In the context of information security, what does the 'CIA triad' stand for?

Question

Options

• AConfidentiality, Integrity, Availability
• BCertification, Identification, Authorization
• CConfidentiality, Insurance, Accountability
• DControl, Isolation, Authentication

• A
  88% (23)
• B
  8% (2)
• D
  4% (1)

Explanation

Confidentiality, Integrity, and Availability form the foundational framework of information security, making option A correct - these three principles represent the core goals any secure system must protect: keeping data private (confidentiality), ensuring it hasn't been tampered with (integrity), and making sure authorized users can access it when needed (availability).

Option B confuses the triad with identity/access management concepts; "Certification" and "Identification" are authentication-adjacent terms, not core security pillars. Option C swaps "Integrity" for "Insurance" and "Availability" for "Accountability" - both real security concepts, but not part of the CIA triad. Option D blends access control and network security terms ("Control," "Isolation," "Authentication") that sound plausible but are entirely unrelated to this model.

Memory tip: Think of the CIA triad as three questions a security officer asks - "Can outsiders see it?" (Confidentiality), "Has it been changed?" (Integrity), "Can we use it right now?" (Availability). The acronym CIA itself is the mnemonic - same three letters, same order every time.

No community discussion yet for this question.