Certified Information Systems Security Professional (CISSP) — Question 414

A criminal organization is planning an attack on a government network. Which of the following scenarios presents the HIGHEST risk to the organization?

Answer options

• A. Organization loses control of their network devices.
• B. Network is flooded with communication traffic by the attacker.
• C. Network management communications is disrupted.
• D. Attacker accesses sensitive information regarding the network topology.

Correct answer: A

Explanation

The correct answer is A because losing control of network devices can lead to the complete compromise of the network, allowing attackers to manipulate or disrupt operations extensively. While flooding traffic (B) and disrupting management communications (C) are serious, they do not equate to the loss of control over the devices themselves. Accessing sensitive information (D) is also critical, but it does not directly lead to an operational threat as the loss of control does.