Explanation/Reference:
Explanation:
The best way to ensure confidentiality and integrity of data is to encrypt it using virtual private network (VPN) tunnels. This is the most common and convenient way to encrypt the data traveling over the network. Data encryption within the application is less efficient than VPN. The other options are good practices, but they do not directly prevent the loss of data Integrity and confidentiality during communication through a network.

Section: Protection of Information Assets
Explanation/Reference:
Implementation language is LEAST important as compare to other options. Encryption algorithm,
encryption keys and key length are key elements of an Encryption system.
It is important to read carefully the question. The word "LEAST" was the key word. You had to find which
one was LEAST important.
The following were incorrect answers:
Other options mentioned are key elements of an Encryption system
Encryption Algorithm - A mathematically based function or calculation that encrypts/decrypts data
Encryption keys - A piece of information that is used within an encryption algorithm (calculation) to make
encryption or decryption process unique. Similar to passwords, a user needs to use the correct key to
access or decipher the message into an unreadable form.
Key length - A predetermined length for the key. The longer the key, the more difficult it is to compromise
in brute-force attack where all possible key combinations are tried.
The following reference(s) were/was used to create this question:
CISA review manual 2014 Page number 348

Section: Protection of Information Assets
Explanation:
Since the interaction between parties is electronic, there is no inherent authentication occurring; therefore, transaction authorization is the greatest risk. Choices B and D are examples of risks, but the impact is not as great as that of unauthorized transactions. Transmission delays may terminate the process or hold the line until the normal time for processing has elapsed; however, there will be no loss of data.