Microsoft Azure Architect Technologies (AZ-300) Practice Exam

Which principle ensures that information is accessible only to authorized users?

1. Integrity

2. Confidentiality

3. Availability

4. Authentication

The correct answer is: Confidentiality

The principle that ensures information is accessible only to authorized users is confidentiality. This concept is a fundamental aspect of information security and focuses on protecting sensitive information from unauthorized access and disclosure. Confidentiality is achieved through various means, including encryption, access controls, and authentication mechanisms, which ensure that only those who have the right permissions can access certain data. Integrity refers to the accuracy and reliability of the data, ensuring that it has not been altered or tampered with in an unauthorized manner. While important for data security, it does not specifically address user access to information. Availability pertains to ensuring that authorized users have timely and reliable access to the information they need. This principle emphasizes the system's uptime and performance rather than restricting access to data. Authentication is the process of verifying the identity of a user or system before granting access to information. While it is a crucial measure in enforcing confidentiality, it does not comprehensively cover the principle of ensuring that only authorized users can access information. Instead, authentication is a means to uphold the broader principle of confidentiality.