CSSLP · Question #318
You are responsible for network and information security at a metropolitan police station. The most important concern is that unauthorized parties are not able to access data. What is this called?
The correct answer is A. Confidentiality. Preventing unauthorized access to data is the primary goal of confidentiality, ensuring that information is accessed only by authorized individuals or systems.
Question
You are responsible for network and information security at a metropolitan police station. The most important concern is that unauthorized parties are not able to access data. What is this called?
Options
- AConfidentiality
- BAvailability
- CIntegrity
- DEncryption
How the community answered
(34 responses)- A88% (30)
- B3% (1)
- C6% (2)
- D3% (1)
Why each option
Preventing unauthorized access to data is the primary goal of confidentiality, ensuring that information is accessed only by authorized individuals or systems.
Confidentiality ensures that information is accessible only to those authorized to have access, directly addressing the concern of preventing unauthorized parties from accessing data.
Availability ensures that authorized users have timely and uninterrupted access to information and systems, which is different from preventing unauthorized access.
Integrity ensures that data is accurate, complete, and protected from unauthorized modification or destruction, which focuses on data correctness rather than access control.
Encryption is a method or tool used to achieve confidentiality, but it is not the overarching principle itself.
Concept tested: Information security CIA triad - Confidentiality
Source: https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/security-cia-triad
Topics
Community Discussion
No community discussion yet for this question.