WGU C843 KOP2 TASK 1
TESTED QUESTIONS AND COMPLETE SOLUTIONS
Question 1.
confused deputy problem
ANSWER
A type of attack that is more common in systems that use ACLs rather than capabilities;
- when software has greater permissions than user, the user can trick the software into
misusing authority
Question 2.
GLBA (Gramm-Leach-Bliley Act)
ANSWER
this law protects the customers of financial institutions
Question 3.
Cryptanalysis
ANSWER
The science of breaking through the encryption used to create ciphertext
Question 4.
PII (Personally Identifiable Information)
ANSWER
Information that can be used to identify an individual, and should be protected as sensitive
data and monitored for compliance
Question 5.
universality
ANSWER
a stipulation that our chosen biometric characteristic should be present in the majority of
people we expect to enroll in the system
,Question 6.
block cipher
ANSWER
A type of cipher that takes a predetermined number of bits in the plaintext message
(commonly 64 bits) and encrypts that block
Question 7.
where you are
ANSWER
Being at a specific terminal is an example of this type of factor
Question 8.
ABAC (attribute-based access control)
ANSWER
access control model in which access is based on attributes (of a person, a resource, or an
environment)
Question 9.
something you are
ANSWER
An iris scan is an example of this type of factor
Question 10.
privacy rights
ANSWER
Rights relating to the protection of an individual's personal information
Question 11.
violation
ANSWER
the act of doing something that is prohibited by law or rule
, Question 12.
vulnerability assessment
ANSWER
An activity involving the careful examination of our environment using vulnerability scanning
tools in order to discover vulnerabilities
Question 13.
monitoring
ANSWER
a subset of auditing that focuses on observing information about the environment in order to
discover undesirable conditions such as failures, resource shortages, security issues, and
trends
Question 14.
Bell-LaPadula Model
ANSWER
A combination of DAC and MAC, primarily concerned with the confidentiality of the resource.
- 2 security properties define how information can flow to and from the resource: the simple
security property and the * property
Question 15.
CRL (Certificate Revocation List)
ANSWER
a public list that holds all the revoked certifications for a certain period of time
Question 16.
PCI DSS (Payment Card Industry Data Security Standard)
ANSWER
companies that process credit card payments must comply with this set of standards
TESTED QUESTIONS AND COMPLETE SOLUTIONS
Question 1.
confused deputy problem
ANSWER
A type of attack that is more common in systems that use ACLs rather than capabilities;
- when software has greater permissions than user, the user can trick the software into
misusing authority
Question 2.
GLBA (Gramm-Leach-Bliley Act)
ANSWER
this law protects the customers of financial institutions
Question 3.
Cryptanalysis
ANSWER
The science of breaking through the encryption used to create ciphertext
Question 4.
PII (Personally Identifiable Information)
ANSWER
Information that can be used to identify an individual, and should be protected as sensitive
data and monitored for compliance
Question 5.
universality
ANSWER
a stipulation that our chosen biometric characteristic should be present in the majority of
people we expect to enroll in the system
,Question 6.
block cipher
ANSWER
A type of cipher that takes a predetermined number of bits in the plaintext message
(commonly 64 bits) and encrypts that block
Question 7.
where you are
ANSWER
Being at a specific terminal is an example of this type of factor
Question 8.
ABAC (attribute-based access control)
ANSWER
access control model in which access is based on attributes (of a person, a resource, or an
environment)
Question 9.
something you are
ANSWER
An iris scan is an example of this type of factor
Question 10.
privacy rights
ANSWER
Rights relating to the protection of an individual's personal information
Question 11.
violation
ANSWER
the act of doing something that is prohibited by law or rule
, Question 12.
vulnerability assessment
ANSWER
An activity involving the careful examination of our environment using vulnerability scanning
tools in order to discover vulnerabilities
Question 13.
monitoring
ANSWER
a subset of auditing that focuses on observing information about the environment in order to
discover undesirable conditions such as failures, resource shortages, security issues, and
trends
Question 14.
Bell-LaPadula Model
ANSWER
A combination of DAC and MAC, primarily concerned with the confidentiality of the resource.
- 2 security properties define how information can flow to and from the resource: the simple
security property and the * property
Question 15.
CRL (Certificate Revocation List)
ANSWER
a public list that holds all the revoked certifications for a certain period of time
Question 16.
PCI DSS (Payment Card Industry Data Security Standard)
ANSWER
companies that process credit card payments must comply with this set of standards
