ITPEC FE Subject A April 2026 Question 45
In an information security audit, which of the following is a check item for confirming availability?
Explanation
Managing and maintaining the SLA level that defines downtime — availability means the system can be used when it is needed.
Of the three security properties, availability is the one expressed in time: permitted downtime, uptime percentage, recovery time. An auditor confirms it by checking that the SLA sets these levels and that they are monitored and met, together with the redundancy and backup arrangements behind them.
Answer (c)
Why not others:
- •(a) — error checking on data entry keeps data accurate and complete, a check on integrity
- •(b) — database encryption stops unauthorised parties reading the data, a check on confidentiality
- •(d) — banning unauthorised removal of storage media prevents data leaking out, also confidentiality
Key rule: Map each control to one property: who can see the data (confidentiality), is it correct (integrity), can it be used when needed (availability).
Security · AI-written, may contain errors
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official FE past-paper collection or Report an issue.