WGU C795 Cybersecurity Mgmt II Tactical OA (pdf) | 2026/2027 | |
Cybersecurity Mgmt
1. A security manager is reviewing a set of newly discovered software flaws.
Which of the following standards provides a naming system for describing
security vulnerabilities?
A) Common Platform Enumeration (CPE)
B) Common Vulnerabilities and Exposures (CVE)
C) Common Configuration Enumeration (CCE)
D) Common Vulnerability Scoring System (CVSS)
Correct Answer: Common Vulnerabilities and Exposures (CVE)
Rationale: Common Vulnerabilities and Exposures (CVE) is the de facto
industry standard for naming and identifying publicly known cybersecurity
vulnerabilities. CPE identifies platforms and systems, CCE addresses
configuration issues, and CVSS provides a scoring system for severity.
2. A security administrator needs to prioritize the remediation of several
critical vulnerabilities discovered across the enterprise. Which of the
following standards should be used to evaluate the severity of each
vulnerability?
A) Common Vulnerability Scoring System (CVSS)
B) Common Vulnerabilities and Exposures (CVE)
C) Open Vulnerability and Assessment Language (OVAL)
D) Extensible Configuration Checklist Description Format (XCCDF)
Correct Answer: Common Vulnerability Scoring System (CVSS)
Rationale: CVSS provides a standardized scoring system that describes the
severity of security vulnerabilities based on their exploitability and impact.
,CVE provides naming, OVAL describes testing procedures, and XCCDF
specifies security checklists.
3. What is the primary purpose of the Open Vulnerability and Assessment
Language (OVAL)?
A) To provide a naming system for describing security vulnerabilities
B) To provide a standardized scoring system for vulnerability severity
C) To provide a language for describing security testing procedures
D) To provide a naming system for operating systems and applications
Correct Answer: To provide a language for describing security testing
procedures
Rationale: OVAL provides a language for describing security testing
procedures and assessing the state of a system. CVE provides naming, CVSS
provides scoring, and CPE identifies platforms and devices.
4. A cybersecurity manager is implementing a layered security approach.
Which of the following principles is being applied?
A) Defense-in-depth
B) Least privilege
C) Separation of duties
D) Zero trust
Correct Answer: Defense-in-depth
Rationale: Defense-in-depth is a layered security approach where multiple,
overlapping controls are deployed so that if one layer fails, others continue
to provide protection. This strategy is a core principle of cybersecurity
management discussed in the C795 course.
,5. Which of the following is the primary purpose of a Business Continuity Plan
(BCP)?
A) To restore IT systems after a disaster
B) To ensure critical business functions can continue during and after a
disruption
C) To identify and remediate security vulnerabilities
D) To respond to active security incidents
Correct Answer: To ensure critical business functions can continue during and
after a disruption
Rationale: Business Continuity Planning ensures that an organization can
continue its critical operations during and after a disruption. Disaster
Recovery Planning focuses specifically on restoring IT systems and data.
6. A Disaster Recovery Plan (DRP) is primarily concerned with which of the
following?
A) Maintaining business operations during a crisis
B) Restoring IT systems and data after a disaster
C) Identifying and assessing organizational risks
D) Responding to and containing security incidents
Correct Answer: Restoring IT systems and data after a disaster
Rationale: A Disaster Recovery Plan (DRP) is a documented, structured
approach for restoring IT systems and data after a disaster. While BCP
focuses on business continuity, DRP specifically addresses the technical
recovery of IT assets.
, 7. An organization is testing its DRP by gathering team members in a
conference room to role-play a disaster scenario without actually shutting
down operations. What type of test is being conducted?
A) Read-through test
B) Structured walk-through
C) Simulation test
D) Parallel test
Correct Answer: Structured walk-through
Rationale: A structured walk-through, often called a table-top exercise,
involves disaster recovery team members gathering to discuss and role-play
a disaster scenario. It is a step above a read-through test but does not
involve actual system failover.
8. A disaster recovery test involves relocating personnel to an alternate
recovery site and implementing site activation procedures without shutting
down the primary site. Which type of test is this?
A) Simulation test
B) Parallel test
C) Full-interruption test
D) Structured walk-through
Correct Answer: Parallel test
Rationale: A parallel test involves relocating personnel to the alternate
recovery site and implementing activation procedures, but operations
continue at the primary site. A full-interruption test involves actually shutting
down the primary site.
