In the Confidentiality, Integrity, and Availability (CIA) model, which goal is directly compromised when an unauthorized person gains access to a system's files?

### Why this is right Confidentiality concerns preventing unauthorized access to or disclosure of information. If an unauthorized person can inspect files, the information is exposed even if no file has yet been changed or deleted. ### The concept The Confidentiality, Integrity, and Availability (CIA) model sorts security impacts by what happens to information or a service. Confidentiality is about who can see information. Integrity is about whether information remains accurate and unaltered. Availability is about whether authorized users can access systems and resources when needed. The lesson's example of gaining access to a virtual machine and viewing its files is therefore a confidentiality impact. The same intrusion could later cause integrity or availability impacts if the intruder changed files or stopped the system, but those are distinct consequences. One event can affect more than one goal, so classify the effect described rather than guessing from the attack method. ### The other options - **B. Integrity**: Integrity is affected by unauthorized changes, not mere viewing. It would fit if the files were altered. - **C. Availability**: Availability concerns access to resources. It would fit if authorized users could no longer use the system. - **D. Redundancy**: Redundancy means having additional copies or components. It is a design approach, not one of the three CIA security goals. ### Terms - **CIA**: Confidentiality, Integrity, and Availability. A model for grouping major information-security goals. - **Confidentiality**: Protection of information from unauthorized access or disclosure. - **Integrity**: Protection of information from unauthorized or improper change. - **Availability**: Timely access to systems and information for authorized users. - **Virtual machine**: A software-based computer that runs in an isolated environment on a physical host. - **Redundancy**: Extra components or copies that can help a service continue if one part fails. ### Remember Seeing information without permission is a confidentiality problem; changing it is an integrity problem.