Examkin

Question

Difficulty: HardData Security and Threats in Accounting Systems

During a routine security review of an automated corporate accounting system, an auditor discovers that financial data transmitted between remote branch operations and the central ledger server was intercepted and modified in transit by an unauthorized entity. Which security threat was experienced in this scenario, and what primary control measure directly protects accounting data against such transit-level compromise?

  1. A
    A phishing attack, which is primarily mitigated by conducting periodic staff awareness training on email verification.
  2. B
    A ransomware infection, which is primarily mitigated by maintaining daily off-site database backups.
  3. A man-in-the-middle data interception attack, which is primarily mitigated by enforcing strong cryptographic network encryption protocols.Answer
  4. D
    A logic bomb vulnerability, which is primarily mitigated by implementing routine hard drive defragmentation schedules.

Answer

The threat experienced is a man-in-the-middle data interception attack, and the primary preventive control measure is enforcing strong cryptographic network encryption protocols.
Intercepting and altering active accounting data transmissions between remote branch terminals and central servers describes a man-in-the-middle network attack. Implementing cryptographic network encryption protocols protects data confidentiality and integrity by ensuring intercepted packets cannot be read or altered by unauthorized entities.

Step-by-Step Solution

1
Analyze the nature of the security incident described in the accounting system context.
The incident involves unauthorized interception and tampering of live financial records during network transit between remote terminals and the central server.
Identifying whether the threat target is user credentials, system files at rest, or active network transit determines the exact threat category.
2
Categorize the security threat.
Interception and manipulation of data packets while in movement across communications channels is classified as a man-in-the-middle (MitM) data interception attack.
Unlike static malware or social engineering, MitM specifically exploits unencrypted transit routes.
3
Determine the appropriate IT control measure to mitigate network data transit threats.
End-to-end network encryption protocols render intercepted data unreadable and tamper-evident to unauthorized third parties.
Encryption transforms plain financial data into unreadable ciphertext during transmission across public or private networks.

Key Concept

Data Security Threats and Network Controls in Computerized Accounting Systems
Rate this question

Topics

Data Security and Threats in Accounting Systems

More questions from this topic