WGU C845 VUN1 TASK 3 EVALUATING AND
DEFENDING DATA SECURITY AND SYSTEM
OPERATIONS UPDATED SOLUTIONS GUIDE
◉ CIA Triad.
Answer: A model that includes Confidentiality, Integrity, and
Availability as the three core principles of computer security.
◉ Confidentiality.
Answer: Only the right people can see the data. Ex: Grades visible
only to the student and instructor.
◉ Integrity.
Answer: Data isn't tampered with. Ex: A grade/bank balance can't be
silently changed.
◉ Availability.
Answer: Service works when needed. Ex: Canvas is up before the
assignment deadline.
◉ Authenticity.
Answer: We can verify the identity of a person, device, or system.
, ◉ Accountability / Auditability.
Answer: Actions can be traced back to an identity later (via logs,
timestamps, IDs).
◉ Disruption.
Answer: Legitimate users can't use the system on time, even if
nothing was stolen or changed.
◉ DDoS attack.
Answer: A DDoS (Distributed Denial of Service) attack overloads a
target server, service, or network with a massive volume of fake
traffic from multiple sources, making it unavailable to legitimate
users.
◉ Adversary.
Answer: Someone who intends to harm your system or data.
Example: A disgruntled ex-employee planning to leak customer
records.
◉ Attack.
Answer: A malicious action attempting to steal, alter, or disrupt.
◉ Security goals (CIA+).
DEFENDING DATA SECURITY AND SYSTEM
OPERATIONS UPDATED SOLUTIONS GUIDE
◉ CIA Triad.
Answer: A model that includes Confidentiality, Integrity, and
Availability as the three core principles of computer security.
◉ Confidentiality.
Answer: Only the right people can see the data. Ex: Grades visible
only to the student and instructor.
◉ Integrity.
Answer: Data isn't tampered with. Ex: A grade/bank balance can't be
silently changed.
◉ Availability.
Answer: Service works when needed. Ex: Canvas is up before the
assignment deadline.
◉ Authenticity.
Answer: We can verify the identity of a person, device, or system.
, ◉ Accountability / Auditability.
Answer: Actions can be traced back to an identity later (via logs,
timestamps, IDs).
◉ Disruption.
Answer: Legitimate users can't use the system on time, even if
nothing was stolen or changed.
◉ DDoS attack.
Answer: A DDoS (Distributed Denial of Service) attack overloads a
target server, service, or network with a massive volume of fake
traffic from multiple sources, making it unavailable to legitimate
users.
◉ Adversary.
Answer: Someone who intends to harm your system or data.
Example: A disgruntled ex-employee planning to leak customer
records.
◉ Attack.
Answer: A malicious action attempting to steal, alter, or disrupt.
◉ Security goals (CIA+).
