WGU D430 fundamentals of information
security test with solutions A+ Graded
3DES - CORRECT ANSWERS-Triple Digital Encryption Standard. A symmetric algorithm used
to encrypt data and provide confidentiality. It was originally designed as a replacement for DES.
It uses multiple keys and multiple passes and is not as efficient as AES, but is still used in some
applications, such as when hardware doesn't support AES.
Acceptability - CORRECT ANSWERS-A measure of how acceptable the particular characteristic
is to the users of the system
Accountability - CORRECT ANSWERS-Provides us with the means to trace activists in our
environment back to their source. Depends on identification, authentication, and access control
being present so that we know who a given transaction is associated with, and what
permissions were used to allow them to carry it out
ACLs (access control lists) - CORRECT ANSWERS-The means by which we implement
authorization and deny or allow access to parties based on what resources we have determined
they should be allowed access to .
Administrative controls - CORRECT ANSWERS-Controls are the policies that organizations
create for governance. Ex: email policies
Admissibility of records - CORRECT ANSWERS-When we seek to introduce records in legal
settings, it is often much easier to do so and have them accepted when they are produced from
a regulated and consistent tracking system.
AES - CORRECT ANSWERS-A set of symmetrical block ciphers endorsed by the us
government through NIST . Is used by a variety of organizations. It is the replacement for DES
,as the standard encryption for us government . Uses 3 different ciphers one a 128 bit key one
192-bit key and one 256- bit key
Allowing access - CORRECT ANSWERS-Let's us give a particular party or parties access to a
given resource
analysis of vulnerabilities - CORRECT ANSWERS-3rd step in the OPSEC process: to look at
the weaknesses that can be used to harm us
Anomaly-based detection - CORRECT ANSWERS-Analyzes the current traffic against an
established baseline and triggers an alert if outside the statistical average
Anti-malware tools - CORRECT ANSWERS-applications detect threats in the same way as an
IDS either by matching against a signature or by detecting anomalous activities taking place.
Application of countermeasures - CORRECT ANSWERS-Once we have discovered what risks
to our critical information might be present, we would then put measures in place to mitigate
them. Such measures are referred to in operations security as countermeasures.
arbitrary code execution - CORRECT ANSWERS-Occurs when an attacker is able to execute or
run commands on a victim computer
Assess risks - CORRECT ANSWERS-Once we have identified the threats and vulnerabilities for
a given asset we can access the overall risk
Assess Vulnerabilities - CORRECT ANSWERS-Look at potential threats. any given asset may
have thousand or millions of threats that could impact it, but only a small fraction of the threats
will be relevant
Assessments - CORRECT ANSWERS-Vulnerability and penetration testing
Asymmetrical Cryptography - CORRECT ANSWERS-Public key utilizes 2 keys. A public key
and a private key. The public key is used to encrypt data sent from sender to receiver and is
shared with everyone
, Attribute-based access control (ABAC) - CORRECT ANSWERS-Controls access based on
attributes of the user, the resource to be accessed, and current environmental conditions
Auditing - CORRECT ANSWERS-Ensuring that we have accurate records of who did what and
when. Primarily focused on compliance with relevant laws and policies, and access to and from
systems and sometimes physical security
Authentication - CORRECT ANSWERS-The act of proving who or what we claim to be
(password)
Authentication attacks - CORRECT ANSWERS-Targets and attempts to exploit the
authentication process a web site uses to verify the identity of a user, service, or application.
authenticity - CORRECT ANSWERS-Allows us to talk about the proper attribution as to the
owner or creator of the data in question
Authorization - CORRECT ANSWERS-What the user can access, modify, and delete
Authorization attack - CORRECT ANSWERS-A type of attack that can occur when we fail to use
authorization best practices for our applications
Availability - CORRECT ANSWERS-The ability to access data when needed
Bell-LaPadula Model - CORRECT ANSWERS-implements a combination of DAC and MAC and
is primarily concerned with the confidentiality of the resource in question. Generally, in cases
where we see DAC and MAC implemented together, MAC takes precedence over DAC, and
DAC works within the accesses allowed by the MAC permissions.
