WGU D430 Fundamentals of
Information Security Exam 2026/2027 –
Verified Q&As with Detailed Rationales
(Test Bank Bundle - 56 Questions)
---
*QUESTION 1:*
A security administrator is implementing the principle of least privilege. What does this principle
require?
A) Users are granted only the permissions they need to perform their job
B) Users are granted all permissions to avoid access issues
C) Users are granted permissions based on their seniority
D) Users are granted permissions for a limited time only
> 🎯 *CORRECT ANSWER:* A) Users are granted only the permissions they need to perform their job
> 💡 *CLINICAL RATIONALE:*
> * *Why It's Right:* Least privilege minimizes potential damage from misuse or compromise.
> * *Why Distractors Fail:* Granting all permissions, seniority-based, and time-limited are not least
privilege.
> * *Core Takeaway:* Least privilege limits access to what is necessary.
---
*QUESTION 2:*
Which of the following is an example of a physical security control?
,A) Surveillance cameras
B) Firewalls
C) Antivirus software
D) Encryption
> 🎯 *CORRECT ANSWER:* A) Surveillance cameras
> 💡 *CLINICAL RATIONALE:*
> * *Why It's Right:* Surveillance cameras are physical security measures.
> * *Why Distractors Fail:* Firewalls, antivirus, and encryption are technical controls.
> * *Core Takeaway:* Physical controls are tangible security measures.
---
*QUESTION 3:*
What is the primary purpose of encryption?
A) To ensure data confidentiality
B) To ensure data availability
C) To ensure data integrity
D) To ensure data backup
> 🎯 *CORRECT ANSWER:* A) To ensure data confidentiality
> 💡 *CLINICAL RATIONALE:*
> * *Why It's Right:* Encryption protects data from unauthorized access.
> * *Why Distractors Fail:* Availability, integrity, and backup are separate security goals.
> * *Core Takeaway:* Encryption ensures confidentiality.
---
*QUESTION 4:*
,A company wants to protect its network from external threats. Which device is most effective?
A) Firewall
B) Switch
C) Hub
D) Repeater
> 🎯 *CORRECT ANSWER:* A) Firewall
> 💡 *CLINICAL RATIONALE:*
> * *Why It's Right:* Firewalls filter incoming and outgoing traffic based on rules.
> * *Why Distractors Fail:* Switches, hubs, and repeaters do not provide security.
> * *Core Takeaway:* Firewalls are the first line of defense.
---
*QUESTION 5:*
A user receives a suspicious email with a link. What is the best action?
A) Hover over the link to check the URL before clicking
B) Click the link to see what it is
C) Forward the email to colleagues
D) Reply to the sender for more information
> 🎯 *CORRECT ANSWER:* A) Hover over the link to check the URL before clicking
> 💡 *CLINICAL RATIONALE:*
> * *Why It's Right:* Hovering reveals the actual URL and helps identify phishing.
> * *Why Distractors Fail:* Clicking, forwarding, and replying are unsafe.
> * *Core Takeaway:* Verify links before clicking.
---
, *QUESTION 6:*
Which of the following is a characteristic of a strong password?
A) It is at least 12 characters long with a mix of character types
B) It is a common word
C) It is a sequence like "12345678"
D) It is the same as other accounts
> 🎯 *CORRECT ANSWER:* A) It is at least 12 characters long with a mix of character types
> 💡 *CLINICAL RATIONALE:*
> * *Why It's Right:* Long, complex passwords are harder to crack.
> * *Why Distractors Fail:* Common words, sequences, and reused passwords are weak.
> * *Core Takeaway:* Use strong, unique passwords.
---
*QUESTION 7:*
What is the purpose of multi-factor authentication (MFA)?
A) To require two or more authentication factors
B) To eliminate the need for passwords
C) To speed up the login process
D) To share credentials
> 🎯 *CORRECT ANSWER:* A) To require two or more authentication factors
> 💡 *CLINICAL RATIONALE:*
> * *Why It's Right:* MFA adds layers of security.
> * *Why Distractors Fail:* It does not eliminate passwords, speed up logins, or share credentials.
> * *Core Takeaway:* MFA enhances login security.
