C836 WGU: Questions With Suitable Solutions
Information Security Correct Answer - Protects information and
information systems from unauthorized access, use, disclosure, disruption,
modification, or destruction
Payment Card Industry Data Security Standard (PCI DSS) Correct Answer -
Companies that process credit card payments must comply with this set of
standards
Confidentiality Correct Answer - Used to keep something private or
minimally known
Integrity Correct Answer - Refers to the ability to prevent our data from
being unchanged
Availability Correct Answer - Refers to the ability to access our data
when we need it
Interception Correct Answer - A type of attack, primarily against
confidentiality
Threat Correct Answer - Something that has the potential to cause harm
to our assets
Vulnerability Correct Answer - A weakness that can be used to harm us
Risk Correct Answer - The likelihood that something bad will happen
Interruption attack Correct Answer - An attack that causes our assets to
become unusable or unavailable for our use, on a temporary or permanent
basis
Modification Attack Correct Answer - An attack that involves tampering
with our assets
Parkerian hexad Correct Answer - A model that adds three more
principles to the CIA triad: possession or control, utility, and authenticity
,Possession or control Correct Answer - The physical disposition of the
media on which the data is stored
Authenticity Correct Answer - Allows for attribution as to the owner or
creator of the data in question
Utility Correct Answer - Refers to how useful the data is to us
Fabrication attack Correct Answer - An attack that involves generating
data, processes, communications, or other similar activities with a system
Identify assets Correct Answer - One of the first and most important
steps of the risk management process
Defense in depth Correct Answer - A multilayered defense that will
allow us to achieve a successful defense should one or more of our defensive
measures fail
Administrative controls Correct Answer - Based on rules, laws, policies,
procedures, guidelines, and other items that are "paper" in nature
Logical controls Correct Answer - Sometimes called technical controls,
these protect the systems, networks, and environments that process, transmit,
and store our data
Physical controls Correct Answer - Controls that protect the physical
environment in which our systems sit, or where our data is stored
Mitigating Risk Correct Answer - Involves putting measures in place to
help ensure that a given type of threat is accounted for
Preparation Phase Correct Answer - The risk management phase that
consists of all of the activities that we can perform in advance of the incident
itself, in order to better enable us to handle it
Detection and analysis phase Correct Answer - The risk management
phase where we detect the occurrence of an issue and decide whether it is
actually an incident so that we can respond to it appropriately
, Post-incident activity phase Correct Answer - The risk management
phase where we determine specifically what happened, why it happened, and
what we can do to keep it from happening again
Eradication Correct Answer - To completely remove the effects of the
issue from our environment
Containment Correct Answer - Taking steps to ensure that the situation
does not cause any more damage than it already has, or at the very least,
lessen any ongoing harm
Recover Correct Answer - Restore to a better state (either to the state
prior to the incident, or if we did not detect the problem immediately, prior to
when the issue started)
Identity Verification Correct Answer - Something that supports our
claim to identity, either in our personal interactions or in computer systems,
e.g. social security cards
Falsifying Identification Correct Answer - Authentication requirements
help prevent this crime
Authentication Correct Answer - A set of methods we use to establish a
claim of identity as being true
Something you know Correct Answer - A password is an example of this
type of factor
Something you are Correct Answer - An iris scan is an example of this
type of factor
Something you have Correct Answer - A swipe card is an example of this
type of factor
Something you do Correct Answer - The time delay between your
keystrokes is an example of this type of factor
Where you are Correct Answer - Being at a specific terminal is an
example of this type of factor
Information Security Correct Answer - Protects information and
information systems from unauthorized access, use, disclosure, disruption,
modification, or destruction
Payment Card Industry Data Security Standard (PCI DSS) Correct Answer -
Companies that process credit card payments must comply with this set of
standards
Confidentiality Correct Answer - Used to keep something private or
minimally known
Integrity Correct Answer - Refers to the ability to prevent our data from
being unchanged
Availability Correct Answer - Refers to the ability to access our data
when we need it
Interception Correct Answer - A type of attack, primarily against
confidentiality
Threat Correct Answer - Something that has the potential to cause harm
to our assets
Vulnerability Correct Answer - A weakness that can be used to harm us
Risk Correct Answer - The likelihood that something bad will happen
Interruption attack Correct Answer - An attack that causes our assets to
become unusable or unavailable for our use, on a temporary or permanent
basis
Modification Attack Correct Answer - An attack that involves tampering
with our assets
Parkerian hexad Correct Answer - A model that adds three more
principles to the CIA triad: possession or control, utility, and authenticity
,Possession or control Correct Answer - The physical disposition of the
media on which the data is stored
Authenticity Correct Answer - Allows for attribution as to the owner or
creator of the data in question
Utility Correct Answer - Refers to how useful the data is to us
Fabrication attack Correct Answer - An attack that involves generating
data, processes, communications, or other similar activities with a system
Identify assets Correct Answer - One of the first and most important
steps of the risk management process
Defense in depth Correct Answer - A multilayered defense that will
allow us to achieve a successful defense should one or more of our defensive
measures fail
Administrative controls Correct Answer - Based on rules, laws, policies,
procedures, guidelines, and other items that are "paper" in nature
Logical controls Correct Answer - Sometimes called technical controls,
these protect the systems, networks, and environments that process, transmit,
and store our data
Physical controls Correct Answer - Controls that protect the physical
environment in which our systems sit, or where our data is stored
Mitigating Risk Correct Answer - Involves putting measures in place to
help ensure that a given type of threat is accounted for
Preparation Phase Correct Answer - The risk management phase that
consists of all of the activities that we can perform in advance of the incident
itself, in order to better enable us to handle it
Detection and analysis phase Correct Answer - The risk management
phase where we detect the occurrence of an issue and decide whether it is
actually an incident so that we can respond to it appropriately
, Post-incident activity phase Correct Answer - The risk management
phase where we determine specifically what happened, why it happened, and
what we can do to keep it from happening again
Eradication Correct Answer - To completely remove the effects of the
issue from our environment
Containment Correct Answer - Taking steps to ensure that the situation
does not cause any more damage than it already has, or at the very least,
lessen any ongoing harm
Recover Correct Answer - Restore to a better state (either to the state
prior to the incident, or if we did not detect the problem immediately, prior to
when the issue started)
Identity Verification Correct Answer - Something that supports our
claim to identity, either in our personal interactions or in computer systems,
e.g. social security cards
Falsifying Identification Correct Answer - Authentication requirements
help prevent this crime
Authentication Correct Answer - A set of methods we use to establish a
claim of identity as being true
Something you know Correct Answer - A password is an example of this
type of factor
Something you are Correct Answer - An iris scan is an example of this
type of factor
Something you have Correct Answer - A swipe card is an example of this
type of factor
Something you do Correct Answer - The time delay between your
keystrokes is an example of this type of factor
Where you are Correct Answer - Being at a specific terminal is an
example of this type of factor
