nerdexam
(ISC)2

CGRC · Question #41

In which of the following elements of security does the object retain its veracity and is intentionally modified by the authorized subjects? Response:

The correct answer is A. Integrity. Integrity, a core principle of information security, ensures that data remains accurate and complete throughout its lifecycle. This principle permits only authorized subjects to intentionally modify information, thereby maintaining its veracity and trustworthiness.

Security and Privacy Governance, Risk Management, and Compliance Program

Question

In which of the following elements of security does the object retain its veracity and is intentionally modified by the authorized subjects? Response:

Options

  • AIntegrity
  • BNonrepudiation
  • CAvailability
  • DConfidentiality

How the community answered

(34 responses)
  • A
    91% (31)
  • B
    3% (1)
  • C
    6% (2)

Why each option

Integrity, a core principle of information security, ensures that data remains accurate and complete throughout its lifecycle. This principle permits only authorized subjects to intentionally modify information, thereby maintaining its veracity and trustworthiness.

AIntegrityCorrect

Integrity, within the CIA triad, ensures that information has not been modified by unauthorized individuals or in an unauthorized manner. The question specifically states that the object retains its veracity and is intentionally modified by authorized subjects, which is a core aspect of data integrity - maintaining correctness through controlled changes.

BNonrepudiation

Nonrepudiation provides irrefutable proof that an action occurred, preventing a party from denying involvement, which is different from ensuring data's veracity through authorized changes.

CAvailability

Availability ensures that authorized users have timely and uninterrupted access to information and resources, which is unrelated to the modification or veracity of data.

DConfidentiality

Confidentiality protects information from unauthorized disclosure, focusing on preventing unauthorized access rather than managing authorized modifications or data veracity.

Concept tested: CIA Triad - Integrity

Source: https://learn.microsoft.com/en-us/windows/security/information-protection/data-security/security-overview-data-security#confidentiality-integrity-and-availability

Topics

#Security Principles#Integrity#CIA Triad#Data Veracity

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CGRC Practice