WGU D430 Fundamentals of Information
Security test questions with correct
answers
AES - CORRECT ANSWERS-AES is the standard encryption algorithm used by the US
Federal government.
Asymmetric Key Cryptography - CORRECT ANSWERS-Encryption that uses two
separate keys- a public key and a private key. Advantage is that you can post the public
key and anyone can send you an encrypted message.
Auditing - CORRECT ANSWERS-Hold users of your system accountable. A methodical
examination and review of an organization's records.
Authenticity - CORRECT ANSWERS-Whether the data in question comes from who or
where it says it comes from (i.e. did this person actually send this email?)
Authenticity is affected by what type of attacks? - CORRECT ANSWERS-Interruption
(assets are unusable), modification (tampering with an asset), fabrication (generating
false data)
Burp Suite - CORRECT ANSWERS-Burp Suite is a web assessment and analysis tool
that looks for issues on websites such as cross-site scripting or SQL injection flaws.
Compare authentication types. - CORRECT ANSWERS-Multifactor authentication
Mutual authentication
Competitive Counterintelligence - CORRECT ANSWERS-the practice of managing the
range of intelligence-gathering activities directed at an organization
Competitive intelligence - CORRECT ANSWERS-the process of gathering and
analyzing information to support business decisions
competitive intelligence - CORRECT ANSWERS-the process of intelligence gathering
and analysis to support business decisions
Confidentiality is affected by what type of attack? - CORRECT ANSWERS-Interception
(eaves dropping)
COPPA - CORRECT ANSWERS-Children's Online Privacy Protection Act
, Defense in Depth - CORRECT ANSWERS-employing multiple layers of controls to
avoid a single point of failure
Define accountability and its benefits - CORRECT ANSWERS-nonrepudiation,
deterrence, intrusion detection and prevention, and admissibility of records
Define authentication - CORRECT ANSWERS-A set of methods used to determine if a
claim of identity is true.
Define cryptography, including its origins and influencers. - CORRECT ANSWERS-The
science of protecting the confidentiality and integrity of data
Define identification - CORRECT ANSWERS-The claim of who we/networks are
Define identity verification. - CORRECT ANSWERS-Someone claims who they are and
you take it one step father and ask for ID
Define information security. - CORRECT ANSWERS-The protection of information and
information systems from unauthorized access, use, disclosure, disruption, modification,
or destruction in order to provide confidentiality, integrity, and availability.
Define integrity in the CIA triad. - CORRECT ANSWERS-The ability to prevent people
from changing your data and the ability to reverse unwanted changes.
Define the availability in the CIA triad. - CORRECT ANSWERS-Our data needs to be
accessible when we need it.
Define the confidentiality in the CIA triad. - CORRECT ANSWERS-Our ability to protect
data from those who are not authorized to view it.
Define the incident response process and its stages. - CORRECT ANSWERS-
Preparation
Detection and analysis
Containment
Eradication
Recovery
Define the Parkerian Hexad and its principles. - CORRECT ANSWERS-The Parkerian
Hexad includes confidentiality, integrity, and availability from the CIA triad. It also
includes possession (or control), authenticity, and utility.
Define the risk management process - CORRECT ANSWERS-1. Identify assets
2. Identify threats
3. Assess vulnerabilities
4. Assess risks
Security test questions with correct
answers
AES - CORRECT ANSWERS-AES is the standard encryption algorithm used by the US
Federal government.
Asymmetric Key Cryptography - CORRECT ANSWERS-Encryption that uses two
separate keys- a public key and a private key. Advantage is that you can post the public
key and anyone can send you an encrypted message.
Auditing - CORRECT ANSWERS-Hold users of your system accountable. A methodical
examination and review of an organization's records.
Authenticity - CORRECT ANSWERS-Whether the data in question comes from who or
where it says it comes from (i.e. did this person actually send this email?)
Authenticity is affected by what type of attacks? - CORRECT ANSWERS-Interruption
(assets are unusable), modification (tampering with an asset), fabrication (generating
false data)
Burp Suite - CORRECT ANSWERS-Burp Suite is a web assessment and analysis tool
that looks for issues on websites such as cross-site scripting or SQL injection flaws.
Compare authentication types. - CORRECT ANSWERS-Multifactor authentication
Mutual authentication
Competitive Counterintelligence - CORRECT ANSWERS-the practice of managing the
range of intelligence-gathering activities directed at an organization
Competitive intelligence - CORRECT ANSWERS-the process of gathering and
analyzing information to support business decisions
competitive intelligence - CORRECT ANSWERS-the process of intelligence gathering
and analysis to support business decisions
Confidentiality is affected by what type of attack? - CORRECT ANSWERS-Interception
(eaves dropping)
COPPA - CORRECT ANSWERS-Children's Online Privacy Protection Act
, Defense in Depth - CORRECT ANSWERS-employing multiple layers of controls to
avoid a single point of failure
Define accountability and its benefits - CORRECT ANSWERS-nonrepudiation,
deterrence, intrusion detection and prevention, and admissibility of records
Define authentication - CORRECT ANSWERS-A set of methods used to determine if a
claim of identity is true.
Define cryptography, including its origins and influencers. - CORRECT ANSWERS-The
science of protecting the confidentiality and integrity of data
Define identification - CORRECT ANSWERS-The claim of who we/networks are
Define identity verification. - CORRECT ANSWERS-Someone claims who they are and
you take it one step father and ask for ID
Define information security. - CORRECT ANSWERS-The protection of information and
information systems from unauthorized access, use, disclosure, disruption, modification,
or destruction in order to provide confidentiality, integrity, and availability.
Define integrity in the CIA triad. - CORRECT ANSWERS-The ability to prevent people
from changing your data and the ability to reverse unwanted changes.
Define the availability in the CIA triad. - CORRECT ANSWERS-Our data needs to be
accessible when we need it.
Define the confidentiality in the CIA triad. - CORRECT ANSWERS-Our ability to protect
data from those who are not authorized to view it.
Define the incident response process and its stages. - CORRECT ANSWERS-
Preparation
Detection and analysis
Containment
Eradication
Recovery
Define the Parkerian Hexad and its principles. - CORRECT ANSWERS-The Parkerian
Hexad includes confidentiality, integrity, and availability from the CIA triad. It also
includes possession (or control), authenticity, and utility.
Define the risk management process - CORRECT ANSWERS-1. Identify assets
2. Identify threats
3. Assess vulnerabilities
4. Assess risks
