Fundamentals of InfoSecintermediate
Explain how the lesson's three demonstrations map to the Confidentiality, Integrity, and Availability (CIA) goals, and why the same activities must be confined to an authorized virtual-machine lab.
Answer
Accessing files or password hashes without permission compromises confidentiality because it exposes information. Changing a file compromises integrity because it alters data without authorization. Shutting down a system compromises availability because authorized users lose access. These activities must be confined to explicitly authorized, isolated virtual machines because testing real people, organizations, or institutions without permission can cause harm and may violate laws or institutional rules.
Explanation
### The concept
The CIA goals describe different security outcomes. **Confidentiality** means that information is available only to authorized users. **Integrity** means that information remains accurate and is not changed without authorization. **Availability** means that authorized users can reach systems and information when needed. In the lesson, inspecting a target's files or password hashes represents exposure, changing a file represents unauthorized alteration, and shutting down the target represents loss of access. The same activity can have more than one effect, but a good analysis names the specific effect being demonstrated. The lesson stresses an authorized virtual-machine lab because security testing can expose data, damage systems, or interrupt services. A lab isolates the practice from real users and organizations. Permission must be explicit; technical ability to access a system does not grant permission to test it.
### What a good answer covers
- File access exposes information and therefore affects confidentiality.
- Unauthorized file changes affect integrity.
- System shutdown prevents authorized use and affects availability.
- Testing belongs only in an explicitly authorized, isolated lab.
### Terms
- **CIA**: Confidentiality, Integrity, and Availability, a model for describing security goals.
- **Virtual machine**: A software-based computer that can be run separately from the host computer.
- **Password hash**: A transformed representation of a password used by a system for password checking; it is not the original password itself.
- **Authorization**: Permission granted by the owner or responsible authority to perform an action.
- **Confidentiality**: Protection from unauthorized access or disclosure.
- **Integrity**: Protection from unauthorized changes to data.
- **Availability**: Access to systems and information when authorized users need them.
### Remember
A lab exercise is defined by its authorization and containment, not merely by the tool being used.
Related Questions
- Explain why computer security is described as a process rather than a product. Include the roles of technology, people, and environment.(intermediate)
- Select ALL items the review identifies as possible security risks or losses.(intermediate)
- Arrange these broad security activities in a sensible cycle, beginning with identifying what needs protection.(intermediate)
- A security product can replace the continuing work of managing people, technology, and the operating environment.(intermediate)
- Which statement best captures the course review’s view of computer security?(intermediate)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free