5/7/24,v3:16vPM WGUv D430vfundamentalsvofvinformationvsecurityvExamvLatestvUpdatev2024v2
…
WGUvD430vFUNDAMENTALSvOFvINFORMATIONvS
ECURITYvFINALvEXAMvANDvPRACTICEvEXAMv2024/
ACTUALvEXAMSvWITHv500vQUESTIONSvAND
CORRECTvDETAILEDvANSWERS/A+vGRADEvWG
UvD430vFINALvEXAM
Accessv Controlv Listv –
CORRECTvANSWER:vinfov aboutv whatvkindv ofv accessv certainpartiesv arev all
owedv tov havev tov avgivenv system
Readv ,v writev ,v execute
Accessv Controlv Modelsv –
CORRECTvANSWER:vDiscretionaryv (vDACv )Mandatoryv (v MACv )v
Rulev -v based
Rolev -v basedv (v RBACv )
Attributev -v basedv (v ABACv)
Accountabilityv –
CORRECTvANSWER:
Refersv tov makingv surev thatv av personv isresponsiblev forv theirv actionsv .
-Itv providesv usv withvthev meansv tov tracev activitiesv inv ourv environmentv backv tov their
source
-
Dependsv onvidentificationv ,vauthenticationv ,vandv accessv controlv beingv presentvs
ov thatv wecanvknowv whov av givenv transactionvisv associatedv withv ,vandv what
permissionsv werev usedv tov allowv themvtov carryv itv outv .
about:blank 1/93
,5/7/24,v3:16vPM WGUv D430vfundamentalsvofvinformationvsecurityvExamvLatestvUpdatev2024v2
…
Acessv Controlv –
CORRECTvANSWER:vAllowingv -
vletsv usvgivev avparticularv partyv accesstov av givenv source
Denyingv -v oppositev ofv gainingv access
Limitingv -v allowingv somevaccessv tov ourv resourcev ,v onlyv upv tov av certainv point
Revokingv -v takesv accessv awayv fromv formerv user
AESv–
CORRECTvANSWER:vusesv threev differentv ciphersv :v onev withv av 128v -
vbitvkeyv ,vonev withv av 192v -v bitvkeyv,v andv onev withv av 256v -
vbitvkeyv ,vallv havingv av blockvlengthv ofv 128v bits
Asymmetricv cryptographyv –
CORRECTvANSWER:vav publicvkeyv andv av privatev keyv .vThepublicvkeyvisvusedv t
ov encryptv datav sentv fromvthev senderv tov thev receiverv andv isvsharedv withv everyo
nev .v Privatevkeysv arev usedv tov decryptvdatav thatv arrivesv atv thev receivingv endvan
dv arev veryv carefullyv guardedv byv thev receivev (v akavthev publicv keyv cryptographyv )
Asymmetricv KeyvAlgorithmsv –
CORRECTvANSWER:
Securev Socketsv Layerv (vRSAv)EllipticvCurvev Cryptographyv (v ECCv
)v Prettyv Goodv Privacyv (vPGPv)
TransportvLayervSecurityv(
v TLSv)
AttackvTypesv –
about:blank 2/93
,5/7/24,v3:16vPM WGUv D430vfundamentalsvofvinformationvsecurityvExamvLatestvUpdatev2024v2
…
CORRECTvANSWER:v InterceptionInterruptionv Modificati
on
Fabrication
Attackv typesv andv theirv effectv –
CORRECTv ANSWER:v Interceptionv isvthev ONLYv attackv thatv affectsv onv confi
dentiality.v Interruption,v modification,v andv fabricationv affectsv integrityandv avai
labilityv becausev mostv ofvthev timevthey'rev impactingv data.
Attributev -v basedv (vABACv )
-
vCORRECTvANSWER:v basedv onv attributesv ,vsuchv asv ofv apersonv ,vresourcev ,vor
v anvenvironment
Auditingv –
CORRECTvANSWER:v thev examinationvandv reviewv ofv anv organization'sv rec
ordsv tov ensurev accountabilityv throughv technicalvmeansv .
Authenticationv –
CORRECTvANSWER:v verifyingv thatv av personv isv whov theyv claimv tov be
Authorizationv –
CORRECTvANSWER:v whatv thev userv canv accessv ,vmodifyv ,v andv delete
Availabilityv –
CORRECTvANSWER:v Forv one'svAUTHORIZEDv tovACCESSv datav whenneeded
about:blank 3/93
, 5/7/24,v3:16vPM WGUv D430vfundamentalsvofvinformationvsecurityvExamvLatestvUpdatev2024v2
…
BinScopev BinaryvAnalyzerv –
CORRECTvANSWER:v avtoolv developedv byv Microsoftv toexaminev sourcev cod
ev forv generalv goodv practices
Blockv Cipherv –
CORRECTvANSWER:vtakesv avpredeterminedv numberv ofv bitsv,vknownvasav blockv,vinv th
ev plaintextv messagev andv encryptsv thatvblock
Brutev Forcev –
CORRECTvANSWER:v anv attackvbyv submittingv passwordv attemptsv untileventuallyv g
uessedvcorrectly
Bufferv overflowsv –
CORRECTvANSWER:
av vulnerabilityv thatv occursv whenv wev dovnotv properlyv storev thev sizevofvthev datavinput
v intov ourv applicationsv ,v causingv thev programv tocrashv andv anv attackerv tovtake
advantage
Certificatesv –
CORRECTvANSWER:v linkv av publicv keyv tov av particularv individualv andv areoftenv used
asv av formv ofv electronicv identificationv forv thatv particularvperson
Childrensv 'v Onlinev Privacyv ProtectionvActv (COPPA)v –
CORRECTvANSWER:vsetsv rulesonv datav collectionv forv childrenv underv 13v tov
protectv theirv onlinev privacy
about:blank 4/93
…
WGUvD430vFUNDAMENTALSvOFvINFORMATIONvS
ECURITYvFINALvEXAMvANDvPRACTICEvEXAMv2024/
ACTUALvEXAMSvWITHv500vQUESTIONSvAND
CORRECTvDETAILEDvANSWERS/A+vGRADEvWG
UvD430vFINALvEXAM
Accessv Controlv Listv –
CORRECTvANSWER:vinfov aboutv whatvkindv ofv accessv certainpartiesv arev all
owedv tov havev tov avgivenv system
Readv ,v writev ,v execute
Accessv Controlv Modelsv –
CORRECTvANSWER:vDiscretionaryv (vDACv )Mandatoryv (v MACv )v
Rulev -v based
Rolev -v basedv (v RBACv )
Attributev -v basedv (v ABACv)
Accountabilityv –
CORRECTvANSWER:
Refersv tov makingv surev thatv av personv isresponsiblev forv theirv actionsv .
