CIA triad · Question 11 of 12
Ransomware encrypts a company's file servers and first downloads customer data in order to threaten publication. Which security objectives are violated?
3 answers are correct. Hard
Show answer
Answer
- A Availability, because the files can no longer be used
- C Confidentiality, because customer data has been exfiltrated
- E Integrity, because the files were changed without authorization
Explanation
Modern ransomware usually attacks several objectives at once. Encryption changes data without authorization (integrity) and makes it unusable (availability). The prior data theft violates confidentiality – and even a good backup does not help against that. Non-repudiation concerns attributing one's own actions, not the identity of attackers.