Which of the following are additional access control objectives?

A.
Consistency and utility

B.
Reliability and utility

C.
Usefulness and utility

D.
Convenience and utility

Explanation:
Controlling access to information systems and associated networks is necessary for the preservation of their
confidentiality, integrity, and availability.
Confidentiality assures that the information is not disclosed to unauthorized persons or processes. Integrity
ensures the consistency of data.
Availability assures that a system’s authorized users have timely and uninterrupted access to the information in
the system. The additional access control objectives are reliability and utility.
Incorrect Answers:
A: Consistency is not one of the defined additional access control objectives.
C: Usefulness is not one of the defined additional access control objectives.
D: Convenience is not one of the defined additional access control objectives.

Krutz, Ronald L. and Russell Dean Vines, The CISSP and CAP Prep Guide: Mastering CISSP and CAP, Wiley
Publishing, Indianapolis, 2007, p. 46