WGU D430 Fundamentals of Information Security Complete Study Guide, Practice Questions, Answers & Objective Assessment Review
WGU D430
Study online at https://quizlet.com/_e9ax61
1. Confidentiality WHO can access the data
2. Integrity keeping data UNALTERED
3. Availability for ones AUTHORIZED to ACCESS data when needed
4. Interception the ONLY attack that affects on confidentiality.
5. Interruption, affects integrity and availability because most of the time they're impacting data.
modification,
and fabrication
6. FISMA the FI stands for "federal information"
7. FERPA the E stands for "educational"
8. HIPPA the HI stands for "health insurance"
9. HITECH TECH means "technology"
10. PCI DSS the C stands for "credit card"
11. COPPA the CO stands for "children online"
12. SOX rhymes with "stocks", so think of finance
13. CIA Triad Confidentiality, Integrity, Availability
14. Parkerian Hexad Confidentiality, Availability, Integrity, Possession, Authenticity, Utility
15. Possession physical deposition of the media on which the data is stored, Parkerian Hexad
only
16. Authenticity allows us to talk about the proper attribution as to the owner or creator of the data
in question, Parkerian Hexad only
, WGU D430 Fundamentals of Information Security Complete Study Guide, Practice Questions, Answers & Objective Assessment Review
WGU D430
Study online at https://quizlet.com/_e9ax61
17. Utility how useful the data is to us, Parkerian Hexad only
18. Attack Types Interception, Interruption, Modification, Fabrication
19. Interception an attacker has access to data, applications, or environment, only attack that affects
confidentiality
20. Interruption attacks cause our assets to become unusable or unavailable, attacks integrity and
availability
21. Modification attacks involve tampering with our asset, attacks integrity and availability
22. Fabrication attacks that create false information, attacks integrity and availability
23. Threat something that has potential to cause harm
Ex, Heavy rain
24. Vulnerability weaknesses that can be used to harm us
25. Authentication verifying that a person is who they claim to be
26. Something you username, password, PIN
know
27. Something you ID badge, swipe card, OTP
have
28. Something you fingerprint, Iris, Retina scan
are
29. Somewhere you geolocation
are
30. Something you handwriting, typing, walking
do
, WGU D430 Fundamentals of Information Security Complete Study Guide, Practice Questions, Answers & Objective Assessment Review
WGU D430
Study online at https://quizlet.com/_e9ax61
31. Mutual authenti- both parties in a transaction to authenticate each other
cation
32. Characteristic of - Has digital certificates
Mutual Authenti- - Prevents man in the middle attacks
cation - The man in the middle is where the attacker inserts themselves into the traffic
flow
- Ex. Both the PC and server authenticate each other before data is sent in either
direction
33. Risk Manage- 1. Identify Assets
ment Process 2. Identify Threats
3. Assess Vulnerabilities
4. Assess Risks
5. Mitigate Risks
34. Identify Asset identifying and categorizing assets that we're protecting, Risk Management
Process #1
35. Identify Threats identify threats, something that has potential to cause harm Risk Management
Process #2
36. Assess Vulnera- look for impacts, Risk Management Process #3
bilities
37. Assess Risk asses the risk overall, Risk Management Process #4
38. Mitigate Risk ensure that a given type of threat is accounted for, Risk Management Process #5
39. Incident Re- 1. Preparation
sponse Process 2. Detection and Analysis (Identification)
3. Containment
4. Eradication
WGU D430
Study online at https://quizlet.com/_e9ax61
1. Confidentiality WHO can access the data
2. Integrity keeping data UNALTERED
3. Availability for ones AUTHORIZED to ACCESS data when needed
4. Interception the ONLY attack that affects on confidentiality.
5. Interruption, affects integrity and availability because most of the time they're impacting data.
modification,
and fabrication
6. FISMA the FI stands for "federal information"
7. FERPA the E stands for "educational"
8. HIPPA the HI stands for "health insurance"
9. HITECH TECH means "technology"
10. PCI DSS the C stands for "credit card"
11. COPPA the CO stands for "children online"
12. SOX rhymes with "stocks", so think of finance
13. CIA Triad Confidentiality, Integrity, Availability
14. Parkerian Hexad Confidentiality, Availability, Integrity, Possession, Authenticity, Utility
15. Possession physical deposition of the media on which the data is stored, Parkerian Hexad
only
16. Authenticity allows us to talk about the proper attribution as to the owner or creator of the data
in question, Parkerian Hexad only
, WGU D430 Fundamentals of Information Security Complete Study Guide, Practice Questions, Answers & Objective Assessment Review
WGU D430
Study online at https://quizlet.com/_e9ax61
17. Utility how useful the data is to us, Parkerian Hexad only
18. Attack Types Interception, Interruption, Modification, Fabrication
19. Interception an attacker has access to data, applications, or environment, only attack that affects
confidentiality
20. Interruption attacks cause our assets to become unusable or unavailable, attacks integrity and
availability
21. Modification attacks involve tampering with our asset, attacks integrity and availability
22. Fabrication attacks that create false information, attacks integrity and availability
23. Threat something that has potential to cause harm
Ex, Heavy rain
24. Vulnerability weaknesses that can be used to harm us
25. Authentication verifying that a person is who they claim to be
26. Something you username, password, PIN
know
27. Something you ID badge, swipe card, OTP
have
28. Something you fingerprint, Iris, Retina scan
are
29. Somewhere you geolocation
are
30. Something you handwriting, typing, walking
do
, WGU D430 Fundamentals of Information Security Complete Study Guide, Practice Questions, Answers & Objective Assessment Review
WGU D430
Study online at https://quizlet.com/_e9ax61
31. Mutual authenti- both parties in a transaction to authenticate each other
cation
32. Characteristic of - Has digital certificates
Mutual Authenti- - Prevents man in the middle attacks
cation - The man in the middle is where the attacker inserts themselves into the traffic
flow
- Ex. Both the PC and server authenticate each other before data is sent in either
direction
33. Risk Manage- 1. Identify Assets
ment Process 2. Identify Threats
3. Assess Vulnerabilities
4. Assess Risks
5. Mitigate Risks
34. Identify Asset identifying and categorizing assets that we're protecting, Risk Management
Process #1
35. Identify Threats identify threats, something that has potential to cause harm Risk Management
Process #2
36. Assess Vulnera- look for impacts, Risk Management Process #3
bilities
37. Assess Risk asses the risk overall, Risk Management Process #4
38. Mitigate Risk ensure that a given type of threat is accounted for, Risk Management Process #5
39. Incident Re- 1. Preparation
sponse Process 2. Detection and Analysis (Identification)
3. Containment
4. Eradication
