WGU C836 Fundamentals of Information Security Test Guide
Exam with Questions and Rationalized Answers
A+ Graded pass
1. What is the CIA triad in information security?: Confidentiality, Integrity, and
Availability.
2. What is the main purpose of an information security procedure?: The main
purpose of an information security procedure is to provide step-by-step instructions
for implementing and maintaining security controls, in accordance with the organi-
zation's security policies.
3. What is the difference between a policy, a standard, and a procedure in the
context of information security?: A policy is a high-level statement that outlines the
organization's approach to information security. A standard is a specific require- ment
that supports the policy, while a procedure provides step-by-step instructions for
implementing the standard.
4. What is NOT one of the seven domains of a typical IT infrastructure?: Human
Resources Domain
5. What are the two main types of information security policies?: organizational (or
1/
20
,enterprise) policies and system-specific policies.
6. Why is it important to have a policy review and update process in place?: to
ensure that information security policies remain relevant and effective, adapting
to changes in technology, threats, regulatory requirements, and the organization's
business environment.
7. What is an example of a security control that would typically be defined in a
procedure?: A firewall rule set
8. What is the role of the information security awareness and training program in
supporting an organization's security policies and procedures?: The infor- mation
security awareness and training program helps to ensure that employees understand
and follow the organization's security policies and procedures, by provid- ing them with
the necessary knowledge, skills, and motivation to protect information assets.
9. What are the five functions of the NIST Cybersecurity Framework?: Identify,
Protect, Detect, Respond, and Recover.
10. What is an operating system?: An operating system (OS) is a software that
manages computer hardware and software resources, and provides services to
applications.
11. What is operating system security?: Operating system security refers to the
2/
20
, measures taken to protect the operating system from unauthorized access,
malicious attacks, and other security threats.
12. What is a privilege escalation attack?: A privilege escalation attack is a type of
security exploit where a user gains access to higher-level privileges than they are
authorized to have.
3/
20
Exam with Questions and Rationalized Answers
A+ Graded pass
1. What is the CIA triad in information security?: Confidentiality, Integrity, and
Availability.
2. What is the main purpose of an information security procedure?: The main
purpose of an information security procedure is to provide step-by-step instructions
for implementing and maintaining security controls, in accordance with the organi-
zation's security policies.
3. What is the difference between a policy, a standard, and a procedure in the
context of information security?: A policy is a high-level statement that outlines the
organization's approach to information security. A standard is a specific require- ment
that supports the policy, while a procedure provides step-by-step instructions for
implementing the standard.
4. What is NOT one of the seven domains of a typical IT infrastructure?: Human
Resources Domain
5. What are the two main types of information security policies?: organizational (or
1/
20
,enterprise) policies and system-specific policies.
6. Why is it important to have a policy review and update process in place?: to
ensure that information security policies remain relevant and effective, adapting
to changes in technology, threats, regulatory requirements, and the organization's
business environment.
7. What is an example of a security control that would typically be defined in a
procedure?: A firewall rule set
8. What is the role of the information security awareness and training program in
supporting an organization's security policies and procedures?: The infor- mation
security awareness and training program helps to ensure that employees understand
and follow the organization's security policies and procedures, by provid- ing them with
the necessary knowledge, skills, and motivation to protect information assets.
9. What are the five functions of the NIST Cybersecurity Framework?: Identify,
Protect, Detect, Respond, and Recover.
10. What is an operating system?: An operating system (OS) is a software that
manages computer hardware and software resources, and provides services to
applications.
11. What is operating system security?: Operating system security refers to the
2/
20
, measures taken to protect the operating system from unauthorized access,
malicious attacks, and other security threats.
12. What is a privilege escalation attack?: A privilege escalation attack is a type of
security exploit where a user gains access to higher-level privileges than they are
authorized to have.
3/
20
