Which of the following actions can lead to a data breach?

• A. Implementing strong access controls
• B. Neglecting security updates
• C. Using encryption for data transmission
• D. Conducting regular security audits

Answer: (B)

Neglecting security updates can lead to a data breach because software and systems often have vulnerabilities that are discovered over time. When developers identify these weaknesses, they typically release patches or updates to fix them. If these updates are not applied, it leaves systems exposed to exploitation by attackers who can take advantage of known vulnerabilities. Outdated software might have unaddressed security flaws that could be exploited, allowing unauthorized access to sensitive data, thereby increasing the risk of a data breach.

In contrast, implementing strong access controls, using encryption for data transmission, and conducting regular security audits are practices designed to enhance security. Strong access controls limit who can access sensitive information, encryption protects data in transit, and regular audits help identify potential vulnerabilities before they can be exploited. These actions are proactive measures that help prevent data breaches rather than contribute to them.