CCNA Network Services and Security Practice Question
Which security concept is most closely associated with ensuring data has not been altered in an unauthorized way?
⚠ Common exam trap
A frequent exam trap is mistaking confidentiality for integrity because both relate to data security. Confidentiality prevents unauthorized users from viewing data, but it does not guarantee that the data has not been altered. Another trap is confusing availability with integrity; availability ensures systems and data are accessible when needed but does not protect against unauthorized changes. Candidates might also select accounting, which tracks user activity but does not ensure data correctness. Understanding these distinctions is crucial to avoid selecting the wrong security concept under exam pressure.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Integrity
The concept is integrity. In plain language, integrity is about making sure data remains accurate and trustworthy and that unauthorized changes can be detected or prevented. If confidentiality is about stopping the wrong people from seeing data, integrity is about stopping the wrong people from changing it. Availability, meanwhile, focuses on access to systems and services when needed. This distinction matters because CCNA questions often group security vocabulary together and rely on candidates to separate them cleanly. Integrity is not the same as authentication or accounting, and it is not simply about whether a service is online. It specifically focuses on the correctness and trustworthiness of data or system state. That is why integrity is the correct answer here.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Integrity
Why this is correct
Integrity is the security property that guarantees data has not been altered, destroyed, or tampered with by unauthorized entities during storage or transmission. Mechanisms such as hashing algorithms, message authentication codes, and digital signatures allow a system to detect any modification to the original content. Therefore, when ensuring that information remains unmodified, integrity is the relevant CIA attribute.
- ✗
Availability
Why it's wrong here
Availability is the assurance that authorized users can reliably access systems, applications, and data whenever required. It is maintained through redundancy, fault tolerance, load balancing, and protection against denial-of-service attacks. A failure of availability prevents access but does not mean the underlying data was changed, so it is not the security concept that addresses unauthorized modifications.
When this WOULD be correct
In a question that asks about the importance of maintaining uptime and access to data during a cyber attack, where the focus is on ensuring users can access their data without interruption, 'Availability' would be the correct answer.
- ✗
Accounting
Why it's wrong here
Accounting is the process of logging and tracking user activities, resource usage, and security-related events within an information system. It supports auditing, incident investigation, and billing or chargeback by creating an audit trail, but it does not itself verify whether stored data has been modified. Even with complete accounting records, an unauthorized change to data could occur without detection unless integrity controls are in place.
When this WOULD be correct
If the exam question asked about the importance of tracking user actions for compliance and auditing purposes, then 'Accounting' would be the correct answer. For example, a question could ask which concept helps ensure that all actions taken by users are logged for accountability.
- ✗
Confidentiality
Why it's wrong here
Confidentiality is the security property that prevents unauthorized disclosure of information to individuals, processes, or devices. It is enforced through encryption, access controls, and data masking, ensuring that only authorized parties can read the data. Preventing someone from viewing data does not prevent it from being altered, so confidentiality does not address unauthorized modification.
When this WOULD be correct
If the question were to ask about which security concept is most closely associated with protecting sensitive information from unauthorized disclosure, then 'Confidentiality' would be the correct answer. For example, a question could focus on data encryption methods that prevent unauthorized access.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The 200-301 exam frequently reuses these exact scenarios with slightly different constraints.
✓IntegrityCorrect answer▾
Why this is correct
Integrity is the security property that guarantees data has not been altered, destroyed, or tampered with by unauthorized entities during storage or transmission. Mechanisms such as hashing algorithms, message authentication codes, and digital signatures allow a system to detect any modification to the original content. Therefore, when ensuring that information remains unmodified, integrity is the relevant CIA attribute.
✗AvailabilityWrong answer — click to see why▾
Why this is wrong here
Availability refers to ensuring that data and resources are accessible when needed, not to the integrity of the data itself. This option does not address the concept of unauthorized alterations to data.
★ When this WOULD be the correct answer
In a question that asks about the importance of maintaining uptime and access to data during a cyber attack, where the focus is on ensuring users can access their data without interruption, 'Availability' would be the correct answer.
Why candidates choose this
Candidates may confuse availability with integrity due to the interconnected nature of security concepts, mistakenly believing that ensuring access to data also implies that the data remains unaltered.
✗AccountingWrong answer — click to see why▾
Why this is wrong here
Accounting refers to the process of tracking and recording user activities and resource usage within a system, rather than ensuring data integrity. Therefore, it does not address the concept of unauthorized data alteration.
★ When this WOULD be the correct answer
If the exam question asked about the importance of tracking user actions for compliance and auditing purposes, then 'Accounting' would be the correct answer. For example, a question could ask which concept helps ensure that all actions taken by users are logged for accountability.
Why candidates choose this
Candidates may confuse accounting with data integrity because both concepts involve monitoring and managing information. The overlap in their roles in security can lead to the misconception that accounting also pertains to preventing unauthorized data changes.
✗ConfidentialityWrong answer — click to see why▾
Why this is wrong here
Confidentiality refers to the protection of information from unauthorized access, rather than ensuring that data remains unaltered. In this context, the question specifically asks about data integrity, which is distinct from confidentiality.
★ When this WOULD be the correct answer
If the question were to ask about which security concept is most closely associated with protecting sensitive information from unauthorized disclosure, then 'Confidentiality' would be the correct answer. For example, a question could focus on data encryption methods that prevent unauthorized access.
Why candidates choose this
Candidates may confuse confidentiality with integrity due to their interconnected nature in security frameworks, leading them to mistakenly believe that protecting data from unauthorized access also implies preventing unauthorized alterations.
Analysis generated from the official 200-301blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Quick reference
VPN Protocol Comparison
| Protocol | Port | Encryption | Authentication | Use Case |
|---|---|---|---|---|
| IKEv2 / IPsec | UDP 500 / 4500 | AES-256 | Certificates / PSK | Site-to-site & remote access |
| SSL / TLS VPN | TCP 443 | TLS 1.3 | Certificates / MFA | Clientless remote access |
| L2TP / IPsec | UDP 1701 | AES (IPsec) | PSK / Certificates | Legacy remote access |
| WireGuard | UDP 51820 | ChaCha20 | Public keys | Modern high-performance VPN |
| PPTP | TCP 1723 | MPPE (weak) | MS-CHAPv2 | Legacy — avoid in production |
PPTP is considered insecure. IKEv2/IPsec and SSL VPN are the current recommended options.
Go deeper
Related to this question
Learn chapter
RA Guard — IPv6 First-Hop Security
Key term
CAN
A CAN (Controller Area Network) is a robust vehicle bus standard designed to allow microcontrollers and devices to communicate with each other without a host computer.
Key term
Availability
Availability is the measure of how often a system or service is operational and accessible when needed, typically expressed as a percentage of uptime.
About these practice questions
One of 1,389 original 200-301 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-301 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-301 exam.