Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the concepts of security, compliance, and identityEasy
A company is implementing a new security policy. They want to ensure that all actions performed by users and systems are recorded and can be traced back to the responsible entity. Which security concept are they primarily focusing on?
- AIntegrity
- BAvailability
- CConfidentiality
- DAccountability
Show answer & explanationAnswer & explanation
Correct answer: D. Accountability
Accountability ensures that actions can be traced back to an individual or system, which is precisely what the company aims to achieve by recording and tracing all actions.
Why the other options are wrong
- A. Integrity ensures data has not been altered or destroyed in an unauthorized manner, not who performed an action.
- B. Availability ensures that systems and data are accessible when needed, which is unrelated to tracing actions.
- C. Confidentiality deals with preventing unauthorized disclosure of information, not tracing actions.
Accountability (Security)
The ability to trace all actions performed on a system or with data back to the individual or entity responsible.
- Ensures non-repudiation of actions.
- Crucial for auditing and compliance.
- Often achieved through logging and monitoring.
Memory trick: CIA Triad + A for Accountability