D430 WGU SECTION 2
Study online at https://quizlet.com/_jqrmmr
1. What is the CIA Confidentiality (keeping data secret), Integrity (keeping data unaltered), and Avail-
Triad? ability (keeping data accessible)
2. What is "Defense A strategy that uses multiple layers of varying security controls (such as physical,
in Depth"? logical, and administrative barriers) to protect an asset so that if one layer fails,
others are in place to stop the threat.
3. What is the differ- A vulnerability is a weakness in a system or process. A threat is an outside force or
ence between a entity that can exploit that weakness to cause harm.
vulnerability and
a threat?
4. What is the Identification is claiming who you are (e.g., typing a username). Authentication is
difference be- proving that claim is valid (e.g., providing a password).
tween Identifica-
tion and Authen-
tication?
5. What are the Something you know (e.g., password, PIN).
three primary Something you have (e.g., token, keycard, smart card).
factors of authen- Something you are (e.g., fingerprint, iris scan).
tication?
6. What is Autho- The process of determining exactly what an authenticated party is allowed to do
rization? or access.
7. What are the four Allowing access, denying access, limiting access, and revoking access.
basic tasks of
an access control
system?
8. A system where permissions are tied to a user's token or key rather than the
resource itself. Anyone holding the token has the access rights associated with it.
1/2