1 |Page
WGU C836 MULTI/COMPREHENSIVE
FINAL EXAM 2026 WITH QUESTIONS
AND ANSWERS
The Fabrication attack type most commonly affects which principle(s) of the
CIA triad?
A. Availability
B. Integrity
C. Confidentiality
D. Integrity and Availability
E. Confidentiality and Integrity - correct answer-Integrity and Availability
The Interception attack type most commonly affects which principle(s) of
the CIA triad? This task contains the radio buttons and checkboxes for
options. The shortcut keys to perform this task are A to H and alt+1 to
alt+9.
A.Integrity and Availability
B.Confidentiality and Integrity
C.Availability
D.Integrity
E.Confidentiality - correct answer-Confidentiality
,2 |Page
Something that has the potential to cause harm to our assets is known as
a(n) ________.
A.Threat
B.Impact
C.Risk
D.Vulnerability - correct answer-Threat
Controls that protect the systems, networks, and environments that
process, transmit, and store our data are called _______.
A.Logical controls
B.Administrative controls
C.Physical controls - correct answer-Logical Control
What is the first and arguably one of the most important steps of the risk
management process?
A.Assess risks
B.Mitigate risks
C.Identify threats
D.Assess vulnerabilities
E.Identify assets - correct answer-Identify assets
,3 |Page
Protects information and information systems from unauthorized access,
use, disclosure, disruption, modification, or destruction - correct answer-
information security
A type of attack, primarily against confidentiality - correct answer-
Interception
Something that has the potential to cause harm to our assets - correct
answer-Threat
A weakness that can be used to harm us - correct answer-Vulnerability
The likelihood that something bad will happen - correct answer-Risk
An attack that involves tampering with our assets - correct answer-
Modification attack
A model that adds three more principles to the CIA triad: possession or
control, utility, and authenticity - correct answer-Parkerian hexad
, 4 |Page
The physical disposition of the media on which the data is stored - correct
answer-Possession or control
An attack that involves generating data, processes, communications, or
other similar activities with a system - correct answer-Fabrication attack
A multilayered defense that will allow us to achieve a successful defense
should one or more of our defensive measures fail - correct answer-
Defense in depth
Sometimes called technical controls, these protect the systems, networks,
and environments that process, transmit, and store our data - correct
answer-Logical controls
Controls that protect the physical environment in which our systems sit, or
where our data is stored - correct answer-Physical controls
The risk management phase that consists of all of the activities that we can
perform in advance of the incident itself, in order to better enable us to
handle it - correct answer-Preparation phase
WGU C836 MULTI/COMPREHENSIVE
FINAL EXAM 2026 WITH QUESTIONS
AND ANSWERS
The Fabrication attack type most commonly affects which principle(s) of the
CIA triad?
A. Availability
B. Integrity
C. Confidentiality
D. Integrity and Availability
E. Confidentiality and Integrity - correct answer-Integrity and Availability
The Interception attack type most commonly affects which principle(s) of
the CIA triad? This task contains the radio buttons and checkboxes for
options. The shortcut keys to perform this task are A to H and alt+1 to
alt+9.
A.Integrity and Availability
B.Confidentiality and Integrity
C.Availability
D.Integrity
E.Confidentiality - correct answer-Confidentiality
,2 |Page
Something that has the potential to cause harm to our assets is known as
a(n) ________.
A.Threat
B.Impact
C.Risk
D.Vulnerability - correct answer-Threat
Controls that protect the systems, networks, and environments that
process, transmit, and store our data are called _______.
A.Logical controls
B.Administrative controls
C.Physical controls - correct answer-Logical Control
What is the first and arguably one of the most important steps of the risk
management process?
A.Assess risks
B.Mitigate risks
C.Identify threats
D.Assess vulnerabilities
E.Identify assets - correct answer-Identify assets
,3 |Page
Protects information and information systems from unauthorized access,
use, disclosure, disruption, modification, or destruction - correct answer-
information security
A type of attack, primarily against confidentiality - correct answer-
Interception
Something that has the potential to cause harm to our assets - correct
answer-Threat
A weakness that can be used to harm us - correct answer-Vulnerability
The likelihood that something bad will happen - correct answer-Risk
An attack that involves tampering with our assets - correct answer-
Modification attack
A model that adds three more principles to the CIA triad: possession or
control, utility, and authenticity - correct answer-Parkerian hexad
, 4 |Page
The physical disposition of the media on which the data is stored - correct
answer-Possession or control
An attack that involves generating data, processes, communications, or
other similar activities with a system - correct answer-Fabrication attack
A multilayered defense that will allow us to achieve a successful defense
should one or more of our defensive measures fail - correct answer-
Defense in depth
Sometimes called technical controls, these protect the systems, networks,
and environments that process, transmit, and store our data - correct
answer-Logical controls
Controls that protect the physical environment in which our systems sit, or
where our data is stored - correct answer-Physical controls
The risk management phase that consists of all of the activities that we can
perform in advance of the incident itself, in order to better enable us to
handle it - correct answer-Preparation phase