WGU D430 Fundamentals of Information Security Exam Questions and Detailed Answers Already Graded A+

PII Personally Identifiable Information. Information about individuals that can be used to trace a person's identity, such as a full name, birthdate, biometric data, and identifying numbers such as a Social Security number (SSN). Organizations have an obligation to protect PII and often identify procedures for handling and retaining PII in data policies. Logical assets information, data (in transmission, storage, or processing), and intellectual property Information Security protecting information and information systems from unauthorized access, use, disclosure, modification, or destruction. Ways to be insecure for system protection - not applying security patches/application updates - using weak passwords - downloading programs from the internet - opening email attachments from unknown senders - using wireless networks without encryption. PCI DSS Payment Card Industry Data Security Standard, a security standard created by the Payment Card Industry Security Standards Council (PCI SSC) Process credit card payments; prevent identity theft HIPPA Health Insurance Portability and Accountability Act of 1996 For orgs that handle healthcare and patient records FISMA Federal Information Security Management Act Defines security standards for many federal agencies in the US. CIA Triad Confidentiality, Integrity, Availability DAD Triad Negative form of the CIA Traid Disclosure, alteration, and denial Confidentiality - CIA Triad ability to protect our data from those who are not authorized to view it. PIN Personal Identification Number What ways can confidentiality be compromised? - lose a personal laptop with data