WGU Course C836 Fundamentals of
Information Security Quizlet by Brian
MacFarlane ACTUAL EXAM
QUESTIONS WITH VERIFIED CORRECT
SOLUTIONS |100% GUARANTEED
PASS | LATEST VERSION
1. Which type of tool can be used to detect vulnerabilities in source code
related to improper handling of user input?
A Fuzzer
B Port scanner
C Honeypot
D Sniffer - ANSWER A
2. A petroleum company has a group of computers used to monitor flow of
materials in the refining process. These computers are never connected to
the Internet or other corporate network, and they host proprietary monitoring
software which the company has registered as a trade secret. Which type of
security will be able to help protect its software against theft?
A Network
B Physical
,C Operating system
D Application - ANSWER B
3. An organization wants to minimize the impact of user credential theft by
ensuring that only HR staff can access employee personal information.
Which security mechanism should it implement?
A Apply the principle of least privilege.
B Apply the latest software patches.
C Remove all unnecessary services.
D Turn on logging and auditing. - ANSWER A
4. An organization wants to prevent malware from infecting its workstations,
mobile devices, and web applications. Which security tool should it
implement?
A Antivirus
B Fuzzer
C Firewall
D Scanner - ANSWER A
5. A small IT firm is required to authenticate remote customers who access the
firm's network. Which protection technique should the IT firm employ to
satisfy this requirement?
A RAID
B Data encryption
,C Certificates
D File encryption - ANSWER D
6. A company has files stored on a server that are critical to the organization's
viability. The administrator has assigned the appropriate permissions to the
files. How should the administrator provide additional confidentiality
protection for the files at rest?
A File compression
B Network encryption
C Network compression
D File encryption - ANSWER D
7. Which security solution can an organization deploy to prevent unauthorized
external access to its internal network?
A VPN
B Sniffer
C Firewall
D IDS - ANSWER C
8. A restaurant needs to protect its customers' credit card information. Which
security standard should the restaurant follow?
A FISMA
B PCI DSS
C SOX
, D FERPA - ANSWER B
9. In addition to a username and corresponding password, a desktop application
asks users to submit a special code. This code is produced by an application
running on the users' mobile phone. Which authentication technique is the
phone application providing?
A Something you have
B Something you are
C Something you know
D Something you do - ANSWER A
10.Employees are required to swipe their access cards and then to use an iris
scanner to access protected areas in the company's data center. Which two
authentication techniques are used to protect the data center?
A Something you have and something you are
B Something you know and something you do
C Something you do and something you are
D Something you have and something you know - ANSWER A
11.A health company must comply with HIPAA regulations. It decides to
encrypt databases that contain HIPAA information. Which resource is the
health company directly trying to protect?
A Operating system
B Server
C Data
Information Security Quizlet by Brian
MacFarlane ACTUAL EXAM
QUESTIONS WITH VERIFIED CORRECT
SOLUTIONS |100% GUARANTEED
PASS | LATEST VERSION
1. Which type of tool can be used to detect vulnerabilities in source code
related to improper handling of user input?
A Fuzzer
B Port scanner
C Honeypot
D Sniffer - ANSWER A
2. A petroleum company has a group of computers used to monitor flow of
materials in the refining process. These computers are never connected to
the Internet or other corporate network, and they host proprietary monitoring
software which the company has registered as a trade secret. Which type of
security will be able to help protect its software against theft?
A Network
B Physical
,C Operating system
D Application - ANSWER B
3. An organization wants to minimize the impact of user credential theft by
ensuring that only HR staff can access employee personal information.
Which security mechanism should it implement?
A Apply the principle of least privilege.
B Apply the latest software patches.
C Remove all unnecessary services.
D Turn on logging and auditing. - ANSWER A
4. An organization wants to prevent malware from infecting its workstations,
mobile devices, and web applications. Which security tool should it
implement?
A Antivirus
B Fuzzer
C Firewall
D Scanner - ANSWER A
5. A small IT firm is required to authenticate remote customers who access the
firm's network. Which protection technique should the IT firm employ to
satisfy this requirement?
A RAID
B Data encryption
,C Certificates
D File encryption - ANSWER D
6. A company has files stored on a server that are critical to the organization's
viability. The administrator has assigned the appropriate permissions to the
files. How should the administrator provide additional confidentiality
protection for the files at rest?
A File compression
B Network encryption
C Network compression
D File encryption - ANSWER D
7. Which security solution can an organization deploy to prevent unauthorized
external access to its internal network?
A VPN
B Sniffer
C Firewall
D IDS - ANSWER C
8. A restaurant needs to protect its customers' credit card information. Which
security standard should the restaurant follow?
A FISMA
B PCI DSS
C SOX
, D FERPA - ANSWER B
9. In addition to a username and corresponding password, a desktop application
asks users to submit a special code. This code is produced by an application
running on the users' mobile phone. Which authentication technique is the
phone application providing?
A Something you have
B Something you are
C Something you know
D Something you do - ANSWER A
10.Employees are required to swipe their access cards and then to use an iris
scanner to access protected areas in the company's data center. Which two
authentication techniques are used to protect the data center?
A Something you have and something you are
B Something you know and something you do
C Something you do and something you are
D Something you have and something you know - ANSWER A
11.A health company must comply with HIPAA regulations. It decides to
encrypt databases that contain HIPAA information. Which resource is the
health company directly trying to protect?
A Operating system
B Server
C Data
