WGU C836
Fundamentals of Information Security
Comprehensive Objective Assessment (OA) Review
50 Practice Questions • Answer Key • Detailed Rationales
EDITION
Core security concepts • Risk management • Cryptography • Network & web security
, WGU C836 • FUNDAMENTALS OF INFORMATION SECURITY • 2026/2027
Key Features
✓ Core Security Frameworks CIA Triad and Parkerian Hexad
✓ Risk Management & Controls Threats, vulnerabilities, ALE, SLE, and risk responses
✓ Cryptography & Access Control Encryption, PKI, least privilege, and access models
✓ Network & Web Security Firewalls, VPNs, SQL injection, XSS, CSRF, and
segmentation
✓ Security Operations Incident response, evidence handling, backups, and recovery
objectives
✓ Complete Practice Bank 50 original practice questions with answers and detailed
rationales
Complete Practice Question Bank (50 Questions)
Each question includes an answer key and explanatory rationale. Questions are organized across the review domains rather
than presented as official exam items.
1. Which cybersecurity term is defined as the potential for an attack on a resource?
SECURITY FUNDAMENTALS
A. Impact
B. Vulnerability
C. Risk
D. Threat
Correct Answer: D. Threat
Rationale: A threat is an actor, event, or circumstance that could exploit a vulnerability. Impact is the
consequence; a vulnerability is the weakness; and risk considers likelihood and potential impact.
2. Which concept refers to the confidentiality, integrity, and availability of data?
SECURITY FUNDAMENTALS
A. AIO Model
B. Information Assurance
C. CIA Triad
D. Security Framework
Correct Answer: C. CIA Triad
Rationale: The CIA Triad is the foundational model for describing the three primary objectives of information
security. Information assurance is broader and may include concepts such as authentication and non-repudiation.
3. Which Parkerian Hexad attribute refers to whether information is useful to its intended
recipient?
SECURITY FUNDAMENTALS
A. Authenticity
B. Utility
C. Possession
D. Integrity
Correct Answer: B. Utility
Rationale: Utility concerns the usefulness or value of information. For example, encrypted data may retain
confidentiality but have low utility if the decryption key is unavailable.
4. An organization implements a firewall to block unauthorized network traffic. This is an
example of which type of security control?
SECURITY CONTROLS
A. Administrative control
B. Detective control
Fundamentals of Information Security
Comprehensive Objective Assessment (OA) Review
50 Practice Questions • Answer Key • Detailed Rationales
EDITION
Core security concepts • Risk management • Cryptography • Network & web security
, WGU C836 • FUNDAMENTALS OF INFORMATION SECURITY • 2026/2027
Key Features
✓ Core Security Frameworks CIA Triad and Parkerian Hexad
✓ Risk Management & Controls Threats, vulnerabilities, ALE, SLE, and risk responses
✓ Cryptography & Access Control Encryption, PKI, least privilege, and access models
✓ Network & Web Security Firewalls, VPNs, SQL injection, XSS, CSRF, and
segmentation
✓ Security Operations Incident response, evidence handling, backups, and recovery
objectives
✓ Complete Practice Bank 50 original practice questions with answers and detailed
rationales
Complete Practice Question Bank (50 Questions)
Each question includes an answer key and explanatory rationale. Questions are organized across the review domains rather
than presented as official exam items.
1. Which cybersecurity term is defined as the potential for an attack on a resource?
SECURITY FUNDAMENTALS
A. Impact
B. Vulnerability
C. Risk
D. Threat
Correct Answer: D. Threat
Rationale: A threat is an actor, event, or circumstance that could exploit a vulnerability. Impact is the
consequence; a vulnerability is the weakness; and risk considers likelihood and potential impact.
2. Which concept refers to the confidentiality, integrity, and availability of data?
SECURITY FUNDAMENTALS
A. AIO Model
B. Information Assurance
C. CIA Triad
D. Security Framework
Correct Answer: C. CIA Triad
Rationale: The CIA Triad is the foundational model for describing the three primary objectives of information
security. Information assurance is broader and may include concepts such as authentication and non-repudiation.
3. Which Parkerian Hexad attribute refers to whether information is useful to its intended
recipient?
SECURITY FUNDAMENTALS
A. Authenticity
B. Utility
C. Possession
D. Integrity
Correct Answer: B. Utility
Rationale: Utility concerns the usefulness or value of information. For example, encrypted data may retain
confidentiality but have low utility if the decryption key is unavailable.
4. An organization implements a firewall to block unauthorized network traffic. This is an
example of which type of security control?
SECURITY CONTROLS
A. Administrative control
B. Detective control
