WGU C182 UPDATED FINAL PAPER QUESTIONS AND
ANSWERS MARKED A+
✔✔Client-Server - ✔✔Client is computer that will request info from another computer
(the server) .
The server takes requests and responds.
*More expensive than peer to peer.
BENEFITS: More storage=faster response time.
✔✔Virtual Machine - ✔✔Allows access to multiple machines without having to purchase
multiple computers.
Also allows user to run software for a computer that normally would not be able to run
that software.
✔✔Network Server - ✔✔Dedicated, high performance computer with large hard disk
drives. It may be in a cabinet so multiple servers can be housed.
**Stand alone computer, not a desktop.
✔✔Information Security Assurance Goals - ✔✔"CIA"
1. Confidentiality
2. Integrity
3. Availability
✔✔IAS Confidentiality - ✔✔Requires data be kept secure so that it does not fall to
unauthorized users.
It goes beyond security measures and extends to policies.
Security measures should extend beyond network. A stolen laptop should not violate
confidentiality.
✔✔IAS Integrity - ✔✔Requires data are correct.
Requires 3 different efforts:
1. Data gathering should include an accuracy component.
2. Data must be entered into system accurately.
3. Once data is in dB, changes made will leave a record of when the change was made
and by whom.
✔✔IAS Availability - ✔✔Requires data/information be available when needed.
✔✔Steps of Strategic Risk Analysis - ✔✔1.Identify organization information assets.
2. Identify vulnerabilities.
3.Identify threats.
4.Implement policies.
, ✔✔Social Engineering - ✔✔Targets users directly, could include calling and asking for
password because there is an issue. Could also include phishing, which involves emails
that will redirect to a malicious website.
✔✔SQL Injection - ✔✔Hacker issues a SQL command to web server as part of URL.
B/c web server is not expecting SQL command, may pass SQL command to database.
Malicious SQL command may then do damage.
✔✔Buffer Overflow - ✔✔Most well known type of software injection attack.
Because buffer is limited in size, if software doesn't ensure insertions in buffer are
limited in size, sufficient amounts of malicious code could overflow buffer. Malicious
overflow code could then be stored in memory and run to perform operations inserted
by hacker.
✔✔Packet Sniffing - ✔✔Means of obtaining a password or anything sent over network
without encryption.
✔✔Computer Science - ✔✔Computer science is the study of computers and
computational systems.
✔✔Repeater - ✔✔Passes signals back and forth between two buses without
considering the meaning of the signals.
✔✔Bridge - ✔✔Only forwards messages addressed to a computer on the other side.
✔✔PAN - ✔✔A Personal Area Network (PAN) is normally used for short-range
communications, within a few feet, such as wireless headphones to a smartphone or a
wireless mouse to a PC.
✔✔LAN - ✔✔Local Area Networks (LANs) consist of a collection of computers in a
single building or building complex.
✔✔WAN - ✔✔Wide Area Networks (WANs) link systems over a greater distance,
including machines on the opposite sides of the world.
✔✔Distributed Systems - ✔✔Distributed systems execute software as processes on
more than one computer. Examples include: cluster computer, cloud computing and grid
computing.
✔✔Wireless Transmission - ✔✔Light waves of different frequencies, such as infrared or
radio waves, can be used to transmit data within a network with the use of Wi-Fi,
Bluetooth, or even near field communication. These radio waves are what is used to
carry radio signals far distances to other networked devices.
ANSWERS MARKED A+
✔✔Client-Server - ✔✔Client is computer that will request info from another computer
(the server) .
The server takes requests and responds.
*More expensive than peer to peer.
BENEFITS: More storage=faster response time.
✔✔Virtual Machine - ✔✔Allows access to multiple machines without having to purchase
multiple computers.
Also allows user to run software for a computer that normally would not be able to run
that software.
✔✔Network Server - ✔✔Dedicated, high performance computer with large hard disk
drives. It may be in a cabinet so multiple servers can be housed.
**Stand alone computer, not a desktop.
✔✔Information Security Assurance Goals - ✔✔"CIA"
1. Confidentiality
2. Integrity
3. Availability
✔✔IAS Confidentiality - ✔✔Requires data be kept secure so that it does not fall to
unauthorized users.
It goes beyond security measures and extends to policies.
Security measures should extend beyond network. A stolen laptop should not violate
confidentiality.
✔✔IAS Integrity - ✔✔Requires data are correct.
Requires 3 different efforts:
1. Data gathering should include an accuracy component.
2. Data must be entered into system accurately.
3. Once data is in dB, changes made will leave a record of when the change was made
and by whom.
✔✔IAS Availability - ✔✔Requires data/information be available when needed.
✔✔Steps of Strategic Risk Analysis - ✔✔1.Identify organization information assets.
2. Identify vulnerabilities.
3.Identify threats.
4.Implement policies.
, ✔✔Social Engineering - ✔✔Targets users directly, could include calling and asking for
password because there is an issue. Could also include phishing, which involves emails
that will redirect to a malicious website.
✔✔SQL Injection - ✔✔Hacker issues a SQL command to web server as part of URL.
B/c web server is not expecting SQL command, may pass SQL command to database.
Malicious SQL command may then do damage.
✔✔Buffer Overflow - ✔✔Most well known type of software injection attack.
Because buffer is limited in size, if software doesn't ensure insertions in buffer are
limited in size, sufficient amounts of malicious code could overflow buffer. Malicious
overflow code could then be stored in memory and run to perform operations inserted
by hacker.
✔✔Packet Sniffing - ✔✔Means of obtaining a password or anything sent over network
without encryption.
✔✔Computer Science - ✔✔Computer science is the study of computers and
computational systems.
✔✔Repeater - ✔✔Passes signals back and forth between two buses without
considering the meaning of the signals.
✔✔Bridge - ✔✔Only forwards messages addressed to a computer on the other side.
✔✔PAN - ✔✔A Personal Area Network (PAN) is normally used for short-range
communications, within a few feet, such as wireless headphones to a smartphone or a
wireless mouse to a PC.
✔✔LAN - ✔✔Local Area Networks (LANs) consist of a collection of computers in a
single building or building complex.
✔✔WAN - ✔✔Wide Area Networks (WANs) link systems over a greater distance,
including machines on the opposite sides of the world.
✔✔Distributed Systems - ✔✔Distributed systems execute software as processes on
more than one computer. Examples include: cluster computer, cloud computing and grid
computing.
✔✔Wireless Transmission - ✔✔Light waves of different frequencies, such as infrared or
radio waves, can be used to transmit data within a network with the use of Wi-Fi,
Bluetooth, or even near field communication. These radio waves are what is used to
carry radio signals far distances to other networked devices.
