9. An online retailer encrypts all payment information before transmitting it over the internet, preventing attackers from intercepting sensitive financial data. Which CIA principle is being upheld?
Answer: C
Confidentiality
The principle being upheld in this scenario is confidentiality, as the encryption of payment information ensures that sensitive financial data remains private and protected from unauthorized access during transmission.
A) Redundancy
Redundancy refers to the inclusion of extra components or systems to increase reliability and availability, rather than protecting the privacy of data. Therefore, it is not applicable in this context where the focus is on securing sensitive information.
B) Availability
Availability ensures that information and resources are accessible when needed. While important, it does not relate to the protection of data from unauthorized access, which is the primary concern in this scenario.
C) Confidentiality
Confidentiality is the principle that protects sensitive information from being accessed by unauthorized individuals. The use of encryption directly supports this principle by ensuring that payment information remains secure during transmission, making this the correct choice.
D) Integrity
Integrity involves maintaining the accuracy and completeness of data. While encryption can contribute to data integrity by preventing unauthorized alterations, the primary focus in this scenario is on protecting the confidentiality of payment information.
Conclusion
Confidentiality is the key principle upheld by encrypting payment information, as it prevents unauthorized access to sensitive financial data. In contrast, the other options—redundancy, availability, and integrity—do not directly address the security of data transmission in this context. Thus, confidentiality is the clear and definitive answer.