WGU COURSE C836 FUNDAMENTALS OF
INFORMATION SECURITY QUIZLET BY BRIAN
MACFARLANE EXPECTED QUESTIONS WITH VERIFIED
ANSWERS
Question 1.
Shovels and Shingles is a small construction company consisting of 12 computers that have Internet
access. The company is concerned that a wily, computer-savvy competitor will send e-mail messages
pretending to be from Shovels and Shingles to its customers, in an attempt to gather customer
information. What encryption solution best prevents a competitor from successfully impersonating the
company?
A Elliptic Curve Cryptography (ECC)
B Blowfish
C SSL
D Advanced Encryption Standard (AES)
E Digital signatures
ANSWER
E
Question 2.
True or False. Access controls are policies or procedures used to control access to certain items.
A True
B False
ANSWER
A
Question 3.
______ protects the customers of financial institutions.
A PCI DSS
B SOX
C FISMA
D FERPA
E GLBA
ANSWER
E
,Question 4.
Put controls in place.
ANSWER
Step 5: Mitigate Risks
Question 5.
Which security type deliberately exposes a system's vulnerabilities or resources to an attacker?
A Intrusion detection
B Firewalls
C Honeypots
D Intrusion prevention
ANSWER
C
Question 6.
A retail store has hired a third party to audit its computer and network systems that process credit card
payments.
Which industry standard is the retail store addressing?
A FERPA
B HIPAA
C SOX
D PCI DSS
ANSWER
D
Question 7.
A company was the victim of a security breach resulting in stolen user credentials. An attacker used a
stolen username and password to log in to an employee email account.
Which security practice could have reduced the post-breach impact of this event?
A Multi-factor authentication
B Operating system hardening
C Network segmentation
D Mutual authentication
ANSWER
A
,Question 8.
A bank website accepts online loan applications. It requires applicants to review and sign a disclosure
document explaining the organization's information sharing practices.
Which federal law protects consumer's financial information?
A SOX
B GLBA
C FERPA
D HIPAA
ANSWER
B
Question 9.
Altering a web server config file is an example of _______________.
ANSWER
Modification
Question 10.
Attack is similar to XSS, in a general sense. In this type of attack, the attacker places a link, or links, on a
Web page in such a way that they will be automatically executed, in order to initiate a particular activity
on another Web page or application where the user is currently authenticated. For instance, such a link
might cause the browser to add items to our shopping cart on Amazon or transfer money from one
bank account to another.
ANSWER
cross-site request forgery (XSRF)
Question 11.
FISMA refers to ____.
A Florida Information Systems Modules Actions
B Federal Information Security Modernization Act of 2014
C Federal Information Security Modification Act of 2009
D Federal Information Security Management Act of 2002 and Federal Information Security
Modernization Act of 2014
E Federal Information Security Management Act of 2002
ANSWER
D
, Question 12.
Which U.S. law defines security standards exclusively for federal agencies?
A HIPAA
B FERPA
C GLBA
D FISMA
ANSWER
D
Question 13.
A firewall that can watch packets and monitor the traffic from a given connection is using what kind of
firewall technology?
A Stateful packet inspection
B Deep packet inspection
C Packet filtering
ANSWER
A
Question 14.
We are somewhat limited in our ability to protect which type of data?
A Data in use
B Data at rest
C Data in motion
ANSWER
A
Question 15.
Which social engineering technique involves impersonating someone else to convince the target to
perform some action that they wouldn't normally do for a stranger?
A Spear phishing
B Tailgating
C Pretexting
D Phishing
ANSWER
C
INFORMATION SECURITY QUIZLET BY BRIAN
MACFARLANE EXPECTED QUESTIONS WITH VERIFIED
ANSWERS
Question 1.
Shovels and Shingles is a small construction company consisting of 12 computers that have Internet
access. The company is concerned that a wily, computer-savvy competitor will send e-mail messages
pretending to be from Shovels and Shingles to its customers, in an attempt to gather customer
information. What encryption solution best prevents a competitor from successfully impersonating the
company?
A Elliptic Curve Cryptography (ECC)
B Blowfish
C SSL
D Advanced Encryption Standard (AES)
E Digital signatures
ANSWER
E
Question 2.
True or False. Access controls are policies or procedures used to control access to certain items.
A True
B False
ANSWER
A
Question 3.
______ protects the customers of financial institutions.
A PCI DSS
B SOX
C FISMA
D FERPA
E GLBA
ANSWER
E
,Question 4.
Put controls in place.
ANSWER
Step 5: Mitigate Risks
Question 5.
Which security type deliberately exposes a system's vulnerabilities or resources to an attacker?
A Intrusion detection
B Firewalls
C Honeypots
D Intrusion prevention
ANSWER
C
Question 6.
A retail store has hired a third party to audit its computer and network systems that process credit card
payments.
Which industry standard is the retail store addressing?
A FERPA
B HIPAA
C SOX
D PCI DSS
ANSWER
D
Question 7.
A company was the victim of a security breach resulting in stolen user credentials. An attacker used a
stolen username and password to log in to an employee email account.
Which security practice could have reduced the post-breach impact of this event?
A Multi-factor authentication
B Operating system hardening
C Network segmentation
D Mutual authentication
ANSWER
A
,Question 8.
A bank website accepts online loan applications. It requires applicants to review and sign a disclosure
document explaining the organization's information sharing practices.
Which federal law protects consumer's financial information?
A SOX
B GLBA
C FERPA
D HIPAA
ANSWER
B
Question 9.
Altering a web server config file is an example of _______________.
ANSWER
Modification
Question 10.
Attack is similar to XSS, in a general sense. In this type of attack, the attacker places a link, or links, on a
Web page in such a way that they will be automatically executed, in order to initiate a particular activity
on another Web page or application where the user is currently authenticated. For instance, such a link
might cause the browser to add items to our shopping cart on Amazon or transfer money from one
bank account to another.
ANSWER
cross-site request forgery (XSRF)
Question 11.
FISMA refers to ____.
A Florida Information Systems Modules Actions
B Federal Information Security Modernization Act of 2014
C Federal Information Security Modification Act of 2009
D Federal Information Security Management Act of 2002 and Federal Information Security
Modernization Act of 2014
E Federal Information Security Management Act of 2002
ANSWER
D
, Question 12.
Which U.S. law defines security standards exclusively for federal agencies?
A HIPAA
B FERPA
C GLBA
D FISMA
ANSWER
D
Question 13.
A firewall that can watch packets and monitor the traffic from a given connection is using what kind of
firewall technology?
A Stateful packet inspection
B Deep packet inspection
C Packet filtering
ANSWER
A
Question 14.
We are somewhat limited in our ability to protect which type of data?
A Data in use
B Data at rest
C Data in motion
ANSWER
A
Question 15.
Which social engineering technique involves impersonating someone else to convince the target to
perform some action that they wouldn't normally do for a stranger?
A Spear phishing
B Tailgating
C Pretexting
D Phishing
ANSWER
C
