Which component of the CIA triad refers to limiting access so only authorized users can view sensitive information?

Question

BlackTom AI · Accepted Answer

Confidentiality is the principle that restricts access to sensitive information so that only authorized users can view or obtain it.

1) Relevant knowledge points and concepts:
- CIA triad: three core information security objectives—Confidentiality, Integrity, and Availability.
  - Confidentiality: ensuring information is accessible only to those authorized to have access.
  - Integrity: ensuring data is accurate and has not been altered improperly.
  - Availability: ensuring authorized users can access information and resources when needed.
- Authentication is a control/technique (verifying identity) that supports confidentiality and other goals but is not itself one of the three CIA principles.

2) Step-by-step reasoning:
- Read the phrase “limiting access so only authorized users can view sensitive information.” That directly describes preventing unauthorized disclosure, i.e., control of who may see data.
- Match that description to the CIA definitions: confidentiality explicitly addresses unauthorized disclosure and access control.
- Check the other options to ensure they do not match:
  - Authentication: a mechanism (e.g., passwords, biometrics) used to verify identity; it enables confidentiality but is not the overarching objective described.
  - Availability: concerned with uptime and ensuring access, the opposite emphasis (ensuring access rather than restricting it).
  - Integrity: concerned with preventing unauthorized modification and ensuring accuracy of data, not with restricting viewing access.

3) Calculations: none required.

4) Why the correct answer is correct:
- Confidentiality’s core goal is to prevent unauthorized disclosure of information and to ensure that only authorized parties can view sensitive data. The question’s phrasing is a textbook definition of confidentiality.

5) Why other options are incorrect (brief):
- Authentication: a supporting control, not the CIA principle asked for.
- Availability: about ensuring access, not restricting it.
- Integrity: about correctness and protection from tampering, not access control for viewing.

Conclusion: The correct answer is Confidentiality. This matches the provided answer.

Which component of the CIA triad refers to limiting access so only authorized users can view sensitive information?单项选择题

类似问题

Match each term relating to information security with its corresponding description. 1: Confidentiality 2: Integrity 3: Availability

Question at position 18 Which of the following are the three primary objectives of information security? (Select all that apply)IntegrityAvailabilityConfidentialityProfitabilityAnonymity

Question at position 12 Which of the following are the three primary objectives of information security? (Select all that apply)AnonymityConfidentialityAvailabilityProfitabilityIntegrity

Question at position 4 Which of the following are the three primary objectives of information security? (Select all that apply)AvailabilityProfitabilityIntegrityConfidentialityAnonymity

If a malicious actor succeeds in tampering with the data in a database so that it is no longer trustworthy, which CIA component has been compromised?

In the context of the CIA Triad, which component is specifically responsible for ensuring that data is private and that access is strictly controlled?

The CIA Triad of Information Security encompasses the following related people, process and technology objectives: CLO 1, 4

A loss of __________ is the unauthorized disclosure of information.

更多留学生实用工具

智能学习助手

风格化写作助手

论文查重助手

文献引用助手

课堂转译助手

课堂笔记助手

Quiz搜索助手

学校历年真题

智能刷题助手

智能匹配练习

希望你的学习变得更简单