Which of the following are Security Goals? Note: There are 2 correct answers to this question.

Question

Options

• AEncryption
• BInformation Integrity
• CIdentity Authentication
• DRepudiation

• A
  15% (5)
• B
  76% (25)
• D
  9% (3)

Explanation

Information Integrity (B) and Identity Authentication (C) are Security Goals because they define what a secure system must achieve - ensuring data remains unaltered and that users are who they claim to be. These belong to the foundational security objectives alongside Confidentiality and Availability.

Encryption (A) is a distractor because it is a mechanism (a technical tool) used to achieve security goals like confidentiality - not a goal in itself. Confusing means with ends is a classic exam trap.

Repudiation (D) is the opposite of what you want: it refers to a user denying they performed an action. The actual security goal is Non-repudiation - preventing that denial. The question lists the problem, not the solution.

Memory tip: Think of security goals as outcomes you want, and distractors as either tools to get there (Encryption) or threats you want to prevent (Repudiation). If it sounds like an attack or a method rather than a desired state, it's probably not a security goal.

No community discussion yet for this question.