WGU C845 VUN1 TASK 3 EVALUATING AND
DEFENDING DATA SECURITY AND SYSTEM
OPERATIONS COMPLETE ANSWER GUIDE
◉ Which web attack is possible due to a lack of input validation?
A Extraneous files
B Clickjacking
C SQL injection
D Cross-site request forgery.
Answer: C
◉ Which file action implements the principle of confidentiality from
the CIA triad?
A Compression
B Hash
C Backup
D Encryption.
Answer: D
,◉ Which cyber defense concept suggests limiting permissions to
only what is necessary to perform a particular task?
A Authentication
B Authorization
C Defense in depth
D Principle of least privilege.
Answer: D
◉ A company institutes a new policy that "All office computer
monitors must face toward employees and must face away from
doorways. The monitor screens must not be visible to people visiting
the office."
Which principle of the CIA triad is this company applying?
A Availability
B Confidentiality
C Utility
D Integrity.
Answer: B
,◉ At a small company, an employee makes an unauthorized data
alteration.
Which component of the CIA triad has been compromised?
A Confidentiality
B Authenticity
C Integrity
D Availability.
Answer: C
◉ An organization plans to encrypt data in transit on a network.
Which aspect of data is the organization attempting to protect?
A Integrity
B Possession
C Availability
D Authenticity.
Answer: A
, ◉ Which aspect of the CIA triad is violated by an unauthorized
database rollback or undo?
A Availability
B Identification
C Integrity
D Confidentiality.
Answer: C
◉ A company's website has suffered several denial of service (DoS)
attacks and wishes to thwart future attacks.
Which security principle is the company addressing?
A Availability
B Authenticity
C Confidentiality
D Possession.
Answer: A
◉ An organization has a requirement that all database servers and
file servers be configured to maintain operations in the presence of a
failure.
DEFENDING DATA SECURITY AND SYSTEM
OPERATIONS COMPLETE ANSWER GUIDE
◉ Which web attack is possible due to a lack of input validation?
A Extraneous files
B Clickjacking
C SQL injection
D Cross-site request forgery.
Answer: C
◉ Which file action implements the principle of confidentiality from
the CIA triad?
A Compression
B Hash
C Backup
D Encryption.
Answer: D
,◉ Which cyber defense concept suggests limiting permissions to
only what is necessary to perform a particular task?
A Authentication
B Authorization
C Defense in depth
D Principle of least privilege.
Answer: D
◉ A company institutes a new policy that "All office computer
monitors must face toward employees and must face away from
doorways. The monitor screens must not be visible to people visiting
the office."
Which principle of the CIA triad is this company applying?
A Availability
B Confidentiality
C Utility
D Integrity.
Answer: B
,◉ At a small company, an employee makes an unauthorized data
alteration.
Which component of the CIA triad has been compromised?
A Confidentiality
B Authenticity
C Integrity
D Availability.
Answer: C
◉ An organization plans to encrypt data in transit on a network.
Which aspect of data is the organization attempting to protect?
A Integrity
B Possession
C Availability
D Authenticity.
Answer: A
, ◉ Which aspect of the CIA triad is violated by an unauthorized
database rollback or undo?
A Availability
B Identification
C Integrity
D Confidentiality.
Answer: C
◉ A company's website has suffered several denial of service (DoS)
attacks and wishes to thwart future attacks.
Which security principle is the company addressing?
A Availability
B Authenticity
C Confidentiality
D Possession.
Answer: A
◉ An organization has a requirement that all database servers and
file servers be configured to maintain operations in the presence of a
failure.
