WGU D430 Fundamentals of Information Security with correct answers 100%

WGU D430 Fundamentals of Information Security with correct answers 100% Define the confidentiality in the CIA triad. - Correct Answers Our ability to protect data from those who are not authorized to view it. Examples of confidentiality - Correct Answers A patron using an ATM card wants to keep their PIN number confidential. An ATM owner wants to keep bank account numbers confidential. How can confidentiality be broken? - Correct Answers Losing a laptop An attacker gets access to info A person can look over your shoulder Define integrity in the CIA triad. - Correct Answers The ability to prevent people from changing your data and the ability to reverse unwanted changes. How do you control integrity? - Correct Answers Permissions restrict what users can do (read, write, etc.) Examples of integrity - Correct Answers Data used by a doctor to make medical decisions needs to be correct or the patient can die. Define the availability in the CIA triad. - Correct Answers Our data needs to be accessible when we need it. How can availability be broken? - Correct Answers Loss of power, application problems. If caused by an attacker, this is a Denial of Service attack. Define information security. - Correct Answers The protection of information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction in order to provide confidentiality, integrity, and availability. Define the Parkerian Hexad and its principles. - Correct Answers The Parkerian Hexad includes confidentiality, integrity, and availability from the CIA triad. It also includes possession (or control), authenticity, and utility. Authenticity - Correct Answers Whether the data in question comes from who or where it says it comes from (i.e. did this person actually send this email?) Confidentiality is affected by what type of attack? - Correct Answers Interception (eaves dropping) Integrity is affected by what type of attacks? - Correct Answers Interruption (assets are unusable), modification (tampering with an asset), fabrication (generating false data) Authenticity is affected by what type of attacks? - Correct Answers Interruption (assets are unusable), modification (tampering with an asset), fabrication (generating false data) Utility - Correct Answers How useful the data is to you (can be a spectrum, not just yes or no) Possession - Correct Answers Do you physically have the data in question? Used to describe the scope of a loss Identify the four types of attacks - Correct Answers interception, interruption, modification, and fabrication Interception attacks - Correct Answers Make your assets unusable or unavailable Interruption attacks - Correct Answers cause assets to become unusable or unavailable for our use, on a temporary or permanent basis Modification attacks - Correct Answers Tampering with an asset Fabrication attacks - Correct Answers Generating data, process, and communications Define the risk management process - Correct Answers 1. Identify assets 2. Identify threats 3. Assess vulnerabilities 4. Assess risks 5. Mitigate risks Define the incident response process and its stages. - Correct Answers Preparation Detection and analysis Containment Eradication Recovery Preparation in incident response - Correct Answers creating policies and procedures Detection in incident response - Correct Answers Using tools and humans to decide if an incident is an incident