200-201 · Question #388
A vulnerability is discovered on a network. If successfully exploited, it will completely remove the ability of the system to limit disclosure of information to an unauthorized user. Which concept…
The correct answer is D. confidentiality, high. The vulnerability describes a high impact on confidentiality, as it completely removes the system's ability to prevent unauthorized disclosure of information.
Question
A vulnerability is discovered on a network. If successfully exploited, it will completely remove the ability of the system to limit disclosure of information to an unauthorized user. Which concept and value describes this vulnerability?
Options
- Aconfidentiality, none
- Bavailability, none
- Cavailability, high
- Dconfidentiality, high
How the community answered
(31 responses)- A10% (3)
- B3% (1)
- C3% (1)
- D84% (26)
Why each option
The vulnerability describes a high impact on confidentiality, as it completely removes the system's ability to prevent unauthorized disclosure of information.
While it relates to confidentiality, the impact is described as 'completely removing the ability to limit disclosure,' which implies a high impact, not 'none.'
Availability refers to the ability of authorized users to access information and systems when needed, which is not the primary impact described.
Availability is not the correct concept, as the vulnerability deals with unauthorized disclosure of information, not the system's ability to remain accessible.
This vulnerability directly affects the 'confidentiality' aspect of the CIA triad (Confidentiality, Integrity, Availability) because it concerns the disclosure of information to unauthorized users. Since it will 'completely remove the ability of the system to limit disclosure,' this indicates a significant, or 'high,' impact on confidentiality, meaning sensitive data could be fully exposed.
Concept tested: CIA Triad - Confidentiality impact
Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/confidentiality-integrity-availability
Topics
Community Discussion
No community discussion yet for this question.