WGU D488 QUIZ BANK COMPREHENSIVE
SCRIPT 2026 FULL QUESTIONS AND
SOLUTIONS PREMIUM VERIFIED CONTENT
HIGH SCORE GUIDE GRADED A+
⩥ A threat intelligence analyst is looking at computer-generated images
and videos of a person that appear to be real but are instead completely
synthetic and artificially generated. What is this technology called?
A - Deep learning
B - Deep fake
C - Big data
D - Machine learning. Answer: B - Deep fake
Deep fakes represent computer-generated images and video of a person
that appear to be real but are instead completely synthetic and artificially
generated.
A deep learning system determines which simpler concepts are
applicable in order to identify a solution to an abstract problem.
Big data refers to data collections that are so large and complex that they
are difficult for traditional database tools to manage.
,Machine learning (ML) uses algorithms to parse input data and then
develop strategies for using that data, such as identifying an object as a
type, working out the best next move in a game, and so on.
⩥ A data center technician is part of an organization that requires FIPS
140-2 encryption standards for encrypting data at rest. Which of the
following technologies incorporates this standard specifically for data at
rest?
A - HSM
B - SEDs
C - TPM
D - Measured boot. Answer: B - SEDs (Self encrypting drives)
Self-encrypting drives incorporate Federal Information Processing
Standards (FIPS) 140-2 and are designed specifically for encrypting data
at rest.
While HSMs are often used to manage cryptographic keys, they are
typically used for centralizing public key infrastructure (PKI)
management across a network of devices and not specifically for
encrypting data at rest in the context of FIPS 140-2.
While TPM is a specification for hardware-based storage of encryption
keys, hashed passwords, and other identification information, it is not
directly used for encrypting data at rest in the context of FIPS 140-2.
,This is a process that uses platform configuration registers (PCRs) in the
TPM at each stage in the boot process to ensure system integrity but is
not related to encrypting data at rest.
⩥ A security architect is looking to incorporate file system integrity
monitoring in their data center server environment. Which of the
following solutions would best suit this?
A - EDR
B - UEBA
C - UEFI
D - HIDS. Answer: D - HIDS
Host-based Intrusion Detection Systems (HIDS) perform file system
integrity monitoring which uses signatures to detect whether a managed
file image, such as an OS system file, driver, or application executable,
has changed.
The purpose of endpoint detection and response (EDR) products is not to
prevent initial execution but to provide real-time and historical visibility
into the compromise.
User and entity behavior analytics (UEBA) technologies scan indicators
from multiple intrusion detection and log sources to detect and identify
anomalies and threats.
, The unified extensible firmware interface (UEFI) provides code that
allows the host to boot to an OS. UEFI can enforce a number of boot
integrity checks.
⩥ A mobile device administrator is researching a suite of policies and
technology tools designed to enable centralized management and control
of mobile devices in a corporate setting. What is this called?
A - EMM
B - MDM
C - MFA
D - RTOS. Answer: A - EMM (Enterprise Mobility Management)
Enterprise Mobility Management (EMM) describes a suite of policies
and technology tools designed to enable centralized management and
control of mobile devices in a corporate setting.
A subset of EMM, Mobile Device Management (MDM), focuses on the
control of mobile devices to ensure compliance with an organization's
security requirements.
Multifactor Authentication (MFA) can protect access to corporate
resources from a managed device and is used during device enrollment
to protect against unauthorized access.
SCRIPT 2026 FULL QUESTIONS AND
SOLUTIONS PREMIUM VERIFIED CONTENT
HIGH SCORE GUIDE GRADED A+
⩥ A threat intelligence analyst is looking at computer-generated images
and videos of a person that appear to be real but are instead completely
synthetic and artificially generated. What is this technology called?
A - Deep learning
B - Deep fake
C - Big data
D - Machine learning. Answer: B - Deep fake
Deep fakes represent computer-generated images and video of a person
that appear to be real but are instead completely synthetic and artificially
generated.
A deep learning system determines which simpler concepts are
applicable in order to identify a solution to an abstract problem.
Big data refers to data collections that are so large and complex that they
are difficult for traditional database tools to manage.
,Machine learning (ML) uses algorithms to parse input data and then
develop strategies for using that data, such as identifying an object as a
type, working out the best next move in a game, and so on.
⩥ A data center technician is part of an organization that requires FIPS
140-2 encryption standards for encrypting data at rest. Which of the
following technologies incorporates this standard specifically for data at
rest?
A - HSM
B - SEDs
C - TPM
D - Measured boot. Answer: B - SEDs (Self encrypting drives)
Self-encrypting drives incorporate Federal Information Processing
Standards (FIPS) 140-2 and are designed specifically for encrypting data
at rest.
While HSMs are often used to manage cryptographic keys, they are
typically used for centralizing public key infrastructure (PKI)
management across a network of devices and not specifically for
encrypting data at rest in the context of FIPS 140-2.
While TPM is a specification for hardware-based storage of encryption
keys, hashed passwords, and other identification information, it is not
directly used for encrypting data at rest in the context of FIPS 140-2.
,This is a process that uses platform configuration registers (PCRs) in the
TPM at each stage in the boot process to ensure system integrity but is
not related to encrypting data at rest.
⩥ A security architect is looking to incorporate file system integrity
monitoring in their data center server environment. Which of the
following solutions would best suit this?
A - EDR
B - UEBA
C - UEFI
D - HIDS. Answer: D - HIDS
Host-based Intrusion Detection Systems (HIDS) perform file system
integrity monitoring which uses signatures to detect whether a managed
file image, such as an OS system file, driver, or application executable,
has changed.
The purpose of endpoint detection and response (EDR) products is not to
prevent initial execution but to provide real-time and historical visibility
into the compromise.
User and entity behavior analytics (UEBA) technologies scan indicators
from multiple intrusion detection and log sources to detect and identify
anomalies and threats.
, The unified extensible firmware interface (UEFI) provides code that
allows the host to boot to an OS. UEFI can enforce a number of boot
integrity checks.
⩥ A mobile device administrator is researching a suite of policies and
technology tools designed to enable centralized management and control
of mobile devices in a corporate setting. What is this called?
A - EMM
B - MDM
C - MFA
D - RTOS. Answer: A - EMM (Enterprise Mobility Management)
Enterprise Mobility Management (EMM) describes a suite of policies
and technology tools designed to enable centralized management and
control of mobile devices in a corporate setting.
A subset of EMM, Mobile Device Management (MDM), focuses on the
control of mobile devices to ensure compliance with an organization's
security requirements.
Multifactor Authentication (MFA) can protect access to corporate
resources from a managed device and is used during device enrollment
to protect against unauthorized access.