-Itv providesv usv withvthev meansv tov tracev activitiesv inv ourv environmentv backv tov their
source
-
Dependsv onvidentificationv ,vauthenticationv ,vandv accessv controlv beingv presentvs
ov thatv wecanvknowv whov av givenv transactionvisv associatedv withv ,vandv what
permissionsv werev usedv tov allowv themvtov carryv itv outv .
about:blank 1/93
,5/7/24,v3:16vPM WGUv D430vfundamentalsvofvinformationvsecurityvExamvLatestvUpdatev2024v2
…
Acessv Controlv –
CORRECTvANSWER:vAllowingv -
vletsv usvgivev avparticularv partyv accesstov av givenv source
Denyingv -v oppositev ofv gainingv access
Limitingv -v allowingv somevaccessv tov ourv resourcev ,v onlyv upv tov av certainv point
Revokingv -v takesv accessv awayv fromv formerv user
AESv–
CORRECTvANSWER:vusesv threev differentv ciphersv :v onev withv av 128v -
vbitvkeyv ,vonev withv av 192v -v bitvkeyv,v andv onev withv av 256v -
vbitvkeyv ,vallv havingv av blockvlengthv ofv 128v bits
Asymmetricv cryptographyv –
CORRECTvANSWER:vav publicvkeyv andv av privatev keyv .vThepublicvkeyvisvusedv t
ov encryptv datav sentv fromvthev senderv tov thev receiverv andv isvsharedv withv everyo
nev .v Privatevkeysv arev usedv tov decryptvdatav thatv arrivesv atv thev receivingv endvan
dv arev veryv carefullyv guardedv byv thev receivev (v akavthev publicv keyv cryptographyv )
Asymmetricv KeyvAlgorithmsv –
CORRECTvANSWER:
Securev Socketsv Layerv (vRSAv)EllipticvCurvev Cryptographyv (v ECCv
)v Prettyv Goodv Privacyv (vPGPv)
TransportvLayervSecurityv(
v TLSv)
AttackvTypesv –
about:blank 2/93
,5/7/24,v3:16vPM WGUv D430vfundamentalsvofvinformationvsecurityvExamvLatestvUpdatev2024v2
…
CORRECTvANSWER:v InterceptionInterruptionv Modificati
on
Fabrication
Attackv typesv andv theirv effectv –
CORRECTv ANSWER:v Interceptionv isvthev ONLYv attackv thatv affectsv onv confi
dentiality.v Interruption,v modification,v andv fabricationv affectsv integrityandv avai
labilityv becausev mostv ofvthev timevthey'rev impactingv data.
Attributev -v basedv (vABACv )
-
vCORRECTvANSWER:v basedv onv attributesv ,vsuchv asv ofv apersonv ,vresourcev ,vor
v anvenvironment
Auditingv –
CORRECTvANSWER:v thev examinationvandv reviewv ofv anv organization'sv rec
ordsv tov ensurev accountabilityv throughv technicalvmeansv .
Authenticationv –
CORRECTvANSWER:v verifyingv thatv av personv isv whov theyv claimv tov be
Authorizationv –
CORRECTvANSWER:v whatv thev userv canv accessv ,vmodifyv ,v andv delete
Availabilityv –
CORRECTvANSWER:v Forv one'svAUTHORIZEDv tovACCESSv datav whenneeded
about:blank 3/93
, 5/7/24,v3:16vPM WGUv D430vfundamentalsvofvinformationvsecurityvExamvLatestvUpdatev2024v2
…
BinScopev BinaryvAnalyzerv –
CORRECTvANSWER:v avtoolv developedv byv Microsoftv toexaminev sourcev cod
ev forv generalv goodv practices
Blockv Cipherv –
CORRECTvANSWER:vtakesv avpredeterminedv numberv ofv bitsv,vknownvasav blockv,vinv th
ev plaintextv messagev andv encryptsv thatvblock
Brutev Forcev –
CORRECTvANSWER:v anv attackvbyv submittingv passwordv attemptsv untileventuallyv g
uessedvcorrectly
Bufferv overflowsv –
CORRECTvANSWER:
av vulnerabilityv thatv occursv whenv wev dovnotv properlyv storev thev sizevofvthev datavinput
v intov ourv applicationsv ,v causingv thev programv tocrashv andv anv attackerv tovtake
advantage
Certificatesv –
CORRECTvANSWER:v linkv av publicv keyv tov av particularv individualv andv areoftenv used
asv av formv ofv electronicv identificationv forv thatv particularvperson
Childrensv 'v Onlinev Privacyv ProtectionvActv (COPPA)v –
CORRECTvANSWER:vsetsv rulesonv datav collectionv forv childrenv underv 13v tov
protectv theirv onlinev privacy
about:blank 4/93
