WGU C845 VUN1 TASK 3 EVALUATING AND
DEFENDING DATA SECURITY AND SYSTEM
OPERATIONS REVIEW GUIDE
◉ A system administrator is reviewing practices designed to directly
remediate software vulnerabilities. What practice is the system
administrator reviewing? Answer; Patching
◉ A system administrator is assessing the broader context of the
company's IT security posture in light of recent expansions in both
workstations and servers. This assessment includes understanding
the impact of various external and internal factors on the
organization's IT infrastructure. Aside from the organization's IT
infrastructure itself, what are two other significant factors that
should be considered in this assessment? (Select the two best
options.) Answer; External threat landscape
Regulatory/compliance environment
◉ An organization has decided to implement a BYOD policy.
Considering this change, which of the following measures would be
the MOST effective way to secure and manage employee devices?
Answer; Using MDM solutions to centrally control employees'
mobile devices
,◉ A financial services company is decommissioning many servers
that contain highly sensitive financial information. The company is
committed to environmental protection and sustainability and seeks
to minimize waste wherever possible. What is the company's BEST
course of action when decommissioning its servers? Answer;
Removing and destroying hard disk drives and solid state drives,
then reselling or recycling the servers
◉ A company has added several new assets and software to its
system and is meeting to review its risk matrix. It wants to ensure
risk management efforts focus on vulnerabilities most likely
impacting its operations significantly. What is this commonly
referred to as? Answer; Prioritization
◉ After experiencing a catastrophic server failure in the
headquarters building, what can the company use to monitor
notable events such as port failure, chassis overheating, power
failure, or excessive CPU utilization? Answer; SNMP trap
◉ A small software company's development team has created an
application that handles sensitive user data using a static code
analysis tool to support their development efforts. How does static
code analysis support software application development processes?
Answer; To identify potential security vulnerabilities in the
application's source code
, ◉ As a digital forensics analyst, you've been tasked with
investigating a suspected data breach in your organization. You need
to collect evidence from various compromised digital devices.
Proper procedures are crucial to ensure that the evidence is
admissible in court. Which step is MOST critical when beginning the
collection of digital evidence to ensure its admissibility in court?
Answer; Documenting the scene and creating a chain of custody
form
◉ A cyber architect explores various automated methods for
managing access for newly hired employees or employees
transitioning into new roles. Which of the following benefits best
represents the capabilities of automated user provisioning systems?
(Select the two best options.) Answer; It can create, modify, or delete
individual user accounts.
It can create, modify, or delete individual users' access rights across
IT systems.
◉ A software technician enhances the organization's network by
implementing various techniques to protect the company's web
traffic. Which centralized web filtering technique uses proxy servers
to leverage continually updated databases that scores websites
based on their observed behavior and history? Answer; Reputation-
based filtering
◉ A financial institution plans to repurpose several older servers to
expand the resources available in its test environment. The servers
DEFENDING DATA SECURITY AND SYSTEM
OPERATIONS REVIEW GUIDE
◉ A system administrator is reviewing practices designed to directly
remediate software vulnerabilities. What practice is the system
administrator reviewing? Answer; Patching
◉ A system administrator is assessing the broader context of the
company's IT security posture in light of recent expansions in both
workstations and servers. This assessment includes understanding
the impact of various external and internal factors on the
organization's IT infrastructure. Aside from the organization's IT
infrastructure itself, what are two other significant factors that
should be considered in this assessment? (Select the two best
options.) Answer; External threat landscape
Regulatory/compliance environment
◉ An organization has decided to implement a BYOD policy.
Considering this change, which of the following measures would be
the MOST effective way to secure and manage employee devices?
Answer; Using MDM solutions to centrally control employees'
mobile devices
,◉ A financial services company is decommissioning many servers
that contain highly sensitive financial information. The company is
committed to environmental protection and sustainability and seeks
to minimize waste wherever possible. What is the company's BEST
course of action when decommissioning its servers? Answer;
Removing and destroying hard disk drives and solid state drives,
then reselling or recycling the servers
◉ A company has added several new assets and software to its
system and is meeting to review its risk matrix. It wants to ensure
risk management efforts focus on vulnerabilities most likely
impacting its operations significantly. What is this commonly
referred to as? Answer; Prioritization
◉ After experiencing a catastrophic server failure in the
headquarters building, what can the company use to monitor
notable events such as port failure, chassis overheating, power
failure, or excessive CPU utilization? Answer; SNMP trap
◉ A small software company's development team has created an
application that handles sensitive user data using a static code
analysis tool to support their development efforts. How does static
code analysis support software application development processes?
Answer; To identify potential security vulnerabilities in the
application's source code
, ◉ As a digital forensics analyst, you've been tasked with
investigating a suspected data breach in your organization. You need
to collect evidence from various compromised digital devices.
Proper procedures are crucial to ensure that the evidence is
admissible in court. Which step is MOST critical when beginning the
collection of digital evidence to ensure its admissibility in court?
Answer; Documenting the scene and creating a chain of custody
form
◉ A cyber architect explores various automated methods for
managing access for newly hired employees or employees
transitioning into new roles. Which of the following benefits best
represents the capabilities of automated user provisioning systems?
(Select the two best options.) Answer; It can create, modify, or delete
individual user accounts.
It can create, modify, or delete individual users' access rights across
IT systems.
◉ A software technician enhances the organization's network by
implementing various techniques to protect the company's web
traffic. Which centralized web filtering technique uses proxy servers
to leverage continually updated databases that scores websites
based on their observed behavior and history? Answer; Reputation-
based filtering
◉ A financial institution plans to repurpose several older servers to
expand the resources available in its test environment. The servers
