What type of attack compromises the availability of an asset or business process?

What type of attack compromises the availability of an asset or business process?

• A. Service disruption
• B. Data exfiltration
• C. Fraud
• D. Extortion

Answer: (A)

Availability means that assets and business processes are accessible to authorized users when needed. An attack that makes a service unavailable or unusable directly targets that availability. Denial-of-service and distributed denial-of-service attacks overwhelm resources or disrupt connectivity, causing outages or severe slowdowns, which is exactly what compromises availability. Data exfiltration focuses on unauthorized access and extraction of information, affecting confidentiality. Fraud relates to deceiving or manipulating to gain something, often compromising integrity or trust. Extortion involves threats to cause harm or demand payment, which can include disrupt-and-pay scenarios, but the defining impact in this context is the direct loss of access to the service, i.e., service disruption. So the best answer is the service disruption type, since it centers on making the asset or process unavailable.

Availability means that assets and business processes are accessible to authorized users when needed. An attack that makes a service unavailable or unusable directly targets that availability. Denial-of-service and distributed denial-of-service attacks overwhelm resources or disrupt connectivity, causing outages or severe slowdowns, which is exactly what compromises availability.

Data exfiltration focuses on unauthorized access and extraction of information, affecting confidentiality. Fraud relates to deceiving or manipulating to gain something, often compromising integrity or trust. Extortion involves threats to cause harm or demand payment, which can include disrupt-and-pay scenarios, but the defining impact in this context is the direct loss of access to the service, i.e., service disruption.

So the best answer is the service disruption type, since it centers on making the asset or process unavailable.