WGU D315 ACTUAL TEST QUESTIONS WITH
COMPLETE ANSWER KEY
●● Confidentiality
Answer: Prevent unauthorized people from viewing information.
●● Integrity
Answer: Keep data accurate and prevent unauthorized changes.
●● Availability
Answer: Keep systems and data accessible when needed.
●● Least privilege
Answer: Give users only the access they need.
●● Separation of privilege
Answer: Require multiple people or conditions for sensitive actions.
●● Complete mediation
Answer: Check authorization every time access is requested.
●● Economy of mechanism
,Answer: Keep security systems simple.
●● Fail-safe defaults
Answer: Deny access when something fails or is uncertain.
●● Default deny
Answer: Block everything unless specifically allowed.
●● Least common mechanism
Answer: Minimize resources shared between users.
●● Psychological acceptability
Answer: Make security easy enough that users will follow it.
●● Zero-trust model
Answer: Trust nothing automatically; always verify.
●● Defense in depth
Answer: Use multiple layers of security.
●● Threat
Answer: Something that could cause harm.
, ●● Vulnerability
Answer: A weakness that can be exploited.
●● Exploit
Answer: A method used to take advantage of a vulnerability.
●● Risk
Answer: The chance a threat will exploit a vulnerability and cause harm.
●● Phishing
Answer: Fake messages used to trick someone.
●● Social engineering
Answer: Manipulating people into giving information or access.
●● Spoofing
Answer: Pretending to be a trusted person, device, or system.
●● Brute-force attack
Answer: Repeatedly guesses passwords until one works.
COMPLETE ANSWER KEY
●● Confidentiality
Answer: Prevent unauthorized people from viewing information.
●● Integrity
Answer: Keep data accurate and prevent unauthorized changes.
●● Availability
Answer: Keep systems and data accessible when needed.
●● Least privilege
Answer: Give users only the access they need.
●● Separation of privilege
Answer: Require multiple people or conditions for sensitive actions.
●● Complete mediation
Answer: Check authorization every time access is requested.
●● Economy of mechanism
,Answer: Keep security systems simple.
●● Fail-safe defaults
Answer: Deny access when something fails or is uncertain.
●● Default deny
Answer: Block everything unless specifically allowed.
●● Least common mechanism
Answer: Minimize resources shared between users.
●● Psychological acceptability
Answer: Make security easy enough that users will follow it.
●● Zero-trust model
Answer: Trust nothing automatically; always verify.
●● Defense in depth
Answer: Use multiple layers of security.
●● Threat
Answer: Something that could cause harm.
, ●● Vulnerability
Answer: A weakness that can be exploited.
●● Exploit
Answer: A method used to take advantage of a vulnerability.
●● Risk
Answer: The chance a threat will exploit a vulnerability and cause harm.
●● Phishing
Answer: Fake messages used to trick someone.
●● Social engineering
Answer: Manipulating people into giving information or access.
●● Spoofing
Answer: Pretending to be a trusted person, device, or system.
●● Brute-force attack
Answer: Repeatedly guesses passwords until one works.