Information Security Exam 2026/2027 –
Verified Q&As with Detailed Rationales
(Test Bank Bundle - 56 Questions)
---
*QUESTION 1:*
A security administrator is implementing the principle of least privilege. What does this principle
require?
A) Users are granted only the permissions they need to perform their job
B) Users are granted all permissions to avoid access issues
C) Users are granted permissions based on their seniority
D) Users are granted permissions for a limited time only
> 🎯 *CORRECT ANSWER:* A) Users are granted only the permissions they need to perform their job
> 💡 *CLINICAL RATIONALE:*
> * *Why It's Right:* Least privilege minimizes potential damage from misuse or compromise.
> * *Why Distractors Fail:* Granting all permissions, seniority-based, and time-limited are not least
privilege.
> * *Core Takeaway:* Least privilege limits access to what is necessary.
---
*QUESTION 2:*
Which of the following is an example of a physical security control?
,A) Surveillance cameras
B) Firewalls
C) Antivirus software
D) Encryption
> 🎯 *CORRECT ANSWER:* A) Surveillance cameras
> 💡 *CLINICAL RATIONALE:*
> * *Why It's Right:* Surveillance cameras are physical security measures.
> * *Why Distractors Fail:* Firewalls, antivirus, and encryption are technical controls.
> * *Core Takeaway:* Physical controls are tangible security measures.
---
*QUESTION 3:*
What is the primary purpose of encryption?
A) To ensure data confidentiality
B) To ensure data availability
C) To ensure data integrity
D) To ensure data backup
> 🎯 *CORRECT ANSWER:* A) To ensure data confidentiality
> 💡 *CLINICAL RATIONALE:*
> * *Why It's Right:* Encryption protects data from unauthorized access.
> * *Why Distractors Fail:* Availability, integrity, and backup are separate security goals.
> * *Core Takeaway:* Encryption ensures confidentiality.
---
*QUESTION 4:*
,A company wants to protect its network from external threats. Which device is most effective?
A) Firewall
B) Switch
C) Hub
D) Repeater
> 🎯 *CORRECT ANSWER:* A) Firewall
> 💡 *CLINICAL RATIONALE:*
> * *Why It's Right:* Firewalls filter incoming and outgoing traffic based on rules.
> * *Why Distractors Fail:* Switches, hubs, and repeaters do not provide security.
> * *Core Takeaway:* Firewalls are the first line of defense.
---
*QUESTION 5:*
A user receives a suspicious email with a link. What is the best action?
A) Hover over the link to check the URL before clicking
B) Click the link to see what it is
C) Forward the email to colleagues
D) Reply to the sender for more information
> 🎯 *CORRECT ANSWER:* A) Hover over the link to check the URL before clicking
> 💡 *CLINICAL RATIONALE:*
> * *Why It's Right:* Hovering reveals the actual URL and helps identify phishing.
> * *Why Distractors Fail:* Clicking, forwarding, and replying are unsafe.
> * *Core Takeaway:* Verify links before clicking.
---
, *QUESTION 6:*
Which of the following is a characteristic of a strong password?
A) It is at least 12 characters long with a mix of character types
B) It is a common word
C) It is a sequence like "12345678"
D) It is the same as other accounts
> 🎯 *CORRECT ANSWER:* A) It is at least 12 characters long with a mix of character types
> 💡 *CLINICAL RATIONALE:*
> * *Why It's Right:* Long, complex passwords are harder to crack.
> * *Why Distractors Fail:* Common words, sequences, and reused passwords are weak.
> * *Core Takeaway:* Use strong, unique passwords.
---
*QUESTION 7:*
What is the purpose of multi-factor authentication (MFA)?
A) To require two or more authentication factors
B) To eliminate the need for passwords
C) To speed up the login process
D) To share credentials
> 🎯 *CORRECT ANSWER:* A) To require two or more authentication factors
> 💡 *CLINICAL RATIONALE:*
> * *Why It's Right:* MFA adds layers of security.
> * *Why Distractors Fail:* It does not eliminate passwords, speed up logins, or share credentials.
> * *Core Takeaway:* MFA enhances login security.
