Western Governors University
U GW · T I · 2 8 1 C
WGU
College of Information Technology — C182
WGU
T O C H A N G E L I V E S F O R T H E B E T T E R B Y C R E AT I N G P AT H W A Y S T O
EST. 1997
OPPORTUNITY
WGU C182 IT.....Defense in Depth
I N T R O D U CT I O N TO I T — CO M P R E H E N S I V E ST U DY G U I D E
INSTITUTION Western Governors University PROGRAM Bachelor of Science — Information
(WGU) Technology
COURSE CODE C182 COURSE TITLE Introduction to IT
ACADEMIC YEAR EXAM TITLE WGU C182 IT.....Defense in Depth
TOTAL QUESTIONS 130 Questions FORMAT Multiple Choice — Select the
Single Best Answer
STUDY GUIDE INSTRUCTIONS
▸ This comprehensive study guide covers all domains of C182 Introduction to IT at Western Governors
University.
▸ Topics include: cybersecurity, networking, software, databases, SDLC, operating systems, ethics, and
more.
▸ Select the single best answer. Correct answers and detailed rationales are provided for self-assessment.
▸ Pay careful attention to security concepts (encryption types, hacker classifications), database
terminology, and SDLC phases.
▸ All content reflects the WGU C182 competency-based curriculum. Good luck!
, C182 — INTRODUCTION TO IT: SECURITY,
Questions 1 – 130
NET WORKING, SOFT WARE & DATA
1. Defense in Depth refers to:
A. Using a single strong firewall to protect all data
B. Protecting every layer that surrounds data
C. Encrypting only the most sensitive files
D. Relying solely on antivirus software
CORRECT ANSWER B — Protecting every layer that surrounds data
RATIONALE Defense in Depth is a layered security strategy — if one layer fails, others still
protect the data. It includes firewalls, encryption, authentication, access controls,
antivirus, and security education. No single security measure is sufficient.
2. Phishing is a security threat that involves:
A. Flooding a server with excessive messages
B. Emails that redirect people to fake websites to steal their information
C. Placing malicious code in a buffer to execute it
D. Obtaining unauthorized access to a host
CORRECT ANSWER B — Emails that redirect people to fake websites to steal their information
RATIONALE Phishing uses deceptive emails appearing to come from legitimate sources.
Victims are directed to fake websites that capture credentials or financial data.
Option A = Denial of Service. Option C = Buffer Overflow. Option D = Hacking.
,3. SQL Injection involves:
A. Sending deceptive emails to users
B. An attacker issuing SQL commands through a web server to manipulate a database
C. Intercepting unencrypted network traffic
D. Self-contained programs that propagate across networks
CORRECT ANSWER B — An attacker issuing SQL commands through a web server to
manipulate a database
RATIONALE SQL Injection exploits vulnerable web forms or URLs by inserting malicious SQL
code. If the web server passes this to the database, the attacker can read, modify,
or delete data. Proper input validation prevents this.
4. A Buffer Overflow is:
A. The oldest and most well-known software exploit — placing malicious code into a buffer
so it can be executed once in memory
B. A type of phishing attack
C. A hardware firewall configuration
D. An encryption method for securing data
CORRECT ANSWER A — The oldest and most well-known software exploit — placing malicious
code into a buffer so it can be executed once in memory
RATIONALE Buffer overflow occurs when a program writes more data to a buffer than it can
hold. The excess data overwrites adjacent memory, potentially allowing
execution of malicious code. Software engineers can protect against this through
bounds checking.
, 5. A White Hat Hacker is someone who:
A. Violates security to commit crimes
B. Informs companies of potential software problems so they can fix them
C. Engages in both malicious and ethical hacking
D. Only performs Denial of Service attacks
CORRECT ANSWER B — Informs companies of potential software problems so they can fix them
RATIONALE White Hat = ethical hacker. They identify vulnerabilities and report them to
vendors so patches can be developed. Option A = Black Hat. Option C = Grey Hat.
6. A Black Hat Hacker is someone who:
A. Helps companies improve security
B. Has malicious intent and violates security to commit crimes or acts of terrorism
C. Only tests their own systems
D. Works for government agencies only
CORRECT ANSWER B — Has malicious intent and violates security to commit crimes or acts of
terrorism
RATIONALE Black Hat = malicious hacker. They exploit vulnerabilities for personal gain, theft,
or destruction. Option A = White Hat.
7. A Grey Hat Hacker is someone who:
A. Only performs ethical hacking
B. Only commits cyber crimes
C. Engages in both white and black hat types of hacking activities
D. Only works for the government
CORRECT ANSWER C — Engages in both white and black hat types of hacking activities
RATIONALE Grey Hat = operates in the middle ground. May hack without permission but not
for malicious purposes — perhaps to expose vulnerabilities publicly. They
straddle ethical and unethical practices.
