples A through C of measures for ensuring them?
Explanation
A: confidentiality, B: integrity, C: availability — match each measure to the property of information it protects.
- •Confidentiality: only authorized people can access the information. Access control (A) grants or denies reading and writing by user, so it keeps information from those who are not authorized.
- •Integrity: the information is accurate and complete, with no tampering. A digital signature (B) lets the receiver verify that the data has not been altered since it was signed, and who signed it.
- •Availability: authorized people can use the information whenever they need it. Duplexing of disks (C) keeps the same data on two disks, so the system keeps running when one disk fails.
Answer (d)
Why not others:
- •(a) — swaps A and C: access control limits who can use the data, and disk duplexing keeps it usable
- •(b) — rotates all three: none of the measures is matched with its property
- •(c) — gives A integrity and B confidentiality; access control restricts who sees data, while a digital signature exposes tampering, it does not hide anything
Key rule: Confidentiality is protected by access control and encryption, integrity by digital signatures and hash checks, availability by redundancy (duplexing, RAID, backups).
Security · AI-written, may contain errors
This question comes from the past questions IPA Japan publishes, translated into English by ITPEC Practice. ITPEC Practice is an independent study tool and is not affiliated with IPA or ITPEC. See the original paper (PDF) or Report an issue.