2026/2027
WGU D827 Fundamentals of
Information Security OA
Comprehensive Exam Preparation
and Practice Guide 2026/2027
Question 1:
Which cybersecurity term is defined as the potential for an attack on a resource?
A. Impact
B. Vulnerability
C. Risk
D. Threat
Correct Answer: C. Risk
Rationale: Risk refers to the likelihood that a threat will exploit a vulnerability and
cause harm to an asset. It combines both the probability of an attack and its potential
impact. A threat is the potential cause of harm, while vulnerability is a weakness that
can be exploited. Impact refers to the consequence of an event, not the likelihood.
Question 2:
Which security mechanism deliberately exposes system weaknesses to detect or
mislead attackers?
A. Intrusion detection
B. Firewalls
C. Honeypots
D. Intrusion prevention
Correct Answer: C. Honeypots
Rationale: A honeypot is a decoy system designed to attract attackers and study their
behavior while protecting real systems. Intrusion detection systems monitor traffic,
firewalls filter traffic, and intrusion prevention systems actively block attacks, but
none are designed to intentionally lure attackers.
Question 3:
,2026/2027
Which tool is used to identify devices, OS types, and services on a network?
A. Packet sniffer
B. Packet filter
C. Port scanner
D. Stateful firewall
Correct Answer: C. Port scanner
Rationale: A port scanner identifies open ports, services, and sometimes operating
system details on network devices. Packet sniffers capture traffic, packet filters
control traffic flow, and firewalls enforce security policies but do not actively map
services like port scanners.
Question 4:
Which web attack is primarily a server-side vulnerability?
A. Clickjacking
B. Cross-site scripting (XSS)
C. SQL injection
D. Cross-site request forgery (CSRF)
Correct Answer: C. SQL injection
Rationale: SQL injection targets the backend database through malicious queries,
making it a server-side attack. XSS and CSRF primarily target client-side browsers,
while clickjacking manipulates user interface interactions.
Question 5:
A VPN mainly protects which type of data?
A. Data in motion
B. Data at rest
C. Data in use
D. Data in storage
Correct Answer: A. Data in motion
Rationale: VPNs encrypt data while it is being transmitted across networks, protecting
it during transit. Data at rest refers to stored data, while data in use refers to data being
actively processed.
Question 6:
, 2026/2027
A successful DoS attack that disables a mail server without altering data is classified
as:
A. Modification
B. Fabrication
C. Interception
D. Interruption
Correct Answer: D. Interruption
Rationale: Interruption attacks affect availability by making systems or services
unavailable. Since the mail server is disabled but data remains intact, availability is
impacted without integrity loss.
Question 7:
Which CIA principle is targeted in a DoS attack?
A. Possession
B. Integrity
C. Confidentiality
D. Availability
Correct Answer: D. Availability
Rationale: Denial of Service attacks aim to make systems unavailable to legitimate
users. They do not directly affect data confidentiality or integrity.
Question 8:
Which method best protects cloud-stored source code confidentiality?
A. Antivirus software
B. Account permissions
C. Alarm systems
D. File encryption
Correct Answer: D. File encryption
Rationale: Encryption ensures that only authorized parties can read data, even if it is
accessed illegally. Permissions control access, but encryption protects data even after
breach.
Question 9:
Which Parkerian Hexad principle refers to how useful data is?
WGU D827 Fundamentals of
Information Security OA
Comprehensive Exam Preparation
and Practice Guide 2026/2027
Question 1:
Which cybersecurity term is defined as the potential for an attack on a resource?
A. Impact
B. Vulnerability
C. Risk
D. Threat
Correct Answer: C. Risk
Rationale: Risk refers to the likelihood that a threat will exploit a vulnerability and
cause harm to an asset. It combines both the probability of an attack and its potential
impact. A threat is the potential cause of harm, while vulnerability is a weakness that
can be exploited. Impact refers to the consequence of an event, not the likelihood.
Question 2:
Which security mechanism deliberately exposes system weaknesses to detect or
mislead attackers?
A. Intrusion detection
B. Firewalls
C. Honeypots
D. Intrusion prevention
Correct Answer: C. Honeypots
Rationale: A honeypot is a decoy system designed to attract attackers and study their
behavior while protecting real systems. Intrusion detection systems monitor traffic,
firewalls filter traffic, and intrusion prevention systems actively block attacks, but
none are designed to intentionally lure attackers.
Question 3:
,2026/2027
Which tool is used to identify devices, OS types, and services on a network?
A. Packet sniffer
B. Packet filter
C. Port scanner
D. Stateful firewall
Correct Answer: C. Port scanner
Rationale: A port scanner identifies open ports, services, and sometimes operating
system details on network devices. Packet sniffers capture traffic, packet filters
control traffic flow, and firewalls enforce security policies but do not actively map
services like port scanners.
Question 4:
Which web attack is primarily a server-side vulnerability?
A. Clickjacking
B. Cross-site scripting (XSS)
C. SQL injection
D. Cross-site request forgery (CSRF)
Correct Answer: C. SQL injection
Rationale: SQL injection targets the backend database through malicious queries,
making it a server-side attack. XSS and CSRF primarily target client-side browsers,
while clickjacking manipulates user interface interactions.
Question 5:
A VPN mainly protects which type of data?
A. Data in motion
B. Data at rest
C. Data in use
D. Data in storage
Correct Answer: A. Data in motion
Rationale: VPNs encrypt data while it is being transmitted across networks, protecting
it during transit. Data at rest refers to stored data, while data in use refers to data being
actively processed.
Question 6:
, 2026/2027
A successful DoS attack that disables a mail server without altering data is classified
as:
A. Modification
B. Fabrication
C. Interception
D. Interruption
Correct Answer: D. Interruption
Rationale: Interruption attacks affect availability by making systems or services
unavailable. Since the mail server is disabled but data remains intact, availability is
impacted without integrity loss.
Question 7:
Which CIA principle is targeted in a DoS attack?
A. Possession
B. Integrity
C. Confidentiality
D. Availability
Correct Answer: D. Availability
Rationale: Denial of Service attacks aim to make systems unavailable to legitimate
users. They do not directly affect data confidentiality or integrity.
Question 8:
Which method best protects cloud-stored source code confidentiality?
A. Antivirus software
B. Account permissions
C. Alarm systems
D. File encryption
Correct Answer: D. File encryption
Rationale: Encryption ensures that only authorized parties can read data, even if it is
accessed illegally. Permissions control access, but encryption protects data even after
breach.
Question 9:
Which Parkerian Hexad principle refers to how useful data is?
