1|Page
WGU C836 Objective Assessment Final|| QUESTIONS
AND CORRECT DETAILED ANSWERS (VERIFIED
ANSWERS) |ALREADY GRADED A+||NEWEST EXAM!!!
A social engineering technique that uses electronic
communications (email, text, phone calls) to convince a
potential victim to give out sensitive information or perform
some action - answer-phishing
A social engineering techniqe that targets a specific
company, organization, or person, and involves knowing
specifics about the target to appear valid - answer-
spearphishing
A method by which a person follows directly behind
another person who authenticates to the physical access
control measure, thus allowing the follower to gain access
without authenticating - answer-tailgating (piggybacking)
A security awareness issue that involves educating users
about security issues around connecting devices to
networks, such as connecting outside devices to the
corporate network, and connecting corporate resources to
a public network - answer-network usage
,2|Page
A security awareness issue that involves educating users
about malicious software and how to avoid it - answer-
malware
Security awareness issue that is concerned with protecting
a company's assets - answer-use of personal equipment
A security awareness issue that requires users to protect
sensitive information at all times, even when away from
one's desk - answer-clean desk policy
A security awareness issue that is necessary to maintain
compliance throughout the organization - answer-policy
and regulatory knowledge
A program that seeks to make users aware of the risk they
are accepting through their current actions and attempts to
change their behavior through targeted efforts - answer-
sate (security awareness, training and education)
The process we use to protect our information - answer-
opsec
(operations security)
,3|Page
A chinese military general from 6th century bc who wrote
the art of war, a text that shows early examples of
operations security principles - answer-sun tzu
The codename of a study conducted to discover the cause
of an information leak during the vietnam war; is now a
symbol of opsec - answer-purple dragon
The process of intelligence gathering and analysis in order
to support business decisions - answer-competitive
intelligence
1.identification of critical information
2.analysis of threats
3.analysis of vulnerabilities
4.assessment of risks
5.application of countermeasures - answer-5 steps of the
operations security process
The 1st law of haas' laws of operations security - answer-if
you don't know the threat, how do you know what to
protect?
, 4|Page
The 2nd law of haas' laws of operations security - answer-
if you don't know what to protect, how do you know you
are protecting it?
The 3rd law of haas' laws of operations security - answer-if
you are not protecting it, the dragon wins!
Services that are hosted, often over the internet, for the
purposes of delivering easily scaled computing services or
resources - answer-cloud computing
1st step in the opsec process, arguably the most
important: to identify the assets that most need protection
and will cause us the most harm if exposed - answer-
identification of critical information
2nd step in the opsec process: to look at the potential
harm or financial impact that might be caused by critical
information being exposed, and who might exploit that
exposure - answer-analysis of threats
3rd step in the opsec process: to look at the weaknesses
that can be used to harm us - answer-analysis of
vulnerabilities
WGU C836 Objective Assessment Final|| QUESTIONS
AND CORRECT DETAILED ANSWERS (VERIFIED
ANSWERS) |ALREADY GRADED A+||NEWEST EXAM!!!
A social engineering technique that uses electronic
communications (email, text, phone calls) to convince a
potential victim to give out sensitive information or perform
some action - answer-phishing
A social engineering techniqe that targets a specific
company, organization, or person, and involves knowing
specifics about the target to appear valid - answer-
spearphishing
A method by which a person follows directly behind
another person who authenticates to the physical access
control measure, thus allowing the follower to gain access
without authenticating - answer-tailgating (piggybacking)
A security awareness issue that involves educating users
about security issues around connecting devices to
networks, such as connecting outside devices to the
corporate network, and connecting corporate resources to
a public network - answer-network usage
,2|Page
A security awareness issue that involves educating users
about malicious software and how to avoid it - answer-
malware
Security awareness issue that is concerned with protecting
a company's assets - answer-use of personal equipment
A security awareness issue that requires users to protect
sensitive information at all times, even when away from
one's desk - answer-clean desk policy
A security awareness issue that is necessary to maintain
compliance throughout the organization - answer-policy
and regulatory knowledge
A program that seeks to make users aware of the risk they
are accepting through their current actions and attempts to
change their behavior through targeted efforts - answer-
sate (security awareness, training and education)
The process we use to protect our information - answer-
opsec
(operations security)
,3|Page
A chinese military general from 6th century bc who wrote
the art of war, a text that shows early examples of
operations security principles - answer-sun tzu
The codename of a study conducted to discover the cause
of an information leak during the vietnam war; is now a
symbol of opsec - answer-purple dragon
The process of intelligence gathering and analysis in order
to support business decisions - answer-competitive
intelligence
1.identification of critical information
2.analysis of threats
3.analysis of vulnerabilities
4.assessment of risks
5.application of countermeasures - answer-5 steps of the
operations security process
The 1st law of haas' laws of operations security - answer-if
you don't know the threat, how do you know what to
protect?
, 4|Page
The 2nd law of haas' laws of operations security - answer-
if you don't know what to protect, how do you know you
are protecting it?
The 3rd law of haas' laws of operations security - answer-if
you are not protecting it, the dragon wins!
Services that are hosted, often over the internet, for the
purposes of delivering easily scaled computing services or
resources - answer-cloud computing
1st step in the opsec process, arguably the most
important: to identify the assets that most need protection
and will cause us the most harm if exposed - answer-
identification of critical information
2nd step in the opsec process: to look at the potential
harm or financial impact that might be caused by critical
information being exposed, and who might exploit that
exposure - answer-analysis of threats
3rd step in the opsec process: to look at the weaknesses
that can be used to harm us - answer-analysis of
vulnerabilities
