WGU Fundamentals of Information Security D430
WGU Fundamentals of Information Security D430
Study online at https://quizlet.com/_dw3fdg
1. CIA Triad Confidential - allowing only those authorized to access the data requested
Integrity - keeping data unaltered in an unauthorized manner and reliable
Availability - the ability for those authorized to access data when needed
2. Parkerian Hexad Confidentiality Integrity Availability
Possession - physical deposition of the media on which the data is stored
Authenticity - allows us to talk about the proper attribution as to the owner or
creator of the data in question
Utility - how useful the data is to us
3. Attack Types Interception
Interruption
Modification
Fabrication
4. Interception an attacker has access to data , applications or environment
5. Interruption attacks cause our assets to become unusable or unavailable
6. Modification attacks involve tampering with our asset
7. Fabrication attacks that create false information
8. Threat something that has potential to cause harm
9. Vulnerability weaknesses that can be used to harm us
10. Something you username , password , PIN
know
11. Something you ID badge , swipe card , OTP
have
12. fingerprint, Iris Retina scan
, WGU Fundamentals of Information Security D430
WGU Fundamentals of Information Security D430
Study online at https://quizlet.com/_dw3fdg
Something you
are
13. Somewhere you geolocation
are
14. Something you handwriting , typing , walking
do
15. Authentication verifying that a person is who they claim to be
16. Mutual authenti- Both parties in a transaction to authenticate each other
cation - Has digital certificates
- Prevents man in the middle attacks
- The man in the middle is where the attacker inserts themselves into the traffic
flow
- Ex . Both the PC and server authenticate each other before data is sent in either
direction
17. Risk manage- 1. Identify Asset - identifying and categorizing assets that we're protecting
ment process 2. Identify Threats - identify threats
3. Assess Vulnerabilities - look for impacts
4. Assess Risk - asses the risk overall
5. Mitigate Risk - ensure that a given type of threat is accounted for
18. Incident re- Preparation Detection and Analysis
sponse process Identification
Containment
Eradication Recovery
Post - incident activity
19. Preparation the activities that we can perform , in advance of the incident itself in order to
better enable us to handle it .
WGU Fundamentals of Information Security D430
Study online at https://quizlet.com/_dw3fdg
1. CIA Triad Confidential - allowing only those authorized to access the data requested
Integrity - keeping data unaltered in an unauthorized manner and reliable
Availability - the ability for those authorized to access data when needed
2. Parkerian Hexad Confidentiality Integrity Availability
Possession - physical deposition of the media on which the data is stored
Authenticity - allows us to talk about the proper attribution as to the owner or
creator of the data in question
Utility - how useful the data is to us
3. Attack Types Interception
Interruption
Modification
Fabrication
4. Interception an attacker has access to data , applications or environment
5. Interruption attacks cause our assets to become unusable or unavailable
6. Modification attacks involve tampering with our asset
7. Fabrication attacks that create false information
8. Threat something that has potential to cause harm
9. Vulnerability weaknesses that can be used to harm us
10. Something you username , password , PIN
know
11. Something you ID badge , swipe card , OTP
have
12. fingerprint, Iris Retina scan
, WGU Fundamentals of Information Security D430
WGU Fundamentals of Information Security D430
Study online at https://quizlet.com/_dw3fdg
Something you
are
13. Somewhere you geolocation
are
14. Something you handwriting , typing , walking
do
15. Authentication verifying that a person is who they claim to be
16. Mutual authenti- Both parties in a transaction to authenticate each other
cation - Has digital certificates
- Prevents man in the middle attacks
- The man in the middle is where the attacker inserts themselves into the traffic
flow
- Ex . Both the PC and server authenticate each other before data is sent in either
direction
17. Risk manage- 1. Identify Asset - identifying and categorizing assets that we're protecting
ment process 2. Identify Threats - identify threats
3. Assess Vulnerabilities - look for impacts
4. Assess Risk - asses the risk overall
5. Mitigate Risk - ensure that a given type of threat is accounted for
18. Incident re- Preparation Detection and Analysis
sponse process Identification
Containment
Eradication Recovery
Post - incident activity
19. Preparation the activities that we can perform , in advance of the incident itself in order to
better enable us to handle it .
