nerdexam
CompTIA

SY0-301 · Question #223

Which of the following concepts are included on the three sides of the "security triangle"? (Select THREE).

The correct answer is A. Confidentiality B. Availability C. Integrity. The security triangle, commonly called the CIA Triad, consists of Confidentiality, Integrity, and Availability. These three principles form the foundational framework for evaluating and designing information security controls.

General security concepts

Question

Which of the following concepts are included on the three sides of the "security triangle"? (Select THREE).

Options

  • AConfidentiality
  • BAvailability
  • CIntegrity
  • DAuthorization
  • EAuthentication
  • FContinuity

How the community answered

(20 responses)
  • A
    90% (18)
  • D
    5% (1)
  • E
    5% (1)

Why each option

The security triangle, commonly called the CIA Triad, consists of Confidentiality, Integrity, and Availability. These three principles form the foundational framework for evaluating and designing information security controls.

AConfidentialityCorrect

Confidentiality ensures that information is accessible only to those authorized to view it, protecting data from unauthorized disclosure.

BAvailabilityCorrect

Availability ensures that systems and data are accessible to authorized users when needed, preventing disruption of business operations.

CIntegrityCorrect

Integrity ensures that data remains accurate and unaltered except through authorized processes, protecting against unauthorized modification or corruption.

DAuthorization

Authorization is an access control concept describing what an authenticated user is permitted to do, but it is not one of the three pillars of the CIA Triad.

EAuthentication

Authentication is the process of verifying identity and is an important security concept, but it is not part of the CIA Triad itself.

FContinuity

Continuity relates to business continuity planning and disaster recovery, which are derived concerns that support Availability but are not a named side of the CIA Triad.

Concept tested: CIA Triad - Confidentiality, Integrity, Availability

Source: https://www.nist.gov/system/files/documents/2017/05/09/SP800-12r1-draft.pdf

Topics

#CIA triad#confidentiality#integrity#availability

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice