Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the concepts of security, compliance, and identityEasy
A small business is implementing a cybersecurity strategy. They want to prevent unauthorized disclosure of sensitive customer data. Which security principle are they primarily focusing on?
- AAvailability
- BAccountability
- CConfidentiality
- DIntegrity
Show answer & explanationAnswer & explanation
Correct answer: C. Confidentiality
Confidentiality ensures that only authorized individuals have access to information, preventing unauthorized disclosure. This directly addresses the business's goal of protecting sensitive customer data.
Why the other options are wrong
- A. Availability ensures that authorized users can access information when needed.
- B. Accountability ensures that actions can be traced to an individual or entity.
- D. Integrity focuses on preventing unauthorized modification or destruction of data.
Confidentiality
The security principle that ensures information is not disclosed to unauthorized individuals, entities, or processes.
- Prevents unauthorized data disclosure.
- Often achieved through encryption and access controls.
- A core component of the CIA triad.
Memory trick: CIA: 'Confidentiality, Integrity, Availability' – keeping secrets safe, data truthful, and systems running.