Select ALL measures identified in the lesson as ways to control confidentiality.

### Why this is right - **Restrict access to people and systems that need it** is correct: limiting access to authorized parties directly reduces opportunities for disclosure. - **Use multifactor authentication** is correct: requiring more than one kind of proof can help ensure that the person gaining access is the intended user. - **Encrypt data in storage or transit** is correct: encryption makes protected information unreadable without the required key. ### The concept Confidentiality controls aim to stop unauthorized parties from viewing information. Access control limits which identities can reach a resource. **Multifactor authentication** requires multiple forms of evidence to authenticate a user. **Encryption** transforms readable data into a form that requires a key to recover. These controls address different parts of the problem: authentication checks identity, authorization enforces permissions, and encryption protects the data itself. No single control makes every other control unnecessary. ### The other options - **D. Use load balancing to distribute workloads**: This is mainly an availability measure. It spreads requests across resources rather than deciding who may view data. - **E. Replace identity checks with unrestricted access**: This removes a barrier to unauthorized access and therefore weakens confidentiality. ### Terms - **Multifactor authentication**: Authentication that requires evidence from more than one factor. - **Encryption**: Transforming readable information into a protected form that requires a key to reverse. - **Load balancing**: Distributing work across multiple resources to reduce the chance that one resource is overwhelmed. ### Remember Use access controls and identity checks to limit entry, and encryption to protect data if it is exposed.