nerdexam
(ISC)2

SSCP · Question #902

Which of the following is NOT a factor related to Access Control?

The correct answer is B. authenticity. Access control is classically defined around the CIA triad: Confidentiality (A → C), Integrity (A), and Availability (D). These three are the core security objectives that access control mechanisms are designed to support. Authenticity (B) belongs to the domain of identity and…

Submitted by femi9· Apr 18, 2026Access Controls

Question

Which of the following is NOT a factor related to Access Control?

Options

  • Aintegrity
  • Bauthenticity
  • Cconfidentiality
  • Davailability

How the community answered

(35 responses)
  • A
    6% (2)
  • B
    89% (31)
  • C
    3% (1)
  • D
    3% (1)

Explanation

Access control is classically defined around the CIA triad: Confidentiality (A → C), Integrity (A), and Availability (D). These three are the core security objectives that access control mechanisms are designed to support. Authenticity (B) belongs to the domain of identity and authentication - verifying who an entity is - rather than being a direct factor in access control itself. While authentication feeds into access control decisions, it is not itself listed as one of the primary access control factors in the CIA-based model.

Topics

#Access Control#CIA Triad#Security Principles#Information Security Fundamentals

Community Discussion

No community discussion yet for this question.

Full SSCP Practice