U GW · T I · 2 8 1 C
WGU
College of Information Technology — C182
WGU
T O C H A N G E L I V E S F O R T H E B E T T E R B Y C R E AT I N G P AT H W A Y S T O
EST. 1997
OPPORTUNITY
WGU C182 IT.....Defense in Depth
I N T R O D U CT I O N TO I T — CO M P R E H E N S I V E ST U DY G U I D E
INSTITUTION Western Governors University PROGRAM Bachelor of Science — Information
(WGU) Technology
COURSE CODE C182 COURSE TITLE Introduction to IT
ACADEMIC YEAR EXAM TITLE WGU C182 IT.....Defense in Depth
TOTAL QUESTIONS 130 Questions FORMAT Multiple Choice — Select the
Single Best Answer
STUDY GUIDE INSTRUCTIONS
▸ This comprehensive study guide covers all domains of C182 Introduction to IT at Western Governors
University.
▸ Topics include: cybersecurity, networking, software, databases, SDLC, operating systems, ethics, and
more.
▸ Select the single best answer. Correct answers and detailed rationales are provided for self-assessment.
▸ Pay careful attention to security concepts (encryption types, hacker classifications), database
terminology, and SDLC phases.
▸ All content reflects the WGU C182 competency-based curriculum. Good luck!
, C182 — INTRODUCTION TO IT: SECURITY,
Questions 1 – 130
NET WORKING, SOFT WARE & DATA
1. Defense in Depth refers to:
A. Using a single strong firewall to protect all data
B. Protecting every layer that surrounds data
C. Encrypting only the most sensitive files
D. Relying solely on antivirus software
CORRECT ANSWER B — Protecting every layer that surrounds data
RATIONALE Defense in Depth is a layered security strategy — if one layer fails, others still
protect the data. It includes firewalls, encryption, authentication, access controls,
antivirus, and security education. No single security measure is sufficient.
2. Phishing is a security threat that involves:
A. Flooding a server with excessive messages
B. Emails that redirect people to fake websites to steal their information
C. Placing malicious code in a buffer to execute it
D. Obtaining unauthorized access to a host
CORRECT ANSWER B — Emails that redirect people to fake websites to steal their information
RATIONALE Phishing uses deceptive emails appearing to come from legitimate sources.
Victims are directed to fake websites that capture credentials or financial data.
Option A = Denial of Service. Option C = Buffer Overflow. Option D = Hacking.
,3. SQL Injection involves:
A. Sending deceptive emails to users
B. An attacker issuing SQL commands through a web server to manipulate a database
C. Intercepting unencrypted network traffic
D. Self-contained programs that propagate across networks
CORRECT ANSWER B — An attacker issuing SQL commands through a web server to
manipulate a database
RATIONALE SQL Injection exploits vulnerable web forms or URLs by inserting malicious SQL
code. If the web server passes this to the database, the attacker can read, modify,
or delete data. Proper input validation prevents this.
4. A Buffer Overflow is:
A. The oldest and most well-known software exploit — placing malicious code into a buffer
so it can be executed once in memory
B. A type of phishing attack
C. A hardware firewall configuration
D. An encryption method for securing data
CORRECT ANSWER A — The oldest and most well-known software exploit — placing malicious
code into a buffer so it can be executed once in memory
RATIONALE Buffer overflow occurs when a program writes more data to a buffer than it can
hold. The excess data overwrites adjacent memory, potentially allowing
execution of malicious code. Software engineers can protect against this through
bounds checking.
, 5. A White Hat Hacker is someone who:
A. Violates security to commit crimes
B. Informs companies of potential software problems so they can fix them
C. Engages in both malicious and ethical hacking
D. Only performs Denial of Service attacks
CORRECT ANSWER B — Informs companies of potential software problems so they can fix them
RATIONALE White Hat = ethical hacker. They identify vulnerabilities and report them to
vendors so patches can be developed. Option A = Black Hat. Option C = Grey Hat.
6. A Black Hat Hacker is someone who:
A. Helps companies improve security
B. Has malicious intent and violates security to commit crimes or acts of terrorism
C. Only tests their own systems
D. Works for government agencies only
CORRECT ANSWER B — Has malicious intent and violates security to commit crimes or acts of
terrorism
RATIONALE Black Hat = malicious hacker. They exploit vulnerabilities for personal gain, theft,
or destruction. Option A = White Hat.
7. A Grey Hat Hacker is someone who:
A. Only performs ethical hacking
B. Only commits cyber crimes
C. Engages in both white and black hat types of hacking activities
D. Only works for the government
CORRECT ANSWER C — Engages in both white and black hat types of hacking activities
RATIONALE Grey Hat = operates in the middle ground. May hack without permission but not
for malicious purposes — perhaps to expose vulnerabilities publicly. They
straddle ethical and unethical practices.
