A phishing attack tricks an employee into revealing login credentials. Which CIA triad goal is most directly compromised at the point the credentials are exposed?

### Why this is right Credentials are sensitive information. When an unauthorized person obtains them, information that should be restricted has been exposed, which is a confidentiality compromise. ### The concept The CIA triad means confidentiality, integrity, and availability. Confidentiality concerns who can see information. Integrity concerns whether information remains accurate and trustworthy. Availability concerns whether authorized users can access systems and data when needed. A stolen password may later let an attacker alter records or block access, but the direct effect described here is disclosure of secret credentials. ### The other options - **B. Availability**: this concerns access to services, such as when attackers lock users out. - **C. Integrity**: this concerns unauthorized or accidental changes to data. - **D. Business continuity**: this is an organization's ability to keep operating through disruption, not one of the triad's three goals. ### Terms - **CIA**: Confidentiality, Integrity, and Availability. The three information-security goals used to classify security impacts. ### Remember When information is revealed to an unauthorized person, classify the direct impact as confidentiality.