WGU WGU-D488 Online Practice Questions and Exam Preparation

WGU WGU-D488 Online Questions & Answers

• Question 121:

  A company has recently experienced a data breach from an insider threat and wants to implement a policy to reduce the risk of similar incidents in the future. During the incident, the insider threat accessed sensitive information stored in the administrator account from their user account. The insider threat was not in a supervisory role at the time of the incident.

  Which policy should the company implement?

  A. Password complexity policy
  B. Separation of duties
  C. Least privilege
  D. Job rotation
  C. Least privilege

• Question 122:

  Which encryption technique can be used to enable a third-party provider to perform calculations on encrypted data without decrypting the data?

  A. Homomorphic encryption
  B. Secure function evaluation (SFE)
  C. Secure Sockets Layer (SSL)
  D. Private information retrieval (PIR)
  A. Homomorphic encryption

• Question 123:

  Why are businesses beginning to use big data?

  A. To store enormous amounts of paper documents and electronic data in databases and data warehouses for future analysis
  B. To collect large amounts of data from various sources, both external and internal, both paper and electronic
  C. To integrate vast amounts of electronic data into analysis in order to gain insight for better decision making
  D. To connect a myriad of devices to the Internet and allow these devices to logically interact with one another
  C. To integrate vast amounts of electronic data into analysis in order to gain insight for better decision making

• Question 124:

  What is the role of the compiler?

  A. To take the most recent line of code, translate it, and execute the machine code
  B. To create an executable program by translating all of the code at one time
  C. To run scripting languages to test one line of code at a time
  D. To create executable code that is compatible with different operating systems
  B. To create an executable program by translating all of the code at one time

• Question 125:

  A financial services company is concerned about the potential risks associated with sensitive customer data stored on employee laptops. The company has decided to implement hardening techniques and endpoint security controls to mitigate the risk.

  Which hardening technique will meet the needs of this company?

  A. Restricting user permissions for laptop software installation
  B. Implementing biometric authentication for laptop log-ins
  C. Implementing local drive encryption on employee laptops
  D. Conducting regular security awareness training for employees
  C. Implementing local drive encryption on employee laptops

• Question 126:

  Which block cipher mode of operation for encrypting data is simple and efficient and provides no confidentiality beyond that of the underlying block cipher?

  A. Electronic codebook (ECB)
  B. Cipher block chaining (CBC)
  C. Counter (CTR)
  D. Output feedback (OFB)
  A. Electronic codebook (ECB)

• Question 127:

  An employee needs to execute a program from the command line. Which peripheral device should be used?

  A. Keyboard
  B. Hard drive
  C. Speaker
  D. Printer
  A. Keyboard

• Question 128:

  A healthcare provider is required to comply with the Health Insurance Portability and Accountability Act (HIPAA), which sets requirements for the protection of patient healthinformation. The provider uses various software applications to manage and store patient health information, which must be coded to protect its confidentiality and integrity.

  Which protocol will meet the needs of this provider?

  A. Wired Equivalent Privacy (WEP)
  B. Advanced Encryption Standard (AES)
  C. Simple Mail Transfer Protocol (SMTP)
  D. Rivest-Shamir-Adleman (RSA)
  B. Advanced Encryption Standard (AES)

• Question 129:

  Which software allows the user to easily access the hardware of a computer?

  A. Productivity
  B. FTP client
  C. Application
  D. Operating system
  D. Operating system

• Question 130:

  A security team has been informed that user data on the network has been compromised. What is the first step the organization should take to respond to this data breach?

  A. Notify affected users of the incident
  B. Implement an access control policy
  C. Increase encryption levels
  D. Publicly announce the breach
  A. Notify affected users of the incident