WGU - INTRODUCTION TO IT - D322 SECTION 8
REVIEW QUESTIONS & VERIFIED ANSWERS
RATED 100% CORRECT
1. Which regulation governs the actions
of a company in the case of data Security Breach Notification laws
records being compromised, lost, or
stolen?
Computer Matching and Primary Protec-
tion Act of 1988
Security Breach Notification laws
The Electronic Communication Privacy
Act of 1986
Digital Signature and Electronic
Authoriza- tion laws
2. What is part of the role of an IT professional Engages in best practices for
information
association? systems
Engages in best practices for Provides professional standards for ethical
information systems behavior
Provides professional standards for ethical
behavior
Writes laws dealing with information
tech- nology
3. What is not part of the role of an IT
profes- sional association?
Writes laws dealing with information tech-
Engages in best practices for nology
information systems
Provides professional standards for ethical
behavior
Writes laws dealing with information
tech- nology
4.
1/
15
, WGU - Introduction to IT - D322 Section 8
Review
How can an organization assist employees By developing policies for
information us-
with the ethical use of information technol- age
ogy?
By developing policies for information us-
age
By monitoring network throughput By
ensuring databases are backed up
By establishing optimal server
perfor- mance
5. Computer Security Focuses on protecting data from
unautho- rized use and the
exploitation of stolen data for profit.
6. Computer Ethics Moral guidelines that govern the
use of computers and
information systems.
7. Computer Privacy Focuses on the use and governance
of per- sonal data, ensuring that it is
collected, shared, and used
appropriately.
8. What does the acronym CIA stand for Confidentiality, integrity, and
in cybersecurity?
availability
Central Intelligence Agency
Confidentiality, integrity, and
availability Confidentiality,
intelligence, accessibility
Cybersecurity, internet, accessibility
9. Confidentiality [CIA triad] the rules that restrict access to only
those who need to know.
10. Integrity [CIA triad]
2/
23
, WGU - Introduction to IT - D322 Section 8
Review
Addresses the level of assurance that can
be given as to how accurate and
trustworthy data is.
11. Availability [CIA triad] Data being available to the
people who need it when they
need it.
12. Ways to enforce confidentiality - Implementing access controls
-Training clients to identify and
reduce
security risks by doing the following: Cre-
ate strong password policies and
Recognize social engineering
attacks.
13. Social Engineering a general term that describes any
attack that takes advantage of
humans' trusting nature.
14. Ways to maintain Integrity - file permissions
-user access controls
-version control
-redundant systems or copies.
15. Ways to ensure availability - rigorously maintaining all hardware
-testing compatibility with operating
sys-
tems and installed applications
-keeping systems patched and up-to-
date.
16. Mei is buying equipment from an from
online retail site, and she finds that
she is able $1,000 to $10.
to change the price of the equipment
3/
23
REVIEW QUESTIONS & VERIFIED ANSWERS
RATED 100% CORRECT
1. Which regulation governs the actions
of a company in the case of data Security Breach Notification laws
records being compromised, lost, or
stolen?
Computer Matching and Primary Protec-
tion Act of 1988
Security Breach Notification laws
The Electronic Communication Privacy
Act of 1986
Digital Signature and Electronic
Authoriza- tion laws
2. What is part of the role of an IT professional Engages in best practices for
information
association? systems
Engages in best practices for Provides professional standards for ethical
information systems behavior
Provides professional standards for ethical
behavior
Writes laws dealing with information
tech- nology
3. What is not part of the role of an IT
profes- sional association?
Writes laws dealing with information tech-
Engages in best practices for nology
information systems
Provides professional standards for ethical
behavior
Writes laws dealing with information
tech- nology
4.
1/
15
, WGU - Introduction to IT - D322 Section 8
Review
How can an organization assist employees By developing policies for
information us-
with the ethical use of information technol- age
ogy?
By developing policies for information us-
age
By monitoring network throughput By
ensuring databases are backed up
By establishing optimal server
perfor- mance
5. Computer Security Focuses on protecting data from
unautho- rized use and the
exploitation of stolen data for profit.
6. Computer Ethics Moral guidelines that govern the
use of computers and
information systems.
7. Computer Privacy Focuses on the use and governance
of per- sonal data, ensuring that it is
collected, shared, and used
appropriately.
8. What does the acronym CIA stand for Confidentiality, integrity, and
in cybersecurity?
availability
Central Intelligence Agency
Confidentiality, integrity, and
availability Confidentiality,
intelligence, accessibility
Cybersecurity, internet, accessibility
9. Confidentiality [CIA triad] the rules that restrict access to only
those who need to know.
10. Integrity [CIA triad]
2/
23
, WGU - Introduction to IT - D322 Section 8
Review
Addresses the level of assurance that can
be given as to how accurate and
trustworthy data is.
11. Availability [CIA triad] Data being available to the
people who need it when they
need it.
12. Ways to enforce confidentiality - Implementing access controls
-Training clients to identify and
reduce
security risks by doing the following: Cre-
ate strong password policies and
Recognize social engineering
attacks.
13. Social Engineering a general term that describes any
attack that takes advantage of
humans' trusting nature.
14. Ways to maintain Integrity - file permissions
-user access controls
-version control
-redundant systems or copies.
15. Ways to ensure availability - rigorously maintaining all hardware
-testing compatibility with operating
sys-
tems and installed applications
-keeping systems patched and up-to-
date.
16. Mei is buying equipment from an from
online retail site, and she finds that
she is able $1,000 to $10.
to change the price of the equipment
3/
23
