WGU D430 FUNDAMENTALS OF
INFORMATION SECURITY EXAM
QUESTIONS AND ANSWERS
Define8vthe8vconfidentiality8vin8vthe8vCIA8vtriad.8v-8vANSWERS--
Our8vability8vto8vprotect8vdata8vfrom8vthose8vwho8vare8vnot8vauthorized8vto8vview8vit.
Examples8vof8vconfidentiality8v-8vANSWERS--
A8vpatron8vusing8van8vATM8vcard8vwants8vto8vkeep8vtheir8vPIN8vnumber8vconfidential.8v
An8vATM8vowner8vwants8vto8vkeep8vbank8vaccount8vnumbers8vconfidential.
How8vcan8vconfidentiality8vbe8vbroken?8v-8vANSWERS--Losing8va8vlaptop
An8vattacker8vgets8vaccess8vto8vinfo
A8vperson8vcan8vlook8vover8vyour8vshoulder
Define8vintegrity8vin8vthe8vCIA8vtriad.8v-8vANSWERS--
The8vability8vto8vprevent8vpeople8vfrom8vchanging8vyour8vdata8vand8vthe8vability8vto8vrevers
e8vunwanted8vchanges.
How8vdo8vyou8vcontrol8vintegrity?8v-8vANSWERS--
Permissions8vrestrict8vwhat8vusers8vcan8vdo8v(read,8vwrite,8vetc.)
Examples8vof8vintegrity8v-8vANSWERS--
Data8vused8vby8va8vdoctor8vto8vmake8vmedical8vdecisions8vneeds8vto8vbe8vcorrect8vor8vthe8v
patient8vcan8vdie.
Define8vthe8vavailability8vin8vthe8vCIA8vtriad.8v-8vANSWERS--
Our8vdata8vneeds8vto8vbe8vaccessible8vwhen8vwe8vneed8vit.
How8vcan8vavailability8vbe8vbroken?8v-8vANSWERS--
Loss8vof8vpower,8vapplication8vproblems.8vIf8vcaused8vby8van8vattacker,8vthis8vis8va8vDenial
8vof8vService8vattack.
Define8vinformation8vsecurity.8v-8vANSWERS--
The8vprotection8vof8vinformation8vand8vinformation8vsystems8vfrom8vunauthorized8vacces
s,8vuse,8vdisclosure,8vdisruption,8vmodification,8vor8vdestruction8vin8vorder8vto8vprovide8vco
nfidentiality,8vintegrity,8vand8vavailability.
Define8vthe8vParkerian8vHexad8vand8vits8vprinciples.8v-8vANSWERS--
The8vParkerian8vHexad8vincludes8vconfidentiality,8vintegrity,8vand8vavailability8vfrom8vthe8
vCIA8vtriad.8vIt8valso8vincludes8vpossession8v(or8vcontrol),8vauthenticity,8vand8vutility.
Authenticity8v-8vANSWERS--
Whether8vthe8vdata8vin8vquestion8vcomes8vfrom8vwho8vor8vwhere8vit8vsays8vit8vcomes8vfrom
8v(i.e.8vdid8vthis8vperson8vactually8vsend8vthis8vemail?)
, Confidentiality8vis8vaffected8vby8vwhat8vtype8vof8vattack?8v-8vANSWERS--
Interception8v(eaves8vdropping)
Integrity8vis8vaffected8vby8vwhat8vtype8vof8vattacks?8v-8vANSWERS--
Interruption8v(assets8vare8vunusable),8vmodification8v(tampering8vwith8van8vasset),8vfabri
cation8v(generating8vfalse8vdata)
Authenticity8vis8vaffected8vby8vwhat8vtype8vof8vattacks?8v-8vANSWERS--
Interruption8v(assets8vare8vunusable),8vmodification8v(tampering8vwith8van8vasset),8vfabri
cation8v(generating8vfalse8vdata)
Utility8v-8vANSWERS--
How8vuseful8vthe8vdata8vis8vto8vyou8v(can8vbe8va8vspectrum,8vnot8vjust8vyes8vor8vno)
Possession8v-8vANSWERS--Do8vyou8vphysically8vhave8vthe8vdata8vin8vquestion?
