WGU WGU-D488 Online Practice Questions and Exam Preparation

WGU WGU-D488 Online Questions & Answers

• Question 191:

  An insurance agency is concerned that some employees could be mishandling funds and covering it up. The agency wants to temporarily block these employees from working and ensure that operations continue. Which strategy should the agency implement?

  A. Separation of duties
  B. Mandatory vacation
  C. Job rotation
  D. Least privilege
  B. Mandatory vacation

• Question 192:

  An organization is experiencing multiple instances of attempted access from geographicallocations where there are no corporate offices or staff. What should a network administrator do to prevent further access attempts?

  A. Adjust the rule sets within the Security Information and Event Manager (SIEM) tool
  B. Adjust the Domain Name Service (DNS) server A Records
  C. Adjust the main proxy server to only allow specific addresses
  D. Adjust the firewall configuration to drop traffic from these addresses
  D. Adjust the firewall configuration to drop traffic from these addresses

• Question 193:

  A large corporation is considering expanding its operations into a new geographic region. The corporation is concerned about the potential dangers associated with this expansion. What is the most important factor to consider when evaluating the potential risks in this scenario?

  A. Impact of attack
  B. Inherent risk
  C. Threat of attack
  D. Likelihood of attack
  B. Inherent risk

• Question 194:

  A healthcare organization would like to work with another healthcare organization without needing to maintain identified accounts for members of the other organization. Which technology concept should the company use?

  A. Cloud identity provider
  B. Single sign-on (SSO)
  C. Multi-factor authentication (MFA)
  D. Federated authentication
  D. Federated authentication

• Question 195:

  An organization needs to securely exchange confidential documents with a third-party vendor overan unsecured network connection. The organization wants to ensure that the documents can only be read by the intended recipient and cannot be intercepted or read by unauthorized parties.

  Which type of encryption meets the needs of the organization?

  A. Stream ciphers
  B. Asymmetric encryption
  C. Block ciphers
  D. Hash functions
  B. Asymmetric encryption

• Question 196:

  The security team has been tasked with selecting a password complexity policy for the organization. Which password complexity policy option should be recommended?

  A. Twelve characters with no symbols or numbers
  B. Sixteen characters with at least one letter, one number, and one symbol
  C. Four characters with at least one letter or one number
  D. Eight characters with no symbols or numbers
  B. Sixteen characters with at least one letter, one number, and one symbol

• Question 197:

  Which stream cipher is a variant of the Salsa20 cipher, designed to be fast, secure, and resistant to cryptanalysis, and is commonly used in combination with the Poly1305 authentication mode?

  A. Counter (CTR)
  B. Cipher block chaining (CBC)
  C. ChaCha
  D. Electronic codebook (ECB)
  C. ChaCha

• Question 198:

  An organization is experiencing multiple instances of attempted access from geographical locations where there are no corporate offices or staff. What should a network administrator do to prevent further access attempts?

  A. Adjust the rule sets within the security information and event manager (SIEM) tool
  B. Adjust the Domain Name Service (DNS) server A Records
  C. Adjust the firewall configuration to drop traffic from these addresses
  D. Adjust the main proxy server to only allow specific addresses
  C. Adjust the firewall configuration to drop traffic from these addresses

• Question 199:

  After implementing a risk management plan for a new product launch, a project team conductedregular risk assessments to monitor the effectiveness of their control strategies. Which step of the risk management life cycle was performed?

  A. Control
  B. Assess
  C. Identify
  D. Review
  D. Review

• Question 200:

  A healthcare provider is required to comply with the Health Insurance Portability and Accountability Act (HIPAA), which sets requirements for the protection of patient health information. The provider uses various software applications to manage and store patient health information, which must be coded to protect its confidentiality and integrity.

  Which protocol will meet the needs of this provider?

  A. Wired Equivalent Privacy (WEP)
  B. Simple Mail Transfer Protocol (SMTP)
  C. Rivest-Shamir-Adleman (RSA)
  D. Advanced Encryption Standard (AES)
  D. Advanced Encryption Standard (AES)