WGU C836 Final (pdf) | 2026/2027 | Objective Assessment | Info
Security
1. An organization experiences a security incident where a malicious actor
gains unauthorized access to customer credit card information. Which
principle of the CIA triad has been violated?
A) Integrity
B) Availability
C) Confidentiality
D) Non-repudiation
Correct Answer: Confidentiality
Rationale: Confidentiality ensures that data is accessible only to authorized
parties. Unauthorized access to customer credit card information directly
violates this principle. Integrity would be violated if data were altered, and
availability if data were inaccessible. Non-repudiation is not part of the core
CIA triad.
2. A database administrator accidentally modifies a customer's address
record incorrectly. Which CIA principle is primarily affected by this incident?
A) Confidentiality
B) Integrity
C) Availability
D) Authentication
Correct Answer: Integrity
Rationale: Integrity ensures that data is accurate and has not been altered
without authorization. An incorrect modification of a database record
,compromises data integrity. Confidentiality relates to unauthorized access,
and availability to data accessibility.
3. A company's web server crashes due to a distributed denial-of-service
(DDoS) attack, making the company's website unavailable to customers.
Which CIA principle has been violated?
A) Confidentiality
B) Integrity
C) Availability
D) Non-repudiation
Correct Answer: Availability
Rationale: Availability ensures that data and systems are accessible when
needed. A DDoS attack that makes a website unavailable directly violates
the availability principle. Confidentiality and integrity are not affected by the
unavailability of the system.
4. A security analyst discovers that an attacker has inserted false records
into the organization's database. This type of attack is known as:
A) Interception
B) Modification
C) Fabrication
D) Interruption
Correct Answer: Fabrication
Rationale: Fabrication attacks involve creating or inserting false data or
resources into a system, which primarily compromises data integrity.
,Interception attacks read data without authorization, modification attacks
change existing data, and interruption attacks make systems unavailable.
5. A hacker uses a network sniffer to capture unencrypted login credentials
transmitted over the network. This type of attack is known as:
A) Interception
B) Fabrication
C) Modification
D) Interruption
Correct Answer: Interception
Rationale: Interception attacks access data without authorization,
threatening confidentiality. Capturing unencrypted login credentials with a
sniffer is a classic interception attack.
6. A cybercriminal deletes critical system files, causing the operating system
to crash. This type of attack is known as:
A) Interception
B) Fabrication
C) Modification
D) Interruption
Correct Answer: Interruption
Rationale: Interruption attacks make resources unavailable or unusable,
violating availability. Deleting critical system files that cause a system crash
is an interruption attack.
, 7. An attacker changes the amount on a financial transaction before it is
processed by the bank. This type of attack is known as:
A) Interception
B) Fabrication
C) Modification
D) Interruption
Correct Answer: Modification
Rationale: Modification attacks involve altering existing data, compromising
data integrity. Changing the amount of a financial transaction is a
modification attack.
8. The Parkerian Hexad adds which three principles to the CIA triad?
A) Possession, Authenticity, and Utility
B) Privacy, Authenticity, and Availability
C) Possession, Non-repudiation, and Utility
D) Authenticity, Utility, and Confidentiality
Correct Answer: Possession, Authenticity, and Utility
Rationale: The Parkerian Hexad extends the CIA triad by adding Possession or
Control, Authenticity, and Utility. These additional principles provide a more
comprehensive framework for evaluating information security.
9. Which cybersecurity term is defined as a weakness in a system that could
be exploited by a threat?
A) Risk
B) Threat
Security
1. An organization experiences a security incident where a malicious actor
gains unauthorized access to customer credit card information. Which
principle of the CIA triad has been violated?
A) Integrity
B) Availability
C) Confidentiality
D) Non-repudiation
Correct Answer: Confidentiality
Rationale: Confidentiality ensures that data is accessible only to authorized
parties. Unauthorized access to customer credit card information directly
violates this principle. Integrity would be violated if data were altered, and
availability if data were inaccessible. Non-repudiation is not part of the core
CIA triad.
2. A database administrator accidentally modifies a customer's address
record incorrectly. Which CIA principle is primarily affected by this incident?
A) Confidentiality
B) Integrity
C) Availability
D) Authentication
Correct Answer: Integrity
Rationale: Integrity ensures that data is accurate and has not been altered
without authorization. An incorrect modification of a database record
,compromises data integrity. Confidentiality relates to unauthorized access,
and availability to data accessibility.
3. A company's web server crashes due to a distributed denial-of-service
(DDoS) attack, making the company's website unavailable to customers.
Which CIA principle has been violated?
A) Confidentiality
B) Integrity
C) Availability
D) Non-repudiation
Correct Answer: Availability
Rationale: Availability ensures that data and systems are accessible when
needed. A DDoS attack that makes a website unavailable directly violates
the availability principle. Confidentiality and integrity are not affected by the
unavailability of the system.
4. A security analyst discovers that an attacker has inserted false records
into the organization's database. This type of attack is known as:
A) Interception
B) Modification
C) Fabrication
D) Interruption
Correct Answer: Fabrication
Rationale: Fabrication attacks involve creating or inserting false data or
resources into a system, which primarily compromises data integrity.
,Interception attacks read data without authorization, modification attacks
change existing data, and interruption attacks make systems unavailable.
5. A hacker uses a network sniffer to capture unencrypted login credentials
transmitted over the network. This type of attack is known as:
A) Interception
B) Fabrication
C) Modification
D) Interruption
Correct Answer: Interception
Rationale: Interception attacks access data without authorization,
threatening confidentiality. Capturing unencrypted login credentials with a
sniffer is a classic interception attack.
6. A cybercriminal deletes critical system files, causing the operating system
to crash. This type of attack is known as:
A) Interception
B) Fabrication
C) Modification
D) Interruption
Correct Answer: Interruption
Rationale: Interruption attacks make resources unavailable or unusable,
violating availability. Deleting critical system files that cause a system crash
is an interruption attack.
, 7. An attacker changes the amount on a financial transaction before it is
processed by the bank. This type of attack is known as:
A) Interception
B) Fabrication
C) Modification
D) Interruption
Correct Answer: Modification
Rationale: Modification attacks involve altering existing data, compromising
data integrity. Changing the amount of a financial transaction is a
modification attack.
8. The Parkerian Hexad adds which three principles to the CIA triad?
A) Possession, Authenticity, and Utility
B) Privacy, Authenticity, and Availability
C) Possession, Non-repudiation, and Utility
D) Authenticity, Utility, and Confidentiality
Correct Answer: Possession, Authenticity, and Utility
Rationale: The Parkerian Hexad extends the CIA triad by adding Possession or
Control, Authenticity, and Utility. These additional principles provide a more
comprehensive framework for evaluating information security.
9. Which cybersecurity term is defined as a weakness in a system that could
be exploited by a threat?
A) Risk
B) Threat
