Fundamentals of InfoSecadvanced
A company finds that users are being redirected to an attacker-controlled website after a name-to-address record was altered. Explain which CIA goal is directly compromised and how the incident could also lead to another CIA failure.
Answer
Integrity is directly compromised because the name-to-address record was altered without authorization. The redirection can cause users to download malicious files or disclose sensitive information, which may lead to further integrity or confidentiality failures. The attacker-controlled destination can distribute malware that changes data or captures private information. Controls may include restricting access to relevant systems, checking the integrity of downloaded code, and maintaining recoverable backups.
Explanation
### Why this is right
The record no longer provides the expected mapping because an attacker changed it, so the integrity of the naming information has been compromised. The redirection can then expose users to malicious content, creating additional risks such as unauthorized disclosure or further data modification.
### The concept
**Integrity** concerns whether information is accurate and changed only through authorized actions. A **Domain Name System** record maps a human-readable website name to an Internet Protocol address used to reach a network host. If an attacker replaces the expected address with one they control, users may be sent to the wrong server. The altered record is the direct integrity failure. What happens next depends on the attacker's actions: a malicious download can change a victim's system, while a deceptive site may collect confidential information. This illustrates how one security failure can contribute to others. Limiting administrative access and checking downloaded code can reduce the risk, while backups can help restore affected data.
### What a good answer covers
- Identifies integrity as the direct goal affected by an unauthorized record change.
- Explains how redirection can enable a further confidentiality or integrity failure.
- Gives a relevant control, such as restricted access, integrity checking, or recoverable backups.
### Terms
- **Domain Name System**: A naming system that helps translate website names into network addresses.
- **Internet Protocol address**: A numerical address used to identify a device or host on a network.
- **Integrity**: The property that information is accurate and changed only as authorized.
- **Confidentiality**: Protection from unauthorized access or disclosure.
### Remember
An altered record is an integrity problem first; follow the consequences to identify any additional goal at risk.
Related Questions
- Explain why computer security is described as a process rather than a product. Include the roles of technology, people, and environment.(intermediate)
- Select ALL items the review identifies as possible security risks or losses.(intermediate)
- Arrange these broad security activities in a sensible cycle, beginning with identifying what needs protection.(intermediate)
- A security product can replace the continuing work of managing people, technology, and the operating environment.(intermediate)
- Which statement best captures the course review’s view of computer security?(intermediate)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free