8vUsed8vto8vdescribe8vthe8vscope8vof8va8vloss
Identify8vthe8vfour8vtypes8vof8vattacks8v-8vANSWERS--
interception,8vinterruption,8vmodification,8vand8vfabrication
Interception8vattacks8v-8vANSWERS--Make8vyour8vassets8vunusable8vor8vunavailable
Interruption8vattacks8v-8vANSWERS--
cause8vassets8vto8vbecome8vunusable8vor8vunavailable8vfor8vour8vuse,8von8va8vtemporary8v
or8vpermanent8vbasis
Modification8vattacks8v-8vANSWERS--Tampering8vwith8van8vasset
Fabrication8vattacks8v-8vANSWERS--
Generating8vdata,8vprocess,8vand8vcommunications
Define8vthe8vrisk8vmanagement8vprocess8v-8vANSWERS--1.8vIdentify8vassets
2.8vIdentify8vthreats
3.8vAssess8vvulnerabilities
4.8vAssess8vrisks
5.8vMitigate8vrisks
Define8vthe8vincident8vresponse8vprocess8vand8vits8vstages.8v-8vANSWERS--Preparation
Detection8vand8vanalysis
Containment
Eradication
Recovery
Preparation8vin8vincident8vresponse8v-8vANSWERS--creating8vpolicies8vand8vprocedures
Detection8vin8vincident8vresponse8v-8vANSWERS--
Using8vtools8vand8vhumans8vto8vdecide8vif8van8vincident8vis8van8vincident
Defense8vin8vDepth8v-8vANSWERS--
employing8vmultiple8vlayers8vof8vcontrols8vto8vavoid8va8vsingle8vpoint8vof8vfailure
INFORMATION SECURITY EXAM
QUESTIONS AND ANSWERS
Define8vthe8vconfidentiality8vin8vthe8vCIA8vtriad.8v-8vANSWERS--
Our8vability8vto8vprotect8vdata8vfrom8vthose8vwho8vare8vnot8vauthorized8vto8vview8vit.
Examples8vof8vconfidentiality8v-8vANSWERS--
A8vpatron8vusing8van8vATM8vcard8vwants8vto8vkeep8vtheir8vPIN8vnumber8vconfidential.8v
An8vATM8vowner8vwants8vto8vkeep8vbank8vaccount8vnumbers8vconfidential.
How8vcan8vconfidentiality8vbe8vbroken?8v-8vANSWERS--Losing8va8vlaptop
An8vattacker8vgets8vaccess8vto8vinfo
A8vperson8vcan8vlook8vover8vyour8vshoulder
Define8vintegrity8vin8vthe8vCIA8vtriad.8v-8vANSWERS--
The8vability8vto8vprevent8vpeople8vfrom8vchanging8vyour8vdata8vand8vthe8vability8vto8vrevers
e8vunwanted8vchanges.
How8vdo8vyou8vcontrol8vintegrity?8v-8vANSWERS--
Permissions8vrestrict8vwhat8vusers8vcan8vdo8v(read,8vwrite,8vetc.)
Examples8vof8vintegrity8v-8vANSWERS--
Data8vused8vby8va8vdoctor8vto8vmake8vmedical8vdecisions8vneeds8vto8vbe8vcorrect8vor8vthe8v
patient8vcan8vdie.
Define8vthe8vavailability8vin8vthe8vCIA8vtriad.8v-8vANSWERS--
Our8vdata8vneeds8vto8vbe8vaccessible8vwhen8vwe8vneed8vit.
