WGU D488 Actual Exam Study Questions
with Verified Answers (Expert Graded A+)
| Latest Edition
1. PIA - ANSWER Privacy Impact Assessment: Used to ensure PII is stored
safely, it is used before and after a new data flow of PII is changed. This will
provide Data Flow Mapping and Risk Identification.
2. BCP - ANSWER Business Continuity Plan: Continuity means a unbroken
and consistent flow of connection. This is done in advance to analyze which
business operations could be disrupted and how that would affect profit.
3. What is Poly1305? - ANSWER A high-speed authenticator (MAC) that
uses a one-time key and a polynomial evaluation function to provide strong,
fast message authentication (frequently paired with ChaCha20).
4. What is Cipher Block Chaining (CBC) mode? - ANSWER A block cipher
mode where each plaintext block is XORed with the previous ciphertext
block before being encrypted. Requires an Initialization Vector (IV) and
sequential processing (cannot be parallelized during encryption).
5. What is the Electronic Codebook (ECB) mode? - ANSWER The simplest
block cipher mode that encrypts each block independently with the same
key. It is insecure for large datasets because identical plaintext blocks
produce identical ciphertext blocks, revealing patterns (e.g., the ECB
Penguin).
6. What is Counter (CTR) mode? - ANSWER A block cipher mode that turns
a block cipher into a stream cipher by encrypting an incrementing counter
, value. It allows parallel processing and random access for fast encryption
and decryption.
7. Identity and Access Management - ANSWER A framework of policies and
technologies used to manage digital identities and control user access to a
resource within an organization
8. Password Policy - ANSWER Rules set to enforce strong password creation
and management, including requirements for length, history, complexity,
and more.
9. Privileged Access Management - ANSWER A security practice that
monitors and controls access to critical systems and data by users with
elevated access (e.g. admin accounts)
10.Password Complexity - ANSWER A set of rules designed to make a
password stronger and more difficult to crack or guess.
11.Kerberos - ANSWER A network authentication protocol that uses
symmetric key cryptography to securely authenticate users and services over
the network.
12.Mandatory Access Control (MAC) - ANSWER A security model where
access to resources is determined by system-enforced policies. Access is
granted based on labels or classifications. (e.g. "Top Secret")
13.Attribute-Based Access Control (ABAC) - ANSWER A security model
where access to resources is determined by attributes such as user role,
location, time of access, etc...
with Verified Answers (Expert Graded A+)
| Latest Edition
1. PIA - ANSWER Privacy Impact Assessment: Used to ensure PII is stored
safely, it is used before and after a new data flow of PII is changed. This will
provide Data Flow Mapping and Risk Identification.
2. BCP - ANSWER Business Continuity Plan: Continuity means a unbroken
and consistent flow of connection. This is done in advance to analyze which
business operations could be disrupted and how that would affect profit.
3. What is Poly1305? - ANSWER A high-speed authenticator (MAC) that
uses a one-time key and a polynomial evaluation function to provide strong,
fast message authentication (frequently paired with ChaCha20).
4. What is Cipher Block Chaining (CBC) mode? - ANSWER A block cipher
mode where each plaintext block is XORed with the previous ciphertext
block before being encrypted. Requires an Initialization Vector (IV) and
sequential processing (cannot be parallelized during encryption).
5. What is the Electronic Codebook (ECB) mode? - ANSWER The simplest
block cipher mode that encrypts each block independently with the same
key. It is insecure for large datasets because identical plaintext blocks
produce identical ciphertext blocks, revealing patterns (e.g., the ECB
Penguin).
6. What is Counter (CTR) mode? - ANSWER A block cipher mode that turns
a block cipher into a stream cipher by encrypting an incrementing counter
, value. It allows parallel processing and random access for fast encryption
and decryption.
7. Identity and Access Management - ANSWER A framework of policies and
technologies used to manage digital identities and control user access to a
resource within an organization
8. Password Policy - ANSWER Rules set to enforce strong password creation
and management, including requirements for length, history, complexity,
and more.
9. Privileged Access Management - ANSWER A security practice that
monitors and controls access to critical systems and data by users with
elevated access (e.g. admin accounts)
10.Password Complexity - ANSWER A set of rules designed to make a
password stronger and more difficult to crack or guess.
11.Kerberos - ANSWER A network authentication protocol that uses
symmetric key cryptography to securely authenticate users and services over
the network.
12.Mandatory Access Control (MAC) - ANSWER A security model where
access to resources is determined by system-enforced policies. Access is
granted based on labels or classifications. (e.g. "Top Secret")
13.Attribute-Based Access Control (ABAC) - ANSWER A security model
where access to resources is determined by attributes such as user role,
location, time of access, etc...
