Cambridge Technicals in IT - Unit 02 - LO6.1

What does confidentiality ensure in information security?

• Data is always accessible by anyone.
• Information is only accessible to authorised individuals or processes.

• Information is stored in a public location.
• Information is always accurate.

Answer explanation

Confidentiality ensures that only authorised individuals, groups, or processes can access sensitive data.

A company’s employee database contains personal information, which can only be accessed by HR staff. Which principle of information security is being followed?

• Confidentiality.
• Integrity.
• Availability.
• Accessibility.

Answer explanation

Limiting access to only HR staff ensures confidentiality, preventing unauthorised access.

Which action would most likely violate the principle of confidentiality?

• Encrypting sensitive data.
• Allowing all employees unrestricted access to sensitive information.
• Implementing multi-factor authentication.
• Restricting access based on job roles.

Answer explanation

Allowing all employees unrestricted access to sensitive information violates confidentiality.

How does information integrity apply to a financial report in an organisation?

• Making the report accessible only to top management.
• Regularly updating the report to ensure it is accurate and up-to-date.
• Storing the report in a secured location.
• Publishing the report publicly.

Answer explanation

Integrity is maintained by regularly updating the financial report and ensuring it’s accurate.

If an organisation has set up a backup system to ensure that data can always be recovered after a disaster, which principle is this an example of?

• Availability.
• Integrity.
• Confidentiality.
• Redundancy.

Answer explanation

Availability ensures data is accessible, even in case of disaster, by using a backup system.

A health insurance company encrypts sensitive patient data to prevent unauthorised access. Which principle of information security does this action address?

• Integrity.
• Availability.
• Confidentiality.
• Compliance.

Answer explanation

Encryption ensures that only authorised individuals can access sensitive data, protecting confidentiality.

An employee updates the customer records to ensure they are current and accurate. This ensures which principle of information security?

• Availability.
• Integrity.
• Confidentiality.
• Security.

Answer explanation

Integrity ensures that customer records are up-to-date and accurate, maintaining the quality of information.

What is the main objective of ensuring the availability of information?

• To prevent unauthorised users from accessing the data.

• To ensure authorised users can access the data when needed.

• To make sure data is always accurate.
• To store data in a highly secure environment.

Answer explanation

Availability guarantees that information is accessible by authorised users when needed.

In a scenario where a server goes down, and employees cannot access a report they need for a meeting, which principle of information security is compromised?

• Integrity.
• Availability.
• Confidentiality.
• Accuracy.

Answer explanation

The inability to access the report compromises the availability of the information.

A company allows employees to access sensitive files remotely but requires multi-factor authentication. Which principle of information security is being addressed?

• Integrity.
• Availability.
• Confidentiality.
• Compliance.

Answer explanation

Multi-factor authentication protects sensitive data, ensuring confidentiality by allowing access only to authorised users.