Cybersecurity Mgmt
1. A security manager is reviewing a set of newly discovered software flaws.
Which of the following standards provides a naming system for describing
security vulnerabilities?
A) Common Platform Enumeration (CPE)
B) Common Vulnerabilities and Exposures (CVE)
C) Common Configuration Enumeration (CCE)
D) Common Vulnerability Scoring System (CVSS)
Correct Answer: Common Vulnerabilities and Exposures (CVE)
Rationale: Common Vulnerabilities and Exposures (CVE) is the de facto
industry standard for naming and identifying publicly known cybersecurity
vulnerabilities. CPE identifies platforms and systems, CCE addresses
configuration issues, and CVSS provides a scoring system for severity.
2. A security administrator needs to prioritize the remediation of several
critical vulnerabilities discovered across the enterprise. Which of the
following standards should be used to evaluate the severity of each
vulnerability?
A) Common Vulnerability Scoring System (CVSS)
B) Common Vulnerabilities and Exposures (CVE)
C) Open Vulnerability and Assessment Language (OVAL)
D) Extensible Configuration Checklist Description Format (XCCDF)
Correct Answer: Common Vulnerability Scoring System (CVSS)
Rationale: CVSS provides a standardized scoring system that describes the
severity of security vulnerabilities based on their exploitability and impact.
,CVE provides naming, OVAL describes testing procedures, and XCCDF
specifies security checklists.
3. What is the primary purpose of the Open Vulnerability and Assessment
Language (OVAL)?
A) To provide a naming system for describing security vulnerabilities
B) To provide a standardized scoring system for vulnerability severity
C) To provide a language for describing security testing procedures
D) To provide a naming system for operating systems and applications
Correct Answer: To provide a language for describing security testing
procedures
Rationale: OVAL provides a language for describing security testing
procedures and assessing the state of a system. CVE provides naming, CVSS
provides scoring, and CPE identifies platforms and devices.
4. A cybersecurity manager is implementing a layered security approach.
Which of the following principles is being applied?
A) Defense-in-depth
B) Least privilege
C) Separation of duties
D) Zero trust
Correct Answer: Defense-in-depth
Rationale: Defense-in-depth is a layered security approach where multiple,
overlapping controls are deployed so that if one layer fails, others continue
to provide protection. This strategy is a core principle of cybersecurity
management discussed in the C795 course.
,5. Which of the following is the primary purpose of a Business Continuity Plan
(BCP)?
A) To restore IT systems after a disaster
B) To ensure critical business functions can continue during and after a
disruption
C) To identify and remediate security vulnerabilities
D) To respond to active security incidents
Correct Answer: To ensure critical business functions can continue during and
after a disruption
Rationale: Business Continuity Planning ensures that an organization can
continue its critical operations during and after a disruption. Disaster
Recovery Planning focuses specifically on restoring IT systems and data.
6. A Disaster Recovery Plan (DRP) is primarily concerned with which of the
following?
A) Maintaining business operations during a crisis
B) Restoring IT systems and data after a disaster
C) Identifying and assessing organizational risks
D) Responding to and containing security incidents
Correct Answer: Restoring IT systems and data after a disaster
Rationale: A Disaster Recovery Plan (DRP) is a documented, structured
approach for restoring IT systems and data after a disaster. While BCP
focuses on business continuity, DRP specifically addresses the technical
recovery of IT assets.
, 7. An organization is testing its DRP by gathering team members in a
conference room to role-play a disaster scenario without actually shutting
down operations. What type of test is being conducted?
A) Read-through test
B) Structured walk-through
C) Simulation test
D) Parallel test
Correct Answer: Structured walk-through
Rationale: A structured walk-through, often called a table-top exercise,
involves disaster recovery team members gathering to discuss and role-play
a disaster scenario. It is a step above a read-through test but does not
involve actual system failover.
8. A disaster recovery test involves relocating personnel to an alternate
recovery site and implementing site activation procedures without shutting
down the primary site. Which type of test is this?
A) Simulation test
B) Parallel test
C) Full-interruption test
D) Structured walk-through
Correct Answer: Parallel test
Rationale: A parallel test involves relocating personnel to the alternate
recovery site and implementing activation procedures, but operations
continue at the primary site. A full-interruption test involves actually shutting
down the primary site.
