Which of the following is PRIMARILY adopted for ensuring the integrity of information is preserved?
Correct Answer: B
Transport Layer Security (TLS) is the protocol that is primarily adopted for ensuring the integrity of information is preserved. Integrity is the property that ensures that the information is not modified, corrupted, or destroyed by unauthorized or accidental means, and that it remains consistent and accurate throughout its lifecycle. TLS is a protocol that provides security and privacy for the communication and the exchange of information over the internet, such as the web, the email, the instant messaging, or the voice over IP. TLS operates at the transport layer of the network model, and it uses encryption, authentication, and integrity mechanisms to protect the data and the messages that are transmitted between the parties. TLS is primarily adopted for ensuring the integrity of information is preserved, as it uses various techniques and algorithms to verify and confirm that the data and the messages have not been altered, tampered, or compromised during the transmission. Some of the techniques and algorithms that TLS uses for ensuring the integrity of information are:
* Hashing: TLS uses hashing functions, such as SHA-256 or SHA-384, to generate a fixed-length and unique value, called a hash or a digest, for the data or the message. The hash is then appended to the data or the message, and sent along with it. The receiver can then compute the hash of the received data or message, and compare it with the hash that was sent. If the hashes match, it means that the data or the message has not been modified or corrupted. If the hashes do not match, it means that the data or the message has been altered or tampered.
* Message Authentication Code (MAC): TLS uses MAC algorithms, such as HMAC-SHA256 or HMAC-SHA384, to generate a code or a tag, called a MAC, for the data or the message, using a secret key that is shared and agreed upon by both parties. The MAC is then appended to the data or the message, and sent along with it. The receiver can then compute the MAC of the received data or message, using the same secret key, and compare it with the MAC that was sent. If the MACs match, it means that the data or the message has not been modified or corrupted, and that it came from the legitimate and trusted source. If the MACs do not match, it means that the data or the message has been altered, tampered, or spoofed.
* Digital Signature: TLS uses digital signature algorithms, such as RSA or ECDSA, to generate a signature or a value, called a digital signature, for the data or the message, using the private key of the sender. The digital signature is then appended to the data or the message, and sent along with it. The receiver can then verify the digital signature of the received data or message, using the public key of the sender. If the digital signature is valid, it means that the data or the message has not been modified or corrupted, and that it came from the legitimate and trusted source. If the digital signature is invalid, it means that the data or the message has been altered, tampered, or spoofed.
Therefore, TLS is the protocol that is primarily adopted for ensuring the integrity of information is preserved, as it uses hashing, MAC, and digital signature techniques and algorithms to verify and confirm that the data and the messages have not been modified, corrupted, or compromised during the transmission.
References: CISSP All-in-One Exam Guide, Eighth Edition, Chapter 4: Communication and Network Security, page 187. CISSP Practice Exam | Boson, Question 18.