WGU WGU-D488 Online Practice Questions and Exam Preparation

WGU WGU-D488 Online Questions & Answers

• Question 101:

  During a vulnerability assessment, several end-of-life operating systems were discovered within the environment. Which action should be taken to resolve the issue?

  A. Disconnect the end-of-life machines
  B. Shutdown and remove the end-of-life machines
  C. Block the end-of-life machines
  D. Upgrade the remaining end-of-life machines
  D. Upgrade the remaining end-of-life machines

• Question 102:

  Which risk management strategy will ensure the secure configuration and deployment of a new online banking system and help prevent credit card fraud?

  A. Use of regular system backups to an off-site location
  B. Implementation of real-time transaction monitoring
  C. Implementation of a strict firewall policy to restrict access to the system's server
  D. Configuration of the system to disable all email services on all workstations
  B. Implementation of real-time transaction monitoring

• Question 103:

  A security team is investigating multiple man-in-the-middle (MITM) attacks that have taken place on the corporate network over the past few months. The team needs a solution that will ensure that data is not exposed if a man-in-the-middle attack occurs in the future.

  A. Enforcing password history
  B. Encrypting data
  C. Ensuring all users have complex passwords
  D. Disabling Wi-Fi connections
  B. Encrypting data

• Question 104:

  An IT organization has recently implemented a hybrid cloud deployment. The server team is deploying a new set of domain-joined Windows servers on cloud-based virtual machines. Users must be able to use their Active Directory credentials to sign in to applications regardless of whether they are running on Windows servers in the cloud or on-premises.

  A. Identity federation
  B. Privileged identity management
  C. Challenge-Handshake Authentication Protocol (CHAP)
  D. Two-step verification
  A. Identity federation

• Question 105:

  An IT team must allow on-premises users to log in to the Azure portal using their corporate credentials. Which strategy should be used to enable identity federation in this scenario?

  A. Encrypting with Transport Layer Security (TLS)
  B. Deploying a hardware-based two-factor authentication (2FA) solution
  C. Integrating with lightweight directory access protocol (LDAP)
  D. Configuring third-party authentication with Security Assertion Markup Language (SAML)
  D. Configuring third-party authentication with Security Assertion Markup Language (SAML)

• Question 106:

  What is a characteristic of algorithms?

  A. No starting or stopping point
  B. Random instructions
  C. Unambiguous rules
  D. Constantly changing
  C. Unambiguous rules

• Question 107:

  An engineer has noticed increased network traffic originating from an unknown IP address. Which action should be taken to analyze the unusual network traffic patterns?

  A. Compare the unknown address to known IP addresses to determine if it is a threat
  B. Temporarily block all incoming traffic from the unknown IP address
  C. Permanently block all incoming traffic from the unknown IP address
  D. Rate limit incoming traffic from the unknown IP address
  A. Compare the unknown address to known IP addresses to determine if it is a threat

• Question 108:

  After a recent security assessment, it was discovered that many company devices have unnecessary ports opened to the network. What should the company configure to fix this?

  A. Intrusion prevention system
  B. Web application firewall
  C. Device hardening
  D. Intrusion detection system
  C. Device hardening

• Question 109:

  A system analyst is reviewing risk documents and noticed that the date of many risks are more than three years old. What should be proposed to leadership regarding these risks?

  A. A process to reassess risks on a defined schedule
  B. A process to confirm that risk documents are readily available to all individuals
  C. A process to evaluate how risks are captured on risk documents
  D. A process to determine how involved leadership is in assignment risk scores
  A. A process to reassess risks on a defined schedule

• Question 110:

  What is a function of a proxy server?

  A. It stores files that any user of the network may wish to access.
  B. It acts as a giant cache of web pages that anyone in the organization has recently retrieved.
  C. It responds to user queries to create, manipulate, and retrieve records from a database.
  D. It responds to HTTP requests and can execute scripts to generate dynamic pages.
  B. It acts as a giant cache of web pages that anyone in the organization has recently retrieved.