and answers correctly solved 2026
Study online at
1 Information se-protecting data, software, and hardware secure
. against unauthorized access, use,
curitydisclosure, disruption, modification, or destruction.
2 ComplianceThe requirements that are set forth by laws and
. industry regulations.
IE: HIPPA/ HITECH- healthcare, PCI/DSS- payment card industry, FISMA-
federal government agencies
3. DAD Triad Disclosure, alteration, and denial
4. CIA Triad The core model of all information security concepts. Confidential, integrity
and
availability
5. Confidential Ability to protect our data from those who are not authorized to view it.
6. What ways can - lose a personal laptop with data
confidentiality be - Person can view your password you are entering in
compromised -Send an email attachment to the wrong person.
? -Attacker can penetrate your systems. etc.
7. integrity Keeping data unaltered by accidental or malicious intent
8. How to Prevent unauthorized changes to the data and the ability to reverse unwanted
maintain authorized changes.
integrity?
Via system/file permissions or Undo/Roll back undesirable changes.
9. Availability The ability to access data when needed
10. Ways -Power loss
Availability -Application issues
can be
-Network attacks
compro-mised
-System compromised (DoS)
, WGU D430 fundamentals of information security
11. Denial of Security problem in which users are not able to access an information
Service (DoS) system; can be caused by human errors, natural disaster, or malicious
12. Parkerian activity.
hexad model
A model that adds three more principles to the CIA triad:
Possession/Control
Utility
Authenticity
13. Possession/
con-trol
Refers to the physical disposition of the media on which the data is
14. Principle of stored; This allows you to discuss loss of data via its physical medium.
Pos-session
example Lost package (encrypted USB's and unencrypted
USB's) possession is an issue because the tapes are
physically lost.
15. Principle of (Unencrypted is compromised via confidentiality and possession; encrypted
Au-thenticity is compromised only via possession).
16. Ways Allows you to say whether you've attributed the data in question to the
authentici-ty proper owner/creator.
can be com-
promised Sending an email but altering the message to look like it came from
someone else, than the original one that was sent.
17. Utility How useful the data is to you.
,Ex. Unencrypted (a lot of utility) Encrypted (little utility).
, WGU D430 fundamentals of information security
18. Security Attacks Broken down from the type of attack, risk the attack represents, and
controls you might use to mitigate it.
19. Types of attacks 1- interception
2- interruption
3- modification
4- fabrication
20. Interception Attacks allows unauthorized users to access our data, applications, or
environ-
ments.
Primarily an attack against confidentiality
21. Interception Unauthorized file viewing, copying, eavesdropping on phone
At-tack conversations, read-ing someone's emails.
Examples
22. Interruption Attacks cause our assets to become unstable or unavailable for our use, on
a
temporary or permanent basis.
This attack attects availability but can also attack integrity
23. Interruption DoS attack on a mail server; availability attack
At-tack
Examples Attacker manipulates the processes on which a database runs to prevent
access; integrity attack.
Could also be a combo of both.
24. Modification Attacks involve tampering with our asset.
Such attacks might primarily be considered an integrity attack, but could
also be an availability attack.