• Wrong document? Swap it for free
  • Written by students who passed
  • Immediately available after payment
  • Read online or as PDF
Sell
Where do you study
Your language
Document preview thumbnail
Preview 4 out of 36 pages
Exam (elaborations)

WGU D430 Fundamentals of Information Security 2026 (250+ Key Concepts & Exam Questions) – Western Governors University – CIA Triad, Access Control, Cryptography, Network Security & Compliance Review

Document preview thumbnail
Preview 4 out of 36 pages

This comprehensive study guide contains more than 250 expertly verified definitions, exam-style questions, and core cybersecurity concepts for WGU D430 Fundamentals of Information Security (2026). The material thoroughly covers foundational information security principles including the CIA triad (confidentiality, integrity, availability), the Parkerian Hexad (possession/control, authenticity, utility), types of attacks (interception, interruption, modification, fabrication), and structured risk management processes (asset identification, threat analysis, vulnerability assessment, risk mitigation). The document also provides detailed explanations of the incident response lifecycle, defense-in-depth strategy, and control categories (physical, technical/logical, administrative). The guide delivers in-depth coverage of identity and access management, including authentication methods (single-factor, dual-factor, multi-factor, mutual authentication), biometrics (universality, uniqueness, permanence, collectibility, performance, acceptability, circumvention), authorization principles, least privilege, ACLs, RBAC, ABAC, MAC, DAC, Bell-LaPadula, Biba, Brewer and Nash, multilevel access control, and accountability mechanisms such as auditing and nonrepudiation. Networking and infrastructure security are extensively addressed, including firewalls (packet filtering, stateful, deep packet inspection), IDS/IPS (signature-based and anomaly-based detection), network segmentation, VPNs, IPSEC, proxy servers, DMZ design, wireless security (WEP, WPA, WPA2), honeypots, port scanners, Nmap, Wireshark, TCPDump, HIDS, vulnerability assessment tools, and penetration testing methodologies. Cryptography is comprehensively explained, including symmetric and asymmetric encryption, block vs stream ciphers, AES, DES, 3DES, ECC, hash functions, digital signatures, certificates, SSL/TLS, and protections for data at rest, in motion, and in use. The document also addresses software and web application vulnerabilities such as buffer overflows, race conditions, SQL injection, XSS, CSRF, clickjacking, privilege escalation, arbitrary code execution, authentication and authorization attacks, and improper permission configurations. Regulatory and compliance frameworks are clearly integrated, including FISMA, FERPA, SOX, GLBA, HIPAA, HITECH, COPPA, PCI DSS, US Patriot Act, CAN-SPAM, E-FOIA, and CFAA, along with distinctions between regulatory and industry compliance. The structure aligns closely with standard cybersecurity curriculum texts such as Whitman & Mattord’s Principles of Information Security and supports WGU’s competency-based objective assessment format. The content is ideal for reinforcing conceptual mastery, scenario-based reasoning, and applied security analysis required for successful completion of the D430 course. This document is particularly suitable for students enrolled in: WGU D430 Fundamentals of Information Security WGU BS Cybersecurity and Information Assurance WGU BS Information Technology WGU Network Engineering and Security programs Entry-level cybersecurity certification preparation It is well suited for objective assessment preparation, structured revision sessions, competency reinforcement, and foundational cybersecurity mastery before progressing into advanced security coursework. Keywords: WGU D430 2026 exam review, fundamentals of information security WGU, CIA triad confidentiality integrity availability, Parkerian hexad possession authenticity utility, risk management process cybersecurity, incident response lifecycle phases, least privilege access control, Bell LaPadula Biba Brewer Nash models, multifactor authentication biometrics factors, network segmentation firewall IDS IPS, VPN IPSEC SSL TLS encryption, symmetric asymmetric cryptography AES DES 3DES ECC hashing, digital signatures certificates PKI, SQL injection XSS CSRF clickjacking, buffer overflow race condition vulnerabilities, compliance HIPAA FISMA SOX GLBA PCI DSS, regulatory vs industry compliance, vulnerability assessment penetration testing tools

Content preview

WGU D430 Fundamentals of
Information Security 2026
Expert Verified | Ace the Test



Information security - 🧠 ANSWER ✔✔Keeping data, software, and

hardware secure against unauthorized access, use, disclosure, disruption,

modification, or destruction.


