Which action best supports Availability in information security?

Which action best supports Availability in information security?

• A. Maintaining regular backups and redundant systems.
• B. Disabling backups and relying on a single storage.
• C. Ignoring uptime metrics.
• D. Only encrypting data, not backing up.

Answer: (A)

Availability in information security is about ensuring information and services are accessible when needed, even during failures or outages. Maintaining regular backups and redundant systems directly supports this by enabling quick recovery and continuous service. Backups give you a restore point if data is lost, corrupted, or compromised, so operations can resume with minimal downtime. Redundant systems, such as duplicate servers or storage, provide failover so a single component failure doesn’t bring everything down. The other approaches miss the mark for ensuring availability: relying on a single storage creates a single point of failure that can cause immediate downtime if that storage fails; ignoring uptime metrics means you won’t detect or address reliability issues that could lead to outages; encrypting data without backing it up protects confidentiality but doesn’t guarantee data accessibility if the primary data is lost, corrupted, or requires recovery after an incident.

Availability in information security is about ensuring information and services are accessible when needed, even during failures or outages. Maintaining regular backups and redundant systems directly supports this by enabling quick recovery and continuous service. Backups give you a restore point if data is lost, corrupted, or compromised, so operations can resume with minimal downtime. Redundant systems, such as duplicate servers or storage, provide failover so a single component failure doesn’t bring everything down.

The other approaches miss the mark for ensuring availability: relying on a single storage creates a single point of failure that can cause immediate downtime if that storage fails; ignoring uptime metrics means you won’t detect or address reliability issues that could lead to outages; encrypting data without backing it up protects confidentiality but doesn’t guarantee data accessibility if the primary data is lost, corrupted, or requires recovery after an incident.