WGU D430 Fundamentals of Information
Security Pre-Assessment & OA Actual 2026/2027
Complete Exam-Style | 100% Verified – Pass
Guaranteed – A+ Graded
Content Area Overview
This actual examination reflects the comprehensive information security knowledge required for success
on the WGU D430 Fundamentals of Information Security Pre-Assessment and Objective Assessment. It is
designed to evaluate the student's understanding of core security principles, threats and vulnerabilities,
risk management, access control models, cryptography, network security, and incident response.
Questions are structured to assess recall of key concepts, application of security principles to real-world
scenarios, and analysis of security controls and countermeasures. This authentic question bank serves as
a comprehensive resource for WGU students demonstrating mastery of information security content for
the 2026/2027 academic year.
Section 1: Core Security Principles (CIA Triad & Parkerian Hexad) (14 Questions)
Q1. A healthcare organization implements encryption for patient records stored in their database.
Which component of the CIA Triad is primarily being protected?
A. Integrity
B. Availability
C. Confidentiality
D. Non-repudiation
C. Confidentiality [CORRECT]
The best answer is C. Encryption ensures that data is accessible only to authorized users, which directly
protects confidentiality—the principle that information should not be disclosed to unauthorized
individuals. While encryption can support integrity in some implementations, its primary purpose here is
keeping patient data private. Availability and non-repudiation are separate security principles addressed
through different controls.
,Correct Answer: C
Q2. A bank's transaction processing system uses digital signatures on all wire transfers. Which security
principle is primarily being enforced?
A. Confidentiality
B. Integrity
C. Non-repudiation
D. Availability
C. Non-repudiation [CORRECT]
The best answer is C. Digital signatures provide proof of origin and prevent the sender from denying
they authorized the transaction. This is the essence of non-repudiation—creating undeniable evidence
that a specific action was taken by a specific party. While digital signatures also support integrity, the
primary purpose in financial transactions is preventing denial of actions, which is non-repudiation.
Correct Answer: C
Q3. Which element of the Parkerian Hexad extends beyond the CIA Triad to address whether data is in
the possession of an authorized party?
A. Authenticity
B. Utility
C. Possession or Control
D. Confidentiality
C. Possession or Control [CORRECT]
The best answer is C. The Parkerian Hexad adds three elements to the CIA Triad: Possession or Control
(ensuring authorized parties possess the data), Authenticity (verifying the data is genuine), and Utility
(ensuring data is in a usable form). Possession or Control specifically addresses whether the right entity
has custody of the information, which is distinct from whether they can read it (confidentiality) or
whether it is accurate (integrity).
Correct Answer: C
Q4. A company discovers that their backup tapes were stolen from an offsite storage facility. The data
on the tapes was encrypted. Which Parkerian Hexad principle was violated, and which was maintained?
,A. Possession violated; Confidentiality maintained
B. Integrity violated; Availability maintained
C. Utility violated; Authenticity maintained
D. Confidentiality violated; Integrity maintained
A. Possession violated; Confidentiality maintained [CORRECT]
The best answer is A. The theft of backup tapes represents a loss of possession or control—the
unauthorized party now physically possesses the data. However, because the data was encrypted,
confidentiality was maintained since the thieves cannot read the contents. This scenario perfectly
illustrates how the Parkerian Hexad principles can be independently affected by security incidents.
Correct Answer: A
Q5. A retail company's website crashes during Black Friday sales due to a distributed denial-of-service
attack. Which component of the CIA Triad was primarily compromised?
A. Confidentiality
B. Integrity
C. Availability
D. Authenticity
C. Availability [CORRECT]
The best answer is C. A denial-of-service attack overwhelms system resources to prevent legitimate
users from accessing services, which directly compromises availability—the principle that data and
systems should be accessible to authorized users when needed. No data was necessarily stolen
(confidentiality) or altered (integrity), but customers could not complete purchases, demonstrating an
availability failure.
Correct Answer: C
Q6. A software company releases a patch after discovering that a checksum validation error allowed
malware to modify system files undetected. Which CIA Triad principle was at risk?
A. Confidentiality
B. Integrity
C. Availability
D. Non-repudiation
B. Integrity [CORRECT]
, The best answer is B. Checksums and hash functions are integrity controls designed to detect
unauthorized modifications to data. When malware altered system files without triggering checksum
failures, the integrity of those files was compromised—meaning the data was no longer reliable or
trustworthy. This is a classic integrity violation where data was tampered with and the tampering went
undetected.
Correct Answer: B
Q7. Which security principle ensures that data is genuine and has not been fraudulently created or
altered?
A. Confidentiality
B. Integrity
C. Authenticity
D. Utility
C. Authenticity [CORRECT]
The best answer is C. Authenticity, one of the Parkerian Hexad principles, ensures that data,
transactions, and communications are genuine and originate from the claimed source. While integrity
focuses on preventing unauthorized modification, authenticity specifically verifies that the data is real
and not forged. This is particularly important in financial transactions, legal documents, and identity
verification systems.
Correct Answer: C
Q8. A hospital's electronic health record system is inaccessible for 6 hours due to a ransomware attack.
Which security controls would have best prevented the availability impact?
A. Encryption and access controls
B. Redundancy, failover systems, and offline backups
C. Hashing and digital signatures
D. Biometric authentication and smart cards
B. Redundancy, failover systems, and offline backups [CORRECT]
The best answer is B. Availability controls such as redundancy (multiple systems), failover (automatic
switching to backup), and offline backups ensure that services remain accessible even during attacks.
Encryption and access controls (A) protect confidentiality, hashing and signatures (C) protect integrity
and authenticity, and biometric authentication (D) supports identification—not availability.
