WGU D651 CERTIFICATION SCRIPT 2026
QUESTIONS WITH SOLUTIONS GRADED A+
◍ scope and sequence.
Answer: charts the progression of standards, specifying instruction order and
timing
◍ Nikto/Wikto.
Answer: Checks for many common server-side vulnerabilities, and creates
an index of all the files and directories it can see on the target Web server
◍ Impact.
Answer: The value of the asset is used to assess if a risk is present
◍ Hash Function.
Answer: Create a largely unique and fixed-length hash value based on the
original messageHashes provide integrity, but not confidentiality. It can't
un-hash a message. Hashes are very useful when distributing files or
sending communications, as the hash can be sent with the message so that
the receiver can verify its integrity
◍ Risk Management Process.
Answer: 1. Identify Asset2. Identify Threats3. Assess Vulnerabilities4.
Assess Risk5. Mitigate Risk
◍ Incident Response Process.
Answer: 1. Preparation - the policies and procedures that govern incident
response and handling in place, conducting training and education for both
incident handlers2. Detection and Analysis - detect the occurrence of an
issue and decide whether or not it is actually an incident3. Containment,
Eradication, and Recovery - ensure that the situation does not cause any
more damage4. Post Incident Activity - determine specifically what
happened, why it happened, and what we can do to keep it from happening
, again
◍ performance based learning.
Answer: an approach to teaching and learning that emphasizes students
being able to do or perform, specific skills as a result of instruction
◍ Vietnam War aka Purple Dragon.
Answer: During the Vietnam War, the United States came to realize that
information regarding troop movements, operations, and other military
activities was being leaked to the enemy.
◍ Attack surface.
Answer: The total of the available avenues through which our operating
system might be attacked
◍ Parkerian hexad.
Answer: Where the CIA triad consists of confidentiality, integrity, and
availability, the Parkerian hexad consists of these three principles, as well as
possession or control, authenticity, and utility
◍ OPSEC.
Answer: A formal methodology of operations security
◍ Biometric: Permanence.
Answer: How well a particular characteristic resists change over time and
with advancing age.
◍ behavior.
Answer: the action or skill students are expected to demonstrate to produce
observable and measurable outcomes
◍ Penetration Test.
Answer: Mimic, as closely as possible, the techniques an actual attack would
use
◍ Stream Cipher.
Answer: Encrypts each bit in the plaintext message, 1 bit at a time
◍ Nessus.
, Answer: Vulnerability scanning tool
◍ Principle of Least Privilege.
Answer: Only allow the bare minimum of access to a party—this might be a
person, user account, or process—to allow it to perform the functionality
needed of it
◍ Confused Deputy Problem.
Answer: A type of attack that is common in systems that use ACLs rather
than capabilities. The crux of the confused deputy problem is seen when the
software with access to a resource has a greater level of permission to access
the resource than the user who is controlling the software.If we, as the user,
can trick the software into misusing its greater level of authority, we can
potentially carry out an attack
◍ Buffer overflows.
Answer: Using search fields on website to insert codeOccur when we do not
properly account for the size of the data input into our applicationsProper
bounds checking can nullify this type of attack entirely
◍ Symmetric Cryptography.
Answer: Encryption that uses a single key to encrypt and decrypt a message.
◍ transparency and clarity.
Answer: elements that ensure the criteria used to assess students are clear
and understandable, making the assessment process fair and transparent
◍ Intrusion Detection.
Answer: Monitors and reports malicious events
◍ content scaffolding.
Answer: helps the learner figure out an answer. ex. accessing prior
knowledge, direct instruction with gradual release of responsibility
◍ Intrusion Detection System (IDS).
Answer: Monitor the networks, hosts, or applications to which they are
connected for unauthorized activity
QUESTIONS WITH SOLUTIONS GRADED A+
◍ scope and sequence.
Answer: charts the progression of standards, specifying instruction order and
timing
◍ Nikto/Wikto.
Answer: Checks for many common server-side vulnerabilities, and creates
an index of all the files and directories it can see on the target Web server
◍ Impact.
Answer: The value of the asset is used to assess if a risk is present
◍ Hash Function.
Answer: Create a largely unique and fixed-length hash value based on the
original messageHashes provide integrity, but not confidentiality. It can't
un-hash a message. Hashes are very useful when distributing files or
sending communications, as the hash can be sent with the message so that
the receiver can verify its integrity
◍ Risk Management Process.
Answer: 1. Identify Asset2. Identify Threats3. Assess Vulnerabilities4.
Assess Risk5. Mitigate Risk
◍ Incident Response Process.
Answer: 1. Preparation - the policies and procedures that govern incident
response and handling in place, conducting training and education for both
incident handlers2. Detection and Analysis - detect the occurrence of an
issue and decide whether or not it is actually an incident3. Containment,
Eradication, and Recovery - ensure that the situation does not cause any
more damage4. Post Incident Activity - determine specifically what
happened, why it happened, and what we can do to keep it from happening
, again
◍ performance based learning.
Answer: an approach to teaching and learning that emphasizes students
being able to do or perform, specific skills as a result of instruction
◍ Vietnam War aka Purple Dragon.
Answer: During the Vietnam War, the United States came to realize that
information regarding troop movements, operations, and other military
activities was being leaked to the enemy.
◍ Attack surface.
Answer: The total of the available avenues through which our operating
system might be attacked
◍ Parkerian hexad.
Answer: Where the CIA triad consists of confidentiality, integrity, and
availability, the Parkerian hexad consists of these three principles, as well as
possession or control, authenticity, and utility
◍ OPSEC.
Answer: A formal methodology of operations security
◍ Biometric: Permanence.
Answer: How well a particular characteristic resists change over time and
with advancing age.
◍ behavior.
Answer: the action or skill students are expected to demonstrate to produce
observable and measurable outcomes
◍ Penetration Test.
Answer: Mimic, as closely as possible, the techniques an actual attack would
use
◍ Stream Cipher.
Answer: Encrypts each bit in the plaintext message, 1 bit at a time
◍ Nessus.
, Answer: Vulnerability scanning tool
◍ Principle of Least Privilege.
Answer: Only allow the bare minimum of access to a party—this might be a
person, user account, or process—to allow it to perform the functionality
needed of it
◍ Confused Deputy Problem.
Answer: A type of attack that is common in systems that use ACLs rather
than capabilities. The crux of the confused deputy problem is seen when the
software with access to a resource has a greater level of permission to access
the resource than the user who is controlling the software.If we, as the user,
can trick the software into misusing its greater level of authority, we can
potentially carry out an attack
◍ Buffer overflows.
Answer: Using search fields on website to insert codeOccur when we do not
properly account for the size of the data input into our applicationsProper
bounds checking can nullify this type of attack entirely
◍ Symmetric Cryptography.
Answer: Encryption that uses a single key to encrypt and decrypt a message.
◍ transparency and clarity.
Answer: elements that ensure the criteria used to assess students are clear
and understandable, making the assessment process fair and transparent
◍ Intrusion Detection.
Answer: Monitors and reports malicious events
◍ content scaffolding.
Answer: helps the learner figure out an answer. ex. accessing prior
knowledge, direct instruction with gradual release of responsibility
◍ Intrusion Detection System (IDS).
Answer: Monitor the networks, hosts, or applications to which they are
connected for unauthorized activity
