Data integrity in CBM T6 is defined as data that is accurate, complete, consistent, and traceable. Which three controls support data integrity?

• A. Encryption, password rotation, and firewall rules.
• B. Access controls, audit trails, and validated backup/recovery processes.
• C. User profiling, screen savers, and random audits.
• D. Data masking, tokenization, and sandboxing.

Answer: (B)

Data integrity means data remains accurate, complete, consistent, and traceable over its lifecycle. To support this, you need controls that prevent unauthorized changes, provide a record of what happened and by whom, and ensure you can recover data to a known good state. Access controls limit who can create, modify, or delete data, reducing opportunities for tampering or errors. Audit trails capture details of changes—who made them, what changed, and when—so you have traceability and accountability. Validated backup and recovery processes ensure data can be restored to a reliable state after incidents, preserving completeness and accuracy.

Encryption, password rotation, and firewall rules protect confidentiality and system security rather than directly ensuring data integrity in terms of traceability and recoverability. Data masking, tokenization, and sandboxing focus on protecting sensitive data and safe testing environments rather than maintaining the integrity, traceability, and recoverability of data overall.