WGU, Information Security and
Assurance (C725), SET X Exam with
100% Correct Answers 2022\23
A branch of computer forensic analysis, involves the identification and extraction of
information from storage media.This may include the following:Magnetic media (e.g.,
hard disks, tapes)Optical media (e.g., compact discs (CDs), digital versatile discs
(DVDs), Blu-ray discs)Memory (e.g., random-access memory (RAM), solid-state
storage)Techniques used for this type of analysis may include the recovery of deleted
files from unallocated sectors of the physical disk, the live analysis of storage media
connected to a computer system (especially useful when examining encrypted media),
and the static analysis of forensic images of storage media. - Correct answer-Media
Analysis
A type of analysis in which the task of the analyst is to collect and correlate information
from multiple disparate sources and produce as comprehensive a picture of network
activity as possible.Methods include:- Intrusion detection and prevention system logs-
Network flow data captured by a flow monitoringsystem- Packet captures deliberately
collected during an incident- Logs from firewalls and other network security devices -
Correct answer-Network Analysis
A type of analysis in which an analyst may conduct a review of software code, looking
for back doors, logic bombs, interpret the log files from application or database servers,
seeking other signs of malicious activity, such as SQL injection attacks, privilege
escalations, or other application attacks. - Correct answer-Software Analysis
A type of Analysis in which an analyst may review the contents of hardware and
embedded devices.This may include a review of:Personal
computersSmartphonesTablet computersEmbedded computers in cars, security
systems, and other devicesAnalysts conducting these reviews must have specialized
knowledge of the systems under review. This often requires calling in expert consultants
who are familiar with the memory, storage systems, and operating systems of such
devices. Because of the complex interactions between software, hardware, and storage,
the discipline of hardware analysis requires skills in both media analysis and software
analysis.Investigation Process - Correct answer-Hardware/Embedded Device Analysis
True or False
Gathering Evidence allows three common alternatives:Voluntary surrender, subpoena,
search warrant - Correct answer-True
- Military and intelligence attacks
- Business attacks
, - Financial attacks
- Terrorist attacks
- Grudge attacks
- Thrill attacks - Correct answer-Types of Computer crimes
A category of computer crime attacks in which are launched primarily to obtain secret
and restricted information from law enforcement or military and technological research
sources. - Correct answer-Military and intelligence attacks
A category of computer crime attacks in which is focused on illegally obtaining an
organization's confidential information. This could be information that is critical to the
operation of the organization, such as a secret recipe, or information that could damage
the organization's reputation if disclosed, such as personal information about its
employees. - Correct answer-Business Attacks
A category of computer crime attacks in which are carried out to unlawfully obtain
money or services. They are the type of computer crime you most commonly hear about
in the news. The goal of a financial attack could be to steal credit card numbers,
increase the balance in a bank account, or place "free" long-distance telephone calls. -
Correct answer-Financial Attacks
A category of computer crime attacks in which the goal is to disrupt normal life and instill
fear. - Correct answer-Terrorist Attacks
A category of computer crime attacks in which are carried out to damage an
organization or a person. The damage could be in the loss of information or information
processing capabilities or harm to the organization or a person's reputation. - Correct
answer-Grudge Attacks
A category of computer crime attacks in which are launched only for the fun of it.
