ITPEC IP October 2022 Question 35
Among the following lists consisting of the information security terms availability, integrity, confidentiality, and vulnerability, which is a complete list of properties of information that information security is to preserve?
Explanation
Availability, Integrity, Confidentiality — the three properties of information (CIA) that information security is to preserve.
ISO/IEC 27000 defines information security as the preservation of:
- •Confidentiality: only authorised people can access the information
- •Integrity: the information is accurate and complete, not altered or destroyed improperly
- •Availability: authorised people can use the information whenever they need it
Vulnerability is not a property to preserve. It is a weakness that a threat can exploit, something to reduce.
Answer (b)
Why not others:
- •(a) — leaves out confidentiality
- •(c) — leaves out availability
- •(d) — leaves out availability and adds vulnerability, a weakness to remove rather than a property to keep
Key rule: Confidentiality, integrity and availability are what security protects; threats and vulnerabilities are what put them at risk.
Security · AI-written, may contain errors
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.