WGU University WGU-JY02 Online Practice Questions and Exam Preparation

WGU University WGU-JY02 Online Questions & Answers

• Question 31:

  A breach caused by lack of security management resulted in a civil lawsuit. The organization must communicate with the entity that is responsible for performing adequate oversight.

  Who should be contacted?

  A. Cloud customer
  B. IT department
  C. High-level government agencies
  D. Board of director members
  D. Board of director members

• Question 32:

  An organization consists of many divisions. Its leadership team has gathered the managers and key team members in each division to help create a disaster recovery plan. It studies the type of natural events that commonly occur and the risk involved for each location in which the organization has a data center.

  What is the leadership team doing in this scenario?

  A. Performing an asset inventory
  B. Running a disaster declaration process
  C. Identifying the actions
  D. Defining the disaster criteria
  D. Defining the disaster criteria

• Question 33:

  Which cloud model provides retention of governance controls to a large company with legacy systems?

  A. Private
  B. Public
  C. Community
  D. Hybrid
  A. Private

• Question 34:

  An organization wants to track how often a file is accessed and by which users.

  Which information rights management (IRM) solution should the organization implement?

  A. Automatic expiration
  B. Dynamic policy control
  C. Persistent protection
  D. Continuous auditing
  D. Continuous auditing

• Question 35:

  Which group should be notified for approval when a planned modification to an environment is scheduled?

  A. Event management team
  B. Problem management team
  C. Change management board
  D. Executive management board
  C. Change management board

• Question 36:

  Which threat modeling process would a security analyst use to test a new application from a malicious actor's perspective?

  A. Damage, Reproducibility, Exploitability, Affected Users, and Discoverability (DREAD)
  B. Architecture, Threats, Attack Surfaces, and Mitigation (ATASM)
  C. Process for Attack Simulation and Threat Analysis (PASTA)
  D. Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privileges (STRIDE)
  C. Process for Attack Simulation and Threat Analysis (PASTA)

• Question 37:

  After selecting a new vendor, what should an organization do next as part of the vendor onboarding process?

  A. It should terminate the relationship with the vendor and dissolve technical agreements, data transfers, and other connections with the vendor.
  B. It should monitor the practices of the vendor by performing audits and confirming that the vendor is meeting its contractual agreements.
  C. It should evaluate and determine whether the vendor meets the organization's requirements by evaluating its security policies.
  D. It should confirm contractual details and arrange other details such as technical agreements, data transfers, and encryption standards with the vendor.
  D. It should confirm contractual details and arrange other details such as technical agreements, data transfers, and encryption standards with the vendor.

• Question 38:

  Which setting ensures that an attacker cannot read the information stored temporarily for use by another virtual machine (VM)?

  A. Encrypted network protocols
  B. Encrypted file system
  C. Dedicated processor
  D. Dedicated memory
  D. Dedicated memory

• Question 39:

  Which cloud model is owned and operated by a vendor and then sold, leased, or rented to someone else?

  A. Private
  B. Hybrid
  C. Community
  D. Public
  D. Public

• Question 40:

  Which tier from Uptime Institute's Data Center Site Infrastructure Tier Standards is considered to be the most secure, reliable, and redundant in design and operational elements?

  A. Tier IV
  B. Tier I
  C. Tier II
  D. Tier III
  A. Tier IV