CompTIA CySA+ Practice Test

The event of an employee leaving a personal device containing sensitive corporate data in a taxi is best described as a data breach. A data breach refers to the unauthorized access, acquisition, or disclosure of sensitive information, which can occur through various means, including lost or stolen devices. In this scenario, the sensitive corporate data could potentially be accessed by unauthorized individuals if the taxi driver or future passengers could access the device.

While failed deperimeterization management and failed data loss prevention are important concepts, they describe broader issues related to security protocols and the effectiveness of data protection mechanisms rather than a specific incident involving lost data. An advanced persistent threat typically refers to a prolonged and targeted cyberattack, which does not apply to the situation of a lost device.

Overall, the event focuses precisely on the risk of exposure and unauthorized access to sensitive information, characterizing it unmistakably as a data breach.