CIA Triad Quiz Part A

What is the primary goal of confidentiality in the CIA Triad?

• Ensure data availability

• Prevent unauthorized access to sensitive information

• Guarantee data accuracy

• None of the above

Which of the following are common methods to ensure confidentiality?

• Firewalls and VPNs

• Encryption and access controls

• Backups and hashing

• Redundancy and disaster recovery

What is an example of a confidentiality breach?

• A server goes offline due to a DDoS attack

• Unauthorized access to a database containing personal information

• An email being intercepted but not read

• Data being deleted by an authorized user

How does multi-factor authentication (MFA) contribute to confidentiality?

• It prevents unauthorized changes to data

• It ensures data is available during a disaster

• It adds an extra layer of security to prevent unauthorized access

• It provides backups for sensitive data

Why is data classification important for confidentiality?

• It ensures backups are created regularly

• It prioritizes the availability of data

• It helps in identifying sensitive information

• It improves data accuracy

What does integrity in the CIA Triad ensure?

• Data is available to authorized users

• Data remains accurate, consistent, and unaltered

• Data is encrypted before being transmitted

• None of the above

What is a common threat to data integrity?

• Denial of Service (DoS) attacks

• Unauthorized modifications

• Physical theft of a server

• User forgetting passwords

How does hashing help maintain data integrity?

• It encrypts data during transmission

• It generates a unique value for data to detect tampering

• It ensures data is backed up regularly

• It allows for multi-factor authentication

What is an example of an integrity attack?

• Man-in-the-middle attack altering data during transmission

• Unauthorized access to confidential information

• Server downtime caused by hardware failure

• Data being accidentally deleted by a user

What does availability in the CIA Triad mean?

• Ensuring data is encrypted before transmission

• Ensuring data and resources are accessible to authorized users when needed

• Guaranteeing data accuracy and consistency

• Preventing unauthorized data modification