[CCCure CISSP] Passed the Exam _and_ ISC2 Book Crypto Question.

[Kenoyer, Greg]

> Message: 1
> Date: Thu, 4 Mar 2010 13:17:51 -0500
> From: twitwicki at hannaford.com
> To: cisspstudy at cccure.org
> Subject: Re: [CCCure CISSP] CISSPstudy Digest, Vol 21, Issue 2
> Message-ID:
>	<OF701F29C4.AB316653-ON852576DC.0063E305-852576DC.0064834D at hannaford.com>
>	
> Content-Type: text/plain; charset=US-ASCII
>
> All,
>       Got the notification that I passed the exam!
>       :
> Tom Witwicki,  CIPP, CISM

Tom, Congratulations.  May we soon join you!

Q for you: I assume that you used the free CCCure exams, what score did you feel was adequate for you preparation?

> Message: 6
> Date: Wed, 3 Mar 2010 20:01:16 -0800 (PST)
> From: Nimal Gunarathna <ng949 at yahoo.com>
> To: cisspstudy at cccure.org
> Subject: Re: [CCCure CISSP] CISSPstudy Digest, Vol 21, Issue 1
> Message-ID: <665356.38271.qm at web33901.mail.mud.yahoo.com>
> Content-Type: text/plain; charset="iso-8859-1"
>
> Thanks for your comments. I have another question for ya'll..In ISC2 book
> crypto chapter has the following question:
> Cryptography supports all of the core principles of information security except:
> a. Availability
> b. Confidentiality
> c. Integrity
> d. Authenticity
> The book answer is d.
> But I think this is a typo... correct answer should be a.
>
> Confidentiality is provided through encryption..
> Integrity is provided
> through hashing..
> Authenticity is provided through digital signatures..
> Any comments?

Is this possibly a trick question?

What are the core principles of InfoSec?  The CIA triad.

CIA  as in Confidentiality, Integrity and Availability.

NOT as in Authenticity.

Greg Kenoyer