CISM · Question #67
Within the confidentiality, integrity, and availability (CIA) triad, which of the following activities BEST supports the concept of confidentiality?
The correct answer is A. Ensuring encryption for data in transit. Within the CIA triad, ensuring encryption for data in transit is the activity that best supports the concept of confidentiality.
Question
Within the confidentiality, integrity, and availability (CIA) triad, which of the following activities BEST supports the concept of confidentiality?
Options
- AEnsuring encryption for data in transit
- BEnforcing service level agreements (SLAs)
- CUtilizing a formal change management process
- DEnsuring hashing of administrator credentials
How the community answered
(55 responses)- A89% (49)
- B5% (3)
- C2% (1)
- D4% (2)
Why each option
Within the CIA triad, ensuring encryption for data in transit is the activity that best supports the concept of confidentiality.
Ensuring encryption for data in transit directly supports confidentiality by protecting information from unauthorized disclosure as it travels across networks. Encryption transforms data into an unreadable format, making it unintelligible to anyone who intercepts it without the correct decryption key, thereby preventing eavesdropping and data compromise during transmission.
Enforcing Service Level Agreements (SLAs) primarily relates to availability, ensuring that services meet agreed-upon performance and uptime requirements.
Utilizing a formal change management process primarily supports integrity and availability by ensuring changes are controlled, tested, and do not negatively impact systems or data.
Ensuring hashing of administrator credentials primarily supports integrity (preventing alteration of credentials) and the confidentiality of the password itself, but encryption of data in transit is a broader and more direct measure for the confidentiality of information.
Concept tested: CIA triad - Confidentiality
Source: https://csrc.nist.gov/glossary/term/confidentiality
Topics
Community Discussion
No community discussion yet for this question.