Palo Alto Networks Certified Cybersecurity Entry-level Technician (PCCET)Network SecurityEasy
A security auditor is reviewing a company's data handling policies and recommends implementing encryption for all sensitive data stored on hard drives and transmitted over the network. This recommendation is primarily aimed at protecting the data from unauthorized disclosure, even if an attacker gains access to the storage or intercepts communication. Which principle of the CIA Triad is this recommendation directly addressing?
- AAvailability
- BIntegrity
- CConfidentiality
- DAccountability
Show answer & explanationAnswer & explanation
Correct answer: C. Confidentiality
Confidentiality, a core principle of the CIA Triad, ensures that sensitive information is protected from unauthorized access or disclosure. Encryption is a primary control used to enforce confidentiality.
Why the other options are wrong
- A. Availability ensures authorized users can access information when needed, often through redundancy and backups.
- B. Integrity ensures data has not been altered or destroyed, often through hashing or digital signatures.
- D. Accountability ensures actions can be traced to an individual, typically through logging and auditing.
Confidentiality (CIA Triad)
The security principle that ensures sensitive information is protected from unauthorized access or disclosure.
- A core component of the CIA Triad (Confidentiality, Integrity, Availability).
- Achieved through measures like encryption, access controls, and data masking.
- Protects against eavesdropping and data leaks.
Memory trick: CIA: Confidentiality is 'C'overt, Integrity is 'I'nviolate, Availability is 'A'lways there.