Compliance - 🧠 ANSWER ✔✔The requirements that are set forth by laws

and industry regulations. Example : HIPPA/ HITECH- healthcare, PCI/DSS-

payment card industry, FISMA- federal government agencies

,CIA - 🧠 ANSWER ✔✔The core model of all information security.

Confidential, integrity and availability


Confidential - 🧠 ANSWER ✔✔Allowing only those authorized to access the

data requested


integrity - 🧠 ANSWER ✔✔Keeping data unaltered by accidental or

malicious intent


Availability - 🧠 ANSWER ✔✔The ability to access data when needed


Parkerian hexad model - 🧠 ANSWER ✔✔Confidentiality , integrity,

availability, possession/control, authenticity, utility


Possession/ control - 🧠 ANSWER ✔✔Refers to the physical disposition of

the media on which the data is stored


authenticity - 🧠 ANSWER ✔✔Allows us to talk about the proper attribution

as to the owner or creator of the data in question


Utility - 🧠 ANSWER ✔✔How useful the data is to us


Types of attacks - 🧠 ANSWER ✔✔1- interception


2- interruption

,3- modification

4- fabrication


Interception - 🧠 ANSWER ✔✔Attacks allows unauthorized users to access

our data, applications, or environments. Are primarily an attack against

confidentiality


Interruption - 🧠 ANSWER ✔✔Attacks cause our assets to become unstable

or unavailable for our use, on a temporary or permanent basis. This attack

affects availability but can also attack integrity


Modification - 🧠 ANSWER ✔✔Attacks involve tampering with our asset.

Such attacks might primarily be considered an integrity attack, but could

also be an availability attack.


Fabrication - 🧠 ANSWER ✔✔Attacks involve generating data, processes,

communications, or other similar activities with a system. Attacks primarily

affect integrity but can be considered an availability attack.


Risk - 🧠 ANSWER ✔✔The likelihood that a threat will occur. There must be

a threat and vulnerability




COPYRIGHT©NINJANERD 2025/2026. YEAR PUBLISHED 2026. COMPANY REGISTRATION NUMBER: 619652435. TERMS OF USE. PRIVACY
STATEMENT. ALL RIGHTS RESERVED
3

, Threat - 🧠 ANSWER ✔✔Any event being man-made, natural or

environmental that could damage the assets


Vulnerabilities - 🧠 ANSWER ✔✔Weakness that a threat event or the threat

can take advantage of


Impact - 🧠 ANSWER ✔✔taking into account the assets cost


Controls - 🧠 ANSWER ✔✔The ways we protect assets. Physical, technical/

logical, and administrative


Physical controls - 🧠 ANSWER ✔✔Controls are physical items that protect

assets. Think of locks, doors, guards and fences


Technical/ logical controls - 🧠 ANSWER ✔✔Controls are devices and

software that protect assets. Think of firewalls, av, ids, and ips


Administrative controls - 🧠 ANSWER ✔✔Controls are the policies that

organizations create for governance. Ex: email policies


risk mamagement - 🧠 ANSWER ✔✔A constant process as assets are

purchased, used and retired. The general steps are 1- identify assets

2- identify threats

Document information

Uploaded on
February 24, 2026
Number of pages
36
Written in
2025/2026
Type
Exam (elaborations)
Contains
Questions & answers
$15.99

Wrong document? Swap it for free Within 14 days of purchase and before downloading, you can choose a different document. You can simply spend the amount again.
Written by students who passed
Immediately available after payment
Read online or as PDF

Seller avatar
Reputation scores are based on the amount of documents a seller has sold for a fee and the reviews they have received for those documents. There are three levels: Bronze, Silver and Gold. The better the reputation, the more your can rely on the quality of the sellers work.
NinjaNerd
3.4
(79)
Sold
429
Followers
6
Items
16030
Last sold
2 days ago




Why students choose Stuvia

Created by fellow students, verified by reviews

Quality you can trust: written by students who passed their tests and reviewed by others who've used these notes.

Didn't get what you expected? Choose another document

No worries! You can instantly pick a different document that better fits what you're looking for.

Pay as you like, start learning right away

No subscription, no commitments. Pay the way you're used to via credit card and download your PDF document instantly.

Student with book image

“Bought, downloaded, and aced it. It really can be that simple.”

Alisha Student

Working on your references?

Create accurate citations in APA, MLA and Harvard with our free citation generator.

Working on your references?

Frequently asked questions