Study. uk . com
  1. Home
  2. All questions
  3. Question 170

CISSP study material · question 170 of 500

An analyst records that confidentiality was lost when an attacker altered records in place without reading them. Under FIPS 199, how should this be classified?

  1. A loss of availability, since the original records no longer exist.
  2. A loss of integrity, since integrity is lost by unauthorised modification or destruction.
  3. A loss of all three objectives, since any breach affects each in turn.
  4. A loss of confidentiality, since the attacker had unauthorised access.
Show the answer

Answer: B. A loss of integrity, since integrity is lost by unauthorised modification or destruction.

FIPS 199 defines loss of confidentiality as unauthorised disclosure, loss of integrity as unauthorised modification or destruction, and loss of availability as disruption of access or use.

Source: NIST FIPS 199 (NIST) — FIPS 199 > Security Objectives

Challenge yourself on this topic → Study as cards