Overview

Question 1

Confidentiality

Answer 1

Definition: Preventing unauthorised disclosure of information.
Ensures only authorised individuals can access data.
Examples: Encryption, access controls (passwords, permissions).

Question 2

Integrity

Answer 2

Definition: Ensuring information is accurate, complete, and uncorrupted.
Prevents unauthorised modification or destruction of data.
Examples: Hashing, digital signatures, version control.

Question 3

Availability

Answer 3

Definition: Ensuring systems and data are accessible to authorised users when needed.
Protects against disruptions to service.
Examples: Redundancy, backups, DDoS mitigation.

Question 4

Authentication

Answer 4

Definition: Verifying the identity of a user or system.
Proving you are who you claim to be.
Examples: Passwords, MFA (Multi-Factor Authentication), biometrics.

Question 5

Authorisation

Answer 5

Definition: Determining what an authenticated user is permitted to do.
Granting specific access rights or permissions.
Examples: Role-Based Access Control (RBAC), file permissions (read/write).

Question 6

Non-Repudiation

Answer 6

Definition: Ensuring a party cannot deny having performed an action.
Provides undeniable proof of origin or delivery.
Examples: Digital signatures, audit trails, logging.