100-160 · Question #28
Drag and Drop Question Move each definition from the list on the left to the correct CIA Triad term on the right. Note: You will receive partial credit for each correct answer. Answer:
The correct answer is Data can be accessed and read only by authorized users.; Data should never be altered or compromised.; Legitimate requests should have access to data at all times. CIA Triad - Drag-and-Drop Explained The CIA Triad is a foundational security model with three pillars: Confidentiality, Integrity, Availability. The correct arrangement maps each definition to one of those pillars, in that order. --- Item 1 → Confidentiality "Data can be…
Question
Drag and Drop Question Move each definition from the list on the left to the correct CIA Triad term on the right. Note: You will receive partial credit for each correct answer. Answer:
Exhibit
Answer Area
Drag items
Correct arrangement
- Data can be accessed and read only by authorized users.
- Data should never be altered or compromised.
- Legitimate requests should have access to data at all times.
Explanation
CIA Triad - Drag-and-Drop Explained
The CIA Triad is a foundational security model with three pillars: Confidentiality, Integrity, Availability. The correct arrangement maps each definition to one of those pillars, in that order.
Item 1 → Confidentiality
"Data can be accessed and read only by authorized users."
Confidentiality is about restricting access - only the right people can see the data. Think encryption, access controls, and authentication. The key word here is authorized users, which signals a permission/access restriction concept.
Item 2 → Integrity
"Data should never be altered or compromised."
Integrity is about trustworthiness of data - ensuring it hasn't been tampered with, either by attackers or accidental corruption. Think checksums, hashing, and digital signatures. The key word is altered, which signals a data-modification concern.
Item 3 → Availability
"Legitimate requests should have access to data at all times."
Availability is about uptime and accessibility - ensuring systems are reachable when needed. Think redundancy, DDoS protection, and backups. The key phrase is at all times, which signals a reliability/uptime concern.
Common Misconceptions
| Mistake | Why it's wrong |
|---|---|
| Confusing Confidentiality and Availability | Both involve "access," but Confidentiality restricts it (who), while Availability ensures it (when). |
| Thinking Integrity is about who can write data | Integrity is about the state of the data itself, not user permissions. |
| Treating Availability as a network-only concept | Availability applies to any resource (files, services, databases) that legitimate users need to reach. |
Memory trick: C-I-A in order - lock it (C), don't break it (I), keep it running (A).
Topics
Community Discussion
No community discussion yet for this question.