WGU WGU-D488 Online Practice Questions and Exam Preparation

WGU WGU-D488 Online Questions & Answers

• Question 81:

  A financial institution conducted a cybersecurity assessment, which identified several vulnerabilities including outdated software and weak password policies. The company also needs to implement a new core banking system that can handle a large number of transactions while ensuring the security of customer data.

  Which risk mitigation process is the most effective approach to address these vulnerabilities, and what is the best topology for the new core banking system?

  A. Implementing security patches and updates on a regular basis and using hybrid cloud topology
  B. Installing antivirus software on all endpoints and using on-premises topology
  C. Creating strong password policies and enforcing multifactor authentication and using public cloud topology
  D. Conducting regular security audits and penetration testing and using private cloud topology
  A. Implementing security patches and updates on a regular basis and using hybrid cloud topology

• Question 82:

  What is scope creep?

  A. Realization that the organization staffing is inadequate
  B. The extent of the project that lacks needed requirements
  C. Small changes in a project that lead to bigger changes
  D. When the project is completed in less than the required time
  C. Small changes in a project that lead to bigger changes

• Question 83:

  An organization wants to ensure that its website is free of certain vulnerabilities before the final hand-off to the client. What testing method should the organization use to inspect traffic to detect potential issues?

  A. Bastion scanner
  B. Port scanner
  C. HTTP interceptor
  D. Domain interceptor
  C. HTTP interceptor

• Question 84:

  Which type of services are Google Apps, Dropbox. and GoToMeeling?

  A. Infrastructure-as-a-Service (laaS)
  B. Security-as-a-Service (SECaaS)
  C. Platform-as-a-Service (PaaS)
  D. Software-as-a-Service (SaaS)
  D. Software-as-a-Service (SaaS)

• Question 85:

  A software development company is concerned about the potential risks associated with exploits that target vulnerabilities in the Linux operating system used by the company's servers. The company has decided to implement hardening techniques and endpoint security controls to mitigate the risk.

  Which hardening technique will meet the needs of this company?

  A. Implementing a host-based intrusion detection and prevention system
  B. Enforcing strict access control policies for all users
  C. Implementing shell restrictions
  D. Conducting regular security assessments and penetration testing
  C. Implementing shell restrictions

• Question 86:

  An IT organization recently implemented a hybrid cloud deployment. The security team must be able to correlate event data combined from different sources in a central location.

  A. Intrusion Detection System (IDS)
  B. File Integrity Monitoring (FIM)
  C. Security Information and Event Management (SIEM)
  D. Data Loss Prevention (DLP)
  C. Security Information and Event Management (SIEM)

• Question 87:

  The DevSecOps team for an organization manages a continuous integration and continuous deployment (CI/CD) pipeline for a three-tier web application. Management has asked the team toperform a series of comprehensive post-deployment tests to make sure that all of the components of the application can interact and function properly.

  What should the team recommend?

  A. Static code analysis
  B. Dynamic code analysis
  C. Integration testing
  D. Package scanning
  C. Integration testing

• Question 88:

  An organization's board of directors is reviewing the risk register and attempting to evaluate whether there is too much risk for the organization. Which metric should the board review?

  A. Risk appetite
  B. Risk evaluation plan
  C. Risk treatment plan
  D. Risk tolerance
  A. Risk appetite

• Question 89:

  A company wants to ensure that the integrity of its systems is maintained during the startup process.

  Which security technology can ensure the integrity of the system during startup by verifying that the system has not been compromised?

  A. Two-factor authentication
  B. Intrusion detection system (IDS)
  C. Hardware security module (HSM)
  D. Measured boot
  D. Measured boot

• Question 90:

  A software development company is required to comply with the Payment Card Industry Data Security Standard (PCI DSS), which sets requirements for the protection of cardholder data. The company uses Secure Shell (SSH) to connect to its cloud-based development environment, which contains cardholder data.

  Which security control will meet the needs of the company?

  A. Patch management
  B. Network segmentation
  C. Strong authentication
  D. Vulnerability analysis
  C. Strong authentication