As your company's security practitioner, you are responsible for host, storage, network, and application integration into the secure enterprise architecture. Your company's security policy states that you must ensure that the CIA of data is ensured across its entire life cycle. Which principle will provide this functionality?

Question

A. least privilege
B. separation of duties
C. defense in depth
D. social engineering

Answer 1

C
Explanation: The principle of defense in depth ensures that the CIA of data is ensured across its entire life cycle.
None of other principles provides this. Least privilege ensures that users use a regular account to preform regular day-to-day duties and an administrative account to only perform administrative duties. Separation of duties ensures that the tasks within a transaction are split between multiple personnel to prevent fraud. Social engineering is a common attack method whereby attackers attempt to trick legitimate users into divulging confidential information.