WGU C836 Study Set (Modules 1-4): Questions With
Comprehensive Solutions
What is Information Security? Correct Answer - protecting information
and information systems from unauthorized access, use, disclosure,
disruption, modification, or destruction
What are our single most valuable asset in business? Correct Answer -
people
what is the goal of a security plan? Correct Answer - to find the balance
between protection, usability, and cost
What should the cost of security never do? Correct Answer - outstrip the
value of what it is protecting
When is a system secure? Correct Answer - Never: there is always a
vulnerability
What does PCI DSS regulate? Correct Answer - companies that process
credit card payments
What does HIPPA regulate? Correct Answer - organizations that handle
medical records
What is FISMA? Correct Answer - provides a framework for ensuring the
effectiveness of information security controls in government. It is intended to
protect government information, operations, and assets from any natural or
manmade threat. requires each federal agency to develop, document, and
implement an information security program to protect its information and
systems. Annual reviews of these programs are required to maintain
compliance and keep security risks to an acceptable level.
What is Confidentiality? Correct Answer - our ability to protect data
from those who are not authorized to view it
What is Integrity? Correct Answer - the ability to prevent our data from
being changed in an unauthorized or undesireable manner
, What are some ways we can control Integrity? Correct Answer - In
Windows: implementing permissions that restrict what actions an
unauthorized user can perform on a given file
In a Database: rolling back or undoing changes that are undesirable
What is Availability? Correct Answer - the ability to access our data
when we need it
How can Confidentiality be compromised? Correct Answer - by the loss
of a laptop containing data, an e-mail attachment being sent to the wrong
person
How can Integrity be compromised? Correct Answer - when an
unauthorized user alters a given file
How can Availability be compromised? Correct Answer - when the
system cannot provide the information requested; for example, during a
power outage
What is the difference in the Parkerian understanding of Integrity and that of
the CIA model? Correct Answer - it does not account for authorized, but
incorrect, modification of data and instead focuses on the state of the data
itself in the sense of completeness.
What is Possession or Control? Correct Answer - the physical disposition
of the media on which the data is stored
What is Authenticity? Correct Answer - the proper attribution as to the
owner or data in question
What is non-repudiation? Correct Answer - preventing an entity from
denying that a given action took place; for example, a sender is prevented
from denying that they sent an email.
What is utility? Correct Answer - how useful, to varying degrees, the
data is
Comprehensive Solutions
What is Information Security? Correct Answer - protecting information
and information systems from unauthorized access, use, disclosure,
disruption, modification, or destruction
What are our single most valuable asset in business? Correct Answer -
people
what is the goal of a security plan? Correct Answer - to find the balance
between protection, usability, and cost
What should the cost of security never do? Correct Answer - outstrip the
value of what it is protecting
When is a system secure? Correct Answer - Never: there is always a
vulnerability
What does PCI DSS regulate? Correct Answer - companies that process
credit card payments
What does HIPPA regulate? Correct Answer - organizations that handle
medical records
What is FISMA? Correct Answer - provides a framework for ensuring the
effectiveness of information security controls in government. It is intended to
protect government information, operations, and assets from any natural or
manmade threat. requires each federal agency to develop, document, and
implement an information security program to protect its information and
systems. Annual reviews of these programs are required to maintain
compliance and keep security risks to an acceptable level.
What is Confidentiality? Correct Answer - our ability to protect data
from those who are not authorized to view it
What is Integrity? Correct Answer - the ability to prevent our data from
being changed in an unauthorized or undesireable manner
, What are some ways we can control Integrity? Correct Answer - In
Windows: implementing permissions that restrict what actions an
unauthorized user can perform on a given file
In a Database: rolling back or undoing changes that are undesirable
What is Availability? Correct Answer - the ability to access our data
when we need it
How can Confidentiality be compromised? Correct Answer - by the loss
of a laptop containing data, an e-mail attachment being sent to the wrong
person
How can Integrity be compromised? Correct Answer - when an
unauthorized user alters a given file
How can Availability be compromised? Correct Answer - when the
system cannot provide the information requested; for example, during a
power outage
What is the difference in the Parkerian understanding of Integrity and that of
the CIA model? Correct Answer - it does not account for authorized, but
incorrect, modification of data and instead focuses on the state of the data
itself in the sense of completeness.
What is Possession or Control? Correct Answer - the physical disposition
of the media on which the data is stored
What is Authenticity? Correct Answer - the proper attribution as to the
owner or data in question
What is non-repudiation? Correct Answer - preventing an entity from
denying that a given action took place; for example, a sender is prevented
from denying that they sent an email.
What is utility? Correct Answer - how useful, to varying degrees, the
data is
