WGU D430 Fundamentals of Information Security
Study online at https://quizlet.com/_dx6gke
1. Define the confi- Our ability to protect data from those who are not authorized to view it.
dentiality in the
CIA triad.
2. Examples of con- A patron using an ATM card wants to keep their PIN number confidential.
fidentiality An ATM owner wants to keep bank account numbers confidential.
3. How can confi- Losing a laptop
dentiality be bro- An attacker gets access to info
ken? A person can look over your shoulder
4. Define integrity The ability to prevent people from changing your data and the ability to reverse
in the CIA triad. unwanted changes.
5. How do you con- Permissions restrict what users can do (read, write, etc.)
trol integrity?
6. Examples of in- Data used by a doctor to make medical decisions needs to be correct or the patient
tegrity can die.
7. Define the avail- Our data needs to be accessible when we need it.
ability in the CIA
triad.
8. How can avail- Loss of power, application problems. If caused by an attacker, this is a Denial of
ability be broken? Service attack.
9. Define informa- The protection of information and information systems from unauthorized access,
tion security. use, disclosure, disruption, modification, or destruction in order to provide confi-
dentiality, integrity, and availability.
10. Define the Park- The Parkerian Hexad includes confidentiality, integrity, and availability from the CIA
erian Hexad and triad. It also includes possession (or control), authenticity, and utility.
its principles.
, WGU D430 Fundamentals of Information Security
WGU D430 Fundamentals of Information Security
Study online at https://quizlet.com/_dx6gke
11. Authenticity Whether the data in question comes from who or where it says it comes from (i.e.
did this person actually send this email?)
12. Confidentiality is Interception (eaves dropping)
affected by what
type of attack?
13. Integrity is affect- Interruption (assets are unusable), modification (tampering with an asset), fabri-
ed by what type cation (generating false data)
of attacks?
14. Authenticity is af- Interruption (assets are unusable), modification (tampering with an asset), fabri-
fected by what cation (generating false data)
type of attacks?
15. Utility How useful the data is to you (can be a spectrum, not just yes or no)
16. Possession Do you physically have the data in question? Used to describe the scope of a loss
17. Identify the four interception, interruption, modification, and fabrication
types of attacks
18. Interception at- Make your assets unusable or unavailable
tacks
19. Interruption at- cause assets to become unusable or unavailable for our use, on a temporary or
tacks permanent basis