CCNA Network Services and Security Practice Question
Which term in the CIA triad refers to ensuring systems and data remain accessible when needed?
⚠ Common exam trap
A frequent exam trap is confusing availability with confidentiality or integrity because all three belong to the CIA triad. Candidates may incorrectly choose confidentiality, thinking about data protection, or integrity, focusing on data accuracy. However, availability specifically means ensuring systems and data remain accessible when needed. Misreading the question or overthinking the triad components leads to selecting the wrong term. Remember, availability is about uptime and access, not secrecy or correctness, which are confidentiality and integrity respectively.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Availability
The term is availability. In plain language, availability means that authorized users should be able to reach systems, services, and data when they actually need them. If a service is down, overwhelmed, or otherwise unreachable, availability has been affected. This is different from confidentiality, which focuses on preventing unauthorized disclosure, and integrity, which focuses on preventing unauthorized change. This distinction matters because the CIA triad appears often in security foundations and exam questions. Availability is not about whether data is secret or whether it has been altered; it is about whether the service is usable. That is why availability is the best answer here.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Availability
Why this is correct
Availability in the CIA triad ensures that systems and data are accessible to authorized users when they need them, addressing uptime, redundancy, fault tolerance, and resilience against denial-of-service attacks. The prompt's phrase 'ensuring systems and data can be accessed when needed' is the textbook definition of availability, making it the correct choice among the four options.
- ✗
Integrity
Why it's wrong here
Integrity in the CIA triad focuses on preserving the accuracy, consistency, and trustworthiness of data over its lifecycle, protecting it from unauthorized modification, deletion, or tampering. Techniques like hashing, digital signatures, and write-protection mechanisms enforce integrity, but they do not guarantee that systems and data remain accessible; therefore, this option does not match the given definition.
When this WOULD be correct
In a question asking about the importance of maintaining data accuracy during a data transfer process, where the focus is on preventing unauthorized changes to the data, 'Integrity' would be the correct answer. For example, 'Which term ensures that data remains unaltered during transmission?'
- ✗
Accounting
Why it's wrong here
Accounting is a concept from the AAA framework (Authentication, Authorization, and Accounting), not from the CIA triad, which consists solely of confidentiality, integrity, and availability. Accounting involves tracking user activity, resource usage, and auditing for billing or security monitoring, but it has no direct role in ensuring that systems and data are accessible when needed, making it an incorrect choice here.
When this WOULD be correct
If the exam question asked about the importance of tracking user access and resource utilization for compliance or auditing purposes, then 'Accounting' would be the correct answer, as it pertains to maintaining records of system usage.
- ✗
Confidentiality
Why it's wrong here
Confidentiality in the CIA triad is concerned with preventing unauthorized disclosure of sensitive information, ensuring that only intended parties can view or access data, typically through encryption, access control lists, and data classification. While it protects data from being seen, it does not address whether systems and data remain available for use at the required time, so the phrase in the question does not describe confidentiality.
When this WOULD be correct
In a question asking about measures to protect sensitive information from unauthorized disclosure, such as encryption methods or access controls, 'Confidentiality' would be the correct answer. For example, a question might ask, 'What principle ensures that only authorized users can access sensitive data?'
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The 200-301 exam frequently reuses these exact scenarios with slightly different constraints.
✓AvailabilityCorrect answer▾
Why this is correct
Availability in the CIA triad ensures that systems and data are accessible to authorized users when they need them, addressing uptime, redundancy, fault tolerance, and resilience against denial-of-service attacks. The prompt's phrase 'ensuring systems and data can be accessed when needed' is the textbook definition of availability, making it the correct choice among the four options.
✗IntegrityWrong answer — click to see why▾
Why this is wrong here
Integrity refers to the accuracy and trustworthiness of data, ensuring it has not been altered or tampered with. In the context of this question, it does not address the need for systems and data to be accessible when required.
★ When this WOULD be the correct answer
In a question asking about the importance of maintaining data accuracy during a data transfer process, where the focus is on preventing unauthorized changes to the data, 'Integrity' would be the correct answer. For example, 'Which term ensures that data remains unaltered during transmission?'
Why candidates choose this
Candidates may confuse integrity with availability due to their interconnectedness in security discussions, leading them to mistakenly believe that ensuring data accuracy also implies accessibility.
✗AccountingWrong answer — click to see why▾
Why this is wrong here
Accounting refers to the process of tracking and recording user activities and resource usage within a system, which does not directly relate to the availability of systems and data.
★ When this WOULD be the correct answer
If the exam question asked about the importance of tracking user access and resource utilization for compliance or auditing purposes, then 'Accounting' would be the correct answer, as it pertains to maintaining records of system usage.
Why candidates choose this
Candidates may confuse 'Accounting' with the broader concept of system management and oversight, leading them to mistakenly believe it relates to ensuring system availability.
✗ConfidentialityWrong answer — click to see why▾
Why this is wrong here
Confidentiality refers to protecting sensitive information from unauthorized access, not ensuring that systems and data are accessible when needed. Therefore, it does not address the requirement of availability in the CIA triad.
★ When this WOULD be the correct answer
In a question asking about measures to protect sensitive information from unauthorized disclosure, such as encryption methods or access controls, 'Confidentiality' would be the correct answer. For example, a question might ask, 'What principle ensures that only authorized users can access sensitive data?'
Why candidates choose this
Candidates may confuse confidentiality with availability due to their interconnectedness in security practices, leading them to mistakenly believe that protecting data access also implies ensuring it is available.
Analysis generated from the official 200-301blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
Learn chapter
RA Guard — IPv6 First-Hop Security
Key term
Confidentiality
Confidentiality means keeping sensitive information secret and accessible only to authorized people or systems.
Key term
Availability
Availability is the measure of how often a system or service is operational and accessible when needed, typically expressed as a percentage of uptime.
About these practice questions
This 200-301 question is part of Courseiva's 1,389-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-301 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-301 exam.