Which scenario best exemplifies confidentiality leakage?

• A. An attacker breaches the system via a zero-day vulnerability.
• B. An employee accidentally exposes a file due to misconfiguration.
• C. Malware encryption of files for ransom.
• D. Policy change restricts access.

Answer: (B)

Confidentiality leakage happens when sensitive information is exposed to someone who shouldn’t have access to it. The scenario where an employee accidentally exposes a file due to misconfiguration shows this most clearly: the data was private, but a mistake in how permissions were set allowed unintended people to see it, causing an unintended disclosure. The other options describe different security events that don’t illustrate unintended exposure as directly: a zero-day breach is an attacker gaining access through a vulnerability, ransomware encrypts data making it unreadable rather than shared, and a policy change that tightens access reduces leakage rather than causing it.