**WGU D320 OBJECTIVE ASSESSMENT – COMPLETE 2024 QUESTION BANK & VERIFIED SOLUTIONS | GRADED A+ **

WGU D320 OBJECTIVE ASSESSMENT – COMPLETE 2024 QUESTION BANK & VERIFIED SOLUTIONS | GRADED A+ A manager is made aware of a customer complaint about how an application developed by the company collects personal and environmental information from the devices it is installed on. Which document should the manager refer to in order to determine if the company has properly disclosed information about what data it collects from this application's users? Retention policy Breach notification Privacy notice Denial of service Privacy notice An organization needs to store passwords in a database securely. The data should not be available to system administrators. Which technique should the organization use? Encryption Hashing Encoding Masking Hashing A company is looking to ensure that the names of individuals in its data in the cloud are not revealed in the event of a data breach, as the data is sensitive and classified. Which data masking technique should the company use to prevent attackers from identifying individuals in the event of a data breach? Crypto-shredding Degaussing Anonymization Randomization Anonymization An organization deploying a greenfield cloud-based system wants to validate users' identities and access before they are allowed to interact with data. Which scheme should the organization leverage to ensure that users are properly validated? Security groups Zero trust Bastion hosts Traffic inspection Zero trust An organization is taking part in a disaster recovery (DR) exercise that simulates a natural disaster. The key players are performing minimal actions that test the call tree to ensure that all the contact information is up to date. Which type of testing is the organization performing? Full Dry run Split Abuse case Dry run After a severe storm, the local power grid used by an organization's primary European data center was damaged and could no longer provide the necessary power to keep the services running. Management has established that this event does not meet the definition of a disaster but is a business continuity impacting event since a failover site can temporarily bear the load. What should the organization leverage to return operations to the data center? Uninterruptible power supply (UPS) Redundant arra Generators Which legal requirement mandates companies in the United States to provide federal officials with data even if the data is not stored in the United States and disclosure of the data is illegal under the laws where it is stored? The Sarbanes-Oxley (SOX) Act The General Data Protection Regulation (GDPR) The Gramm-Leach-Bliley Act (GLBA) The Clarifying Lawful Overseas Use of Data (CLOUD) Act The Clarifying Lawful Overseas Use of Data (CLOUD) Act Which process describes the tracking and monitoring of evidence, including who had access and what controls were used, from the time it is classified and gathered for evidential purposes until the time it is delivered to a court or law enforcement officials? Audit Chain of custody Electronic discovery Forensic imaging Chain of custody The General Data Protection Regulation (GDPR) provides data subjects with various rights related to privacy. What do organizations need to do in order to acquire and use personal information under GDPR? Give the data subject notice of the data use Have the data subject opt in for the data use Allow the data subject to opt out of the data use Get the data subject to sign an agreement for the data use Have the data subject opt in for the data use An organization has devised a new use for the personal data that it stores about its customers. What should the organization do in this situation according to the Generally Accepted Privacy Principles (GAPP)? Notify users once the updated data processing is in place Obtain additional consent before using personal data in a different way Take no further action as the users have already consented to data processing Remove the data processing clause from its policy to avoid a conflict Obtain additional consent before using personal data in a different way Which type of analysis compares a control analysis against a baseline standard? Privacy impact analysis Gap analysis Risk analysis Business impact analysis Gap analysis Which type of statement issued by an auditor indicates that an organization did not disclose enough information to perform a fair audit? Income Adverse opinion Compliance Scope limitation Scope limitation An organization needs to quickly identify the document owner in a shared network folder. Which technique should the organization use to meet this goal? Labeling Classification Mapping Categorization Labeling An organization wants to gather and interpret logs from its cloud environment. Which system should the organization use for this task? Simple Network Management Protocol (SNMP) Security Information and Event Management (SIEM) Business Process Management (BPM) Distributed System Management (DSM) Security Information and Event Management (SIEM) An organization with a Security Information and Event Management (SIEM) system wants to minimize errors or missed issues due to human log analysis. Which SIEM policy should the organization use in this case? Automated analysis of metadata Automated analysis of data sets Manually generated analysis of data sets Manually generated analysis of metadata Automated analysis of data sets Which software type allows multiple operating systems to run on the same physical server in a virtualized environment? Hypervisor Container Quantum computing Blockchain technology Hypervisor What is the name of the process of automatically provisioning, configuring, and managing virtual machines and other resources in a virtualized environment? Continuous deployment Orchestration Programmability Continuous integration Orchestration Which cloud computing characteristic allows customers to manage their utilization by only paying for the resources used? Metered service Broad network access Rapid elasticity On-demand self-service Metered service