WGU C836 MULTI/COMPREHENSIVE FINAL
EXAM REVIEW questions and answers 2026\2027
A+ Grade
The Fabrication attack type most commonly affects which principle(s) of the CIA triad?
A. Availability
B. Integrity
C. Confidentiality
D. Integrity and Availability
E. Confidentiality and Integrity
- correct answer Integrity and Availability
The Interception attack type most commonly affects which principle(s) of the CIA triad? This task
contains the radio buttons and checkboxes for options. The shortcut keys to perform this task are A to H
and alt+1 to alt+9.
A.Integrity and Availability
B.Confidentiality and Integrity
C.Availability
D.Integrity
E.Confidentiality
- correct answer Confidentiality
Something that has the potential to cause harm to our assets is known as a(n) ________.
A.Threat
,B.Impact
C.Risk
D.Vulnerability
- correct answer Threat
Controls that protect the systems, networks, and environments that process, transmit, and store our
data are called _______.
A.Logical controls
B.Administrative controls
C.Physical controls
- correct answer Logical Control
What is the first and arguably one of the most important steps of the risk management process?
A.Assess risks
B.Mitigate risks
C.Identify threats
D.Assess vulnerabilities
E.Identify assets
- correct answer Identify assets
Protects information and information systems from unauthorized access, use, disclosure, disruption,
modification, or destruction
- correct answer information security
A type of attack, primarily against confidentiality
- correct answer Interception
Something that has the potential to cause harm to our assets
- correct answer Threat
,A weakness that can be used to harm us
- correct answer Vulnerability
The likelihood that something bad will happen
- correct answer Risk
An attack that involves tampering with our assets
- correct answer Modification attack
A model that adds three more principles to the CIA triad: possession or control, utility, and authenticity
- correct answer Parkerian hexad
The physical disposition of the media on which the data is stored
- correct answer Possession or control
An attack that involves generating data, processes, communications, or other similar activities with a
system
- correct answer Fabrication attack
A multilayered defense that will allow us to achieve a successful defense should one or more of our
defensive measures fail
- correct answer Defense in depth
Sometimes called technical controls, these protect the systems, networks, and environments that
process, transmit, and store our data
- correct answer Logical controls
Controls that protect the physical environment in which our systems sit, or where our data is stored
- correct answer Physical controls
The risk management phase that consists of all of the activities that we can perform in advance of the
incident itself, in order to better enable us to handle it
- correct answer Preparation phase
, The risk management phase where we detect the occurrence of an issue and decide whether it is
actually an incident so that we can respond to it appropriately
- correct answer Detection and analysis phase
The biometric characteristic that measures how well a factor resists change over time and with
advancing age is called __________.
A. Collectability
B. Acceptability
C.Universality
D.Uniqueness
E.Permanence
- correct answer E.Permanence
What type of authentication can prevent a man-in-the-middle attack? This task contains the radio
buttons and checkboxes for options.
A.Multifactor
B.Mutual
C.Something you know
D.Something you are
ESomething you do
- correct answer B.Mutual
An authentication mechanism in which both parties authenticate each other
- correct answer Mutual authentication
Describes the ease with which a system can be tricked by a falsified biometric identifier
- correct answer Circumvention
EXAM REVIEW questions and answers 2026\2027
A+ Grade
The Fabrication attack type most commonly affects which principle(s) of the CIA triad?
A. Availability
B. Integrity
C. Confidentiality
D. Integrity and Availability
E. Confidentiality and Integrity
- correct answer Integrity and Availability
The Interception attack type most commonly affects which principle(s) of the CIA triad? This task
contains the radio buttons and checkboxes for options. The shortcut keys to perform this task are A to H
and alt+1 to alt+9.
A.Integrity and Availability
B.Confidentiality and Integrity
C.Availability
D.Integrity
E.Confidentiality
- correct answer Confidentiality
Something that has the potential to cause harm to our assets is known as a(n) ________.
A.Threat
,B.Impact
C.Risk
D.Vulnerability
- correct answer Threat
Controls that protect the systems, networks, and environments that process, transmit, and store our
data are called _______.
A.Logical controls
B.Administrative controls
C.Physical controls
- correct answer Logical Control
What is the first and arguably one of the most important steps of the risk management process?
A.Assess risks
B.Mitigate risks
C.Identify threats
D.Assess vulnerabilities
E.Identify assets
- correct answer Identify assets
Protects information and information systems from unauthorized access, use, disclosure, disruption,
modification, or destruction
- correct answer information security
A type of attack, primarily against confidentiality
- correct answer Interception
Something that has the potential to cause harm to our assets
- correct answer Threat
,A weakness that can be used to harm us
- correct answer Vulnerability
The likelihood that something bad will happen
- correct answer Risk
An attack that involves tampering with our assets
- correct answer Modification attack
A model that adds three more principles to the CIA triad: possession or control, utility, and authenticity
- correct answer Parkerian hexad
The physical disposition of the media on which the data is stored
- correct answer Possession or control
An attack that involves generating data, processes, communications, or other similar activities with a
system
- correct answer Fabrication attack
A multilayered defense that will allow us to achieve a successful defense should one or more of our
defensive measures fail
- correct answer Defense in depth
Sometimes called technical controls, these protect the systems, networks, and environments that
process, transmit, and store our data
- correct answer Logical controls
Controls that protect the physical environment in which our systems sit, or where our data is stored
- correct answer Physical controls
The risk management phase that consists of all of the activities that we can perform in advance of the
incident itself, in order to better enable us to handle it
- correct answer Preparation phase
, The risk management phase where we detect the occurrence of an issue and decide whether it is
actually an incident so that we can respond to it appropriately
- correct answer Detection and analysis phase
The biometric characteristic that measures how well a factor resists change over time and with
advancing age is called __________.
A. Collectability
B. Acceptability
C.Universality
D.Uniqueness
E.Permanence
- correct answer E.Permanence
What type of authentication can prevent a man-in-the-middle attack? This task contains the radio
buttons and checkboxes for options.
A.Multifactor
B.Mutual
C.Something you know
D.Something you are
ESomething you do
- correct answer B.Mutual
An authentication mechanism in which both parties authenticate each other
- correct answer Mutual authentication
Describes the ease with which a system can be tricked by a falsified biometric identifier
- correct answer Circumvention
