Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the concepts of security, compliance, and identityMedium
A healthcare provider needs to ensure that patient records are protected from unauthorized access, modification, or deletion, while also remaining accessible to medical staff when needed. They are particularly concerned about maintaining the accuracy and trustworthiness of this highly sensitive data. Which core security principle are they primarily focusing on?
- ANon-repudiation
- BAvailability
- CIntegrity
- DConfidentiality
Show answer & explanationAnswer & explanation
Correct answer: C. Integrity
Integrity ensures that data is accurate, complete, and protected from unauthorized modification or destruction. The concern for maintaining accuracy and trustworthiness of patient data directly points to the integrity principle.
Why the other options are wrong
- A. Non-repudiation ensures actions cannot be denied, which is not the main focus of preventing modification or deletion.
- B. Availability ensures data is accessible when needed, but the primary concern here is accuracy and trustworthiness.
- D. Confidentiality prevents unauthorized disclosure, which is important but secondary to the focus on data accuracy and trustworthiness.
Integrity
The security principle that ensures data is accurate, complete, and protected from unauthorized modification or destruction, maintaining its trustworthiness.
- Prevents unauthorized data alteration.
- Often achieved through hashing, digital signatures, and access controls.
- One of the core pillars of information security (CIA triad).
Memory trick: Integrity: Data is true and untampered.