WGU WGU-D488 Online Practice Questions and Exam Preparation

WGU WGU-D488 Online Questions & Answers

• Question 221:

  A company is developing a new system to process personal information about its customers, including their names, addresses, and purchase histories.

  Which term describes the process of identifying and evaluating the potential effects that the new system may have on the privacy of personal information and developing strategies to mitigate those risks?

  A. Data Protection Impact Assessment (DPIA)
  B. Business Continuity Planning (BCP)
  C. Risk Management
  D. Disaster Recovery (DR)
  A. Data Protection Impact Assessment (DPIA)

• Question 222:

  Which risk management strategy will ensure the secure configuration and deployment of a new supply chain management system and prevent identity theft?

  A. Use of a strict firewall policy to restrict access to the system's server
  B. Configuration of the system to disable all universal serial bus (USB) ports on all workstations
  C. Implementation of regular vulnerability scans and patch management
  D. Implementation of multifactor authentication for all user accounts
  D. Implementation of multifactor authentication for all user accounts

• Question 223:

  A company is concerned about advanced persistent threats and wants to implement a security solution that can detect any unusual actions. The company wants to analyze the actions and trends of users and entities to identify any potential security risks.

  Which security technology meets the needs of the company?

  A. User and entity behavior analytics (UEBA)
  B. Hardware security module (HSM)
  C. Antivirus tools
  D. Two-factor authentication
  A. User and entity behavior analytics (UEBA)

• Question 224:

  What is true about an operating system?

  A. It is a firmware burned onto the computer mother board.
  B. It is a software program that directly supports the computer itself.
  C. It is a hardware component of the computer system.
  D. It is an application program similar to word processors.
  B. It is a software program that directly supports the computer itself.

• Question 225:

  Which key exchange algorithm is based on advanced cryptography algorithms and is a more efficient alternative to traditional key exchange algorithms?

  A. Diffie-Hellman (DH)
  B. Elliptic Curve Diffie-Hellman (ECDH)
  C. Rivest-Shamir-Adleman (RSA)
  D. Digital Signature Algorithm (DSA)
  B. Elliptic Curve Diffie-Hellman (ECDH)

• Question 226:

  A company is developing a new mobile application to support external customers and contractors. The application needs to allow users to sign in using third-party social identities. What is the best protocol?

  A. Security Assertion Markup Language (SAML)
  B. Kerberos
  C. Lightweight Directory Access Protocol (LDAP)
  D. Open Authorization (OAuth)
  D. Open Authorization (OAuth)

• Question 227:

  A cybersecurity analyst at a healthcare organization was tasked with analyzing the indicators of compromise (IOCs) to identify potential threats and vulnerabilities within the enterprise. Theanalyst notices unknown users logging on to the company's wireless local- area network (WLAN).

  What is a potential vulnerability the healthcare organization is facing based on the IOCs identified?

  A. Unsecured wireless access points
  B. Up-to-date anti-malware software
  C. A strong password policy
  D. Regular security awareness training for employees
  A. Unsecured wireless access points

• Question 228:

  An organization wants to secure remote access to its servers and is looking for a secure protocol that can provide encryption and strong authentication. The organization wants to ensure that its servers can only be accessed by authorized users and that the data exchanged during the session is encrypted.

  Which protocol meets the needs of the organization?

  A. Hypertext Transfer Protocol (HTTP)
  B. File Transfer Protocol (FTP)
  C. Telnet
  D. Secure Shell (SSH)
  D. Secure Shell (SSH)

• Question 229:

  Which risk management strategy will help prevent cheating using a learning management system as a platform?

  A. Enforcement of a strict firewall policy to restrict access to the system's server
  B. Configuration of the system to disable all Bluetooth services on all workstations
  C. Implementation of secure user authentication protocols
  D. Implementation of regular software updates and patch management
  C. Implementation of secure user authentication protocols

• Question 230:

  A cloud service provider is concerned about the potential risks associated with hardware- based attacks on its virtual machines. The provider has decided to implement hardening techniques and endpoint security controls to mitigate the risk. Which hardening technique will meet the needs of this provider?

  A. Conducting regular vulnerability assessments and penetration testing
  B. Disabling central processing unit (CPU) virtualization support
  C. Implementing a web application firewall to monitor incoming traffic
  D. Enforcing strict access control policies for all users
  A. Conducting regular vulnerability assessments and penetration testing