ITPEC IP April 2020 Question 58
Which of the following descriptions concerning the requirements of IT service management in an example of an SNS corresponds to confidentiality?
Explanation
Unauthorized users can access neither data nor services — confidentiality means information is available only to those authorized to use it.
Service requirements for an SNS cover its functions and its quality properties. Of the security properties, confidentiality restricts access to authorized users, integrity keeps data accurate and unaltered, and availability keeps the service usable when needed.
Answer (b)
Why not others:
- •(a) — supporting use 24 hours a day, all year round is about the service being usable when needed: availability
- •(c) — resuming service within an hour after a disaster at the server site is service continuity, keeping the service available
- •(d) — processing posted photos and following other users describe what the service does, functional requirements rather than a security property
Key rule: Confidentiality is about who can see or use something, integrity about whether it is correct, availability about whether it can be used when needed; features the user sees are functional requirements.
Service Management · AI-written, may contain errors
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.