CompTIA Project+ (PK0-005)Basics of IT and GovernanceHard
A project involves deploying a new customer relationship management (CRM) system that will store highly sensitive customer data, including financial and personal health information. The project manager is tasked with ensuring the system adheres to the 'Confidentiality, Integrity, and Availability' (CIA) triad. Which of the following is the BEST example of a measure primarily addressing 'Confidentiality'?
- AUtilizing checksums to verify data accuracy during transfers.
- BDeploying a robust access control system with role-based permissions.
- CImplementing regular data backups to prevent loss.
- DEnsuring redundant servers and network links for uptime.
Show answer & explanationAnswer & explanation
Correct answer: B. Deploying a robust access control system with role-based permissions.
Confidentiality, in the context of the CIA triad, ensures that sensitive information is accessible only to authorized individuals. A robust access control system with role-based permissions directly addresses this by restricting who can view or modify the highly sensitive customer data.
Why the other options are wrong
- A. Checksums ensure 'Integrity' by verifying that data has not been altered or corrupted.
- C. Regular data backups primarily address 'Availability' and, to some extent, 'Integrity' (restoring correct data), but not primarily confidentiality.
- D. Redundant servers and network links primarily ensure 'Availability' by preventing service interruptions.
CIA Triad: Confidentiality
The 'Confidentiality' principle of the CIA triad ensures that information is not disclosed to unauthorized individuals, entities, or processes. It involves implementing measures to protect sensitive data from unauthorized access or viewing.
- Protects sensitive data from unauthorized disclosure.
- Achieved through encryption, access control, and data masking.
- Crucial for privacy and regulatory compliance.
Memory trick: Confidentiality: Keep Secrets Safe.