100-160 Question 9
Single answerA company implements a password policy requiring employees to change their passwords every 90 days, use complex passwords with a mix of characters, and avoid reusing previous passwords. Which essential security principle does this policy primarily address?
- A
Confidentiality
- B
Integrity
- C
Availability
- D
Authentication
Show answer and explanation
Correct answer: A
Explanation
The password policy described enforces strong security measures to prevent unauthorized access to sensitive information, aligning with the principle of confidentiality. By requiring complex passwords, avoiding reuse, and periodic changes, the policy reduces the risk of information being exposed to unauthorized individuals.
- A. Correct.
Confidentiality is the principle of ensuring that sensitive information is accessible only to authorized individuals. A strong password policy helps prevent unauthorized access, maintaining confidentiality.
- B. Incorrect.
Integrity refers to ensuring the accuracy and reliability of data. While important, this principle is not directly addressed by the password policy described.
- C. Incorrect.
Availability ensures that information and systems are accessible to authorized users when needed. This policy does not directly relate to keeping systems or data available.
- D. Incorrect.
Authentication is the process of verifying the identity of a user or system. While passwords are a part of authentication, the described policy focuses on protecting data confidentiality rather than the authentication process itself.