WGU C795 OA EXAM UPDATED
QUESTIONS AND CORRECT ANSWERS.
Common Vulnerabilities and Exposures (CVE) - ANS Provides a naming system for describing
security vulnerabilities.
Common Vulnerability Scoring System (CVSS) - ANS provides a standardized scoring system
for describing the severity of security vulnerabilities.
Common Configuration Enumeration (CCE) - ANS provides a naming system for system
configuration issues.
Common Platform Enumeration (CPE) - ANS provides a naming system for operating
systems, applications, and devices.
Extensible Configuration Checklist Description Format (XCCDF) - ANS provides a language for
specifying security checklists.
Open Vulnerability and Assessment Language (OVAL) - ANS provides a language for
describing security testing procedures.
Vulnerability scans automatically - ANS probe systems, applications, and networks, looking
for weaknesses that may be exploited by an attacker.
1 @COPYRIGHT 2025/2026 ALLRIGHTS RESERVED
, differential backup - ANS A type of partial backup that involves copying all changes made
since the last full backup. Thus, each new differential backup file contains the cumulative
effects of all activity since the last full backup.
Electronic Vaulting - ANS A storage scenario in which database backups are transferred to a
remote site in a bulk transfer fashion. The remote location may be a dedicated alternative
recovery site (such as a hot site) or simply an offsite location managed within the company or
by a contractor for the purpose of maintaining backup data
full backup - ANS A complete copy of data contained on the protected device on the backup
media.
Full-interruption tests - ANS operate like parallel tests, but they involve actually shutting
down operations at the primary site and shifting them to the recovery site.
Parallel tests - ANS represent the next level in testing and involve relocating personnel to the
alternate recovery site and implementing site activation procedures.
Simulation tests - ANS are similar to the structured walk-throughs. In simulation tests,
disaster recovery team members are presented with a scenario and asked to develop an
appropriate response without shutting down operations.
Structured walk-through - ANS takes testing one step further. In this type of test, often
referred to as a table-top exercise, members of the disaster recovery team gather in a large
conference room and role-play a disaster scenario.
Read-through test - ANS -simplest type of DRP test
-copies of the DRP is distributed to members of the disaster recovery team (DRT) for review
-ensures key personnel are aware of their responsibilities and have knowledge refreshed
-provides a chance for obsolete info to be updated
-helps update personnel lists
2 @COPYRIGHT 2025/2026 ALLRIGHTS RESERVED
QUESTIONS AND CORRECT ANSWERS.
Common Vulnerabilities and Exposures (CVE) - ANS Provides a naming system for describing
security vulnerabilities.
Common Vulnerability Scoring System (CVSS) - ANS provides a standardized scoring system
for describing the severity of security vulnerabilities.
Common Configuration Enumeration (CCE) - ANS provides a naming system for system
configuration issues.
Common Platform Enumeration (CPE) - ANS provides a naming system for operating
systems, applications, and devices.
Extensible Configuration Checklist Description Format (XCCDF) - ANS provides a language for
specifying security checklists.
Open Vulnerability and Assessment Language (OVAL) - ANS provides a language for
describing security testing procedures.
Vulnerability scans automatically - ANS probe systems, applications, and networks, looking
for weaknesses that may be exploited by an attacker.
1 @COPYRIGHT 2025/2026 ALLRIGHTS RESERVED
, differential backup - ANS A type of partial backup that involves copying all changes made
since the last full backup. Thus, each new differential backup file contains the cumulative
effects of all activity since the last full backup.
Electronic Vaulting - ANS A storage scenario in which database backups are transferred to a
remote site in a bulk transfer fashion. The remote location may be a dedicated alternative
recovery site (such as a hot site) or simply an offsite location managed within the company or
by a contractor for the purpose of maintaining backup data
full backup - ANS A complete copy of data contained on the protected device on the backup
media.
Full-interruption tests - ANS operate like parallel tests, but they involve actually shutting
down operations at the primary site and shifting them to the recovery site.
Parallel tests - ANS represent the next level in testing and involve relocating personnel to the
alternate recovery site and implementing site activation procedures.
Simulation tests - ANS are similar to the structured walk-throughs. In simulation tests,
disaster recovery team members are presented with a scenario and asked to develop an
appropriate response without shutting down operations.
Structured walk-through - ANS takes testing one step further. In this type of test, often
referred to as a table-top exercise, members of the disaster recovery team gather in a large
conference room and role-play a disaster scenario.
Read-through test - ANS -simplest type of DRP test
-copies of the DRP is distributed to members of the disaster recovery team (DRT) for review
-ensures key personnel are aware of their responsibilities and have knowledge refreshed
-provides a chance for obsolete info to be updated
-helps update personnel lists
2 @COPYRIGHT 2025/2026 ALLRIGHTS RESERVED
