CGRC · Question #232
Disclosure of information to unauthorized persons, or a violation of the security policy of a system in which an unauthorized intentional or unintentional disclosure, modification, destruction, or…
The correct answer is A. Compromise. The provided definition describes a security event where information or a system's integrity is breached through unauthorized access, disclosure, modification, destruction, or loss. This exact scenario is commonly referred to as a compromise in cybersecurity.
Question
Disclosure of information to unauthorized persons, or a violation of the security policy of a system in which an unauthorized intentional or unintentional disclosure, modification, destruction, or loss of an object may have occurred. Response:
Options
- ACompromise
- BContingency
- CConfiguration
- DContinuity
How the community answered
(23 responses)- A91% (21)
- C4% (1)
- D4% (1)
Why each option
The provided definition describes a security event where information or a system's integrity is breached through unauthorized access, disclosure, modification, destruction, or loss. This exact scenario is commonly referred to as a compromise in cybersecurity.
A 'compromise' refers to a security incident where an unauthorized party gains access to information or a system, leading to a violation of the security policy, often involving disclosure, modification, destruction, or loss of data. This aligns perfectly with the definition given, indicating a breach of security.
'Contingency' refers to a plan for an unforeseen event or emergency, not the event itself or a security breach.
'Configuration' refers to the specific setup of a system or software, not a security incident.
'Continuity' refers to maintaining ongoing operations during and after a disruption, focusing on resilience, not the incident of unauthorized disclosure.
Concept tested: Definition of system compromise
Source: https://csrc.nist.gov/glossary/term/compromise
Topics
Community Discussion
No community discussion yet for this question.