Information Assurance involves protecting information systems by ensuring which five aspects?

• A. Integrity, Availability, Authentication, Confidentiality, and Nonrepudiation.
• B. Privacy, Logging, Redundancy, Compliance, and Usability.
• C. Confidentiality, Integrity, Availability, Portability, and Compliance.
• D. Authentication, Authorization, Auditing, Encryption, and Backups.

Answer: (A)

Information Assurance is about ensuring that information and information systems remain trustworthy and usable by protecting five fundamental properties: confidentiality, integrity, availability, authentication, and nonrepudiation.

Confidentiality means that data is accessible only to those who are authorized to see it. Integrity ensures that information is accurate and has not been altered in an unauthorized way, with any changes detectable. Availability guarantees that data and systems are accessible when needed, resisting outages and disruptions. Authentication verifies the identity of users or systems before access is granted, so you know who is acting. Nonrepudiation provides proof of origin and delivery of information, preventing parties from denying their involvement in a transaction or action.

The other sets mix in concepts like privacy, logging, redundancy, compliance, usability, portability, or generic controls (encryption, backups, auditing, authorization) that are important in security programs but do not constitute the five core information assurance properties themselves.