Wgu C386 Study Bundle Updated 2024!!

Controls that protect the systems, networks, and environments that process, transmit, and store our data are called _______. - Answer Logical Controls During what phase of the incident response process do we determine what happened, why it happened, and what we can do to keep it from happenin...

CIA Triad - Answer Confidential - allowing only those authorized to access the data requested Integrity - keeping data unaltered in an unauthorized manner and reliable Availability - the ability for those authorized to access data when needed Parkerian Hexad - Answer Confidentiality Int...

Which tool should an application developer use to help identify input validation vulnerabilities? - Answer A Fuzzer Which cybersecurity term is defined as the potential for an attack on a resource ? - Answer Threat Which security type deliberately exposes a system's vulnerabilities or res...

Information security - Answer Keeping data, software, and hardware secure against unauthorized access, use, disclosure, disruption, modification, or destruction. Compliance - Answer The requirements that are set forth by laws and industry regulations. Example : HIPPA/ HITECH- healthcare, PC...

Define the confidentiality in the CIA triad. - Answer Our ability to protect data from those who are not authorized to view it. Examples of confidentiality - Answer A patron using an ATM card wants to keep their PIN number confidential. An ATM owner wants to keep bank account numbers co...

Which cybersecurity term is defined as the potential for an attack on a resource? A Impact B Vulnerability C Risk D Threat - Answer D Which security type deliberately exposes a system's vulnerabilities or resources to an attacker? A Intrusion detection B Firewalls C Honeypots D I...

What describes competitive intelligence? The codename for a study conducted to curtail unauthorized passing of information. The practice of managing the range of intelligence-gathering activities that are being directed at an organization. The process that prevents sensitive information fro...

Which type of system is considered absolutely secure? A system that is new. A system that has been recently patched. A system that has been in production for many years. A system that is shut off and disconnected from all networks. - Answer A system that is shut off and disconnected from a...

bounds checking - Answer to set a limit on the amount of data we expect to receive to set aside storage for that data *required in most programming languages * prevents buffer overflows race conditions - Answer A type of software development vulnerability that occurs when multiple proce...

The Fabrication attack type most commonly affects which principle(s) of the CIA triad? A. Availability B. Integrity C. Confidentiality D. Integrity and Availability E. Confidentiality and Integrity - Answer Integrity and Availability The Interception attack type most commonly affects wh...

FISMA (Federal Information Security Modernization Act) - Answer this law provides a framework for ensuring the effectiveness of information security controls in federal government - changed from Management (2002) to Modernization in 2014 HIPAA (Health Insurance Portability and Accountability...

What is the disadvantage of logging? Highly configurable Resources Reactive tool History of activities - Answer Resources Which cryptographic algorithm is obsolete? Hash functions Asymmetric key cryptography Caeser cypher Symmetric key cryptography - Answer Caeser cypher...

Define the confidentiality, integrity, availability (CIA) triad. - Answer The CIA triad is a model used to think about and discuss security concepts, especially data. Confidentiality is used to keep something private or minimally known. Integrity is to prevent our data from being changed in an un...

Making sure that a person is responsible for their actions. Helps keep track of how people are accessing sensitive data stored digitally in an organization - Answer Accountability Under this law in the US, financial data is protected against such things as corporate fraud - Answer Sarbane...