How8vcan8vavailability8vbe8vbroken?8v-8vANSWERS--
Loss8vof8vpower,8vapplication8vproblems.8vIf8vcaused8vby8van8vattacker,8vthis8vis8va8vDenial
8vof8vService8vattack.
Define8vinformation8vsecurity.8v-8vANSWERS--
The8vprotection8vof8vinformation8vand8vinformation8vsystems8vfrom8vunauthorized8vacces
s,8vuse,8vdisclosure,8vdisruption,8vmodification,8vor8vdestruction8vin8vorder8vto8vprovide8vco
nfidentiality,8vintegrity,8vand8vavailability.
Define8vthe8vParkerian8vHexad8vand8vits8vprinciples.8v-8vANSWERS--
The8vParkerian8vHexad8vincludes8vconfidentiality,8vintegrity,8vand8vavailability8vfrom8vthe8
vCIA8vtriad.8vIt8valso8vincludes8vpossession8v(or8vcontrol),8vauthenticity,8vand8vutility.
Authenticity8v-8vANSWERS--
Whether8vthe8vdata8vin8vquestion8vcomes8vfrom8vwho8vor8vwhere8vit8vsays8vit8vcomes8vfrom
8v(i.e.8vdid8vthis8vperson8vactually8vsend8vthis8vemail?)
, Confidentiality8vis8vaffected8vby8vwhat8vtype8vof8vattack?8v-8vANSWERS--
Interception8v(eaves8vdropping)
Integrity8vis8vaffected8vby8vwhat8vtype8vof8vattacks?8v-8vANSWERS--
Interruption8v(assets8vare8vunusable),8vmodification8v(tampering8vwith8van8vasset),8vfabri
cation8v(generating8vfalse8vdata)
Authenticity8vis8vaffected8vby8vwhat8vtype8vof8vattacks?8v-8vANSWERS--
Interruption8v(assets8vare8vunusable),8vmodification8v(tampering8vwith8van8vasset),8vfabri
cation8v(generating8vfalse8vdata)
Utility8v-8vANSWERS--
How8vuseful8vthe8vdata8vis8vto8vyou8v(can8vbe8va8vspectrum,8vnot8vjust8vyes8vor8vno)
Possession8v-8vANSWERS--Do8vyou8vphysically8vhave8vthe8vdata8vin8vquestion?
8vUsed8vto8vdescribe8vthe8vscope8vof8va8vloss
Identify8vthe8vfour8vtypes8vof8vattacks8v-8vANSWERS--
interception,8vinterruption,8vmodification,8vand8vfabrication
Interception8vattacks8v-8vANSWERS--Make8vyour8vassets8vunusable8vor8vunavailable
Interruption8vattacks8v-8vANSWERS--
cause8vassets8vto8vbecome8vunusable8vor8vunavailable8vfor8vour8vuse,8von8va8vtemporary8v
or8vpermanent8vbasis
Modification8vattacks8v-8vANSWERS--Tampering8vwith8van8vasset
Fabrication8vattacks8v-8vANSWERS--
Generating8vdata,8vprocess,8vand8vcommunications
Define8vthe8vrisk8vmanagement8vprocess8v-8vANSWERS--1.8vIdentify8vassets
2.8vIdentify8vthreats
3.8vAssess8vvulnerabilities
4.8vAssess8vrisks
5.8vMitigate8vrisks
Define8vthe8vincident8vresponse8vprocess8vand8vits8vstages.8v-8vANSWERS--Preparation
Detection8vand8vanalysis
Containment
Eradication
Recovery
Preparation8vin8vincident8vresponse8v-8vANSWERS--creating8vpolicies8vand8vprocedures
Detection8vin8vincident8vresponse8v-8vANSWERS--
Using8vtools8vand8vhumans8vto8vdecide8vif8van8vincident8vis8van8vincident
Defense8vin8vDepth8v-8vANSWERS--
employing8vmultiple8vlayers8vof8vcontrols8vto8vavoid8va8vsingle8vpoint8vof8vfailure