ITIL 4 Foundation Practice Exam

Which statement describes the integrity objective in information security?

1. It allows unrestricted access to all data

2. It ensures data is modified only by authorized personnel

3. It focuses on data availability at all times

4. It refers to the ownership of data by the organization

The correct answer is: It ensures data is modified only by authorized personnel

The integrity objective in information security is primarily concerned with ensuring that data is accurate, consistent, and trustworthy throughout its lifecycle. This means that data can only be modified by authorized individuals, which helps to prevent unauthorized changes or corruption of information. When integrity is maintained, organizations can trust that the data they are working with is a reliable representation of the intended information. In the context of the other options, unrestricted access to data would compromise its integrity since it would allow unauthorized individuals to alter sensitive information. Focusing solely on data availability does not address the accuracy or correctness of the data, which is crucial for maintaining integrity. Similarly, while ownership of data by an organization is important, it does not specifically relate to the integrity of the data itself. Thus, the statement that best aligns with the integrity objective in information security is that data is modified only by authorized personnel. This reinforces the idea that maintaining data integrity is fundamentally about controlling who can interact with the data and making sure that those interactions are valid.