WGU C836 OBJECTIVE ASSESSEMENT FINAL
EXAM 2025 WITH ACTUAL CORRECT
QUESTIONS AND VERIFIED DETAILED
ANSWERS |FREQUENTLY TESTED
QUESTIONS AND SOLUTIONS|ALREADY
GRADED A+|NEWEST|GUARANTEED
PASS|LATEST UPDATE
A Chinese military general from 6th century BC who wrote The Art of War, a text that shows
early examples of operations security principles
Sun Tzu
The codename of a study conducted to discover the cause of an information leak during the
Vietnam War; is now a symbol of OPSEC
Purple Dragon
the process of intelligence gathering and analysis in order to support business decisions
competitive intelligence
1.Identification of critical information
2.Analysis of threats
3.Analysis of vulnerabilities
4.Assessment of risks
5.Application of countermeasures
5 steps of the operations security process
The 1st Law of Haas' Laws of Operations Security
If you don't know the threat, how do you know what to protect?
The 2nd Law of Haas' Laws of Operations Security
If you don't know what to protect, how do you know you are protecting it?
The 3rd Law of Haas' Laws of Operations Security
1|Page
,If you are not protecting it, the dragon wins!
services that are hosted, often over the Internet, for the purposes of delivering easily scaled
computing services or resources
cloud computing
1st step in the OPSEC process, arguably the most important: to identify the assets that most
need protection and will cause us the most harm if exposed
identification of critical information
2nd step in the OPSEC process: to look at the potential harm or financial impact that might be
caused by critical information being exposed, and who might exploit that exposure
analysis of threats
3rd step in the OPSEC process: to look at the weaknesses that can be used to harm us
analysis of vulnerabilities
4th step in the OPSEC process: to determine what issues we really need to be concerned about
(areas with matching threats and vulnerabilities)
assessment of risks
5th step in the OPSEC process: to put measures in place to mitigate risks
appliance of countermeasures
this law provides a framework for ensuring the effectiveness of information security controls in
federal government
- changed from Management (2002) to Modernization in 2014
FISMA (Federal Information Security Modernization Act)
this law improves the efficiency and effectiveness of the health care system and protects patient
privacy
HIPAA (Health Insurance Portability and Accountability Act)
this law protects the privacy of students and their parents
FERPA (Family Educational Rights and Privacy Act)
this law regulates the financial practice and governance of corporations
SOX (Sarbanes-Oxley Act)
2|Page
,this law protects the customers of financial institutions
GLBA (Gramm-Leach-Bliley Act)
relating to an organization's adherence to laws, regulations, and standards
compliance
Regulations mandated by law usually requiring regular audits and assessments
regulatory compliance
Regulations or standards designed for specific industries that may impact ability to conduct
business (e.g. PCI DSS)
industry compliance
the state or condition of being free from being observed or disturbed by other people
privacy
This act safeguards privacy through the establishment of procedural and substantive rights in
personal data
The Federal Privacy Act of 1974
Rights relating to the protection of an individual's personal information
privacy rights
Information that can be used to identify an individual, and should be protected as sensitive data
and monitored for compliance
PII (Personally Identifiable Information)
the science of keeping information secure
cryptography
The science of breaking through the encryption used to create ciphertext
Cryptanalysis
The overarching field of study that covers cryptography and cryptanalysis
cryptology
The specifics of the process used to encrypt plaintext or decrypt ciphertext
cryptographic algorithm (cipher)
3|Page
, unencrypted data
plaintext (cleartext)
encrypted data
ciphertext
an ancient cryptographic technique based on transposition; involves shifting each letter of a
plaintext message by a certain number of letters (historically 3)
Caesar cipher
a more recent cipher that uses the same mechanism as the Caesar cipher but moves each letter
13 places forward
ROT13 cipher
uses a single key for both encryption of the plaintext and decryption of the ciphertext
symmetric key cryptography (private key cryptography)
A type of cipher that takes a predetermined number of bits in the plaintext message (commonly
64 bits) and encrypts that block
block cipher
A type of cipher that encrypts each bit in the plaintext message, 1 bit at a time
stream cipher
A set of symmetric block ciphers endorsed by the US government through NIST. Shares the
same block modes that DES uses and also includes other modes such as XEX-based Tweaked
CodeBook (TCB) mode
AES (Advanced Encryption Standard)
this method uses 2 keys, a public key and a private key
asymmetric key cryptography (public key cryptography)
a protocol that uses the RSA algorithm (an asymmetric algorithm) to secure web and email
traffic
SSL (secure sockets layer)
keyless cryptography that creates a largely unique and fixed-length hash value based on the
original mesage
4|Page
EXAM 2025 WITH ACTUAL CORRECT
QUESTIONS AND VERIFIED DETAILED
ANSWERS |FREQUENTLY TESTED
QUESTIONS AND SOLUTIONS|ALREADY
GRADED A+|NEWEST|GUARANTEED
PASS|LATEST UPDATE
A Chinese military general from 6th century BC who wrote The Art of War, a text that shows
early examples of operations security principles
Sun Tzu
The codename of a study conducted to discover the cause of an information leak during the
Vietnam War; is now a symbol of OPSEC
Purple Dragon
the process of intelligence gathering and analysis in order to support business decisions
competitive intelligence
1.Identification of critical information
2.Analysis of threats
3.Analysis of vulnerabilities
4.Assessment of risks
5.Application of countermeasures
5 steps of the operations security process
The 1st Law of Haas' Laws of Operations Security
If you don't know the threat, how do you know what to protect?
