WGU D489 TASK 1 | CYBERSECURITY MANAGEMENT | 2026 UPDATE WITH COMPLETE SOLUTION

WGU D489 TASK 1 | CYBERSECURITY MANAGEMENT | 2026 UPDATE WITH COMPLETE SOLUTION What are the three distinct groups of managers and professionals, or communities of interest? - (ANSWER) • Those in the field of information security • Those in the field of IT • Those from the rest of the organization What does the information security community do? - (ANSWER) They protect the organization's information assets from the many threats they face What does the IT community do? - (ANSWER) They support the business objectives of the organization by supplying and supporting IT that is appropriate to the organization's needs What does the general business community do? - (ANSWER) They articulate and communicate organizational policy and objectives and allocates resources to the other groups What does security mean? - (ANSWER) Being free from danger and protected from the risk of loss, damage, unwanted modification, and other hazards Security is often achieved by doing what? - (ANSWER) Creating several strategies undertaken simultaneously or used in combination with one another What are the specialized areas of security? - (ANSWER) • Physical security • Operations security • Communications security • Cyber (or computer) security • Network security What does information security focus on? - (ANSWER) The protection of information and the characteristics that give it value, such as confidentiality, integrity, and availability, and includes the technology that houses and transfers that information through a variety of protection mechanisms such as policy, training and awareness programs, and technology What is another name for the NSTISSI (or CNSS) Security Model? - (ANSWER) The McCumber Cube What does the C.I.A triad stand for? - (ANSWER) Confidentiality, integrity, and availability What is confidentiality? - (ANSWER) An attribute of information that describes how data is protected from disclosure or exposure to unauthorized individuals or systems How do you protect the confidentiality of information? - (ANSWER) • Information classification • Secure document (and data) storage • Application of general security policies • Education of information custodians and end users • Cryptography (encryption) What is integrity? - (ANSWER) An attribute of information that describes how data is whole, complete, and uncorrupted How can corruption of information occur? - (ANSWER) While being entered, stored, or transmitted What is availability? - (ANSWER) An attribute of information that describes how data is accessible and correctly formatted for use without interference or obstruction What does availability NOT mean? - (ANSWER) Information is accessible to any user What is privacy? - (ANSWER) The right of individuals or groups to protect themselves and their information from unauthorized access, providing confidentiality What does privacy NOT mean? - (ANSWER) Freedom from observation What is information aggregation? - (ANSWER) To collect and combine personal information from several different sources What is identification? - (ANSWER) The access control mechanism where by unverified entities who seek access to a resource provide a label by which they are known to the system What are examples of identification? - (ANSWER) Usernames, User ID's, etc. What is authentication? - (ANSWER) The access control mechanism that requires the validation and verification of an unauthenticated entity's purported identity What are examples of authentication? - (ANSWER) Personal identification number(PIN), a password, or a passphrase What is authorization? - (ANSWER) The access control mechanism that represents the matching of an authenticated entity to a list of information assets and corresponding access levels How does authorization affect what a user can do? - (ANSWER) It can explicitly permit authority such as accessing, modifying, or deleting the contents of an information asset What is accountability? - (ANSWER) The access control mechanism that ensures allocations on a system—authorized or unauthorized—can be attributed to an authenticated identity What is accountability also known as? - (ANSWER) Auditability What is accountability most commonly associated with? - (ANSWER) System audit logs To protect an organization what must you do? - (ANSWER) Know yourself and know your enemy What is a threat? - (ANSWER) A potential risk to an information asset What is an attack or threat event? QUIZ QUESTION - (ANSWER) An ongoing act against the asset that could result in a loss What do threat agents do? - (ANSWER) Damage or steal an organization's information or physical assets by using exploits to take advantage of a vulnerability where controls are not present or no longer effective Attack - (ANSWER) An intentional or unintentional act that can damage or otherwise compromise information and the systems that support it Exploit - (ANSWER) A technique used to compromise a system... Threat agents may attempt to exploit a system or other information asset by using it illegally for their personal gain Vulnerability - (ANSWER) Potential weakness in an asset or its defensive control system(s) Compromises to intellectual property - (ANSWER) Piracy, copyright infringement Deviations in quality of service - (ANSWER) Internet service providers (ISP), power, or WAN service problems Espionage or trespass - (ANSWER) Unauthorized access or data collection Forces of nature - (ANSWER) Fire, floods, earthquakes, lightning Human error or failure - (ANSWER) Accidents, employee mistakes Information extortion - (ANSWER) Blackmail, information disclosure Sabotage or vandalism - (ANSWER) Destruction of systems or information Software attacks - (ANSWER) Viruses, worms, macros, denial of service Technical hardware failures or errors - (ANSWER) Equipment failure Technical software failures or errors - (ANSWER) Bugs, code problems, unknown loopholes Technological obsolescence - (ANSWER) Antiquated or outdated technologies Theft - (ANSWER) Illegal confiscation or equipment or information What is intellectual property? - (ANSWER) Trade secrets, copyrights, trademarks, and patents True or false: Is Intellectual property protected by laws? - (ANSWER) True What are IP categories? - (ANSWER) • Software piracy • Copyright protection and user registration What does deviations in quality of service constitute? - (ANSWER) Successful operation of many interdependent support systems What are subcategories in the deviations of quality of service? - (ANSWER) • Internet service issues • Communications and other service provider issues • Power irregularities What is industrial espionage? - (ANSWER) When information gatherers employ techniques that cross a legal or ethical threshold, True or false: Is password cracking considered espionage or trespassing? - (ANSWER) True What are other types of password cracking? - (ANSWER) • Brute force attack • Dictionary password attack • Rainbow tables • Social engineering password attack What is force majeure or "superior force"? - (ANSWER) Forces of nature as well as civil disorder and acts of war One of the greatest threats to an organization's information security is ___________. - (ANSWER) Its own employees