Question

The book name will be stored in tables using Amazon DynamoDB. Recall that the CIA triad is the three fundamental aspects of security: confidentiality, integrity and availability. The following practices being leveraged to maintain the confidentiality, integrity and availability.

• Practice A: The collection of book names sitting in the cloud database service is encrypted, so no one in the outside world can read the content of the data.
• Practice B: Only the administrators have the permission to add, modify and remove the book names stored in the database. Permissions and logs are in place to protect unauthorized users to gain inappropriate access to or alter the data.
• Practice C: The collection of book names in the database can be replicated and backed up because the DynamoDB service automatically spreads the data over a sufficient number servers to handle the storage requirements.

Please answer the following questions:

• What is the CIA aspect (confidentiality, integrity or availability) related to Practice A?
• What is the CIA aspect (confidentiality, integrity or availability) related to Practice B?
• What is the CIA aspect (confidentiality, integrity or availability) related to Practice C?

Answer 1

Practice A - Integrity

Integrity refers to the fact that the data remains unmodified when it is in the rest state and no unauthorized access is provided. Encryption is one of the ways to implement integrity.

Practice B - Confidentiality

Confidentiality means that the data is accessed only by the people who have the necessary permissions.to access it. In practice B, only the administrators have the permissions to modify the data which refers to the confidentiality of data.

Practice C - Availability

Availability means that the data should not be lost and should be there when someone wants it. The replicable ability and backing up of data in DynamoDB means that the data has high availability rate.