WGU WGU-D488 Online Practice Questions and Exam Preparation

WGU WGU-D488 Online Questions & Answers

• Question 1:

  Which security technique should be used to prevent data exfiltration?

  A. Intrusion Detection Software (IDS)
  B. Data Loss Prevention (DLP)
  C. Multi-Factor Authentication (MFA)
  D. Intrusion Prevention Software (IPS)
  B. Data Loss Prevention (DLP)

• Question 2:

  An on-call security engineer has been notified after business hours that a possible threat could be impacting production applications. Which type of threat intelligence should be used by first responders?

  A. Tactical
  B. Commodity malware
  C. Operational
  D. Strategic
  A. Tactical

• Question 3:

  A company is concerned about the potential risks associated with unauthorized modifications to the basic input/output system (BIOS) firmware on its servers. The company has decided to implement hardening techniques and endpoint security controls to mitigate the risk.

  Which technique will prevent unauthorized modifications to the BIOS firmware on a server?

  A. BIOS monitoring
  B. Using an intrusion detection system to detect and prevent attacks
  C. Conducting regular backups of the server's data
  D. BIOS protection
  D. BIOS protection

• Question 4:

  An organization's engineering team is developing a mobile application that uses near-field communication (NFC) capabilities but wants to ensure that information communicated using this protocol remains confidential.

  A. Kerberos centralized server for token and certificate management
  B. Bluetooth device honing restrictions for increased-risk transactions
  C. Portable device management (PDM) to allow only authorized protocols
  D. Encryption to prevent man-in-the-middle and eavesdropping attacks
  D. Encryption to prevent man-in-the-middle and eavesdropping attacks

• Question 5:

  Which security technique should be used to prevent data exfiltration?

  A. Multi-factor authentication (MFA)
  B. Intrusion detection software (IDS)
  C. Data loss prevention (DLP)
  D. Intrusion prevention software (IPS)
  C. Data loss prevention (DLP)

• Question 6:

  A government agency is evaluating its business continuity plan to ensure that its operations can continue during a crisis. What is the term used to describe the critical services that must be maintained during a disruption?

  A. Business continuity planning (BCP)
  B. Disaster recovery (DR)
  C. Recovery point objective (RPO)
  D. Mission essential functions (MEFs)
  D. Mission essential functions (MEFs)

• Question 7:

  A company is looking to monitor and detect any suspicious activity on its servers. The company wants to implement a security solution that can detect any unauthorized access or unusual activity on the servers. Which security technology will meet the needs of this company?

  A. Hardware security module (HSM)
  B. Two-factor authentication
  C. Antivirus tools
  D. Host-based intrusion detection system (HIDS)
  D. Host-based intrusion detection system (HIDS)

• Question 8:

  A retail company wants to establish the frequency at which it needs to back up its critical data to ensure it can be restored in case of a disruption with the least amount of acceptable data loss. What is the term used to describe this metric?

  A. Business Impact Analysis (BIA)
  B. Continuous Data Protection (CDP)
  C. Recovery Point Objective (RPO)
  D. Disaster Recovery (DR)
  C. Recovery Point Objective (RPO)

• Question 9:

  A small online retailer stores customer information, product inventory, and financial data on its local servers. What are the necessary components of a business continuity and disaster recovery plan for this company?

  A. A detailed evacuation plan, frequent data backups, and regular cybersecurity training for employees
  B. Redundant backups, a communication plan, and a designated off-site location for data storage and recovery
  C. A comprehensive insurance policy, a list of emergency contacts, and a system for continuous monitoring of network activity
  D. Routine maintenance of servers, an emergency generator, and a policy for employees to work remotely in case of a disaster
  B. Redundant backups, a communication plan, and a designated off-site location for data storage and recovery

• Question 10:

  Which risk management strategy will ensure that data stored on an enterprise resource planning (ERP) system is secure from exploitation in the event of a data breach?

  A. Enforcement of a strict firewall policy to restrict access to the ERP system's server
  B. Configuration of the ERP system to disable all printing services on all workstations
  C. Implementation of regular backup and disaster recovery planning
  D. Implementation of data encryption
  D. Implementation of data encryption