(ISC)2 Certified in Cybersecurity Practice Exam

Which of the following describes a situation in which a threat actor gains unauthorized access to data?

1. Data Breach

2. Data Encryption

3. Data Loss

4. Data Leakage

The correct answer is: Data Breach

A data breach is characterized by a situation where a threat actor gains unauthorized access to sensitive information. This can involve accessing, copying, or stealing data without permission, typically exploiting vulnerabilities in a system or network. Data breaches can have significant implications for organizations, including financial losses, reputational damage, and potential legal consequences. In contrast, data encryption refers to the process of converting information into a code to prevent unauthorized access, thereby protecting the data rather than describing a situation of unauthorized access. Data loss denotes the unintentional loss of data, which does not necessarily involve malicious intent or unauthorized access by a threat actor. Data leakage, while it involves the unauthorized release of information, often refers to the unintentional exposure of data rather than a breach where direct access is gained by a malicious actor. Thus, a data breach specifically captures the act of an unauthorized party accessing protected data.