WGU C836 Study Set: Questions With Valid Solutions
What is the CIA triad in information security? Correct Answer -
Confidentiality, Integrity, and Availability.
What is the main purpose of an information security procedure? Correct
Answer - The main purpose of an information security procedure is to
provide step-by-step instructions for implementing and maintaining security
controls, in accordance with the organization's security policies.
What is the difference between a policy, a standard, and a procedure in the
context of information security? Correct Answer - A policy is a high-level
statement that outlines the organization's approach to information security. A
standard is a specific requirement that supports the policy, while a procedure
provides step-by-step instructions for implementing the standard.
What is NOT one of the seven domains of a typical IT infrastructure? Correct
Answer - Human Resources Domain
What are the two main types of information security policies? Correct
Answer - organizational (or enterprise) policies and system-specific
policies.
Why is it important to have a policy review and update process in place?
Correct Answer - to ensure that information security policies remain
relevant and effective, adapting to changes in technology, threats, regulatory
requirements, and the organization's business environment.
What is an example of a security control that would typically be defined in a
procedure? Correct Answer - A firewall rule set
What is the role of the information security awareness and training program
in supporting an organization's security policies and procedures? Correct
Answer - The information security awareness and training program helps
to ensure that employees understand and follow the organization's security
policies and procedures, by providing them with the necessary knowledge,
skills, and motivation to protect information assets.
, What are the five functions of the NIST Cybersecurity Framework? Correct
Answer - Identify, Protect, Detect, Respond, and Recover.
What is an operating system? Correct Answer - An operating system
(OS) is a software that manages computer hardware and software resources,
and provides services to applications.
What is operating system security? Correct Answer - Operating system
security refers to the measures taken to protect the operating system from
unauthorized access, malicious attacks, and other security threats.
What is a privilege escalation attack? Correct Answer - A privilege
escalation attack is a type of security exploit where a user gains access to
higher-level privileges than they are authorized to have.
What is a buffer overflow attack? Correct Answer - A buffer overflow
attack is a type of security exploit where a program writes more data to a
buffer than it can handle, causing the buffer to overflow and potentially
execute malicious code.
What is a firewall? Correct Answer - A firewall is a security system that
monitors and controls incoming and outgoing network traffic based on a set of
predefined rules.
What is an intrusion detection system? Correct Answer - An intrusion
detection system (IDS) is a security system that monitors network traffic and
system activity for signs of unauthorized access or malicious activity.
What is antivirus software? Correct Answer - An antivirus software is a
program that can detect, prevent, and remove malware from a computer
system.
What is encryption? Correct Answer - Encryption is a process of
converting plain text into a coded message to prevent unauthorized access.
What is decryption? Correct Answer - Decryption is the process of
converting a coded message back into plain text
What is the CIA triad in information security? Correct Answer -
Confidentiality, Integrity, and Availability.
What is the main purpose of an information security procedure? Correct
Answer - The main purpose of an information security procedure is to
provide step-by-step instructions for implementing and maintaining security
controls, in accordance with the organization's security policies.
What is the difference between a policy, a standard, and a procedure in the
context of information security? Correct Answer - A policy is a high-level
statement that outlines the organization's approach to information security. A
standard is a specific requirement that supports the policy, while a procedure
provides step-by-step instructions for implementing the standard.
What is NOT one of the seven domains of a typical IT infrastructure? Correct
Answer - Human Resources Domain
What are the two main types of information security policies? Correct
Answer - organizational (or enterprise) policies and system-specific
policies.
Why is it important to have a policy review and update process in place?
Correct Answer - to ensure that information security policies remain
relevant and effective, adapting to changes in technology, threats, regulatory
requirements, and the organization's business environment.
What is an example of a security control that would typically be defined in a
procedure? Correct Answer - A firewall rule set
What is the role of the information security awareness and training program
in supporting an organization's security policies and procedures? Correct
Answer - The information security awareness and training program helps
to ensure that employees understand and follow the organization's security
policies and procedures, by providing them with the necessary knowledge,
skills, and motivation to protect information assets.
, What are the five functions of the NIST Cybersecurity Framework? Correct
Answer - Identify, Protect, Detect, Respond, and Recover.
What is an operating system? Correct Answer - An operating system
(OS) is a software that manages computer hardware and software resources,
and provides services to applications.
What is operating system security? Correct Answer - Operating system
security refers to the measures taken to protect the operating system from
unauthorized access, malicious attacks, and other security threats.
What is a privilege escalation attack? Correct Answer - A privilege
escalation attack is a type of security exploit where a user gains access to
higher-level privileges than they are authorized to have.
What is a buffer overflow attack? Correct Answer - A buffer overflow
attack is a type of security exploit where a program writes more data to a
buffer than it can handle, causing the buffer to overflow and potentially
execute malicious code.
What is a firewall? Correct Answer - A firewall is a security system that
monitors and controls incoming and outgoing network traffic based on a set of
predefined rules.
What is an intrusion detection system? Correct Answer - An intrusion
detection system (IDS) is a security system that monitors network traffic and
system activity for signs of unauthorized access or malicious activity.
What is antivirus software? Correct Answer - An antivirus software is a
program that can detect, prevent, and remove malware from a computer
system.
What is encryption? Correct Answer - Encryption is a process of
converting plain text into a coded message to prevent unauthorized access.
What is decryption? Correct Answer - Decryption is the process of
converting a coded message back into plain text
