WGU Course C836 - Fundamentals Of Information Security Quizlet By Bria Macfarlane

WGU Course C836 - Fundamentals Of Information
n n n n n n




Security Quizlet By Bria n n n n n




1. Which cybersecurity term is defined as the potential for an attack on a re-
n n n n n n n n n n n n n




source?
n




AImpact
n




BVulnerability
n




CRisk
n




D Threat: D
n n




2. Which security type deliberately exposes a system's vulnerabilities or re-
n n n n n n n n n




sources to an attacker?
n n n n




A Intrusion detection
n n




BFirewalls
n




CHoneypots
n




D Intrusion prevention: C
n n n




3. Which tool can be used to map devices on a network, along with their oper-
n n n n n n n n n n n n n n




ating system types and versions?
n n n n n




A Packet sniffer
n n




B Packet filter
n n




C Port scanner
n n




D Stateful firewall: C
n n n




4. Which web attack is a server-side attack?
n n n n n n




AClickjacking
n




B Cross-site scripting
n n




CSQLinjection
n n





n n

,D Cross-site request forgery: C
n n n n




5. An organization employs a VPN to safeguard its information.
n n n n n n n n




WhichsecurityprincipleisprotectedbyaVPN?
n n n n n n n n




A Data in motion
n n n




B Data at rest
n n n





n n

,C Data in use
n n n




D Data in storage: A
n n n n




6. A malicious hacker was successful in a denial of service (DoS) attack against
n n n n n n n n n n n n




aninstitution'smailserver.Fortunately,nodatawaslostoralteredwhilethe server
n n n n n n n n n n n n n n




was offline.
n n




Which type of attack is this? n n n n n




AModification
n




BFabrication
n




CInterception
n




D Interruption: D
n n




7. A company has had several successful denial of service (DoS) attacks on its email
n n n n n n n n n n n n n




server.
n




Which security principle is being attacked?
n n n n n




APossession
n




BIntegrity
n




CConfidentiality
n




D Availability: D
n n




8. A new start-up company has started working on a social networking website.
n n n n n n n n n n n




Thecompanyhasmovedallitssourcecodetoacloudproviderandwantsto protect
n n n n n n n n n n n n n n n n




this source code from unauthorized access.
n n n n n n




Which cyber defense concept should the start-up company use to maintain the
n n n n n n n n n n n




confidentiality of its source code?
n n n n n




A Alarm systems
n n




B Account permissions
n n





n n

, C Antivirus software
n n




D File encryption: D
n n n




9. Acompanyhasanannualauditofinstalledsoftwareanddatastoragesys- tems.
n n n n n n n n n n n n n




nDuring the audit, the auditor asks how the company's most critical data isused.
n n n n n n n n n n n n n




Thisdeterminationhelpstheauditorensurethattheproperdefense mechanisms
n n n n n n n n n n n




arein place toprotect critical data.
n n n n n n n




Which principle of the Parkerian hexad is the auditor addressing?
n n n n n n n n n




APossessionn




BIntegrity n




CAuthenticity
n




D Utility: D n n




10. Which web attack is possible due to a lack of input validation?
n n n n n n n n n n n




A Extraneous files
n n




BClickjacking
n




CSQLinjection
n n




D Cross-site request forgery: C
n n n n




11. Which file action implements the principle of confidentiality from the CIA
n n n n n n n n n n




triad?
n




ACompression
n




BHash n




CBackup n




D Encryption: Dn n




12. Which cyber defense concept suggests limiting permissions to only what is
n n n n n n n n n n




nnecessary to perform a particular task? n n n n n




AAuthentication
n




BAuthorization
n





n n