Palo Alto Networks Certified Cybersecurity Entry-level Technician (PCCET)Network SecurityEasy
A company is implementing a security policy that mandates encryption for all data transmitted over its internal network, even between devices in the same subnet. Which cryptographic concept is primarily being addressed by this policy?
- AIntegrity
- BAvailability
- CConfidentiality
- DNon-repudiation
Show answer & explanationAnswer & explanation
Correct answer: C. Confidentiality
Encryption is primarily used to ensure confidentiality, meaning that data is protected from unauthorized access or disclosure. By encrypting all data, the company ensures that only authorized parties can read it.
Why the other options are wrong
- A. Integrity ensures data has not been tampered with, often using hashing, not just encryption.
- B. Availability ensures data is accessible when needed, which encryption doesn't directly guarantee.
- D. Non-repudiation proves the origin of data, often using digital signatures, not just encryption alone.
Confidentiality (CIA Triad)
The principle that information should not be disclosed to unauthorized individuals, entities, or processes.
- Ensured through encryption, access controls, and data classification.
- Prevents unauthorized reading or viewing of data.
- A core component of information security.
Memory trick: CIA: Keep it Secret, Safe, and Always On.