WGU D430 FUNDAMENTALS OF INFORMATION
SECURITY TEST 6 FINAL PAPER COMPLETE
QUESTIONS AND ANSWERS VERIFIED
PREPARATION
◉ Compliance.
Answer: The requirements that are set forth by laws and industry
regulations. Example : HIPPA/ HITECH- healthcare, PCI/DSS-
payment card industry, FISMA- federal government agencies
◉ CIA.
Answer: The core model of all information security. Confidential,
integrity and availability
◉ Confidential.
Answer: Allowing only those authorized to access the data requested
◉ integrity.
Answer: Keeping data unaltered by accidental or malicious intent
◉ Availability.
,Answer: The ability to access data when needed
◉ Parkerian hexad model.
Answer: Confidentiality , integrity, availability, possession/control,
authenticity, utility
◉ Possession/ control.
Answer: Refers to the physical disposition of the media on which the
data is stored
◉ authenticity.
Answer: Allows us to talk about the proper attribution as to the
owner or creator of the data in question
◉ Utility.
Answer: How useful the data is to us
◉ Types of attacks.
Answer: 1- interception
2- interruption
3- modification
4- fabrication
,◉ Interception.
Answer: Attacks allows unauthorized users to access our data,
applications, or environments. Are primarily an attack against
confidentiality
◉ Interruption.
Answer: Attacks cause our assets to become unstable or unavailable
for our use, on a temporary or permanent basis. This attack affects
availability but can also attack integrity
◉ Modification.
Answer: Attacks involve tampering with our asset. Such attacks
might primarily be considered an integrity attack, but could also be
an availability attack.
◉ Fabrication.
Answer: Attacks involve generating data, processes,
communications, or other similar activities with a system. Attacks
primarily affect integrity but can be considered an availability
attack.
◉ Risk.
, Answer: The likelihood that a threat will occur. There must be a
threat and vulnerability
◉ Threat.
Answer: Any event being man-made, natural or environmental that
could damage the assets
◉ Vulnerabilities.
Answer: Weakness that a threat event or the threat can take
advantage of
◉ Impact.
Answer: taking into account the assets cost
◉ Controls.
Answer: The ways we protect assets. Physical, technical/ logical, and
administrative
◉ Physical controls.
Answer: Controls are physical items that protect assets. Think of
locks, doors, guards and fences
◉ Technical/ logical controls.
SECURITY TEST 6 FINAL PAPER COMPLETE
QUESTIONS AND ANSWERS VERIFIED
PREPARATION
◉ Compliance.
Answer: The requirements that are set forth by laws and industry
regulations. Example : HIPPA/ HITECH- healthcare, PCI/DSS-
payment card industry, FISMA- federal government agencies
◉ CIA.
Answer: The core model of all information security. Confidential,
integrity and availability
◉ Confidential.
Answer: Allowing only those authorized to access the data requested
◉ integrity.
Answer: Keeping data unaltered by accidental or malicious intent
◉ Availability.
,Answer: The ability to access data when needed
◉ Parkerian hexad model.
Answer: Confidentiality , integrity, availability, possession/control,
authenticity, utility
◉ Possession/ control.
Answer: Refers to the physical disposition of the media on which the
data is stored
◉ authenticity.
Answer: Allows us to talk about the proper attribution as to the
owner or creator of the data in question
◉ Utility.
Answer: How useful the data is to us
◉ Types of attacks.
Answer: 1- interception
2- interruption
3- modification
4- fabrication
,◉ Interception.
Answer: Attacks allows unauthorized users to access our data,
applications, or environments. Are primarily an attack against
confidentiality
◉ Interruption.
Answer: Attacks cause our assets to become unstable or unavailable
for our use, on a temporary or permanent basis. This attack affects
availability but can also attack integrity
◉ Modification.
Answer: Attacks involve tampering with our asset. Such attacks
might primarily be considered an integrity attack, but could also be
an availability attack.
◉ Fabrication.
Answer: Attacks involve generating data, processes,
communications, or other similar activities with a system. Attacks
primarily affect integrity but can be considered an availability
attack.
◉ Risk.
, Answer: The likelihood that a threat will occur. There must be a
threat and vulnerability
◉ Threat.
Answer: Any event being man-made, natural or environmental that
could damage the assets
◉ Vulnerabilities.
Answer: Weakness that a threat event or the threat can take
advantage of
◉ Impact.
Answer: taking into account the assets cost
◉ Controls.
Answer: The ways we protect assets. Physical, technical/ logical, and
administrative
◉ Physical controls.
Answer: Controls are physical items that protect assets. Think of
locks, doors, guards and fences
◉ Technical/ logical controls.
