WGU Fundamentals of Information Security Exam
206 Questions with Verified Answers
Operating system security - CORRECT ANSWER A company's IT policy manual
states that "All company computers, workstations, application servers, and mobile
devices must have current versions of antivirus software."
Which principle or concept of cybersecurity does this policy statement impact?
Confidentiality - CORRECT ANSWER An organization's procedures document states
that "All electronic communications should be encrypted during transmission
across networks using encryption standards specified in the data encryption
policy."
Which security principle is this policy addressing?
Operations - CORRECT ANSWER A company's website policy states that "To gain
access to the corporate website, each employee must provide a valid user name
and password, and then answer one of six security questions accurately."
Which type of security does the policy address?
Tailgating - CORRECT ANSWER An organization notices unauthorized visitors
following employees through a restricted doorway.
Which vulnerability should be addressed in the organization's security policy?
,Attribute-based - CORRECT ANSWER A company wants to update its access control
policy. The company wants to prevent hourly employees from logging in to
company computers after business hours.
Which type of access control policy should be implemented?
Relocate the algorithm to encrypted storage. - CORRECT ANSWER A new software
development company has determined that one of its proprietary algorithms is at
a high risk for unauthorized disclosure. The company's security up to this point
has been fairly lax.
Which procedure should the company implement to protect this asset?
Deterrent - CORRECT ANSWER An accounting firm stores financial data for many
customers. The company policy requires that employees only access data for
customers they are assigned to. The company implements a written policy
indicating an employee can be fired for violating this requirement.
Which type of control has the company implemented?
Restrict account permissions. - CORRECT ANSWER How can an operating system
be hardened in accordance to the principle of least privilege?
Read and limited write access - CORRECT ANSWER A company implements an
Internet-facing web server for its sales force to review product information. The
, sales force can also update its profiles and profile photos, but not the product
information. There is no other information on this server.
Which content access permissions should be granted to the sales force based on
the principle of least privilege?
Only allow access to those who need access to perform their job. - CORRECT
ANSWER A corporation has discovered that some confidential personnel
information has been used inappropriately. How can the principle of least
privilege be applied to limit access to confidential personnel records?
A threat has the potential to cause harm while a vulnerability is a weakness that a
threat can exploit. - CORRECT ANSWER Explain the difference between a
vulnerability and a threat.
Firewalls, passwords, encryptions, access controls, and intrusion detection
systems. - CORRECT ANSWER What are 5 terms that might be considered logical
controls?
Utility - CORRECT ANSWER What term might you use to describe the usefulness of
data?
Interception - CORRECT ANSWER Which category of attack is an attack against
confidentiality?
Interruption, Modification, & Fabrication - CORRECT ANSWER Which category of
attack is an attack against integrity?
206 Questions with Verified Answers
Operating system security - CORRECT ANSWER A company's IT policy manual
states that "All company computers, workstations, application servers, and mobile
devices must have current versions of antivirus software."
Which principle or concept of cybersecurity does this policy statement impact?
Confidentiality - CORRECT ANSWER An organization's procedures document states
that "All electronic communications should be encrypted during transmission
across networks using encryption standards specified in the data encryption
policy."
Which security principle is this policy addressing?
Operations - CORRECT ANSWER A company's website policy states that "To gain
access to the corporate website, each employee must provide a valid user name
and password, and then answer one of six security questions accurately."
Which type of security does the policy address?
Tailgating - CORRECT ANSWER An organization notices unauthorized visitors
following employees through a restricted doorway.
Which vulnerability should be addressed in the organization's security policy?
,Attribute-based - CORRECT ANSWER A company wants to update its access control
policy. The company wants to prevent hourly employees from logging in to
company computers after business hours.
Which type of access control policy should be implemented?
Relocate the algorithm to encrypted storage. - CORRECT ANSWER A new software
development company has determined that one of its proprietary algorithms is at
a high risk for unauthorized disclosure. The company's security up to this point
has been fairly lax.
Which procedure should the company implement to protect this asset?
Deterrent - CORRECT ANSWER An accounting firm stores financial data for many
customers. The company policy requires that employees only access data for
customers they are assigned to. The company implements a written policy
indicating an employee can be fired for violating this requirement.
Which type of control has the company implemented?
Restrict account permissions. - CORRECT ANSWER How can an operating system
be hardened in accordance to the principle of least privilege?
Read and limited write access - CORRECT ANSWER A company implements an
Internet-facing web server for its sales force to review product information. The
, sales force can also update its profiles and profile photos, but not the product
information. There is no other information on this server.
Which content access permissions should be granted to the sales force based on
the principle of least privilege?
Only allow access to those who need access to perform their job. - CORRECT
ANSWER A corporation has discovered that some confidential personnel
information has been used inappropriately. How can the principle of least
privilege be applied to limit access to confidential personnel records?
A threat has the potential to cause harm while a vulnerability is a weakness that a
threat can exploit. - CORRECT ANSWER Explain the difference between a
vulnerability and a threat.
Firewalls, passwords, encryptions, access controls, and intrusion detection
systems. - CORRECT ANSWER What are 5 terms that might be considered logical
controls?
Utility - CORRECT ANSWER What term might you use to describe the usefulness of
data?
Interception - CORRECT ANSWER Which category of attack is an attack against
confidentiality?
Interruption, Modification, & Fabrication - CORRECT ANSWER Which category of
attack is an attack against integrity?
