200-201 Security Concepts Practice Question
An organization is implementing a new security control that will verify the integrity of critical system files by comparing their current hash values against known good baseline values. Which security concept does this control primarily address?
⚠ Common exam trap
The trap here is assuming that hash comparison provides confidentiality because it uses cryptographic functions, but hashing is for integrity, not secrecy.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Integrity
Integrity is the security principle that ensures data remains accurate and unaltered. By comparing current hash values to a baseline, the organization can detect unauthorized modifications to critical files. This control directly supports integrity, as any change would produce a different hash. Confidentiality, availability, and non-repudiation are separate concerns not addressed by hash comparison.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Non-repudiation
Why it's wrong here
Non-repudiation ensures that a party cannot deny having performed an action, typically through digital signatures or audit logs. Hash comparison does not provide proof of origin or prevent denial; it only verifies data integrity. Therefore, it does not primarily address non-repudiation.
- ✗
Availability
Why it's wrong here
Availability ensures that systems and data are accessible when needed, often through redundancy or backups. Hash comparison does not ensure availability; it only detects changes. A file could be altered but still available, or unavailable due to other reasons, so this control does not address availability.
- ✗
Confidentiality
Why it's wrong here
Confidentiality ensures that information is not disclosed to unauthorized individuals, typically through encryption or access controls. Hash comparison does not hide data; it verifies that data has not changed. While integrity is related, this control does not prevent unauthorized disclosure, so it does not primarily address confidentiality.
- ✓
Integrity
Why this is correct
Integrity ensures that data has not been altered or tampered with. Comparing hash values against a baseline detects any unauthorized changes to critical files, thus verifying integrity. This is a core method for file integrity monitoring (FIM) and directly addresses the integrity pillar of the CIA triad.
Go deeper
Related to this question
About these practice questions
One of 968 original 200-201 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 200-201 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-201 exam.