WGU COURSE C836 FUNDAMENTALS OF
INFORMATION SECURITY QUIZLET BY
BRIAN MACFARLANE
QUESTIONS WITH COMPLETE ANSWERS
(100% ACCURATE)
Question 1.
________ provides a framework for ensuring the effectiveness of information security controls in
government. This legislation is intended to protect government information, operations, and assets
from any natural or manmade threat. This requires each federal agency to develop, document, and
implement an information security program to protect its information and information systems.
ANSWER
The Federal Information Security Modernization Act (FISMA)
Question 2.
A badge or token is considered what type of authentication?
A Something you are
B Something you have
C Something you know
D Where you are
E Something you do
ANSWER
B
Question 3.
How can an operating system be hardened in accordance to the principle of least privilege?
A Implement account auditing.
B Remove unneeded services.
C Restrict account permissions.
D Remove unnecessary software.
ANSWER
C
,Question 4.
A small IT firm is required to authenticate remote customers who access the firm's network.
Which protection technique should the IT firm employ to satisfy this requirement?
A RAID
B Data encryption
C Certificates
D File encryption
ANSWER
D
Question 5.
What is the first and arguably one of the most important steps of the risk management process?
A Assess risks
B Identify assets
C Assess vulnerabilities
D Identify threats
E Mitigate risks
ANSWER
B
Question 6.
Which U.S. law regulates the confidentiality and accuracy of a publicly traded corporation's financial
reports?
A FERPA
B FISMA
C HIPAA
D SOX
ANSWER
D
,Question 7.
A military installation is evaluating backup solutions for its critical data. This installation operates in a
harsh environment that is subjected to heat, humidity, and magnetic fields.
Which physical media should be selected to ensure the integrity of backups is preserved given these
harsh operating conditions?
A Optical media
B Flash drives
C Tape media
D Hard drives
ANSWER
B
Question 8.
Which of the following is not a major category of database security issues?
A Privilege escalation
B Arbitrary code execution
C Unauthenticated access
D Improper indexing
E Protocol issues
ANSWER
D
Question 9.
A company's IT policy manual states that "All company computers, workstations, application servers,
and mobile devices must have current versions of antivirus software."
Which principle or concept of cybersecurity does this policy statement impact?
A Accounting policy
B Operating system security
C Access control policy
D Physical security
ANSWER
B
, Question 10.
The value of the asset is used to assess if a risk is present.
ANSWER
Impact
Question 11.
An organization employs a VPN to safeguard its information.
Which security principle is protected by a VPN?
A Data in motion
B Data at rest
C Data in use
D Data in storage
ANSWER
A
Question 12.
A password or PIN is considered what type of authentication?
A Something you have
B Something you are
C Something you do
D Where you are
E Something you know
ANSWER
E
Question 13.
This command-line packet sniffing tool runs on Linux and UNIX operating systems.
ANSWER
Tcpdump
INFORMATION SECURITY QUIZLET BY
BRIAN MACFARLANE
QUESTIONS WITH COMPLETE ANSWERS
(100% ACCURATE)
Question 1.
________ provides a framework for ensuring the effectiveness of information security controls in
government. This legislation is intended to protect government information, operations, and assets
from any natural or manmade threat. This requires each federal agency to develop, document, and
implement an information security program to protect its information and information systems.
ANSWER
The Federal Information Security Modernization Act (FISMA)
Question 2.
A badge or token is considered what type of authentication?
A Something you are
B Something you have
C Something you know
D Where you are
E Something you do
ANSWER
B
Question 3.
How can an operating system be hardened in accordance to the principle of least privilege?
A Implement account auditing.
B Remove unneeded services.
C Restrict account permissions.
D Remove unnecessary software.
ANSWER
C
,Question 4.
A small IT firm is required to authenticate remote customers who access the firm's network.
Which protection technique should the IT firm employ to satisfy this requirement?
A RAID
B Data encryption
C Certificates
D File encryption
ANSWER
D
Question 5.
What is the first and arguably one of the most important steps of the risk management process?
A Assess risks
B Identify assets
C Assess vulnerabilities
D Identify threats
E Mitigate risks
ANSWER
B
Question 6.
Which U.S. law regulates the confidentiality and accuracy of a publicly traded corporation's financial
reports?
A FERPA
B FISMA
C HIPAA
D SOX
ANSWER
D
,Question 7.
A military installation is evaluating backup solutions for its critical data. This installation operates in a
harsh environment that is subjected to heat, humidity, and magnetic fields.
Which physical media should be selected to ensure the integrity of backups is preserved given these
harsh operating conditions?
A Optical media
B Flash drives
C Tape media
D Hard drives
ANSWER
B
Question 8.
Which of the following is not a major category of database security issues?
A Privilege escalation
B Arbitrary code execution
C Unauthenticated access
D Improper indexing
E Protocol issues
ANSWER
D
Question 9.
A company's IT policy manual states that "All company computers, workstations, application servers,
and mobile devices must have current versions of antivirus software."
Which principle or concept of cybersecurity does this policy statement impact?
A Accounting policy
B Operating system security
C Access control policy
D Physical security
ANSWER
B
, Question 10.
The value of the asset is used to assess if a risk is present.
ANSWER
Impact
Question 11.
An organization employs a VPN to safeguard its information.
Which security principle is protected by a VPN?
A Data in motion
B Data at rest
C Data in use
D Data in storage
ANSWER
A
Question 12.
A password or PIN is considered what type of authentication?
A Something you have
B Something you are
C Something you do
D Where you are
E Something you know
ANSWER
E
Question 13.
This command-line packet sniffing tool runs on Linux and UNIX operating systems.
ANSWER
Tcpdump
