nerdexam
Isaca

CISM · Question #67

Within the confidentiality, integrity, and availability (CIA) triad, which of the following activities BEST supports the concept of confidentiality?

The correct answer is A. Ensuring encryption for data in transit. Within the CIA triad, ensuring encryption for data in transit is the activity that best supports the concept of confidentiality.

Submitted by carter_n· Apr 18, 2026Information Security Program Development and Management

Question

Within the confidentiality, integrity, and availability (CIA) triad, which of the following activities BEST supports the concept of confidentiality?

Options

  • AEnsuring encryption for data in transit
  • BEnforcing service level agreements (SLAs)
  • CUtilizing a formal change management process
  • DEnsuring hashing of administrator credentials

How the community answered

(55 responses)
  • A
    89% (49)
  • B
    5% (3)
  • C
    2% (1)
  • D
    4% (2)

Why each option

Within the CIA triad, ensuring encryption for data in transit is the activity that best supports the concept of confidentiality.

AEnsuring encryption for data in transitCorrect

Ensuring encryption for data in transit directly supports confidentiality by protecting information from unauthorized disclosure as it travels across networks. Encryption transforms data into an unreadable format, making it unintelligible to anyone who intercepts it without the correct decryption key, thereby preventing eavesdropping and data compromise during transmission.

BEnforcing service level agreements (SLAs)

Enforcing Service Level Agreements (SLAs) primarily relates to availability, ensuring that services meet agreed-upon performance and uptime requirements.

CUtilizing a formal change management process

Utilizing a formal change management process primarily supports integrity and availability by ensuring changes are controlled, tested, and do not negatively impact systems or data.

DEnsuring hashing of administrator credentials

Ensuring hashing of administrator credentials primarily supports integrity (preventing alteration of credentials) and the confidentiality of the password itself, but encryption of data in transit is a broader and more direct measure for the confidentiality of information.

Concept tested: CIA triad - Confidentiality

Source: https://csrc.nist.gov/glossary/term/confidentiality

Topics

#Confidentiality#CIA Triad#Encryption#Data Protection

Community Discussion

No community discussion yet for this question.

Full CISM Practice