WGU D430 FUNDAMENTALS OF INFORMATION SECURITY
EXAM OBJECTIVE ASSESSMENT NEWEST 2025/2026 TEST
BANK ACTUAL EXAM 300 QUESTIONS AND CORRECT
DETAILED ANSWERS (VERIFIED ANSWERS) |ALREADY
GRADED A
.Our ability to protect data from those who are not authorized
to view it. ..ANSWER..Define the confidentiality in the CIA triad.
A patron using an ATM card wants to keep their PIN number
confidential.
An ATM owner wants to keep bank account numbers
confidential. ..ANSWER..Examples of confidentiality
Losing a laptop
An attacker gets access to info
A person can look over your shoulder ..ANSWER..How can
confidentiality be broken?
The ability to prevent people from changing your data and the
ability to reverse unwanted changes. ..ANSWER..Define
integrity in the CIA triad.
Permissions restrict what users can do (read, write, etc.)
..ANSWER..How do you control integrity?
1|Page
,Data used by a doctor to make medical decisions needs to be
correct or the patient can die. ..ANSWER..Examples of integrity
Our data needs to be accessible when we need it.
..ANSWER..Define the availability in the CIA triad.
Loss of power, application problems. If caused by an attacker,
this is a Denial of Service attack. ..ANSWER..How can availability
be broken?
The protection of information and information systems from
unauthorized access, use, disclosure, disruption, modification,
or destruction in order to provide confidentiality, integrity, and
availability. ..ANSWER..Define information security.
The Parkerian Hexad includes confidentiality, integrity, and
availability from the CIA triad. It also includes possession (or
control), authenticity, and utility. ..ANSWER..Define the
Parkerian Hexad and its principles.
Whether the data in question comes from who or where it says
it comes from (i.e. did this person actually send this email?)
..ANSWER..Authenticity
2|Page
,Interception (eaves dropping) ..ANSWER..Confidentiality is
affected by what type of attack?
Interruption (assets are unusable), modification (tampering
with an asset), fabrication (generating false data)
..ANSWER..Integrity is affected by what type of attacks?
Interruption (assets are unusable), modification (tampering
with an asset), fabrication (generating false data)
..ANSWER..Authenticity is affected by what type of attacks?
How useful the data is to you (can be a spectrum, not just yes
or no) ..ANSWER..Utility
Do you physically have the data in question? Used to describe
the scope of a loss ..ANSWER..Possession
interception, interruption, modification, and fabrication
..ANSWER..Identify the four types of attacks
Make your assets unusable or unavailable
..ANSWER..Interception attacks
3|Page
, cause assets to become unusable or unavailable for our use, on
a temporary or permanent basis ..ANSWER..Interruption
attacks
Tampering with an asset ..ANSWER..Modification attacks
Generating data, process, and communications
..ANSWER..Fabrication attacks
1. Identify assets
2. Identify threats
3. Assess vulnerabilities
4. Assess risks
5. Mitigate risks ..ANSWER..Define the risk management
process
Preparation
Detection and analysis
Containment
Eradication
4|Page
EXAM OBJECTIVE ASSESSMENT NEWEST 2025/2026 TEST
BANK ACTUAL EXAM 300 QUESTIONS AND CORRECT
DETAILED ANSWERS (VERIFIED ANSWERS) |ALREADY
GRADED A
.Our ability to protect data from those who are not authorized
to view it. ..ANSWER..Define the confidentiality in the CIA triad.
A patron using an ATM card wants to keep their PIN number
confidential.
An ATM owner wants to keep bank account numbers
confidential. ..ANSWER..Examples of confidentiality
Losing a laptop
An attacker gets access to info
A person can look over your shoulder ..ANSWER..How can
confidentiality be broken?
The ability to prevent people from changing your data and the
ability to reverse unwanted changes. ..ANSWER..Define
integrity in the CIA triad.
Permissions restrict what users can do (read, write, etc.)
..ANSWER..How do you control integrity?
1|Page
,Data used by a doctor to make medical decisions needs to be
correct or the patient can die. ..ANSWER..Examples of integrity
Our data needs to be accessible when we need it.
..ANSWER..Define the availability in the CIA triad.
Loss of power, application problems. If caused by an attacker,
this is a Denial of Service attack. ..ANSWER..How can availability
be broken?
The protection of information and information systems from
unauthorized access, use, disclosure, disruption, modification,
or destruction in order to provide confidentiality, integrity, and
availability. ..ANSWER..Define information security.
The Parkerian Hexad includes confidentiality, integrity, and
availability from the CIA triad. It also includes possession (or
control), authenticity, and utility. ..ANSWER..Define the
Parkerian Hexad and its principles.
Whether the data in question comes from who or where it says
it comes from (i.e. did this person actually send this email?)
..ANSWER..Authenticity
2|Page
,Interception (eaves dropping) ..ANSWER..Confidentiality is
affected by what type of attack?
Interruption (assets are unusable), modification (tampering
with an asset), fabrication (generating false data)
..ANSWER..Integrity is affected by what type of attacks?
Interruption (assets are unusable), modification (tampering
with an asset), fabrication (generating false data)
..ANSWER..Authenticity is affected by what type of attacks?
How useful the data is to you (can be a spectrum, not just yes
or no) ..ANSWER..Utility
Do you physically have the data in question? Used to describe
the scope of a loss ..ANSWER..Possession
interception, interruption, modification, and fabrication
..ANSWER..Identify the four types of attacks
Make your assets unusable or unavailable
..ANSWER..Interception attacks
3|Page
, cause assets to become unusable or unavailable for our use, on
a temporary or permanent basis ..ANSWER..Interruption
attacks
Tampering with an asset ..ANSWER..Modification attacks
Generating data, process, and communications
..ANSWER..Fabrication attacks
1. Identify assets
2. Identify threats
3. Assess vulnerabilities
4. Assess risks
5. Mitigate risks ..ANSWER..Define the risk management
process
Preparation
Detection and analysis
Containment
Eradication
4|Page
