CCAK: Certificate of Cloud Auditing Knowledge

By Isaca · Question Mode

QuestionQ15

VerifiedA Threat Analysis Methodology for Cloud Using CCM

After discovering a vulnerability in an organization's Internet-facing server, a cybersecurity criminal gains access to an encrypted file system and successfully overwrites parts of some files with random data.

Under the Top Threats Analysis methodology, how would the technical impact of this incident be categorized?

Explanation

Overwriting parts of files with random data is an unauthorized modification that compromises their integrity. Encryption does not, by itself, establish that file contents cannot be altered. (csrc.nist.gov)

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!