nerdexam
(ISC)2

CGRC · Question #57

The Security Category that primarily deals with preserving authorized restrictions on information access and disclosure. Response:

The correct answer is A. Confidentiality. Confidentiality is the security category primarily concerned with safeguarding information from unauthorized access and disclosure. It ensures that only authorized individuals can view or obtain sensitive data.

Security and Privacy Governance, Risk Management, and Compliance Program

Question

The Security Category that primarily deals with preserving authorized restrictions on information access and disclosure. Response:

Options

  • AConfidentiality
  • BAvailability
  • CIntegrity
  • DAuthenticity

How the community answered

(17 responses)
  • A
    94% (16)
  • D
    6% (1)

Why each option

Confidentiality is the security category primarily concerned with safeguarding information from unauthorized access and disclosure. It ensures that only authorized individuals can view or obtain sensitive data.

AConfidentialityCorrect

Confidentiality is the security objective focused on preserving authorized restrictions on information access and disclosure, specifically preventing unauthorized individuals from gaining knowledge of sensitive information.

BAvailability

Availability ensures timely and reliable access to information and information systems for authorized users when needed.

CIntegrity

Integrity focuses on guarding against improper information modification or destruction, and ensuring information non-repudiation and authenticity.

DAuthenticity

Authenticity is a property ensuring that information is genuine and from its purported source, which is often considered a component of integrity rather than a primary security category itself.

Concept tested: CIA triad - Confidentiality definition

Source: https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.199.pdf

Topics

#Confidentiality#CIA Triad#Information Security Principles#Data Protection

Community Discussion

No community discussion yet for this question.

Full CGRC Practice