nerdexam
(ISC)2

CGRC · Question #277

Which of the following is an Information Assurance (IA) model that protects and defends information and information systems by ensuring their availability, integrity, authentication…

The correct answer is D. Five Pillars model. The Five Pillars model of Information Assurance explicitly includes Availability, Integrity, Authentication, Confidentiality, and Non-repudiation as its core tenets.

Security and Privacy Governance, Risk Management, and Compliance Program

Question

Which of the following is an Information Assurance (IA) model that protects and defends information and information systems by ensuring their availability, integrity, authentication, confidentiality, and non- repudiation? Response:

Options

  • AParkerian Hexad
  • BCapability Maturity Model (CMM)
  • CClassic information security model
  • DFive Pillars model

How the community answered

(41 responses)
  • A
    2% (1)
  • B
    2% (1)
  • C
    5% (2)
  • D
    90% (37)

Why each option

The Five Pillars model of Information Assurance explicitly includes Availability, Integrity, Authentication, Confidentiality, and Non-repudiation as its core tenets.

AParkerian Hexad

The Parkerian Hexad includes Confidentiality, Integrity, Availability, Possession/Control, Authenticity, and Utility, which is a different set of six principles.

BCapability Maturity Model (CMM)

The Capability Maturity Model (CMM) is a framework for organizational process improvement, not an information assurance model defining protection principles.

CClassic information security model

The Classic Information Security Model, or CIA triad, only includes Confidentiality, Integrity, and Availability, missing Authentication and Non-repudiation.

DFive Pillars modelCorrect

The Five Pillars model for Information Assurance is specifically defined by these five principles: Availability, Integrity, Authentication, Confidentiality, and Non-repudiation. This comprehensive model expands upon the traditional CIA triad to include critical aspects like identity verification and accountability for actions.

Concept tested: Five Pillars of Information Assurance model

Topics

#Information Assurance#Security Models#Security Principles

Community Discussion

No community discussion yet for this question.

Full CGRC Practice