Exam CCAK topic 1 question 7 discussion

Actual exam question from Isaca's CCAK

Question #: 7
Topic #: 1

After finding a vulnerability in an internet-facing server of an organization, a cybersecurity criminal is able to access an encrypted file system and successfully manages to overwrite part of some files with random data. In reference to the Top Threats Analysis methodology, how would you categorize the technical impact of this incident?

A. As an integrity breach
B. As control breach
C. As an availability breach
D. As a confidentiality breach

Show Suggested Answer

Suggested Answer: A 🗳️

by CyberE9 at Jan. 6, 2023, 7:28 p.m.

Comments

Submit Cancel

Auditor2020

3 months ago

Selected Answer: A

A. As an integrity breach In this scenario, the cybersecurity criminal has overwritten part of some files with random data. This action alters the data, compromising its accuracy and trustworthiness, which is a breach of data integrity. The integrity of a system refers to the correctness and reliability of the data, and unauthorized modification of data disrupts this integrity. Therefore, the most appropriate categorization for the technical impact is an integrity breach.

upvoted 1 times

...

1 year, 11 months ago

As per Top Threat Analysis page 237, this looks like an integrity breach (accessing the encrypted file system and tampering with content)

upvoted 4 times

...