Certified Incident Handler (CIH) Practice Ecam

What type of incident might involve malicious files being downloaded from untrusted sources?

1. Injection attack

2. Software and data integrity failure

3. DDoS attack

4. Data breach

The correct answer is: Software and data integrity failure

The type of incident that involves malicious files being downloaded from untrusted sources falls under software and data integrity failure. This can occur when users unknowingly download files that are compromised or contain malware, which may then alter the functionality of legitimate software or even corrupt data. Such incidents can lead to a range of security issues, including unauthorized access to systems, loss of data, and the potential for further compromise of the network. Integrity failures focus on the trustworthiness of data and software, emphasizing that any alteration or corruption from malicious files directly impacts their reliability. In contrast, injection attacks mainly involve inserting harmful code into a program or command, DDoS attacks center on overwhelming a service with traffic, and data breaches entail unauthorized access to confidential information. None of these specifically address the act of downloading untrusted files and the subsequent integrity issues that arise from it.