Correct Answer: B
Security Pre-Assessment & OA Actual 2026/2027
Complete Exam-Style | 100% Verified – Pass
Guaranteed – A+ Graded
Content Area Overview
This actual examination reflects the comprehensive information security knowledge required for success
on the WGU D430 Fundamentals of Information Security Pre-Assessment and Objective Assessment. It is
designed to evaluate the student's understanding of core security principles, threats and vulnerabilities,
risk management, access control models, cryptography, network security, and incident response.
Questions are structured to assess recall of key concepts, application of security principles to real-world
scenarios, and analysis of security controls and countermeasures. This authentic question bank serves as
a comprehensive resource for WGU students demonstrating mastery of information security content for
the 2026/2027 academic year.
Section 1: Core Security Principles (CIA Triad & Parkerian Hexad) (14 Questions)
Q1. A healthcare organization implements encryption for patient records stored in their database.
Which component of the CIA Triad is primarily being protected?
A. Integrity
B. Availability
C. Confidentiality
D. Non-repudiation
C. Confidentiality [CORRECT]
The best answer is C. Encryption ensures that data is accessible only to authorized users, which directly
protects confidentiality—the principle that information should not be disclosed to unauthorized
individuals. While encryption can support integrity in some implementations, its primary purpose here is
keeping patient data private. Availability and non-repudiation are separate security principles addressed
through different controls.
,Correct Answer: C
Q2. A bank's transaction processing system uses digital signatures on all wire transfers. Which security
principle is primarily being enforced?
A. Confidentiality
B. Integrity
C. Non-repudiation
D. Availability
C. Non-repudiation [CORRECT]
The best answer is C. Digital signatures provide proof of origin and prevent the sender from denying
they authorized the transaction. This is the essence of non-repudiation—creating undeniable evidence
that a specific action was taken by a specific party. While digital signatures also support integrity, the
primary purpose in financial transactions is preventing denial of actions, which is non-repudiation.
Correct Answer: C
Q3. Which element of the Parkerian Hexad extends beyond the CIA Triad to address whether data is in
the possession of an authorized party?
A. Authenticity
B. Utility
C. Possession or Control
D. Confidentiality
C. Possession or Control [CORRECT]
The best answer is C. The Parkerian Hexad adds three elements to the CIA Triad: Possession or Control
(ensuring authorized parties possess the data), Authenticity (verifying the data is genuine), and Utility
(ensuring data is in a usable form). Possession or Control specifically addresses whether the right entity
has custody of the information, which is distinct from whether they can read it (confidentiality) or
whether it is accurate (integrity).
Correct Answer: C
Q4. A company discovers that their backup tapes were stolen from an offsite storage facility. The data
on the tapes was encrypted. Which Parkerian Hexad principle was violated, and which was maintained?
,A. Possession violated; Confidentiality maintained
B. Integrity violated; Availability maintained
C. Utility violated; Authenticity maintained
D. Confidentiality violated; Integrity maintained
A. Possession violated; Confidentiality maintained [CORRECT]
The best answer is A. The theft of backup tapes represents a loss of possession or control—the
unauthorized party now physically possesses the data. However, because the data was encrypted,
confidentiality was maintained since the thieves cannot read the contents. This scenario perfectly
illustrates how the Parkerian Hexad principles can be independently affected by security incidents.
Correct Answer: A
Q5. A retail company's website crashes during Black Friday sales due to a distributed denial-of-service
attack. Which component of the CIA Triad was primarily compromised?
A. Confidentiality
B. Integrity
C. Availability
D. Authenticity
C. Availability [CORRECT]
The best answer is C. A denial-of-service attack overwhelms system resources to prevent legitimate
users from accessing services, which directly compromises availability—the principle that data and
systems should be accessible to authorized users when needed. No data was necessarily stolen
(confidentiality) or altered (integrity), but customers could not complete purchases, demonstrating an
availability failure.
Correct Answer: C
Q6. A software company releases a patch after discovering that a checksum validation error allowed
malware to modify system files undetected. Which CIA Triad principle was at risk?
A. Confidentiality
B. Integrity
C. Availability
D. Non-repudiation
B. Integrity [CORRECT]
, The best answer is B. Checksums and hash functions are integrity controls designed to detect
unauthorized modifications to data. When malware altered system files without triggering checksum
failures, the integrity of those files was compromised—meaning the data was no longer reliable or
trustworthy. This is a classic integrity violation where data was tampered with and the tampering went
undetected.
Correct Answer: B
Q7. Which security principle ensures that data is genuine and has not been fraudulently created or
altered?
A. Confidentiality
B. Integrity
C. Authenticity
D. Utility
C. Authenticity [CORRECT]
The best answer is C. Authenticity, one of the Parkerian Hexad principles, ensures that data,
transactions, and communications are genuine and originate from the claimed source. While integrity
focuses on preventing unauthorized modification, authenticity specifically verifies that the data is real
and not forged. This is particularly important in financial transactions, legal documents, and identity
verification systems.
Correct Answer: C
Q8. A hospital's electronic health record system is inaccessible for 6 hours due to a ransomware attack.
Which security controls would have best prevented the availability impact?
A. Encryption and access controls
B. Redundancy, failover systems, and offline backups
C. Hashing and digital signatures
D. Biometric authentication and smart cards
B. Redundancy, failover systems, and offline backups [CORRECT]
The best answer is B. Availability controls such as redundancy (multiple systems), failover (automatic
switching to backup), and offline backups ensure that services remain accessible even during attacks.
Encryption and access controls (A) protect confidentiality, hashing and signatures (C) protect integrity
and authenticity, and biometric authentication (D) supports identification—not availability.
Correct Answer: B
