nerdexam
(ISC)2

CGRC · Question #607

The Security Category that guards against the improper modification or destruction of information and includes ensuring information non-repudiation & authenticity. Response:

The correct answer is C. Integrity. Integrity is the security objective focused on protecting information from unauthorized modification or destruction, and it encompasses ensuring information non-repudiation and authenticity. It guarantees that data remains accurate, complete, and trustworthy throughout its lifecy

Security and Privacy Governance, Risk Management, and Compliance Program

Question

The Security Category that guards against the improper modification or destruction of information and includes ensuring information non-repudiation & authenticity. Response:

Options

  • AConfidentiality
  • BAvailability
  • CIntegrity
  • DAuthenticity

How the community answered

(16 responses)
  • A
    6% (1)
  • B
    6% (1)
  • C
    88% (14)

Why each option

Integrity is the security objective focused on protecting information from unauthorized modification or destruction, and it encompasses ensuring information non-repudiation and authenticity. It guarantees that data remains accurate, complete, and trustworthy throughout its lifecycle.

AConfidentiality

Confidentiality is concerned with protecting information from unauthorized disclosure, not modification or destruction.

BAvailability

Availability is concerned with ensuring timely and reliable access to information and systems for authorized users, not the modification or destruction of data.

CIntegrityCorrect

Integrity specifically refers to guarding against the improper modification or destruction of information. It also ensures that information is authentic and that its origin can be verified (non-repudiation), meaning the data has not been altered and is from a trusted source.

DAuthenticity

Authenticity is a component of integrity, ensuring that information is genuine and from its claimed source, but integrity is the broader security category encompassing non-repudiation and protection against unauthorized modification/destruction.

Concept tested: Information security principles - Integrity

Source: https://csrc.nist.gov/glossary/term/integrity

Topics

#Integrity#CIA Triad#Information Security Principles#Non-repudiation

Community Discussion

No community discussion yet for this question.

Full CGRC Practice