WGU D430 Comprehensive
Questions (Frequently
Tested)with Verified
Answers Graded A+
[Document subtitle]
User [Date] [Course title]
, Contact for further consultation
1. A company's IT policy manual states that "All company computers,
worksta- tions, application servers, and mobile devices must have
current versions of antivirus software."
Which principle or concept of cybersecurity does this policy statement
impact?-
Answer: Operating system security
2. An organization's procedures document states that "All electronic
communi- cations should be encrypted during transmission across
networks using en- cryption standards specified in the data
encryption policy."
Which security principle is this policy addressing? Answer: Confidentiality
3. A company's website policy states that "To gain access to the
corporate website, each employee must provide a valid user name
and password, and then answer one of six security questions
accurately."
Which type of security does the policy address? Answer: Operations
2/
21
, Contact for further consultation
4. An organization notices unauthorized visitors following employees
through a restricted doorway.
Which vulnerability should be addressed in the organization's security
policy?-
Answer: Tailgating
5. A company wants to update its access control policy. The
company wants to prevent hourly employees from logging in to
company computers after business hours.
Which type of access control policy should be implemented? Answer:
Attribute-based
6. A new software development company has determined that one of
its propri- etary algorithms is at a high risk for unauthorized
disclosure. The company's security up to this point has been
fairly lax.
Which procedure should the company implement to protect this asset?
Answer: Relocate the algorithm to encrypted storage.
3/
21
Questions (Frequently
Tested)with Verified
Answers Graded A+
[Document subtitle]
User [Date] [Course title]
, Contact for further consultation
1. A company's IT policy manual states that "All company computers,
worksta- tions, application servers, and mobile devices must have
current versions of antivirus software."
Which principle or concept of cybersecurity does this policy statement
impact?-
Answer: Operating system security
2. An organization's procedures document states that "All electronic
communi- cations should be encrypted during transmission across
networks using en- cryption standards specified in the data
encryption policy."
Which security principle is this policy addressing? Answer: Confidentiality
3. A company's website policy states that "To gain access to the
corporate website, each employee must provide a valid user name
and password, and then answer one of six security questions
accurately."
Which type of security does the policy address? Answer: Operations
2/
21
, Contact for further consultation
4. An organization notices unauthorized visitors following employees
through a restricted doorway.
Which vulnerability should be addressed in the organization's security
policy?-
Answer: Tailgating
5. A company wants to update its access control policy. The
company wants to prevent hourly employees from logging in to
company computers after business hours.
Which type of access control policy should be implemented? Answer:
Attribute-based
6. A new software development company has determined that one of
its propri- etary algorithms is at a high risk for unauthorized
disclosure. The company's security up to this point has been
fairly lax.
Which procedure should the company implement to protect this asset?
Answer: Relocate the algorithm to encrypted storage.
3/
21
