CISM · Question #56
Which of the following is the MOST relevant control to address the integrity of information?
The correct answer is D. Assignment of appropriate access permissions. Assigning appropriate access permissions is the most relevant control for information integrity, as it directly restricts unauthorized modifications or deletions of data.
Question
Which of the following is the MOST relevant control to address the integrity of information?
Options
- AImplementation of a redundant server system
- BEncryption of email
- CImplementation of an Internet security application
- DAssignment of appropriate access permissions
How the community answered
(37 responses)- A3% (1)
- B3% (1)
- C8% (3)
- D86% (32)
Why each option
Assigning appropriate access permissions is the most relevant control for information integrity, as it directly restricts unauthorized modifications or deletions of data.
A redundant server system addresses availability by ensuring continuous operation, but it does not directly prevent unauthorized modification of data.
Encryption of email primarily addresses confidentiality by protecting data from unauthorized viewing, not unauthorized modification during transit or at rest.
An Internet security application provides general protection against various threats, but specific access controls are more granular and directly targeted at preventing integrity breaches.
Assignment of appropriate access permissions is the most relevant control for information integrity because it directly dictates who can create, modify, or delete data. By restricting write access to only authorized individuals and processes, it prevents unauthorized or accidental changes, ensuring that information remains accurate and complete.
Concept tested: Information integrity controls (Access control)
Source: https://learn.microsoft.com/en-us/azure/role-based-access-control/overview
Topics
Community Discussion
No community discussion yet for this question.