Fundamentals of InfoSecintermediate
An attacker changes a stored record without permission. Which attack category most directly describes the action?
Answer
Tampering
Explanation
### Why this is right
Changing a record without permission is tampering because the action alters data. The security goal most directly affected is integrity, which concerns protection against unauthorized or undetected changes.
### The concept
Attack categories describe what an action does. Alteration points to tampering, while exposing data points to information disclosure and blocking access points to denial of service.
### The other options
- **B. Information disclosure**: This is exposure of information, not alteration of a record.
- **C. Denial of service**: This disrupts access to a system or service rather than changing the record.
- **D. Repudiation**: This involves denying an action or transaction, not carrying out an unauthorized change.
### Terms
- **Integrity**: The property of data remaining accurate and changed only through authorized actions.
### Remember
Unauthorized changes are an integrity problem and are commonly described as tampering.
Related Questions
- Explain why computer security is described as a process rather than a product. Include the roles of technology, people, and environment.(intermediate)
- Select ALL items the review identifies as possible security risks or losses.(intermediate)
- Arrange these broad security activities in a sensible cycle, beginning with identifying what needs protection.(intermediate)
- A security product can replace the continuing work of managing people, technology, and the operating environment.(intermediate)
- Which statement best captures the course review’s view of computer security?(intermediate)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free