WGU C843 KOP2 TASK 1
UPDATED ACTUAL EXAM QUESTIONS AND CORRECT
ANSWERS
Question 1.
Parkerian hexad
ANSWER
A model that adds three more principles to the CIA triad: possession or control, utility, and
authenticity
Question 2.
clickjacking (user interface redressing)
ANSWER
client-side attack that involves the attacker placing an invisible layer over something on a
website that the user would normally click on in order to execute a command differing from
what a user thinks they are performing
- takes advantage of some of the page rendering features that are available in newer browsers
Question 3.
OPSEC
(Operations Security)
ANSWER
the process we use to protect our information
Question 4.
GLBA (Gramm-Leach-Bliley Act)
ANSWER
this law protects the customers of financial institutions
,Question 5.
authorization attack
ANSWER
A type of attack that can occur when we fail to use authorization best practices for our
applications
Question 6.
integrity
ANSWER
refers to the ability to prevent our data from being changed in an unauthorized or undesirable
manner
Question 7.
deterrence
ANSWER
refers to elements that discourage or prevent misbehavior in our environments
Question 8.
authentication
ANSWER
a set of methods we use to establish a claim of identity as being true
corroborates the identity of an entity, whether it is the sender, the sender's computer, some
device, or some information
Question 9.
software firewall
ANSWER
This type of firewall generally contains a subset of the features on a large firewall appliance but
is often capable of similar packet filtering and stateful packet inspection activities
,Question 10.
BinScope Binary Analyzer
ANSWER
A tool developed by Microsoft to examine source code for general good practices
Question 11.
kismet
ANSWER
a well-known Linux sniffing tool used to detect wireless access points
Question 12.
ECC (Elliptic Curve Cryptography)
ANSWER
An asymmetric encryption algorithm that uses smaller key sizes and requires less processing
power than many other encryption methods.
commonly used in smaller wireless devices
Question 13.
administrative controls
ANSWER
based on rules, laws, policies, procedures, guidelines, and other items that are "paper" in
nature
Question 14.
SOX (Sarbanes-Oxley Act)
ANSWER
this law regulates the financial practice and governance of corporations
, Question 15.
logging
ANSWER
A process that provides a history of the activities that have taken place in the environment
Question 16.
protecting data
ANSWER
a security awareness issue that is concerned with the criticality of carefully handling data from
the perspectives of compliance, as well as reputation and customer retention
Question 17.
performance measurement
ANSWER
A set of metrics that judge how well a given system functions
Question 18.
plaintext (cleartext)
ANSWER
unencrypted data
Question 19.
violation
ANSWER
the act of doing something that is prohibited by law or rule
Question 20.
NIDS (Network intrusion detection system)
ANSWER
A system that monitors network traffic and alerts for unauthorized activity
UPDATED ACTUAL EXAM QUESTIONS AND CORRECT
ANSWERS
Question 1.
Parkerian hexad
ANSWER
A model that adds three more principles to the CIA triad: possession or control, utility, and
authenticity
Question 2.
clickjacking (user interface redressing)
ANSWER
client-side attack that involves the attacker placing an invisible layer over something on a
website that the user would normally click on in order to execute a command differing from
what a user thinks they are performing
- takes advantage of some of the page rendering features that are available in newer browsers
Question 3.
OPSEC
(Operations Security)
ANSWER
the process we use to protect our information
Question 4.
GLBA (Gramm-Leach-Bliley Act)
ANSWER
this law protects the customers of financial institutions
,Question 5.
authorization attack
ANSWER
A type of attack that can occur when we fail to use authorization best practices for our
applications
Question 6.
integrity
ANSWER
refers to the ability to prevent our data from being changed in an unauthorized or undesirable
manner
Question 7.
deterrence
ANSWER
refers to elements that discourage or prevent misbehavior in our environments
Question 8.
authentication
ANSWER
a set of methods we use to establish a claim of identity as being true
corroborates the identity of an entity, whether it is the sender, the sender's computer, some
device, or some information
Question 9.
software firewall
ANSWER
This type of firewall generally contains a subset of the features on a large firewall appliance but
is often capable of similar packet filtering and stateful packet inspection activities
,Question 10.
BinScope Binary Analyzer
ANSWER
A tool developed by Microsoft to examine source code for general good practices
Question 11.
kismet
ANSWER
a well-known Linux sniffing tool used to detect wireless access points
Question 12.
ECC (Elliptic Curve Cryptography)
ANSWER
An asymmetric encryption algorithm that uses smaller key sizes and requires less processing
power than many other encryption methods.
commonly used in smaller wireless devices
Question 13.
administrative controls
ANSWER
based on rules, laws, policies, procedures, guidelines, and other items that are "paper" in
nature
Question 14.
SOX (Sarbanes-Oxley Act)
ANSWER
this law regulates the financial practice and governance of corporations
, Question 15.
logging
ANSWER
A process that provides a history of the activities that have taken place in the environment
Question 16.
protecting data
ANSWER
a security awareness issue that is concerned with the criticality of carefully handling data from
the perspectives of compliance, as well as reputation and customer retention
Question 17.
performance measurement
ANSWER
A set of metrics that judge how well a given system functions
Question 18.
plaintext (cleartext)
ANSWER
unencrypted data
Question 19.
violation
ANSWER
the act of doing something that is prohibited by law or rule
Question 20.
NIDS (Network intrusion detection system)
ANSWER
A system that monitors network traffic and alerts for unauthorized activity
