WGU C836 FUndamentals oF
InFormatIon seCUrIty oa FInal exam
2026: 300 PraCtICe QUestIons WIth
ansWers & ratIonales
DOMAIN 1: FOUNDATIONAL SECURITY CONCEPTS (CIA TRIAD & PARKERIAN
HEXAD)
Questions 1-30
Question 1
What are the three core principles of the CIA Triad?
A. Confidentiality, Integrity, Availability
B. Confidentiality, Integrity, Authenticity
C. Control, Intelligence, Access
D. Confidentiality, Interception, Availability
Correct Answer: A. Confidentiality, Integrity, Availability
Rationale: The CIA triad is the foundational model of information security.
Confidentiality protects data from unauthorized access, Integrity prevents
unauthorized modification, and Availability ensures data is accessible when
needed .
Question 2
Which cybersecurity principle refers to the ability to protect our data from those
who are not authorized to view it?
A. Integrity
B. Availability
,C. Confidentiality
D. Authenticity
Correct Answer: C. Confidentiality
Rationale: Confidentiality is the principle that ensures data is only accessible to
authorized individuals. Breaches of confidentiality can occur through lost laptops,
shoulder surfing, or network attacks .
Question 3
Which principle of the CIA Triad is primarily impacted by a Denial of Service (DoS)
attack?
A. Confidentiality
B. Integrity
C. Availability
D. Authenticity
Correct Answer: C. Availability
Rationale: A DoS attack is designed to make a system or data unavailable to
legitimate users by overwhelming it with traffic or crashing the service .
Question 4
The Parkerian Hexad adds which three principles to the CIA Triad?
A. Possession/Control, Authenticity, Utility
B. Privacy, Authenticity, Utility
C. Possession/Control, Authenticity, Non-repudiation
D. Authorization, Accounting, Non-repudiation
Correct Answer: A. Possession/Control, Authenticity, Utility
Rationale: The Parkerian Hexad expands on the CIA Triad by adding Possession or
Control (physical disposition of media), Authenticity (attribution to the correct
owner/creator), and Utility (usefulness of the data) .
Question 5
An altered email that claims to be from one person when it was actually sent by
someone else is a violation of which Parkerian Hexad principle?
,A. Possession
B. Utility
C. Authenticity
D. Integrity
Correct Answer: C. Authenticity
Rationale: Authenticity refers to whether the data is properly attributed to its
correct owner or creator. An email spoof violates this principle .
Question 6
Which principle of the CIA Triad is violated by an unauthorized database rollback
or undo?
A. Availability
B. Identification
C. Integrity
D. Confidentiality
Correct Answer: C. Integrity
Rationale: Integrity is the ability to prevent unauthorized or undesirable changes
to data. A rollback or undo that is not authorized would alter the data in a way
that compromises its integrity .
Question 7
A company institutes a new policy that all office computer monitors must face
away from doorways. Which principle is being applied?
A. Availability
B. Confidentiality
C. Utility
D. Integrity
Correct Answer: B. Confidentiality
Rationale: This policy prevents "shoulder surfing" where unauthorized individuals
could view sensitive information on the screen, thus protecting confidentiality .
, Question 8
Refers to the ability to access our data when we need it.
A. Utility
B. Availability
C. Confidentiality
D. Possession
Correct Answer: B. Availability
Rationale: Availability ensures that data and systems are operational and
accessible to authorized users when required. Loss of availability can result from
power outages, network attacks, or system failures .
Question 9
Refers to the physical disposition of the media on which the data is stored.
A. Availability
B. Utility
C. Possession or Control
D. Authenticity
Correct Answer: C. Possession or Control
Rationale: Possession or Control is a principle in the Parkerian Hexad that
addresses the physical location and ownership of the storage media, regardless of
whether the data can be read .
Question 10
A laptop containing unencrypted patient data is stolen from a doctor's car. Which
principle has been violated?
