Match each security concept to its most accurate purpose.
Drag a concept onto its matching description — or click a concept then click the description.
Verifies identity before access is granted
Determines permitted actions after identity is verified
Records activity or session information
Protects information from unauthorized disclosure
⚠ Common exam trap
Be careful not to confuse the terms within the CIA triad or between CIA and AAA. Remember: Confidentiality = privacy, Integrity = no unauthorized changes, Availability = uptime/access. AAA: Authentication = who you are, Authorization = what you can do, Accounting = what you did.
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
Confidentiality: Ensures data is accessible only to authorized parties
These pairings correctly define core security concepts (CIA triad plus authentication and authorization).
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
Confidentiality: Ensures data is accessible only to authorized parties
Why this is correct
Confidentiality safeguards sensitive data from interception or disclosure to unauthorized entities, often through encryption, access control lists, and VPN technologies. In the CIA triad, it ensures that only the intended individuals or systems can read the information while it is stored or transmitted across the network.
Integrity: Guarantees data has not been altered by unauthorized entities
Why this is correct
Integrity guarantees that data remains unchanged and authentic during transmission or storage, protecting against accidental or malicious alteration. Mechanisms such as hashing, digital signatures, and message authentication codes verify that no unauthorized modification has occurred, ensuring that the data received matches the original exactly.
Availability: Ensures systems and data are accessible when needed
Why this is correct
Availability ensures that authorized users have reliable and timely access to network services, applications, and data whenever required. This is achieved through redundant hardware, failover mechanisms, load balancing, and defense against denial-of-service attacks, minimizing downtime and maintaining business continuity.
Authentication: Verifies the identity of a user or system
Why this is correct
Authentication verifies the identity of a user, device, or process before granting access to network resources. It relies on credentials such as passwords, certificates, or biometrics, and establishes a basis for accountability and authorization decisions in a Cisco network environment.
Quick reference
| Protocol | Port(s) | Encryption | Transport | Primary Use |
|---|---|---|---|---|
| RADIUS | 1812 / 1813 | Password only | UDP | Network access control |
| TACACS+ | 49 | Full packet | TCP | Device administration |
| Diameter | 3868 | Full session | TCP / SCTP | Carrier / mobile networks |
| 802.1X | — | EAP-based | Layer 2 | Port-based access control |
TACACS+ encrypts the entire packet; RADIUS only encrypts the password field — a key exam distinction.
Go deeper
About these practice questions
One of 1,389 original 200-301 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-301 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-301 exam.