WGU D489 TASK 1 : Cybersecurity Management Plan |Latest Update with Complete Solution

WGU D489 TASK 1 | s1 s1 s1 s1




Nursestar1 Stuvia
s1
CYBERSECURITY
s1




MANAGEMENT
s1




This Document Contain:
s1 s1




s1 100% Guarantee Pass
s1 s1




Questions And Answers s1 s1




Verified Explanationss1




Verified Revised Full Exam
s1 s1 s1

, WGU D489 TASK 1 | CYBERSECURITY s 1 s1 s 1 s1 s1




s1 MANAGEMENT | EXAM QUESTIONS AND s1 s1 s1 s 1




s1 CORRECT ANSWERS WITH RATIONALES s1 s 1 s 1




s1 GRADED A+ LATEST s1 s1




1.A company is implementing a new security policy that requires multi-factor
s1 s1 s1 s 1 s1 s1 s1 s1 s1 s1




s1 authentication (MFA) for all remote access. Which of the following best
s1 s1 s1 s1 s1 s1 s1 s1 s1 s1




describes the primary benefit of MFA?
s1 s1 s1 s 1 s 1 s1




A. It eliminates the need for passwords.
s1 s1 s1 s1 s1




B. It reduces the risk of credential theft and unauthorized access.
s1 s1 s1 s1 s1 s1 s1 s1 s1




C. It simplifies user access management.
s1 s1 s1 s1




D. It removes the need for logging and auditing.
s1 s1 s1 s1 s1 s1 s1




Answer: B s1




Rationale: MFA requires multiple authentication factors, making it much harder
s1 s1 s1 s1 s1 s1 s1 s1 s1




s1 for attackers to compromise accounts even if passwords are stolen.
s1 s1 s1 s1 s1 s1 s1 s1 s1




2.

A security manager is reviewing access control policies and wants to ensure
s1 s1 s1 s1 s 1 s1 1
s s1 s1 s1 s1




s1 that users only have access to what they need to perform their jobs. Which
s1 s1 s1 s1 s1 s1 s1 s1 s1 s1 s1 s1 s1




s1 principle is being applied?s1 s1 s1

,A. Least Privilege
s1




B. Separation of Duties s1 s1




C. Need to Know
s1 s1




D. Role-Based Access Control s1 s1




Answer: A s1




Rationale: Least privilege limits user access to only what is necessary for their
s1 s1 s1 s 1 s1 s1 s1 s1 s1 s1 s1 s1




s1 role, reducing risk.
s1 s1

, 3.

A company’s SOC has detected unusual outbound traffic from a workstation to
s1 s1 s1 s1 s1 s1 s1 s1 s1 s1 s1




an unknown IP address. The security analyst suspects malware. What should
s1 s1 s1 s1 s1 s1 s1 s 1 s1 s 1 s1




s1 be the FIRST action?
s1 s1 s1




A. Notify the CEO. s1 s1




B. Disconnect the workstation from the network. s1 s1 s1 s1 s1




C. Reboot the workstation. s1 s1




D. Update antivirus definitions. s1 s 1




Answer: B s1




Rationale: Disconnecting the system prevents further data exfiltration and limits
s1 s1 s1 s1 s1 s1 s1 s1 s1




s1 spread while preserving evidence.
s1 s 1 s1




4.

During a risk assessment, an analyst identifies that the company has a single
s1 s1 s1 s1 s1 s1 s 1 s1 s1 s1 s1 s1




s1 point of failure in its data center power supply. This is an example of what
s1 s1 s 1 s1 s1 s1 s1 s1 s1 s1 s1 s1 s1 s1




s1 type of risk?
s1 s1




A. Strategic Risk s1




B. Operational Risk s1




C. Compliance Risk s1




D. Financial Risk s1




Answer: B s1




Rationale: Operational risk includes disruptions in systems or processes that affect
s1 s1 s1 s1 s1 s1 s1 s1 s1 s1




s1 business continuity. s1