Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the concepts of security, compliance, and identityEasy
A small startup is handling customer data and wants to ensure that only authorized personnel can access this information. They are particularly concerned about preventing unauthorized disclosure. Which core security principle are they primarily focusing on?
- AIntegrity
- BAvailability
- CNon-repudiation
- DConfidentiality
Show answer & explanationAnswer & explanation
Correct answer: D. Confidentiality
Confidentiality ensures that data is kept secret and only accessible by authorized entities, directly addressing the concern of preventing unauthorized disclosure.
Why the other options are wrong
- A. Integrity focuses on preventing unauthorized modification or destruction of data, not disclosure.
- B. Availability ensures that systems and data are accessible when needed, not about preventing disclosure.
- C. Non-repudiation ensures that a party cannot deny having performed an action, which is different from preventing disclosure.
Confidentiality
The security principle that ensures information is not disclosed to unauthorized individuals, entities, or processes.
- Prevents unauthorized data disclosure.
- Often achieved through encryption and access controls.
- One of the core pillars of information security (CIA triad).
Memory trick: CIA: Confidentiality is about keeping secrets.