WGU D360 TASK 1 SCENARIO COMPLETE
TASK SOLUTION
◉ Interception.
Answer: Interception attacks allow unauthorized users to access our
data, applications, or environments and are primarily an attack
against confidentiality. Interception might take the form of
unauthorized file viewing or copying, eavesdropping on phone
conversations, or reading e-mail, and can be conducted against data
at rest or in motion. Properly executed, interception attacks can be
very difficult to detect.
Affects Confidentiality
◉ Interruption.
Answer: Interruption attacks cause our assets to become unusable
or unavailable for our use, on a temporary or permanent basis.
Interruption attacks often affect availability but can be an attack on
integrity as well. In the case of a DoS attack on a mail server, we
would classify this as an availability attack.
Affects Integrity and availability
◉ Modification.
,Answer: Modification attacks involve tampering with our asset. If we
access a file in an unauthorized manner and alter the data it
contains, we have affected the integrity of the data contained in the
file.
◉ Fabrication.
Answer: Fabrication attacks involve generating data, processes,
communications, or other similar activities with a system.
Fabrication attacks primarily affect integrity but could be
considered an availability attack as well. If we generate spurious
information in a database, this would be considered to be a
fabrication attack.
Affects Integrity and Availability
◉ Threat.
Answer: Something that has potential to cause harm
◉ Vulnerability.
Answer: Weaknesses that can be used to harm us
◉ Risk.
Answer: Likeliness that something bad will happen
, ◉ Impact.
Answer: The value of the asset is used to assess if a risk is present
◉ Something you know.
Answer: Password or PIN
◉ Something you are.
Answer: An authentication factor using biometrics, such as a
fingerprint scanner.
◉ Something you have.
Answer: Authentication factor that relies on possession (FOB, Card,
Cell Phone, Key)
◉ Something you do.
Answer: An authentication factor indicating action, such as gestures
on a touch screen.
◉ Multifactor Authentication.
Answer: Uses one or more authentication methods for access
◉ Mutual Authentication.
TASK SOLUTION
◉ Interception.
Answer: Interception attacks allow unauthorized users to access our
data, applications, or environments and are primarily an attack
against confidentiality. Interception might take the form of
unauthorized file viewing or copying, eavesdropping on phone
conversations, or reading e-mail, and can be conducted against data
at rest or in motion. Properly executed, interception attacks can be
very difficult to detect.
Affects Confidentiality
◉ Interruption.
Answer: Interruption attacks cause our assets to become unusable
or unavailable for our use, on a temporary or permanent basis.
Interruption attacks often affect availability but can be an attack on
integrity as well. In the case of a DoS attack on a mail server, we
would classify this as an availability attack.
Affects Integrity and availability
◉ Modification.
,Answer: Modification attacks involve tampering with our asset. If we
access a file in an unauthorized manner and alter the data it
contains, we have affected the integrity of the data contained in the
file.
◉ Fabrication.
Answer: Fabrication attacks involve generating data, processes,
communications, or other similar activities with a system.
Fabrication attacks primarily affect integrity but could be
considered an availability attack as well. If we generate spurious
information in a database, this would be considered to be a
fabrication attack.
Affects Integrity and Availability
◉ Threat.
Answer: Something that has potential to cause harm
◉ Vulnerability.
Answer: Weaknesses that can be used to harm us
◉ Risk.
Answer: Likeliness that something bad will happen
, ◉ Impact.
Answer: The value of the asset is used to assess if a risk is present
◉ Something you know.
Answer: Password or PIN
◉ Something you are.
Answer: An authentication factor using biometrics, such as a
fingerprint scanner.
◉ Something you have.
Answer: Authentication factor that relies on possession (FOB, Card,
Cell Phone, Key)
◉ Something you do.
Answer: An authentication factor indicating action, such as gestures
on a touch screen.
◉ Multifactor Authentication.
Answer: Uses one or more authentication methods for access
◉ Mutual Authentication.
