WGU D486 GOVERNANCE RISK AND
COMPLIANCE COMPREHENSIVE STUDY
GUIDE 2026 FULL QUESTIONS AND
SOLUTIONS GRADED A+
◍ Physical Security.
Answer: Protecting facilities, hardware, and infrastructure from physical
threats.
◍ Deep Synthesis.
Answer: AI-generated synthetic media like deepfakes.
◍ Access Control Policy.
Answer: Defines how access to systems is granted and managed. It governs
who has access to systems and data, exists to enforce least privilege and
prevent unauthorized access, and violations can lead to breaches and
compliance penalties.
◍ Criminal Law.
Answer: Laws where the state prosecutes harmful acts against society.
◍ What is security awareness training?.
Answer: Educating users about security threats
◍ Datacenter Physical Control Example.
Answer: Bollards, biometric access, mantraps, CCTV.
◍ Chain of Custody.
Answer: Documented handling of digital evidence from collection to
courtroom.
◍ Organizational Liability.
, Answer: Organization being held responsible for employee actions.
◍ Algorithmic Bias.
Answer: Systematic unfair outcomes caused by biased training data or
design.
◍ Example of Due Care.
Answer: Publishing and training on an acceptable use policy.
◍ What is a data steward?.
Answer: Person responsible for data handling and quality
◍ What is an audit?.
Answer: Formal review of security controls
◍ 3 Requirements for Enforceable Policy.
Answer: Approved by management, distributed and acknowledged,
uniformly enforced.
◍ What is a memorandum of understanding (MOU)?.
Answer: Non-binding agreement between parties
◍ Tactical Planning.
Answer: Department-level planning focused on achieving strategic goals.
◍ Civil Law.
Answer: Laws dealing with disputes between individuals or organizations.
◍ What is a data custodian?.
Answer: Person responsible for storing and maintaining data
◍ Multistage Attack.
Answer: Ransomware involving phishing, lateral movement, escalation,
exfiltration, encryption.
◍ What is a business partnership agreement (BPA)?.
Answer: Defines responsibilities between partners
◍ Acceptable Use Policy.
Answer: Defines proper use of company systems. It governs how employees
COMPLIANCE COMPREHENSIVE STUDY
GUIDE 2026 FULL QUESTIONS AND
SOLUTIONS GRADED A+
◍ Physical Security.
Answer: Protecting facilities, hardware, and infrastructure from physical
threats.
◍ Deep Synthesis.
Answer: AI-generated synthetic media like deepfakes.
◍ Access Control Policy.
Answer: Defines how access to systems is granted and managed. It governs
who has access to systems and data, exists to enforce least privilege and
prevent unauthorized access, and violations can lead to breaches and
compliance penalties.
◍ Criminal Law.
Answer: Laws where the state prosecutes harmful acts against society.
◍ What is security awareness training?.
Answer: Educating users about security threats
◍ Datacenter Physical Control Example.
Answer: Bollards, biometric access, mantraps, CCTV.
◍ Chain of Custody.
Answer: Documented handling of digital evidence from collection to
courtroom.
◍ Organizational Liability.
, Answer: Organization being held responsible for employee actions.
◍ Algorithmic Bias.
Answer: Systematic unfair outcomes caused by biased training data or
design.
◍ Example of Due Care.
Answer: Publishing and training on an acceptable use policy.
◍ What is a data steward?.
Answer: Person responsible for data handling and quality
◍ What is an audit?.
Answer: Formal review of security controls
◍ 3 Requirements for Enforceable Policy.
Answer: Approved by management, distributed and acknowledged,
uniformly enforced.
◍ What is a memorandum of understanding (MOU)?.
Answer: Non-binding agreement between parties
◍ Tactical Planning.
Answer: Department-level planning focused on achieving strategic goals.
◍ Civil Law.
Answer: Laws dealing with disputes between individuals or organizations.
◍ What is a data custodian?.
Answer: Person responsible for storing and maintaining data
◍ Multistage Attack.
Answer: Ransomware involving phishing, lateral movement, escalation,
exfiltration, encryption.
◍ What is a business partnership agreement (BPA)?.
Answer: Defines responsibilities between partners
◍ Acceptable Use Policy.
Answer: Defines proper use of company systems. It governs how employees
