Which statement correctly maps the three security properties Confidentiality, Integrity, and Availability?

• A. Confidentiality prevents modification, integrity prevents disclosure, and availability ensures access to authorized users when needed.
• B. Confidentiality prevents disclosure, integrity prevents unauthorized modification, and availability ensures access to authorized users when needed.
• C. Confidentiality ensures access; integrity ensures uptime; availability prevents modification.
• D. Confidentiality ensures uptime; integrity secures data backups; availability prevents exposure.

Answer: (B)

Confidentiality, Integrity, and Availability describe different protections for information. Confidentiality means keeping information secret from those who aren’t authorized to see it; it’s about preventing disclosure. Integrity means information should remain accurate and trustworthy, protected from unauthorized modification. Availability means that authorized users can access the information and systems whenever they need them, even in the face of failures or attacks.

The statement that aligns with these definitions says: Confidentiality prevents disclosure, Integrity prevents unauthorized modification, and Availability ensures access to authorized users when needed. This matches the established meanings: secrecy for confidential data, trustworthiness and accuracy for data, and reliable access for users who are allowed to use the system.

Other statements swap or confuse the roles—confidentiality wouldn’t prevent modification, and integrity wouldn’t govern uptime. Likewise, availability isn’t about preventing exposure or uptime being tied to confidentiality.