WGU WGU-D488 Online Practice Questions and Exam Preparation

WGU WGU-D488 Online Questions & Answers

• Question 141:

  The security operations center (SOC) team has been alerted about malicious traffic on the corporate network and is concerned about a distributed denial of service (DDoS) attack. An analyst has been tasked with inspecting network traffic in the on-premises data center to investigate the issue.

  Which type of file should the analyst use to inspect the traffic?

  A. Web server access log
  B. Syslog messages
  C. Operating system event log
  D. Packet capture
  D. Packet capture

• Question 142:

  A retail company wants to establish the frequency at which it needs to backup its critical data to ensure it can be restored in case of a disruption with the least amount of acceptable loss in recovery. What is the term used to describe this metric?

  A. Continuous data protection (CDP)
  B. Business impact analysis (BIA)
  C. Disaster recovery (DR)
  D. Recovery point objective (RPO)
  D. Recovery point objective (RPO)

• Question 143:

  A large technology company has discovered a known vulnerability in its network infrastructure. The infrastructure contains a number of retired assets that are no longer receiving security updates, which can potentially be exploited by attackers to compromise the network. The company has decided to implement hardening techniques and endpoint security controls to mitigate the risk.

  Which hardening technique will meet the needs of this company?

  A. Enforcing strict access control policies for all network devices
  B. Conducting regular vulnerability scans to identify potential weaknesses
  C. Implementing intrusion detection and prevention systems (IDPS)
  D. Removing all end-of-life devices from the network
  D. Removing all end-of-life devices from the network

• Question 144:

  An e-learning company uses Amazon Simple Storage Service (Amazon S3) to store e- books and video files that are served to customers through a custom application. The company has realized that someone has been stealing its intellectual property.

  Which threat actor is most likely in this scenario?

  A. Advanced persistent threat
  B. Novice hacker
  C. Competitor
  D. Hacktivist
  C. Competitor

• Question 145:

  A retail company has recently implemented a new point of sale (POS) system that is critical to its business. Which security control is essential for protecting the availability of the POS system?

  A. Implementing intrusion detection and prevention systems can help detect and prevent unauthorized access to the POS system.
  B. Regularly backing up the data stored in the POS system and having a disaster recovery plan can help ensure that the system is available in the event of a security incident or system failure.
  C. Enforcing strict access controls can limit the number of users with access to the POS system and prevent unauthorized access.
  D. Regularly updating the POS system with the latest security patches can help prevent exploitation of known vulnerabilities and maintain the system's availability.
  B. Regularly backing up the data stored in the POS system and having a disaster recovery plan can help ensure that the system is available in the event of a security incident or system failure.

• Question 146:

  Which risk management strategy will ensure the secure configuration and deployment of a new supply chain management system and prevent identity theft?

  A. Use of a strict firewall policy to restrict access to the system's server
  B. Implementation of multifactor authentication for all user accounts
  C. Implementation of regular vulnerability scans and patch management
  D. Configuration of the system to disable all USB ports on all workstations
  B. Implementation of multifactor authentication for all user accounts

• Question 147:

  Which risk management strategy will ensure the secure storage of data on a new document management system?

  A. Incorporation of a strict firewall policy to restrict access to the system's server
  B. Configuration of the system to require frequent password changes
  C. Implementation of encryption for all data stored in the system
  D. Implementation of a secure Virtual Private Network (VPN) connection for all remote access to the system
  C. Implementation of encryption for all data stored in the system

• Question 148:

  What signals the development of scope creep?

  A. Programmers are focused on a single feature.
  B. Many unplanned features have been added to the original project.
  C. The product does not satisfy all the requirements of the plan.
  D. An extension to the deadline of the project is requested.
  B. Many unplanned features have been added to the original project.

• Question 149:

  A software development company uses file transfer protocol (FTP) to transfer software code between different teams. Which security control is essential for protecting the integrity of software code that is transferred using FTP?

  A. Calculating and comparing the hash values of the software code before and after transfer using FTP can help detect any changes and ensure the integrity of the code.
  B. Implementing intrusion detection and prevention systems can help detect and prevent unauthorized access to the FTP server and software code.
  C. Enforcing strict access controls can limit the number of users with access to the FTP server and prevent unauthorized access.
  D. Regularly backing up the software code stored in the FTP server and having a disaster recovery plan can help ensure the integrity of the software code.
  A. Calculating and comparing the hash values of the software code before and after transfer using FTP can help detect any changes and ensure the integrity of the code.

• Question 150:

  A healthcare provider is developing a disaster recovery plan and wants to determine the longest duration that its systems or applications can be down before causing significant damage to the business. What is the term used to describe this metric?

  A. Recovery time objective (RTO)
  B. Business impact analysis (BIA)
  C. Business continuity planning (BCP)
  D. Disaster recovery (DR)
  A. Recovery time objective (RTO)