WGU C845 INFORMATION
SYSTEMS SECURITY EXAM
QUESTIONS WITH CORRECT
SOLUTIONS||100% GUARANTEED
PASS||UPDATED 2026/2027
SYLLABUS||RECENT VERSION>>
3DES, Triple DES - ANSWER ✓ A symmetric encryption algorithm that uses
either two (key 1 and key 3are the same) or three keys and improves upon the Data
Encryption Standard algorithm.
Advanced Encryption Standard (AES) - ANSWER ✓ A symmetric block
algorithm selected by NIST to be used as a standard by the U.S. government.
asymmetric algorithm - ANSWER ✓ The cryptographic algorithm that requires
two separate keys; one is secret and the other public.
asymmetric encryption - ANSWER ✓ The process of using two keys, a public key
and a private key, to encrypt and decrypt messages.
certificate authority (CA) - ANSWER ✓ A trusted entity that issues an X.509
certificate, which includes the certificate owner's public key. Through a trust
structure, the certificate is trusted as authentic as well as affirming or binding the
key to the owner.
ciphertext - ANSWER ✓ An encrypted version of plaintext.
compliance - ANSWER ✓ Accordance with the rules, regulations, or edicts of a
body such as a federal or state organization or as required by a contractual
relationship.
, cryptanalysis - ANSWER ✓ The exercising of techniques and methodology used
to defeat an encryption algorithm, break a password, or decrypt a message.
data in transit - ANSWER ✓ Any data in movement on a network or
telecommunications system.
Diffie-Hellman key exchange - ANSWER ✓ A method of key exchange by which
two parties numerically derive a common secret key based upon each party having
a secret and each party exchanging a public number.
digital certificate - ANSWER ✓ Electronic document based on the X.509
certificate format standard. A digital certificate is issued by a trusted certificate
authority and contains a public key. The purpose of a digital certificate is to
irrefutably bind the public key with the identity of the public key owner.
digital signature - ANSWER ✓ A method of signing a message by encrypting a
hash value of the message with a private key, thus providing irrefutable proof that
the sender sent the message and guaranteeing message integrity.
hash function - ANSWER ✓ A one-way function that produces a message digest
or hash value based on an input message.
initialization vector (IV) - ANSWER ✓ A non-secret set of random numbers used
to increase security by enhancing the cryptographic key.
Key encrypting key - ANSWER ✓ A symmetric key that is shared between the
two users. The symmetric key is used to encrypt a session key for exchange
between the two users prior to each communication session. The session key is
discarded at the end of each session, requiring anew session key to be exchanged.
The technique is sometimes referred to as key-wrapping.
Key escrow - ANSWER ✓ A location where duplicate keys are stored and may be
accessed in the event a primary key is lost or corrupted.
key space - ANSWER ✓ The total number of possible cryptographic keys that
may be produced based upon the overall key length in bits. For instance, if a key is
56 bits in length, the total number of possible keys would be 256. In cryptography,
,generally the longer the key length, the more effective the cryptographic algorithm,
and therefore the more secure the resulting cryptotext.
message digest - ANSWER ✓ The output of a hashing algorithm that is always an
established length based on the output specifications of the hashing algorithm.
Hashing algorithms produce a message digest or hash value of an established
length regardless of the length of the original message. The terms message digest
and hash value are synonymous.
nonrepudiation - ANSWER ✓ The concept that a sender cannot deny that they
sent a message.
patent - ANSWER ✓ The strongest form of protection for intellectual property.
Protects new, useful, and not-obvious creations.
plaintext - ANSWER ✓ The original version of the message in plain, easily
readable language.
primary storage - ANSWER ✓ The storage location in close proximity to the
CPU, such as random access memory.
private key - ANSWER ✓ A secret key that is one part of a public/private key pair
used during the process of encryption and decryption of a message in an
asymmetric algorithm public-key infrastructure system. A private key can decrypt
only messages encrypted by its counterpart public key. It may also be used to
encrypt messages, and only those messages may be decrypted by the counterpart
public key.
