SY0-301 · Question #223
Which of the following concepts are included on the three sides of the "security triangle"? (Select THREE).
The correct answer is A. Confidentiality B. Availability C. Integrity. The security triangle, commonly called the CIA Triad, consists of Confidentiality, Integrity, and Availability. These three principles form the foundational framework for evaluating and designing information security controls.
Question
Which of the following concepts are included on the three sides of the "security triangle"? (Select THREE).
Options
- AConfidentiality
- BAvailability
- CIntegrity
- DAuthorization
- EAuthentication
- FContinuity
How the community answered
(20 responses)- A90% (18)
- D5% (1)
- E5% (1)
Why each option
The security triangle, commonly called the CIA Triad, consists of Confidentiality, Integrity, and Availability. These three principles form the foundational framework for evaluating and designing information security controls.
Confidentiality ensures that information is accessible only to those authorized to view it, protecting data from unauthorized disclosure.
Availability ensures that systems and data are accessible to authorized users when needed, preventing disruption of business operations.
Integrity ensures that data remains accurate and unaltered except through authorized processes, protecting against unauthorized modification or corruption.
Authorization is an access control concept describing what an authenticated user is permitted to do, but it is not one of the three pillars of the CIA Triad.
Authentication is the process of verifying identity and is an important security concept, but it is not part of the CIA Triad itself.
Continuity relates to business continuity planning and disaster recovery, which are derived concerns that support Availability but are not a named side of the CIA Triad.
Concept tested: CIA Triad - Confidentiality, Integrity, Availability
Source: https://www.nist.gov/system/files/documents/2017/05/09/SP800-12r1-draft.pdf
Topics
Community Discussion
No community discussion yet for this question.