Exam (elaborations)

WGU D430 FUNDAMENTALS OF INFORMATION AND SECURITY YEAR 2024/2025 / ACCURATE CURRENTLY TESTING EXAM VERSIONS WITH ACTUAL QUESTIONS AND DETAILED ANSWERS WITH A STUDY GUIDE / EXPERT VERIFIED FOR GURANTEED PASS / LATEST UPDATE.

0 purchase

Course
WGU D430 FUNDAMENTALS OF INFORMATION AND SECURITY

Institution
WGU D430 FUNDAMENTALS OF INFORMATION AND SECURITY

[Show more]

Preview 4 out of 32 pages

View example

Uploaded on September 6, 2024
Number of pages 32
Written in 2024/2025
Type Exam (elaborations)
Contains Questions & answers

wgu d430
wgu
wgu d430 fundamentals of information and security

Institution WGU D430 FUNDAMENTALS OF INFORMATION AND SECURITY
Course WGU D430 FUNDAMENTALS OF INFORMATION AND SECURITY

DrMedinaReed Member since 2 year 1799 documents sold

2510

$24.49

Add to cart

Add to wishlist

100% satisfaction guarantee
Immediately available after payment
Both online and in PDF
No strings attached

WGU D430 FUNDAMENTALS OF INFORMATION AND
SECURITY YEAR 2024/2025 / ACCURATE CURRENTLY
TESTING EXAM VERSIONS WITH ACTUAL QUESTIONS AND
DETAILED ANSWERS WITH A STUDY GUIDE / EXPERT
VERIFIED FOR GURANTEED PASS / LATEST UPDATE.

Interception - CORRECT ANSWER Attacks allows unauthorized users to access our data,
applications, or environments. Are primarily an attack against confidentiality

Interruption - CORRECT ANSWER Attacks cause our assets to become unstable or unavailable
for our use, on a temporary or permanent basis. This attack affects availability but can also attack
integrity

Modification - CORRECT ANSWER Attacks involve tampering with our asset. Such attacks
might primarily be considered an integrity attack, but could also be an availability attack.

Fabrication - CORRECT ANSWER Attacks involve generating data, processes,
communications, or other similar activities with a system. Attacks primarily affect integrity but
can be considered an availability attack.

Risk - CORRECT ANSWER The likelihood that a threat will occur. There must be a threat and
vulnerability

Threat - CORRECT ANSWER Any event being man-made, natural or environmental that could
damage the assets

Vulnerabilities - CORRECT ANSWER Weakness that a threat event or the threat can take
advantage of

Impact - CORRECT ANSWER taking into account the assets cost

Controls - CORRECT ANSWER The ways we protect assets. Physical, technical/ logical, and
administrative

,Physical controls - CORRECT ANSWER Controls are physical items that protect assets. Think
of locks, doors, guards and fences

Technical/ logical controls - CORRECT ANSWER Controls are devices and software that
protect assets. Think of firewalls, av, ids, and ips

Administrative controls - CORRECT ANSWER Controls are the policies that organizations
create for governance. Ex: email policies

risk mamagement - CORRECT ANSWER A constant process as assets are purchased, used and
retired. The general steps are 1- identify assets
2- identify threats
3- assess vulnerabilities
4- assess risk
5- mitigating risks

Identify assets - CORRECT ANSWER First and most important part or risk management.
Identifying and categorizing the assets we are protecting

Identify threats - CORRECT ANSWER Once we have our critical assets we can identify the
threats that might effect them

Assess Vulnerabilities - CORRECT ANSWER Look at potential threats. any given asset may
have thousand or millions of threats that could impact it, but only a small fraction of the threats
will be relevant

Assess risks - CORRECT ANSWER Once we have identified the threats and vulnerabilities for a
given asset we can access the overall risk

Mitigating risks - CORRECT ANSWER Putting measures in place to help ensure that a given
type of threat is accounted for

,Incident response - CORRECT ANSWER Response to when risk management practices have
failed and have cause an inconvenience to a disastrous event

Incident response cycle - CORRECT ANSWER 1 preparation
2- detection and analysis
3- containment
4- eradication
5- recovery
6- post incident activity

Preparation phase - CORRECT ANSWER The preparation phase consists of all of the activities
that we can preform in advance of the incident itself in order to better enable us to handle it

Detection and analysis phase - CORRECT ANSWER Where the action begins to happen. We
will detect the occurrence of an issue and decide whether or not it is actually an incident so that
we can respond

Containment phase - CORRECT ANSWER Taking steps to ensure that the situation does not
cause any more damage than it already has, or to at least lessen any ongoing harm.

Eradication phase - CORRECT ANSWER We will attempt to remove the effects of the issue
from our environment

Recovery phase - CORRECT ANSWER Recover to a better state that we were prior to the
incident or perhaps prior to when the issue started if we did not detect it immediately

Post incident activity phase - CORRECT ANSWER We attempt to determine specifically what
happened, why it happened, and what we can do to keep it from happening again.
Defense in depth - CORRECT ANSWER Layering of security controls is more effective and
secure than relying on a single control

, Identity - CORRECT ANSWER Who or what we claim to be ( username)

Authentication CORRECT ANSWER The act of proving who or what we claim to be (password)

Identity verification - CORRECT ANSWER -
The half step between identity and authentication (showing two forms of Id)

single-factor authentication - CORRECT ANSWER Involves the use of simply one of the three
available factors solely in order to carry out the authentication process being requested

Dual-factor authentication - CORRECT ANSWER An authentication method that includes
multiple methods for a single authentication transaction. Often referred to as "something you
have and something you know," when the factors include a device such as a smart card and a
secret such as a password or PIN.

Multi-factor authentication - CORRECT ANSWER Use of several authentication techniques
together, such as passwords and security tokens.

mutual authentication - CORRECT ANSWER The process where the session is authenticated on
both ends and just one end . Prevents man in the middle attacks

man-in-the-middle attack - CORRECT ANSWER a hacker placing himself between a client and
a host to intercept communications between them

brute force attack - CORRECT ANSWER the password cracker tries every possible combination
of characters to guess the password

Password manager - CORRECT ANSWER Programs that store all of the users passwords with a
master password

The benefits of buying summaries with Stuvia:

Guaranteed quality through customer reviews

Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.

Quick and easy check-out

You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.

Focus on what matters

Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!

Frequently asked questions

What do I get when I buy this document?

You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.

Satisfaction guarantee: how does it work?

Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.

Who am I buying these notes from?

Stuvia is a marketplace, so you are not buying this document from us, but from seller DrMedinaReed. Stuvia facilitates payment to the seller.

Will I be stuck with a subscription?

No, you only buy these notes for $24.49. You're not tied to anything after your purchase.

Can Stuvia be trusted?

4.6 stars on Google & Trustpilot (+1000 reviews)

69052 documents were sold in the last 30 days

Founded in 2010, the go-to place to buy study notes for 15 years now

Start selling

Exam (elaborations)

WGU D430 FUNDAMENTALS OF INFORMATION AND SECURITY YEAR 2024/2025 / ACCURATE CURRENTLY TESTING EXAM VERSIONS WITH ACTUAL QUESTIONS AND DETAILED ANSWERS WITH A STUDY GUIDE / EXPERT VERIFIED FOR GURANTEED PASS / LATEST UPDATE.

Document information

Subjects

Written for

Seller

Reviews received

Content preview