During what phase of the change management process does the organization
conduct peer review of the change for accuracy and completeness? - ANSWER ✓
Analysis/Impact Assessment
Steve is responsible for work stations that handle proprietary information. What is
the best option for these workstations at the end of their lifecycle? - ANSWER ✓
Sanitization
What is the earliest stage of a fire to use detection technology to identify it? -
ANSWER ✓ Incipient
, What security control would provide the best defense against a threat actor trying
to execute a buffer overflow attack against a custom application? - ANSWER ✓
Parameter Checking/Input Validation
Which of the following is NOT true of the ISC2 Code of Ethics?
A. Adherence to the Code of Ethics is a condition of Certification
B. The code of ethics applies to all security professionals
C. Failure to comply with the Code of Ethics could result in revocation of
certification
D. Members who observe a breach of the Code of Ethics are required to report the
possible violation - ANSWER ✓ B.
Under what type of software license does the recipient of software have an
unlimited right to copy, modify, distribute, or resell a software package? -
ANSWER ✓ Public Domain
What should Steve do if a FAR/FRR diagram does not provide an acceptable
performance level for his organization's needs? - ANSWER ✓ Assess other
biometric systems to compare them since the CER is used to assess biometric
devices.
What is the CER in biometric device measurment? - ANSWER ✓ Crossover Error
Rate is the number that results when a biometric device is adjusted to provide
equal false acceptance and false rejection rates.
What type of access control would be the best choice for a person that would like
to support a declaration like "Only allow access to customer service on managed
devices on the wireless network between 8 am and 7 pm"? - ANSWER ✓ Attribute
Based Access Control ABAC
What is the benefit of an ABAC over a RBAC? - ANSWER ✓ An ABAC can be
more specific thus more flexible
What is the primary advantage of decentralized access control? - ANSWER ✓ It
provides control of access to people closer to the resources
SYSTEMS SECURITY EXAM
QUESTIONS WITH CORRECT
SOLUTIONS||100% GUARANTEED
PASS||UPDATED 2026/2027
SYLLABUS||RECENT VERSION>>
3DES, Triple DES - ANSWER ✓ A symmetric encryption algorithm that uses
either two (key 1 and key 3are the same) or three keys and improves upon the Data
Encryption Standard algorithm.
Advanced Encryption Standard (AES) - ANSWER ✓ A symmetric block
algorithm selected by NIST to be used as a standard by the U.S. government.
asymmetric algorithm - ANSWER ✓ The cryptographic algorithm that requires
two separate keys; one is secret and the other public.
asymmetric encryption - ANSWER ✓ The process of using two keys, a public key
and a private key, to encrypt and decrypt messages.
certificate authority (CA) - ANSWER ✓ A trusted entity that issues an X.509
certificate, which includes the certificate owner's public key. Through a trust
structure, the certificate is trusted as authentic as well as affirming or binding the
key to the owner.
ciphertext - ANSWER ✓ An encrypted version of plaintext.
compliance - ANSWER ✓ Accordance with the rules, regulations, or edicts of a
body such as a federal or state organization or as required by a contractual
relationship.
, cryptanalysis - ANSWER ✓ The exercising of techniques and methodology used
to defeat an encryption algorithm, break a password, or decrypt a message.
data in transit - ANSWER ✓ Any data in movement on a network or
telecommunications system.
Diffie-Hellman key exchange - ANSWER ✓ A method of key exchange by which
two parties numerically derive a common secret key based upon each party having
a secret and each party exchanging a public number.
digital certificate - ANSWER ✓ Electronic document based on the X.509
certificate format standard. A digital certificate is issued by a trusted certificate
authority and contains a public key. The purpose of a digital certificate is to
irrefutably bind the public key with the identity of the public key owner.
digital signature - ANSWER ✓ A method of signing a message by encrypting a
hash value of the message with a private key, thus providing irrefutable proof that
the sender sent the message and guaranteeing message integrity.
hash function - ANSWER ✓ A one-way function that produces a message digest
or hash value based on an input message.
initialization vector (IV) - ANSWER ✓ A non-secret set of random numbers used
to increase security by enhancing the cryptographic key.
