200-201 Question 3
Single answerDuring a security assessment, a company discovers that unauthorized users have been accessing confidential customer data due to weak access controls. Which element of the CIA triad is primarily affected in this scenario?
- A
Confidentiality
- B
Integrity
- C
Availability
- D
Authentication
Show answer and explanation
Correct answer: A
Explanation
The CIA triad consists of Confidentiality, Integrity, and Availability, which are the core principles of cybersecurity. In this scenario, the primary issue is unauthorized access to sensitive information, which directly impacts confidentiality. Proper access controls are essential to prevent breaches of confidentiality and protect sensitive data.
- A. Correct.
Confidentiality is the aspect of the CIA triad that ensures information is protected from unauthorized access or disclosure. In this scenario, unauthorized users accessing confidential data directly compromises confidentiality.
- B. Incorrect.
Integrity focuses on maintaining the accuracy and consistency of data and systems. While important, integrity is not the primary concern in this specific scenario.
- C. Incorrect.
Availability is about ensuring that systems and data are accessible when needed. This scenario does not involve disruptions to access or availability of resources.
- D. Incorrect.
Authentication refers to verifying a user's identity, which is a security mechanism but not a direct component of the CIA triad. This option is irrelevant to the described situation.