The 2nd Law of Haas' Laws of Operations Security
If you don't know what to protect, how do you know you are protecting it?
The 3rd Law of Haas' Laws of Operations Security
1|Page
,If you are not protecting it, the dragon wins!
services that are hosted, often over the Internet, for the purposes of delivering easily scaled
computing services or resources
cloud computing
1st step in the OPSEC process, arguably the most important: to identify the assets that most
need protection and will cause us the most harm if exposed
identification of critical information
2nd step in the OPSEC process: to look at the potential harm or financial impact that might be
caused by critical information being exposed, and who might exploit that exposure
analysis of threats
3rd step in the OPSEC process: to look at the weaknesses that can be used to harm us
analysis of vulnerabilities
4th step in the OPSEC process: to determine what issues we really need to be concerned about
(areas with matching threats and vulnerabilities)
assessment of risks
5th step in the OPSEC process: to put measures in place to mitigate risks
appliance of countermeasures
this law provides a framework for ensuring the effectiveness of information security controls in
federal government
- changed from Management (2002) to Modernization in 2014
FISMA (Federal Information Security Modernization Act)
this law improves the efficiency and effectiveness of the health care system and protects patient
privacy
HIPAA (Health Insurance Portability and Accountability Act)
this law protects the privacy of students and their parents
FERPA (Family Educational Rights and Privacy Act)
this law regulates the financial practice and governance of corporations
SOX (Sarbanes-Oxley Act)
2|Page
,this law protects the customers of financial institutions
GLBA (Gramm-Leach-Bliley Act)
relating to an organization's adherence to laws, regulations, and standards
compliance
Regulations mandated by law usually requiring regular audits and assessments
regulatory compliance
Regulations or standards designed for specific industries that may impact ability to conduct
business (e.g. PCI DSS)
industry compliance
the state or condition of being free from being observed or disturbed by other people
privacy
This act safeguards privacy through the establishment of procedural and substantive rights in
personal data
The Federal Privacy Act of 1974
Rights relating to the protection of an individual's personal information
privacy rights
Information that can be used to identify an individual, and should be protected as sensitive data
and monitored for compliance
PII (Personally Identifiable Information)
the science of keeping information secure
cryptography
The science of breaking through the encryption used to create ciphertext
Cryptanalysis
The overarching field of study that covers cryptography and cryptanalysis
cryptology
The specifics of the process used to encrypt plaintext or decrypt ciphertext
cryptographic algorithm (cipher)
3|Page
, unencrypted data
plaintext (cleartext)
encrypted data
ciphertext
an ancient cryptographic technique based on transposition; involves shifting each letter of a
plaintext message by a certain number of letters (historically 3)
Caesar cipher
a more recent cipher that uses the same mechanism as the Caesar cipher but moves each letter
13 places forward
ROT13 cipher
uses a single key for both encryption of the plaintext and decryption of the ciphertext
symmetric key cryptography (private key cryptography)
A type of cipher that takes a predetermined number of bits in the plaintext message (commonly
64 bits) and encrypts that block
block cipher
A type of cipher that encrypts each bit in the plaintext message, 1 bit at a time
stream cipher
A set of symmetric block ciphers endorsed by the US government through NIST. Shares the
same block modes that DES uses and also includes other modes such as XEX-based Tweaked
CodeBook (TCB) mode
AES (Advanced Encryption Standard)
this method uses 2 keys, a public key and a private key
asymmetric key cryptography (public key cryptography)
a protocol that uses the RSA algorithm (an asymmetric algorithm) to secure web and email
traffic
SSL (secure sockets layer)
keyless cryptography that creates a largely unique and fixed-length hash value based on the
original mesage
4|Page
