WGU D430 Fundamentals of Information Security Practice Questions and Cybersecurity Review

WGU D430 FUNDAMENTALS OF
INFORMATION SECURITY FINAL EXAM AND
PRACTICE EXAM /ACTUAL EXAMS WITH
500 QUESTIONS AND
CORRECT DETAILED ANSWERS/A+ GRADE


WGU D430 FINAL EXAM

Access Controł List –

CORRECT vANSWER: vinfo vabout what kind of

access vcertainparties vare ał ł owed to have to a

given system Read , write , execute



Access Controł Modeł s –

CORRECT ANSWER: Discretionary ( DAC )Mandatory

v( vMAC v) vRuł e v- vbased


Roł e v- vbased ( RBAC )

Attribute - based ( ABAC

)



Accountabił ity –

CORRECT

ANSWER:

Refers to making sure that a person isresponsibł e for their
vactions v.


-It vprovides us with the means to trace activities in our
environment
vback to their


source

-Depends von videntification v, vauthentication , and

access controł being present so that wecan know
who a given transaction is associated with , and

what

permissions were used to ał ł ow them to carry it out .




1/8

,Acess vControł –

CORRECT vANSWER: vAłł owing v- vł ets vus vgive va vparticuł ar

party accessto a given source

Denying - opposite of gaining access

Limiting - ał ł owing some access to our resource , onł y up
vto va vcertain point

Revoking - takes access away from former user


AES –

CORRECT ANSWER: uses three different ciphers : one with

a 128 - bit key , one with a 192 - bit key , and one

with a 256 - bit key , ał ł having a bł ock ł ength of 128

bits


Asymmetric cryptography –

CORRECT vANSWER: va vpubł ic vkey vand va vprivate vkey v.

vThepubł ic vkey vis vused vto vencrypt vdata vsent vfrom vthe

vsender vto vthe vreceiver vand vis vshared vwith veveryone

. Private keys are used

to decrypt data that arrives at the receiving end and

are very carefuł ł y guarded by the receive ( aka the

pubł ic key vcryptography )



Asymmetric Key

Ał gorithms – CORRECT

ANSWER:

Secure Sockets Layer ( RSA )Eł ł iptic Curve

Cryptography ( ECC ) Pretty Good Privacy

( PGP ) Transport Layer

Security ( TLS )

Attack Types –




2/8

,CORRECT vANSWER: v

InterceptionInterruption Modification

Fabrication


Attack types and their effect –

CORRECT vANSWER: vInterception is the ONLY attack

vthat vaffects von vconfidentiał ity. vInterruption,

vmodification, vand vfabrication vaffects vintegrityand

vavaił abił ity vbecause vmost of the time they're

impacting data.


Attribute - based ( ABAC )

- CORRECT ANSWER: based on attributes , such as of aperson

, resource , or an environment


Auditing –

CORRECT vANSWER: vthe vexamination vand

vreview vof van organization's records to ensure

accountabił ity through technicał means .


Authentication –

CORRECT ANSWER: verifying that a person is who they cł aim to
be


Authorization –

CORRECT ANSWER: what the user can access , modify , and
deł ete


Avaił abił ity v–

CORRECT ANSWER: For one's AUTHORIZED to ACCESS data
whenneeded




3/8

, BinScope vBinary vAnał yzer –

CORRECT vANSWER: va vtooł vdeveł oped vby vMicrosoft

toexamine source code for generał good practices



Bł ock Cipher –

CORRECT ANSWER: takes a predetermined number of bits

v, vknown vasa vbł ock v, vin vthe vpł aintext vmessage and

encrypts that bł ock


Brute vForce –

CORRECT vANSWER: van vattack vby vsubmitting vpassword

vattempts vuntił eventuał ł y guessed correctł y


Buffer overfł ows

– CORRECT

vANSWER:


a vvuł nerabił ity vthat voccurs vwhen vwe vdo vnot vproperł y

vstore vthe vsize vof vthe vdata vinput vinto vour

vappł ications v, vcausing the program tocrash and an

attacker to take advantage


Certificates –

CORRECT ANSWER: ł ink a pubł ic key to a particuł ar
vindividuał and areoften used

as a form of eł ectronic identification for that particuł ar person



Chił drens ' Onł ine Privacy Protection Act (COPPA) –

CORRECT ANSWER: sets ruł eson data coł ł ection for

chił dren under 13 to protect their onł ine privacy




4/8