WGU D430 Fundamentals of Information Security Complete Study Guide, Practice Questions, Answers & OA Exam Review
WGU D430
Study online at https://quizlet.com/_f2haz6
1. A company's IT policy manual states that "All compa- Operating system security
ny computers, workstations, application servers, and
mobile devices must have current versions of antivirus
software."
Which principle or concept of cybersecurity does this
policy statement impact?
2. An organization's procedures document states that Confidentiality
"All electronic communications should be encrypted
during transmission across networks using encryption
standards specified in the data encryption policy."
Which security principle is this policy addressing?
3. A company's website policy states that "To gain access Operations
to the corporate website, each employee must provide
a valid user name and password, and then answer one
of six security questions accurately."
Which type of security does the policy address?
4. An organization notices unauthorized visitors follow- Tailgating
ing employees through a restricted doorway.
Which vulnerability should be addressed in the organi-
zation's security policy?
5. A company wants to update its access control poli- Attribute-based
cy. The company wants to prevent hourly employees
from logging in to company computers after business
hours.
, WGU D430 Fundamentals of Information Security Complete Study Guide, Practice Questions, Answers & OA Exam Review
WGU D430
Study online at https://quizlet.com/_f2haz6
Which type of access control policy should be imple-
mented?
6. A new software development company has deter- Relocate the algorithm to
mined that one of its proprietary algorithms is at a encrypted storage.
high risk for unauthorized disclosure. The company's
security up to this point has been fairly lax.
Which procedure should the company implement to
protect this asset?
7. An accounting firm stores financial data for many cus- Deterrent
tomers. The company policy requires that employees
only access data for customers they are assigned to.
The company implements a written policy indicating
an employee can be fired for violating this require-
ment.
Which type of control has the company implemented?
8. How can an operating system be hardened in accor- Restrict account permis-
dance to the principle of least privilege? sions.
9. A company implements an Internet-facing web server Read and limited write ac-
for its sales force to review product information. The cess
sales force can also update its profiles and profile pho-
tos, but not the product information. There is no other
information on this server.
Which content access permissions should be granted
to the sales force based on the principle of least privi-
lege?
WGU D430
Study online at https://quizlet.com/_f2haz6
1. A company's IT policy manual states that "All compa- Operating system security
ny computers, workstations, application servers, and
mobile devices must have current versions of antivirus
software."
Which principle or concept of cybersecurity does this
policy statement impact?
2. An organization's procedures document states that Confidentiality
"All electronic communications should be encrypted
during transmission across networks using encryption
standards specified in the data encryption policy."
Which security principle is this policy addressing?
3. A company's website policy states that "To gain access Operations
to the corporate website, each employee must provide
a valid user name and password, and then answer one
of six security questions accurately."
Which type of security does the policy address?
4. An organization notices unauthorized visitors follow- Tailgating
ing employees through a restricted doorway.
Which vulnerability should be addressed in the organi-
zation's security policy?
5. A company wants to update its access control poli- Attribute-based
cy. The company wants to prevent hourly employees
from logging in to company computers after business
hours.
, WGU D430 Fundamentals of Information Security Complete Study Guide, Practice Questions, Answers & OA Exam Review
WGU D430
Study online at https://quizlet.com/_f2haz6
Which type of access control policy should be imple-
mented?
6. A new software development company has deter- Relocate the algorithm to
mined that one of its proprietary algorithms is at a encrypted storage.
high risk for unauthorized disclosure. The company's
security up to this point has been fairly lax.
Which procedure should the company implement to
protect this asset?
7. An accounting firm stores financial data for many cus- Deterrent
tomers. The company policy requires that employees
only access data for customers they are assigned to.
The company implements a written policy indicating
an employee can be fired for violating this require-
ment.
Which type of control has the company implemented?
8. How can an operating system be hardened in accor- Restrict account permis-
dance to the principle of least privilege? sions.
9. A company implements an Internet-facing web server Read and limited write ac-
for its sales force to review product information. The cess
sales force can also update its profiles and profile pho-
tos, but not the product information. There is no other
information on this server.
Which content access permissions should be granted
to the sales force based on the principle of least privi-
lege?
