WGU WGU-D488 Online Practice Questions and Exam Preparation

WGU WGU-D488 Online Questions & Answers

• Question 91:

  A government agency is required to comply with the Federal Information Security Modernization Act (FISMA), which establishes security requirements for federal information systems. The agency needs to secure its external network, which connects to the internet and is used by employees, contractors, and other authorized personnel.

  Which security control will secure the external network and protect against unauthorized access?

  A. Intrusion detection and prevention
  B. Firewall
  C. Access controls
  D. Network segmentation
  B. Firewall

• Question 92:

  A company has discovered a vulnerability in its domain name system (DNS) that could allow attackers to redirect users to malicious websites. The company has decided to implement a risk management strategy to mitigate this vulnerability. What is the most effective risk management strategy for this vulnerability?

  A. Restricting DNS access to trusted internet protocol (IP) addresses only
  B. Implementing domain name system security extensions (DNSSEC) to digitally sign DNS responses and prevent DNS spoofing attacks
  C. Increasing the frequency of DNS server patching
  D. Conducting regular security awareness training for employees on the risks of phishing attacks
  B. Implementing domain name system security extensions (DNSSEC) to digitally sign DNS responses and prevent DNS spoofing attacks

• Question 93:

  Which two options allow an application to access a database? Choose 2 answers

  A. Structured Query Language (SQL)
  B. Java Database Connectivity (JDBC)
  C. Database management system (DBMS)
  D. Open Database Connectivity (ODBC) application
  E. Graphical user interface (GUI)
  A. Structured Query Language (SQL)
  B. Java Database Connectivity (JDBC)

• Question 94:

  Which action should an IT department take if an organization decides to expand its business by selling products online?

  A. Make sure the website can handle e-commerce transactions
  B. Ensure that the strategic goals aligned with the organization's mission statement
  C. Market the company's products or services
  D. Manage capital to ensure a successful website
  A. Make sure the website can handle e-commerce transactions

• Question 95:

  What are two roles of a DNS? Choose 2 answers

  A. Creating IP addresses if it cannot find an alias
  B. Storing the IP address
  C. Translating an IP alias to an actual IP address
  D. Sending packets along a pathway that connects it to the Internet
  B. Storing the IP address
  C. Translating an IP alias to an actual IP address

• Question 96:

  A security engineer has been asked to audit unapproved changes that have recently taken place in a corporate application. Which logging mechanism will create an audit trail?

  A. NetFlow logs
  B. Access logs
  C. Packet capture logs
  D. Router logs
  B. Access logs

• Question 97:

  What is a function of a compiler?

  A. It translates a source code and creates an executable program that may be run at a later time.
  B. It takes the most recent instruction and translates it as machine language.
  C. It takes a program written in a high-level language and converts it to a different high- level language program.
  D. It gathers together multiple executable programs and translates them into a readable format.
  A. It translates a source code and creates an executable program that may be run at a later time.

• Question 98:

  Which item facilitates communication between applications and databases?

  A. Application database
  B. Database driver
  C. Application driver
  D. Database application
  B. Database driver

• Question 99:

  A financial institution is planning to conduct a business impact analysis (BIA) to evaluate the criticality of its business processes and functions. Which steps will allow the company to perform a BIA?

  A. Monitor network and system activity, detect security incidents, and respond quickly to minimize the impact on critical business processes
  B. Develop business continuity plans and procedures, establish a crisis management team, and test the plan regularly
  C. Determine business processes and recovery criticality, identify resource requirements, and identify recovery priorities for system resources
  D. Determine recovery time objectives and recovery point objectives, develop recovery strategies, and document the recovery plan
  C. Determine business processes and recovery criticality, identify resource requirements, and identify recovery priorities for system resources

• Question 100:

  Which risk management strategy will help prevent cheating using a learning management system as a platform?

  A. Implementation of secure user authentication protocols
  B. Implementation of regular software updates and patch management
  C. Enforcement of a strict firewall policy to restrict access to the system's server
  D. Configuration of the system to disable all Bluetooth services on all workstations
  A. Implementation of secure user authentication protocols