WGU D430 FUNDAMENTALS OF INFORMATION SECURITY
EXAM OBJECTIVE ASSESSMENT NEWEST 2024 TEST BANK
ACTUAL EXAM 300 QUESTIONS AND CORRECT DETAILED
ANSWERS (VERIFIED ANSWERS) |ALREADY GRADED A+
Which type of tool can be used to detect vulnerabilities in source code related to improper handling of
user input?
A Fuzzer
B Port scanner
C Honeypot
D Sniffer - answer-A
A petroleum company has a group of computers used to monitor flow of materials in the refining
process. These computers are never connected to the Internet or other corporate network, and they
host proprietary monitoring software which the company has registered as a trade secret.
Which type of security will be able to help protect its software against theft?
A Network
B Physical
C Operating system
D Application - answer-B
An organization wants to minimize the impact of user credential theft by ensuring that only HR staff can
access employee personal information.
Which security mechanism should it implement?
A Apply the principle of least privilege.
B Apply the latest software patches.
,C Remove all unnecessary services.
D Turn on logging and auditing. - answer-A
An organization wants to prevent malware from infecting its workstations, mobile devices, and web
applications.
Which security tool should it implement?
A Antivirus
B Fuzzer
C Firewall
D Scanner - answer-A
A small IT firm is required to authenticate remote customers who access the firm's network.
Which protection technique should the IT firm employ to satisfy this requirement?
A RAID
B Data encryption
C Certificates
D File encryption - answer-D
A company has files stored on a server that are critical to the organization's viability. The administrator
has assigned the appropriate permissions to the files.
How should the administrator provide additional confidentiality protection for the files at rest?
A File compression
B Network encryption
,C Network compression
D File encryption - answer-D
Which security solution can an organization deploy to prevent unauthorized external access to its
internal network?
A VPN
B Sniffer
C Firewall
D IDS - answer-C
A restaurant needs to protect its customers' credit card information.
Which security standard should the restaurant follow?
A FISMA
B PCI DSS
C SOX
D FERPA - answer-B
In addition to a username and corresponding password, a desktop application asks users to submit a
special code. This code is produced by an application running on the users' mobile phone.
Which authentication technique is the phone application providing?
A Something you have
B Something you are
C Something you know
D Something you do - answer-A
, Employees are required to swipe their access cards and then to use an iris scanner to access protected
areas in the company's data center.
Which two authentication techniques are used to protect the data center?
A Something you have and something you are
B Something you know and something you do
C Something you do and something you are
D Something you have and something you know - answer-A
A health company must comply with HIPAA regulations. It decides to encrypt databases that contain
HIPAA information.
Which resource is the health company directly trying to protect?
A Operating system
B Server
C Data
D Application - answer-C
A file is stored in a marketing folder and is accessible only to members of the marketing group. An
attacker uses a phishing scam to gain the credentials of a user who is a member of the marketing group,
and then reads the file.
Which leg of the CIA triad is being targeted?
A Control
B Integrity
C Availability
EXAM OBJECTIVE ASSESSMENT NEWEST 2024 TEST BANK
ACTUAL EXAM 300 QUESTIONS AND CORRECT DETAILED
ANSWERS (VERIFIED ANSWERS) |ALREADY GRADED A+
Which type of tool can be used to detect vulnerabilities in source code related to improper handling of
user input?
A Fuzzer
B Port scanner
C Honeypot
D Sniffer - answer-A
A petroleum company has a group of computers used to monitor flow of materials in the refining
process. These computers are never connected to the Internet or other corporate network, and they
host proprietary monitoring software which the company has registered as a trade secret.
Which type of security will be able to help protect its software against theft?
A Network
B Physical
C Operating system
D Application - answer-B
An organization wants to minimize the impact of user credential theft by ensuring that only HR staff can
access employee personal information.
Which security mechanism should it implement?
A Apply the principle of least privilege.
B Apply the latest software patches.
,C Remove all unnecessary services.
D Turn on logging and auditing. - answer-A
An organization wants to prevent malware from infecting its workstations, mobile devices, and web
applications.
Which security tool should it implement?
A Antivirus
B Fuzzer
C Firewall
D Scanner - answer-A
A small IT firm is required to authenticate remote customers who access the firm's network.
Which protection technique should the IT firm employ to satisfy this requirement?
A RAID
B Data encryption
C Certificates
D File encryption - answer-D
A company has files stored on a server that are critical to the organization's viability. The administrator
has assigned the appropriate permissions to the files.
How should the administrator provide additional confidentiality protection for the files at rest?
A File compression
B Network encryption
,C Network compression
D File encryption - answer-D
Which security solution can an organization deploy to prevent unauthorized external access to its
internal network?
A VPN
B Sniffer
C Firewall
D IDS - answer-C
A restaurant needs to protect its customers' credit card information.
Which security standard should the restaurant follow?
A FISMA
B PCI DSS
C SOX
D FERPA - answer-B
In addition to a username and corresponding password, a desktop application asks users to submit a
special code. This code is produced by an application running on the users' mobile phone.
Which authentication technique is the phone application providing?
A Something you have
B Something you are
C Something you know
D Something you do - answer-A
, Employees are required to swipe their access cards and then to use an iris scanner to access protected
areas in the company's data center.
Which two authentication techniques are used to protect the data center?
A Something you have and something you are
B Something you know and something you do
C Something you do and something you are
D Something you have and something you know - answer-A
A health company must comply with HIPAA regulations. It decides to encrypt databases that contain
HIPAA information.
Which resource is the health company directly trying to protect?
A Operating system
B Server
C Data
D Application - answer-C
A file is stored in a marketing folder and is accessible only to members of the marketing group. An
attacker uses a phishing scam to gain the credentials of a user who is a member of the marketing group,
and then reads the file.
Which leg of the CIA triad is being targeted?
A Control
B Integrity
C Availability
