WGU D430 Fundamentals of Information Security Complete OA Study Guide, Practice Questions, Detailed Answers & Exam Review
WGU D430 Fundamentals of Information Security OA Exam 2025/2026 –
300+ Verified Q&As | Latest Test Bank
Study online at https://quizlet.com/_hl5boj
1. A new employee is grant- C) Principle of least privilege
ed access to all company re-
sources without any restric- RATIONALE: Granting unrestricted access violates the principle of
tions. What security princi- least privilege, which states users should only have access neces-
ple is being violated? sary for their roles
2. You discover that a key sys- C) Vulnerability to known exploits
tem in your organization is
running outdated software. RATIONALE: Running outdated software poses a significant risk due
What is the most immediate to known vulnerabilities that attackers can exploit
risk associated with this sit-
uation?
3. During a risk assessment, C) Implement a mitigation strategy immediately
you identify a critical vul-
nerability in a widely used RATIONALE: The first course of action should be to implement a
application. What should be mitigation strategy to address the critical vulnerability and protect
your first course of action? the organization.
4. Which of the following best B) Never trusting any user or device by default
describes a "zero trust" ar-
chitecture? RATIONALE: Zero trust architecture assumes that threats could be
internal or external and requires verification for every access re-
quest
5. What is the primary goal C) To identify vulnerabilities by simulating real-world attacks
of conducting a penetration
test? RATIONALE: The primary goal of a penetration test is to identify vul-
nerabilities by simulating attacks, helping organizations strengthen
their security posture.
6.
1/3
WGU D430 Fundamentals of Information Security OA Exam 2025/2026 –
300+ Verified Q&As | Latest Test Bank
Study online at https://quizlet.com/_hl5boj
1. A new employee is grant- C) Principle of least privilege
ed access to all company re-
sources without any restric- RATIONALE: Granting unrestricted access violates the principle of
tions. What security princi- least privilege, which states users should only have access neces-
ple is being violated? sary for their roles
2. You discover that a key sys- C) Vulnerability to known exploits
tem in your organization is
running outdated software. RATIONALE: Running outdated software poses a significant risk due
What is the most immediate to known vulnerabilities that attackers can exploit
risk associated with this sit-
uation?
3. During a risk assessment, C) Implement a mitigation strategy immediately
you identify a critical vul-
nerability in a widely used RATIONALE: The first course of action should be to implement a
application. What should be mitigation strategy to address the critical vulnerability and protect
your first course of action? the organization.
4. Which of the following best B) Never trusting any user or device by default
describes a "zero trust" ar-
chitecture? RATIONALE: Zero trust architecture assumes that threats could be
internal or external and requires verification for every access re-
quest
5. What is the primary goal C) To identify vulnerabilities by simulating real-world attacks
of conducting a penetration
test? RATIONALE: The primary goal of a penetration test is to identify vul-
nerabilities by simulating attacks, helping organizations strengthen
their security posture.
6.
1/3