Attackers who lack the ability to devise their own attacks will often download programs
that do their work for them. These attackers are often called script kiddies because they
run only other people's programs, or scripts, to launch an attack. - Correct answer-Thrill
attacks
The safety and welfare of society and the common good, duty to our principals, and to
each other requires that we adhere, and be seen to adhere, to the highest ethical
standards of behavior.Therefore, strict adherence to this Code is a condition of
certification. - Correct answer-Code of Ethics Preamble
Protect society, the common good, necessary public trust and confidence, and the
infrastructure. Security professionals have great social responsibility. We are charged
with the burden of ensuring that our actions benefit the common good.Act honorably,
honestly, justly, responsibly, and legally. Integrity is essential to the conduct of our
duties. We cannot carry out our duties effectively if others within our organization, the
security community, or the general public have doubts about the accuracy of the
Assurance (C725), SET X Exam with
100% Correct Answers 2022\23
A branch of computer forensic analysis, involves the identification and extraction of
information from storage media.This may include the following:Magnetic media (e.g.,
hard disks, tapes)Optical media (e.g., compact discs (CDs), digital versatile discs
(DVDs), Blu-ray discs)Memory (e.g., random-access memory (RAM), solid-state
storage)Techniques used for this type of analysis may include the recovery of deleted
files from unallocated sectors of the physical disk, the live analysis of storage media
connected to a computer system (especially useful when examining encrypted media),
and the static analysis of forensic images of storage media. - Correct answer-Media
Analysis
A type of analysis in which the task of the analyst is to collect and correlate information
from multiple disparate sources and produce as comprehensive a picture of network
activity as possible.Methods include:- Intrusion detection and prevention system logs-
Network flow data captured by a flow monitoringsystem- Packet captures deliberately
collected during an incident- Logs from firewalls and other network security devices -
Correct answer-Network Analysis
A type of analysis in which an analyst may conduct a review of software code, looking
for back doors, logic bombs, interpret the log files from application or database servers,
seeking other signs of malicious activity, such as SQL injection attacks, privilege
escalations, or other application attacks. - Correct answer-Software Analysis
A type of Analysis in which an analyst may review the contents of hardware and
embedded devices.This may include a review of:Personal
computersSmartphonesTablet computersEmbedded computers in cars, security
systems, and other devicesAnalysts conducting these reviews must have specialized
knowledge of the systems under review. This often requires calling in expert consultants
who are familiar with the memory, storage systems, and operating systems of such
devices. Because of the complex interactions between software, hardware, and storage,
the discipline of hardware analysis requires skills in both media analysis and software
analysis.Investigation Process - Correct answer-Hardware/Embedded Device Analysis
True or False
Gathering Evidence allows three common alternatives:Voluntary surrender, subpoena,
search warrant - Correct answer-True
- Military and intelligence attacks
- Business attacks
, - Financial attacks
- Terrorist attacks
- Grudge attacks
- Thrill attacks - Correct answer-Types of Computer crimes
A category of computer crime attacks in which are launched primarily to obtain secret
and restricted information from law enforcement or military and technological research
sources. - Correct answer-Military and intelligence attacks
A category of computer crime attacks in which is focused on illegally obtaining an
organization's confidential information. This could be information that is critical to the
operation of the organization, such as a secret recipe, or information that could damage
the organization's reputation if disclosed, such as personal information about its
employees. - Correct answer-Business Attacks
A category of computer crime attacks in which are carried out to unlawfully obtain
money or services. They are the type of computer crime you most commonly hear about
in the news. The goal of a financial attack could be to steal credit card numbers,
increase the balance in a bank account, or place "free" long-distance telephone calls. -
Correct answer-Financial Attacks
A category of computer crime attacks in which the goal is to disrupt normal life and instill
fear. - Correct answer-Terrorist Attacks
A category of computer crime attacks in which are carried out to damage an
organization or a person. The damage could be in the loss of information or information
processing capabilities or harm to the organization or a person's reputation. - Correct
answer-Grudge Attacks
A category of computer crime attacks in which are launched only for the fun of it.
Attackers who lack the ability to devise their own attacks will often download programs
that do their work for them. These attackers are often called script kiddies because they
run only other people's programs, or scripts, to launch an attack. - Correct answer-Thrill
attacks
The safety and welfare of society and the common good, duty to our principals, and to
each other requires that we adhere, and be seen to adhere, to the highest ethical
standards of behavior.Therefore, strict adherence to this Code is a condition of
certification. - Correct answer-Code of Ethics Preamble
Protect society, the common good, necessary public trust and confidence, and the
infrastructure. Security professionals have great social responsibility. We are charged
with the burden of ensuring that our actions benefit the common good.Act honorably,
honestly, justly, responsibly, and legally. Integrity is essential to the conduct of our
duties. We cannot carry out our duties effectively if others within our organization, the
security community, or the general public have doubts about the accuracy of the
