Select ALL statements that correctly describe the confidentiality, integrity, and availability model.
Answer
Confidentiality means limiting information access to authorized parties., Integrity means information should remain accurate and protected from improper change., Availability means authorized users can access information and systems when needed.
Explanation
### Why this is right
- **A** is correct because confidentiality concerns who is permitted to see information.
- **B** is correct because integrity concerns whether information remains accurate and is not improperly altered.
- **C** is correct because availability concerns access by authorized users when needed.
### The concept
The confidentiality, integrity, and availability model groups three distinct security goals. A company may protect confidentiality through access restrictions, protect integrity by preventing or identifying unauthorized changes, and support availability by keeping services usable. A control that improves one goal does not automatically guarantee the other two.
### The other options
- **D. Availability means information must be secret from every employee.** Secrecy is related to confidentiality, not availability. Availability is about authorized access when required.
### Terms
- **Confidentiality**: Protection against access by unauthorized people.
- **Integrity**: Protection of information accuracy and proper state.
- **Availability**: Access to systems and information when authorized users need them.
### Remember
Ask who may see it, whether it can be trusted, and whether it can be accessed.
Related Questions
- Outsourcing payment processing to a third-party vendor completely transfers all regulatory compliance and data protection responsibilities away from the hiring organization.(intermediate)
- In an incident management exercise divided into discovery, investigation, response, and recovery, the phase focused on analyzing logs, alerts, and evidence to examine unauthorized activity is called _____.(basic)
- The recovery and compliance review phase can include a mock audit, ongoing monitoring, staff training, and improvements informed by the incident.(basic)
- A staff member accesses the billing system from an unprotected personal laptop, and suspicious activity alerts appear. Which response area is most directly implicated by this new information?(intermediate)
- During a tabletop incident response exercise involving potential payment card data compromise, which activity is the primary focus of the Discovery phase?(advanced)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free