Key encrypting key - ANSWER ✓ A symmetric key that is shared between the
two users. The symmetric key is used to encrypt a session key for exchange
between the two users prior to each communication session. The session key is
discarded at the end of each session, requiring anew session key to be exchanged.
The technique is sometimes referred to as key-wrapping.
Key escrow - ANSWER ✓ A location where duplicate keys are stored and may be
accessed in the event a primary key is lost or corrupted.
key space - ANSWER ✓ The total number of possible cryptographic keys that
may be produced based upon the overall key length in bits. For instance, if a key is
56 bits in length, the total number of possible keys would be 256. In cryptography,
,generally the longer the key length, the more effective the cryptographic algorithm,
and therefore the more secure the resulting cryptotext.
message digest - ANSWER ✓ The output of a hashing algorithm that is always an
established length based on the output specifications of the hashing algorithm.
Hashing algorithms produce a message digest or hash value of an established
length regardless of the length of the original message. The terms message digest
and hash value are synonymous.
nonrepudiation - ANSWER ✓ The concept that a sender cannot deny that they
sent a message.
patent - ANSWER ✓ The strongest form of protection for intellectual property.
Protects new, useful, and not-obvious creations.
plaintext - ANSWER ✓ The original version of the message in plain, easily
readable language.
primary storage - ANSWER ✓ The storage location in close proximity to the
CPU, such as random access memory.
private key - ANSWER ✓ A secret key that is one part of a public/private key pair
used during the process of encryption and decryption of a message in an
asymmetric algorithm public-key infrastructure system. A private key can decrypt
only messages encrypted by its counterpart public key. It may also be used to
encrypt messages, and only those messages may be decrypted by the counterpart
public key.
During what phase of the change management process does the organization
conduct peer review of the change for accuracy and completeness? - ANSWER ✓
Analysis/Impact Assessment
Steve is responsible for work stations that handle proprietary information. What is
the best option for these workstations at the end of their lifecycle? - ANSWER ✓
Sanitization
What is the earliest stage of a fire to use detection technology to identify it? -
ANSWER ✓ Incipient
, What security control would provide the best defense against a threat actor trying
to execute a buffer overflow attack against a custom application? - ANSWER ✓
Parameter Checking/Input Validation
Which of the following is NOT true of the ISC2 Code of Ethics?
A. Adherence to the Code of Ethics is a condition of Certification
B. The code of ethics applies to all security professionals
C. Failure to comply with the Code of Ethics could result in revocation of
certification
D. Members who observe a breach of the Code of Ethics are required to report the
possible violation - ANSWER ✓ B.
Under what type of software license does the recipient of software have an
unlimited right to copy, modify, distribute, or resell a software package? -
ANSWER ✓ Public Domain
What should Steve do if a FAR/FRR diagram does not provide an acceptable
performance level for his organization's needs? - ANSWER ✓ Assess other
biometric systems to compare them since the CER is used to assess biometric
devices.
What is the CER in biometric device measurment? - ANSWER ✓ Crossover Error
Rate is the number that results when a biometric device is adjusted to provide
equal false acceptance and false rejection rates.
What type of access control would be the best choice for a person that would like
to support a declaration like "Only allow access to customer service on managed
devices on the wireless network between 8 am and 7 pm"? - ANSWER ✓ Attribute
Based Access Control ABAC
What is the benefit of an ABAC over a RBAC? - ANSWER ✓ An ABAC can be
more specific thus more flexible
What is the primary advantage of decentralized access control? - ANSWER ✓ It
provides control of access to people closer to the resources
