WGU C727, Top Questions and answers, 100% Accurate, VERIFIED.

WGU C727, Top Questions and answers, 100% Accurate, VERIFIED. Which principle limits resource access to only authorized subjects? Authentication Integrity Availability Confidentiality - -Confidentiality This is a high level assurance that data, objects, or resources are restricted from unauthorized subjects Which principle focuses on protecting the reliability and correctness of data? Authorization Integrity Availability Confidentiality - -Integrity This is protecting the reliability and correctness of data. Which plan defines the long-term goals of an organization? Business Continuity Tactical Operational Strategic - -Strategic This is a long term plan that is fairly stable and defines the organization's security purpose. Which principle is based on what a reasonable person would do to protect the reputational, financial, and legal best interest of an organization? - -Due Care This is using reasonable steps to protect the reputational, financial, and legal best interests of an organization Tactical - -This a midterm plan developed to provide more details on accomplishing the goals set forth in the strategic plan or can be crafted ad hoc based upon unpredicted events Operational - -This is a short term, highly detailed plan based on the strategic and tactical plans. It is valid or useful for a short time and must be updated often Due Diligence - -This is practicing the activities that maintain the due care effort. Due classification - -aka: Categorization This is the primary means by which data is protected based on its need for secrecy, sensitivity, or confidentiality. What are the four elements of the business model for information security (BMIS)? - -People, Process, Organization, and Technology What are the five functions of the NIST Framework for Improving Critical Infrastructure Cybersecurity? - -Identify, Protect, Detect, Respond, and Recover What is a goal of the SDL process? (Security Development Lifecycle) - -Reduce the security-related design and coding defects The other goal of the SDL process is to identify and reduce the severity of any remaining defects. Which document describes the step-by-step instructions on how to perform a task? Baseline Guideline Standard Procedure - -Procedure Which risk analysis formula calculates the cost to safeguard as asset? # / year ALE = SLE * ARO or ALE = AV*EF*ARO (ALE1 - ALE2) - ACS $ / year - -$ / year This formula calculates the annual cost of a safeguard (ACS) # / year - -This formula calculates the annualized rate of occurrence (ARO). (ALE1 - ALE2) - ACS - -This formula calculates the value or benefit of a safeguard. Which characteristic applies to both the quantitative and qualitative risk analysis? - -Offers useful and meaningful results Which security control sets expectations on how employees should perform their job? Physical Technical Logical Administrative - -Administrative These controls are the policies and procedures defined by an organization's security policy and other regulations or requirements. What involves the hardware or software mechanisms used to manage access and to provide protection for resources and systems? - -Technical or logical controls Which access control type applies protection after discovering how an incident compromised an asset? Compensation Detective Directive Corrective - -Corrective A corrective control modifies the environment to return systems to normal after an unwanted or unauthorized activity has occurred Which data classification label is used on data if exposure would lead to grave damage to national security? Unclassified Secret Confidential Top Secret - -top secret This label is applied to information of which unauthorized disclosure reasonably could be expected to cause exceptionally grave damage to the national security that the original classification authority is able to identify or describe.