Biometrics - CORRECT ANSWERS-Authentication factors that use physical features (
something that you are )
Block Cipher - CORRECT ANSWERS-An encryption method that encrypts data in fixed-side
blocks. Block size is 64 bits .
security test with solutions A+ Graded
3DES - CORRECT ANSWERS-Triple Digital Encryption Standard. A symmetric algorithm used
to encrypt data and provide confidentiality. It was originally designed as a replacement for DES.
It uses multiple keys and multiple passes and is not as efficient as AES, but is still used in some
applications, such as when hardware doesn't support AES.
Acceptability - CORRECT ANSWERS-A measure of how acceptable the particular characteristic
is to the users of the system
Accountability - CORRECT ANSWERS-Provides us with the means to trace activists in our
environment back to their source. Depends on identification, authentication, and access control
being present so that we know who a given transaction is associated with, and what
permissions were used to allow them to carry it out
ACLs (access control lists) - CORRECT ANSWERS-The means by which we implement
authorization and deny or allow access to parties based on what resources we have determined
they should be allowed access to .
Administrative controls - CORRECT ANSWERS-Controls are the policies that organizations
create for governance. Ex: email policies
Admissibility of records - CORRECT ANSWERS-When we seek to introduce records in legal
settings, it is often much easier to do so and have them accepted when they are produced from
a regulated and consistent tracking system.
AES - CORRECT ANSWERS-A set of symmetrical block ciphers endorsed by the us
government through NIST . Is used by a variety of organizations. It is the replacement for DES
,as the standard encryption for us government . Uses 3 different ciphers one a 128 bit key one
192-bit key and one 256- bit key
Allowing access - CORRECT ANSWERS-Let's us give a particular party or parties access to a
given resource
analysis of vulnerabilities - CORRECT ANSWERS-3rd step in the OPSEC process: to look at
the weaknesses that can be used to harm us
Anomaly-based detection - CORRECT ANSWERS-Analyzes the current traffic against an
established baseline and triggers an alert if outside the statistical average
Anti-malware tools - CORRECT ANSWERS-applications detect threats in the same way as an
IDS either by matching against a signature or by detecting anomalous activities taking place.
Application of countermeasures - CORRECT ANSWERS-Once we have discovered what risks
to our critical information might be present, we would then put measures in place to mitigate
them. Such measures are referred to in operations security as countermeasures.
arbitrary code execution - CORRECT ANSWERS-Occurs when an attacker is able to execute or
run commands on a victim computer
Assess risks - CORRECT ANSWERS-Once we have identified the threats and vulnerabilities for
a given asset we can access the overall risk
Assess Vulnerabilities - CORRECT ANSWERS-Look at potential threats. any given asset may
have thousand or millions of threats that could impact it, but only a small fraction of the threats
will be relevant
Assessments - CORRECT ANSWERS-Vulnerability and penetration testing
Asymmetrical Cryptography - CORRECT ANSWERS-Public key utilizes 2 keys. A public key
and a private key. The public key is used to encrypt data sent from sender to receiver and is
shared with everyone
, Attribute-based access control (ABAC) - CORRECT ANSWERS-Controls access based on
attributes of the user, the resource to be accessed, and current environmental conditions
Auditing - CORRECT ANSWERS-Ensuring that we have accurate records of who did what and
when. Primarily focused on compliance with relevant laws and policies, and access to and from
systems and sometimes physical security
Authentication - CORRECT ANSWERS-The act of proving who or what we claim to be
(password)
Authentication attacks - CORRECT ANSWERS-Targets and attempts to exploit the
authentication process a web site uses to verify the identity of a user, service, or application.
authenticity - CORRECT ANSWERS-Allows us to talk about the proper attribution as to the
owner or creator of the data in question
Authorization - CORRECT ANSWERS-What the user can access, modify, and delete
Authorization attack - CORRECT ANSWERS-A type of attack that can occur when we fail to use
authorization best practices for our applications
Availability - CORRECT ANSWERS-The ability to access data when needed
Bell-LaPadula Model - CORRECT ANSWERS-implements a combination of DAC and MAC and
is primarily concerned with the confidentiality of the resource in question. Generally, in cases
where we see DAC and MAC implemented together, MAC takes precedence over DAC, and
DAC works within the accesses allowed by the MAC permissions.
Biometrics - CORRECT ANSWERS-Authentication factors that use physical features (
something that you are )
Block Cipher - CORRECT ANSWERS-An encryption method that encrypts data in fixed-side
blocks. Block size is 64 bits .
