Which of the following Confidentiality, Integrity, Availability (CIA) attribute supports the principle of least privilege
by providing access to information only to authorized and intended users?

A.
Confidentiality

B.
Integrity

C.
Availability

D.
Accuracy

Explanation:
Confidentiality ensures that the necessary level of secrecy is enforced at each junction of data processing and
prevents unauthorized disclosure.
Least privilege means an individual should have just enough permissions and rights to fulfill his role in the
company and no more.
We can keep data ‘confidential’ by providing access to information only to authorized and intended users.
Incorrect Answers:
B: Integrity ensures that data is unaltered. It does not restrict access to information only to authorized and
intended users.
C: Availability ensures reliability and timely access to data and resources to authorized individuals. It does not
restrict access to information only to authorized and intended users.
D: Accuracy is not one of the three CIA/AIC attributes (Confidentiality, Integrity, Availability) and does not
restrict access to information only to authorized and intended users.

Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, New York, 2013, pp. 22-23