Guided Tour of the Simulated Environment — The CIA Triad in Action
Objective
By the end of this lab, you will be able to identify the three pillars of the CIA Triad — Confidentiality, Integrity, and Availability — and explain which one is at stake in a real security situation.
Scenario
Northgate Family Clinic is a small outpatient clinic with 12 staff. You've just joined as their first-ever IT/security support person. Before touching any systems, the office manager asks you a simple question: "What exactly are we trying to protect, and from what?" This lab is your first walkthrough of their environment to answer that question.
Technical Background
Every security decision, from a $150 course to a Fortune 500 SOC, comes back to three goals known as the CIA Triad: Confidentiality (only authorized people can see the data), Integrity (the data is accurate and unaltered), and Availability (the data and systems are accessible when needed). Nearly every attack, control, and policy you'll learn in this course exists to protect one or more of these three things.
Environment
You have access to a simulated terminal below representing Northgate Clinic's internal security briefing tool. It is read-only and safe to explore freely — nothing you type here affects a real system.
Instructions
Why This Matters
Before you can secure anything, you have to know what you're protecting (assets), and which of the three CIA goals matters most for each one. This is the very first question any real security analyst, SOC tier-1, or IT consultant asks on day one of a new job.
Expected Result
After running all four commands, you should be able to name Northgate's key digital assets and explain, for each one, whether confidentiality, integrity, or availability is the biggest concern.
Verification
The progress bar above reaches 100% once you've run all four commands. That unlocks the question below.
Task B — Verification & Analysis
Explore all 4 commands above to unlock this question.
Which principle of the CIA Triad is most directly at risk if Northgate's appointment scheduling system goes down for a full day?
Task C — Applied Technical Scenario
Answer Task B correctly to unlock this question.
In 2–3 sentences: explain why patient records at Northgate need strong confidentiality controls, and why their integrity matters just as much. Use a specific example from the clinic.
Troubleshooting
If a command shows "not recognized," check your spelling — the briefing tool only responds to the four exact commands listed above. This mirrors real command-line tools: precision matters.
Screenshot / Evidence Checkpoints
- Capture a screenshot showing the terminal with all 4 commands explored (progress bar at 100%).
- Capture a screenshot showing "Correct" feedback on Task B.
- Both screenshots must show your answer text or selection clearly visible — this is your evidence the task was actually completed, not just viewed.
Student Technical Notes
Analysis Questions
- Which of Northgate's assets, if any, requires all three CIA principles equally?
- Can you think of a control (technical or procedural) that protects more than one CIA principle at once?
Technical Report Material
Save your Task C answer — you'll reuse this "asset → CIA principle" mapping as the foundation of your Week 24 capstone security plan.
Conclusion
Summarize in your notes: what is the CIA Triad, and why does every security control eventually trace back to protecting one of its three goals?