WGU D430 Fundamentals of Information Security Exam with
Verified Solutions
1. Define the confi- Our ability to protect data from those who are not autho-
dentiality in the rized to view it.
CIA triad.
2. Examples of con- A patron using an ATM card wants to keep their PIN
fidentiality number confidential.
An ATM owner wants to keep bank account numbers
confidential.
3. How can confi- Losing a laptop
dentiality be bro- An attacker gets access to info
ken? A person can look over your shoulder
4. Define integrity The ability to prevent people from changing your data and
in the CIA triad. the ability to reverse unwanted changes.
5. How do you con- Permissions restrict what users can do (read, write, etc.)
trol integrity?
6. Examples of in- Data used by a doctor to make medical decisions needs
tegrity to be correct or the patient can die.
7. Define the avail- Our data needs to be accessible when we need it.
ability in the CIA
triad.
8. How can avail- Loss of power, application problems. If caused by an at-
ability be bro- tacker, this is a Denial of Service attack.
ken?
9. Define informa- The protection of information and information systems
tion security. from unauthorized access, use, disclosure, disruption,
modification, or destruction in order to provide confiden-
tiality, integrity, and availability.
10. Define the Park- The Parkerian Hexad includes confidentiality, integrity, and
erian Hexad and availability from the CIA triad. It also includes possession
its principles. (or control), authenticity, and utility.
, WGU D430 Fundamentals of Information Security Exam with
Verified Solutions
11. Authenticity Whether the data in question comes from who or where it
says it comes from (i.e. did this person actually send this
email?)
12. Confidentiality is Interception (eaves dropping)
affected by what
type of attack?
13. Integrity is affect- Interruption (assets are unusable), modification (tamper-
ed by what type ing with an asset), fabrication (generating false data)
of attacks?
14. Authenticity is af- Interruption (assets are unusable), modification (tamper-
fected by what ing with an asset), fabrication (generating false data)
type of attacks?
15. Utility How useful the data is to you (can be a spectrum, not just
yes or no)
16. Possession Do you physically have the data in question? Used to
describe the scope of a loss
17. Identify the four interception, interruption, modification, and fabrication
types of attacks
18. Interception at- Make your assets unusable or unavailable
tacks
19. Interruption at- cause assets to become unusable or unavailable for our
tacks use, on a temporary or permanent basis
20. Modification at- Tampering with an asset
tacks
Verified Solutions
1. Define the confi- Our ability to protect data from those who are not autho-
dentiality in the rized to view it.
CIA triad.
2. Examples of con- A patron using an ATM card wants to keep their PIN
fidentiality number confidential.
An ATM owner wants to keep bank account numbers
confidential.
3. How can confi- Losing a laptop
dentiality be bro- An attacker gets access to info
ken? A person can look over your shoulder
4. Define integrity The ability to prevent people from changing your data and
in the CIA triad. the ability to reverse unwanted changes.
5. How do you con- Permissions restrict what users can do (read, write, etc.)
trol integrity?
6. Examples of in- Data used by a doctor to make medical decisions needs
tegrity to be correct or the patient can die.
7. Define the avail- Our data needs to be accessible when we need it.
ability in the CIA
triad.
8. How can avail- Loss of power, application problems. If caused by an at-
ability be bro- tacker, this is a Denial of Service attack.
ken?
9. Define informa- The protection of information and information systems
tion security. from unauthorized access, use, disclosure, disruption,
modification, or destruction in order to provide confiden-
tiality, integrity, and availability.
10. Define the Park- The Parkerian Hexad includes confidentiality, integrity, and
erian Hexad and availability from the CIA triad. It also includes possession
its principles. (or control), authenticity, and utility.
, WGU D430 Fundamentals of Information Security Exam with
Verified Solutions
11. Authenticity Whether the data in question comes from who or where it
says it comes from (i.e. did this person actually send this
email?)
12. Confidentiality is Interception (eaves dropping)
affected by what
type of attack?
13. Integrity is affect- Interruption (assets are unusable), modification (tamper-
ed by what type ing with an asset), fabrication (generating false data)
of attacks?
14. Authenticity is af- Interruption (assets are unusable), modification (tamper-
fected by what ing with an asset), fabrication (generating false data)
type of attacks?
15. Utility How useful the data is to you (can be a spectrum, not just
yes or no)
16. Possession Do you physically have the data in question? Used to
describe the scope of a loss
17. Identify the four interception, interruption, modification, and fabrication
types of attacks
18. Interception at- Make your assets unusable or unavailable
tacks
19. Interruption at- cause assets to become unusable or unavailable for our
tacks use, on a temporary or permanent basis
20. Modification at- Tampering with an asset
tacks