A. Availability only
B. Confidentiality and Possession
C. Integrity only
D. Utility only
Correct Answer: B. Confidentiality and Possession
InFormatIon seCUrIty oa FInal exam
2026: 300 PraCtICe QUestIons WIth
ansWers & ratIonales
DOMAIN 1: FOUNDATIONAL SECURITY CONCEPTS (CIA TRIAD & PARKERIAN
HEXAD)
Questions 1-30
Question 1
What are the three core principles of the CIA Triad?
A. Confidentiality, Integrity, Availability
B. Confidentiality, Integrity, Authenticity
C. Control, Intelligence, Access
D. Confidentiality, Interception, Availability
Correct Answer: A. Confidentiality, Integrity, Availability
Rationale: The CIA triad is the foundational model of information security.
Confidentiality protects data from unauthorized access, Integrity prevents
unauthorized modification, and Availability ensures data is accessible when
needed .
Question 2
Which cybersecurity principle refers to the ability to protect our data from those
who are not authorized to view it?
A. Integrity
B. Availability
,C. Confidentiality
D. Authenticity
Correct Answer: C. Confidentiality
Rationale: Confidentiality is the principle that ensures data is only accessible to
authorized individuals. Breaches of confidentiality can occur through lost laptops,
shoulder surfing, or network attacks .
Question 3
Which principle of the CIA Triad is primarily impacted by a Denial of Service (DoS)
attack?
A. Confidentiality
B. Integrity
C. Availability
D. Authenticity
Correct Answer: C. Availability
Rationale: A DoS attack is designed to make a system or data unavailable to
legitimate users by overwhelming it with traffic or crashing the service .
Question 4
The Parkerian Hexad adds which three principles to the CIA Triad?
A. Possession/Control, Authenticity, Utility
B. Privacy, Authenticity, Utility
C. Possession/Control, Authenticity, Non-repudiation
D. Authorization, Accounting, Non-repudiation
Correct Answer: A. Possession/Control, Authenticity, Utility
Rationale: The Parkerian Hexad expands on the CIA Triad by adding Possession or
Control (physical disposition of media), Authenticity (attribution to the correct
owner/creator), and Utility (usefulness of the data) .
Question 5
An altered email that claims to be from one person when it was actually sent by
someone else is a violation of which Parkerian Hexad principle?
,A. Possession
B. Utility
C. Authenticity
D. Integrity
Correct Answer: C. Authenticity
Rationale: Authenticity refers to whether the data is properly attributed to its
correct owner or creator. An email spoof violates this principle .
Question 6
Which principle of the CIA Triad is violated by an unauthorized database rollback
or undo?
A. Availability
B. Identification
C. Integrity
D. Confidentiality
Correct Answer: C. Integrity
Rationale: Integrity is the ability to prevent unauthorized or undesirable changes
to data. A rollback or undo that is not authorized would alter the data in a way
that compromises its integrity .
Question 7
A company institutes a new policy that all office computer monitors must face
away from doorways. Which principle is being applied?
A. Availability
B. Confidentiality
C. Utility
D. Integrity
Correct Answer: B. Confidentiality
Rationale: This policy prevents "shoulder surfing" where unauthorized individuals
could view sensitive information on the screen, thus protecting confidentiality .
, Question 8
Refers to the ability to access our data when we need it.
A. Utility
B. Availability
C. Confidentiality
D. Possession
Correct Answer: B. Availability
Rationale: Availability ensures that data and systems are operational and
accessible to authorized users when required. Loss of availability can result from
power outages, network attacks, or system failures .
Question 9
Refers to the physical disposition of the media on which the data is stored.
A. Availability
B. Utility
C. Possession or Control
D. Authenticity
Correct Answer: C. Possession or Control
Rationale: Possession or Control is a principle in the Parkerian Hexad that
addresses the physical location and ownership of the storage media, regardless of
whether the data can be read .
Question 10
A laptop containing unencrypted patient data is stolen from a doctor's car. Which
principle has been violated?
A. Availability only
B. Confidentiality and Possession
C. Integrity only
D. Utility only
Correct Answer: B. Confidentiality and Possession
