(ISC)2 Certified in Cybersecurity Practice Exam

What constitutes an intrusion in cybersecurity?

1. An authorized user accessing a system

2. A security event leading to a software update

3. An unauthorized attempt to gain access to a system

4. A scheduled maintenance operation

The correct answer is: An unauthorized attempt to gain access to a system

An intrusion in cybersecurity is best defined as an unauthorized attempt to gain access to a system. This concept is critical as it encompasses activities where individuals or entities try to exploit vulnerabilities in a system to compromise its confidentiality, integrity, or availability. Intrusions can include various malicious actions such as hacking, unauthorized data access, or attempts to manipulate system resources without permission. The other options represent activities that do not constitute intrusions. When an authorized user accesses a system, they are following the appropriate protocols, thereby ensuring the security of the system is maintained. A security event leading to a software update usually involves routine maintenance or preventive measures taken to enhance system security based on detected vulnerabilities, not an intrusion. Likewise, a scheduled maintenance operation is a planned activity carried out by authorized personnel to ensure systems operate correctly and securely, without any unauthorized access or malicious intent. Understanding the clear differences between these activities and intrusions is vital for anyone studying cybersecurity practices.