shieldCISSP Practice Domain 1 — Security and Risk Management Q1 of 120

Which element of the CIA triad is most directly violated when an attacker performs a successful man-in-the-middle attack and modifies messages in transit?

A CISSP practice question covering Domain 1: Security and Risk Management. Try answering before reading the explanation below.

Show options & answer
A
Confidentiality
B
Integrity
✓ Correct answer
C
Availability
D
Authentication
Why "Integrity" is the right answer

Modifying messages in transit alters the data, which is a direct violation of integrity. Confidentiality could be a secondary concern if the attacker also reads the data, but the defining violation when content is changed is integrity. Authentication is not part of the CIA triad.

Study videos for this topic

Want to go deeper on Domain 1? Watch the full breakdown — every video is free, no account, no upsell.

Take the full CISSP practice test
120 questions, instant explanations, study-video links on every miss. No account.
Start full test →