WGU C725 Practice Test | 137 Questions with 100% Correct Answers | Verified | Latest Update | 26 Pages

Which groups typically report to the chief security officer (CSO)? - Security engineering and operations A company is considering which controls to buy to protect an asset. What should the price of the controls be in relation to the cost of the asset? - Less than the annual loss expectancy An employee uses a secure hashing algorithm for message integrity. The employee sends a plain text message with the embedded hash to a colleague. A rogue device receives and retransmits the message to its destination. Once received and checked by the intended recipient, the hashes do not match. Which STRIDE concept has been violated? - Tampering An attacker accesses private emails between the company's CISO and board members. The attacker then publishes the emails online. Which type of an attack is this, according to the STRIDE model? - Information disclosure A system data owner needs to give access to a new employee, so the owner formally requests that the system administrator create an account and permit the new employee to use systems necessary to the job. Which type of control does the system administrator use to grant these permissions? - Access