400-007 · Question #219
Which three components are part of the foundational information security principles of the CIA triad? (Choose three.)
The correct answer is B. confidentiality E. integrity F. availability. The CIA triad is the foundational model of information security, composed of exactly three principles - Confidentiality, Integrity, and Availability.
Question
Which three components are part of the foundational information security principles of the CIA triad? (Choose three.)
Options
- Acryptography
- Bconfidentiality
- Cauthorization
- Didentification
- Eintegrity
- Favailability
How the community answered
(49 responses)- A2% (1)
- B92% (45)
- D6% (3)
Why each option
The CIA triad is the foundational model of information security, composed of exactly three principles - Confidentiality, Integrity, and Availability.
Cryptography is a technical tool or mechanism used to help achieve confidentiality and integrity, but it is a means to an end rather than one of the three foundational principles of the CIA triad itself.
Confidentiality is a core pillar of the CIA triad that ensures sensitive data is accessible only to authorized parties, protecting it from unauthorized disclosure. It is enforced through mechanisms such as encryption, access controls, and data classification policies.
Authorization is a component of the AAA (Authentication, Authorization, and Accounting) security framework that controls what authenticated users are permitted to do, but it is not a pillar of the CIA triad.
Identification is the process by which a subject claims an identity and is part of the authentication phase of AAA, not a core principle defined within the CIA triad.
Integrity is a core pillar of the CIA triad that guarantees data remains accurate and unmodified except through authorized processes, protecting against accidental corruption and intentional tampering. It is maintained through controls such as checksums, cryptographic hashing, and digital signatures.
Availability is a core pillar of the CIA triad that ensures systems and data remain accessible to authorized users when needed, guarding against disruptions caused by attacks, hardware failures, or disasters. It is maintained through redundancy, failover systems, backups, and disaster recovery planning.
Concept tested: CIA triad foundational information security principles
Source: https://www.nist.gov/system/files/documents/2017/05/09/SP800-12r1.pdf
Topics
Community Discussion
No community discussion yet for this question.