Fundamentals of InfoSecintermediate
Match each lab action with the Confidentiality, Integrity, and Availability (CIA) goal it most directly affects.
Answer
Read files without authorization - Confidentiality, Alter a stored file without authorization - Integrity, Shut down the target system - Availability
Explanation
### The pairs
| Item | Matches | Why |
|---|---|---|
| Read files without authorization | Confidentiality | Confidentiality limits who can view information. Unauthorized reading exposes data even if it is not changed. |
| Alter a stored file without authorization | Integrity | Integrity concerns whether data remains accurate and unaltered. An unauthorized edit changes the data's approved state. |
| Shut down the target system | Availability | Availability means authorized users can access systems and resources when needed. A shutdown interrupts that access. |
### The concept
These pairings classify the consequence of each action. The Confidentiality, Integrity, and Availability (CIA) model helps describe which security goal an event harms. Viewing, changing, and interrupting access are distinct effects, even if the same intruder causes all of them. A single incident can affect several goals, so the word "most directly" matters: inspect the immediate outcome in the prompt. The lesson demonstrates these cases on isolated lab virtual machines and warns against applying the techniques to people or organizations without consent. Classification helps explain an incident, but does not establish that the action was authorized or safe.
### Terms
- **CIA**: Confidentiality, Integrity, and Availability. A model for describing security goals.
- **Confidentiality**: Keeping information from unauthorized access or disclosure.
- **Integrity**: Keeping information accurate and protected from unauthorized change.
- **Availability**: Keeping resources accessible to authorized users when required.
- **Authorization**: Explicit permission to perform an action on a system or data.
- **Virtual machine**: A software-based computer that can be isolated for lab practice.
### Remember
Match the impact: exposed data, altered data, or interrupted access.
Related Questions
- Explain why computer security is described as a process rather than a product. Include the roles of technology, people, and environment.(intermediate)
- Select ALL items the review identifies as possible security risks or losses.(intermediate)
- Arrange these broad security activities in a sensible cycle, beginning with identifying what needs protection.(intermediate)
- A security product can replace the continuing work of managing people, technology, and the operating environment.(intermediate)
- Which statement best captures the course review’s view of computer security?(intermediate)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free