DJN2: Incident Response Virtual Lab Supplementary Instructions
WGU D483 Virtual Lab Supplementary Instructions with
complete solution 2026 update
D483 Task 1 Virtual Lab Supplementary Instructions
Screenshot Evidence Document
While in the virtual lab environment, a series of five
challenge questions will be used to verify that appropriate
steps were taken at defined moments in the Detect,
Investigate, and Remediate steps of your incident
response procedure. Challenge questions appear and are
answered within the instructions panel of the virtual lab
environment. Each time a challenge question is
successfully answered, a screenshot of the active virtual
machine’s desktop will be captured and automatically
added to an evidence document. All information
requested by a challenge question must be visible on the
focal virtual machine’s desktop prior to answering that
question to ensure appropriate evidence is captured in
the screenshot.
Note: If any replacement screenshots are needed, the
challenge questions must be reset by contacting your
course instructor.
The screenshot evidence document should be exported to
your local machine at the conclusion of the incident
response procedure. Within the virtual lab instructions
panel, expand the menu (≡) and select “Download
Correct Screenshots” to obtain a copy of the screenshot
PAGE 1
, DJN2: Incident Response Virtual Lab Supplementary Instructions
evidence document on your local machine. The exported
file will be a .docx file containing the recorded answers to
all challenge questions and their accompanying
watermarked screenshots. The unaltered screenshot
evidence document will be included in your submission
files.
PAGE 2
WGU D483 Virtual Lab Supplementary Instructions with
complete solution 2026 update
D483 Task 1 Virtual Lab Supplementary Instructions
Screenshot Evidence Document
While in the virtual lab environment, a series of five
challenge questions will be used to verify that appropriate
steps were taken at defined moments in the Detect,
Investigate, and Remediate steps of your incident
response procedure. Challenge questions appear and are
answered within the instructions panel of the virtual lab
environment. Each time a challenge question is
successfully answered, a screenshot of the active virtual
machine’s desktop will be captured and automatically
added to an evidence document. All information
requested by a challenge question must be visible on the
focal virtual machine’s desktop prior to answering that
question to ensure appropriate evidence is captured in
the screenshot.
Note: If any replacement screenshots are needed, the
challenge questions must be reset by contacting your
course instructor.
The screenshot evidence document should be exported to
your local machine at the conclusion of the incident
response procedure. Within the virtual lab instructions
panel, expand the menu (≡) and select “Download
Correct Screenshots” to obtain a copy of the screenshot
PAGE 1
, DJN2: Incident Response Virtual Lab Supplementary Instructions
evidence document on your local machine. The exported
file will be a .docx file containing the recorded answers to
all challenge questions and their accompanying
watermarked screenshots. The unaltered screenshot
evidence document will be included in your submission
files.
PAGE 2
