What characterizes an attack that attempts to compromise system availability?

• A. Social engineering tactics
• B. The use of encryption
• C. Malicious software and physical destruction
• D. Unauthorized disclosure of information

Answer: (C)

An attack that attempts to compromise system availability is characterized primarily by actions that disrupt or deny access to services or data, often through malicious means. The correct choice highlights that these attacks can manifest as the deployment of malicious software or through physical destruction, which both aim to incapacitate systems and make it difficult or impossible for users or systems to access necessary resources.

Malicious software, such as ransomware, can encrypt files and demand payment for their release, effectively making them unavailable to users. Similarly, physical destruction, such as damaging hardware or infrastructure, directly impairs the ability of a system to function. These tactics are specifically geared toward hindering the normal operations of an IT environment, thereby impacting availability.

In contrast, social engineering tactics primarily focus on manipulating individuals to gain information or access, which may not directly disrupt service availability. The use of encryption serves to protect data rather than compromise availability, and unauthorized disclosure of information involves exposing sensitive information without consent, which aligns more with confidentiality breaches. Thus, the emphasis on malicious software and physical destruction clearly defines the nature of attacks aimed at compromising system availability.