Question

Difficulty: EasyCIA Triad & Core Security Concepts

A network security administrator configures full-disk encryption on all corporate laptops to ensure that sensitive files cannot be accessed if a laptop is lost or stolen. Which pillar of the CIA triad does this security control directly uphold?

  1. ConfidentialityAnswer
  2. B
    Availability
  3. C
    Integrity
  4. D
    Accounting

Answer

Confidentiality is the pillar directly upheld by full-disk encryption because it prevents unauthorized exposure of stored information.
Full-disk encryption maintains confidentiality by rendering stored data unreadable to anyone who does not possess the decryption credentials, protecting sensitive information from disclosure if a physical device is lost or compromised.

Step-by-Step Solution

1
Identify the primary function of the security control described in the scenario.
Full-disk encryption scrambles stored data so that it cannot be read without authenticating with a valid decryption key.
This protection prevents unauthorized parties from inspecting sensitive files on stolen or lost hardware.
2
Map this function to the corresponding pillar of the CIA triad.
Protecting data from unauthorized disclosure is the definition of Confidentiality.
Confidentiality focuses on privacy and restricting data access solely to authorized entities.

Key Concept

CIA Triad - Confidentiality
Rate this question