mediumMultiple SelectObjective-mapped
CIA Triad: Core Principles of Information Security
Which of the following are core principles of information security?
Quick Answer
The correct answer is Confidentiality, along with Integrity, as two of the three core principles of information security. These three principles form the CIA triad—Confidentiality, Integrity, and Availability—which is the foundational model for all security controls. Confidentiality ensures that sensitive data is accessible only to authorized users, typically enforced through encryption like AES-256, while Integrity guarantees that data has not been altered or tampered with, often verified using hashing algorithms such as SHA-256 or HMAC. On the ISC2 Certified in Cybersecurity CC exam, you will be tested on recognizing these three as the core principles, not supporting mechanisms like authentication or non-repudiation. A common trap is confusing confidentiality with privacy or integrity with availability, so remember that the triad is always these three together. To lock it in, use the mnemonic “CIA” itself—think of the agency that protects secrets (Confidentiality), ensures reports are accurate (Integrity), and keeps operations running (Availability).
⚠ Common exam trap
ISC2 often tests whether candidates can distinguish between core principles (CIA triad) and supporting security services (authentication, non-repudiation), leading many to incorrectly select authentication or non-repudiation as core principles instead of availability.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Integrity
The core principles of information security, known as the CIA triad, are Confidentiality, Integrity, and Availability. Therefore, the correct answers are Integrity (B), Confidentiality (C), and Availability (E). Integrity ensures data accuracy and prevents unauthorized modification, often verified through hashing. Confidentiality ensures data is accessible only to authorized users, typically via encryption. Availability ensures that systems and data are accessible when needed. The other options—Authentication (A) and Non-repudiation (D)—are important security concepts but are not part of the CIA triad.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Authentication
Why it's wrong here
Authentication is a security service, not a core principle of information security.
- ✓
Integrity
Why this is correct
Integrity ensures data accuracy and prevents unauthorized modification, making it a core principle.
- ✓
Confidentiality
Why this is correct
Confidentiality ensures data is accessible only to authorized users, making it a core principle.
- ✗
Non-repudiation
Why it's wrong here
Non-repudiation is a security service, not a core principle of information security.
- ✓
Availability
Why this is correct
Availability is a core principle of information security, but the question asks for two specific principles; the correct pair is Integrity and Confidentiality.
Go deeper
Related to this question
Learn chapter
Introduction to Security Principles
Key term
Non-repudiation
Non-repudiation is a security principle that ensures a party in a digital transaction cannot deny their involvement or the authenticity of their digital signature.
Key term
Availability
Availability is the measure of how often a system or service is operational and accessible when needed, typically expressed as a percentage of uptime.
About these practice questions
This CC question is part of Courseiva's 976-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
2 more ways this is tested on CC
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Which THREE of the following are core principles of the CIA triad?
medium- ✓ A.Confidentiality
- ✓ B.Integrity
- C.Non-repudiation
- D.Accountability
- ✓ E.Availability
Why A: Options A, B, and E are correct: confidentiality, integrity, and availability are the three pillars. Non-repudiation (C) and accountability (D) are related but not part of the CIA triad.
Variation 2. Which TWO of the following are core principles of the CIA triad?
easy- ✓ A.Integrity
- B.Non-repudiation
- ✓ C.Confidentiality
- D.Authorization
- E.Authentication
Why A: The CIA triad consists of Confidentiality, Integrity, and Availability. Options A and C are correct. Option B (Non-repudiation) is separate. Option D (Authentication) is separate. Option E (Authorization) is separate.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CC practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CC exam.