WGU C795 OA Exam 2026 Questions
and Answers
Common Vulnerabilities and Exposures (CVE) - Correct answer-Provides a
naming system for describing security vulnerabilities.
Common Vulnerability Scoring System (CVSS) - Correct answer-provides a
standardized scoring system for describing the severity of security vulnerabilities.
Common Configuration Enumeration (CCE) - Correct answer-provides a naming
system for system configuration issues.
Common Platform Enumeration (CPE) - Correct answer-provides a naming system
for operating systems, applications, and devices.
Extensible Configuration Checklist Description Format (XCCDF) - Correct
answer-provides a language for specifying security checklists.
Open Vulnerability and Assessment Language (OVAL) - Correct answer-provides a
language for describing security testing procedures.
Vulnerability scans automatically - Correct answer-probe systems, applications,
and networks, looking for weaknesses that may be exploited by an attacker.
©COPYRIGHT 2025 ALL RIGHTS RESERVED 1
, differential backup - Correct answer-A type of partial backup that involves copying
all changes made since the last full backup. Thus, each new differential backup file
contains the cumulative effects of all activity since the last full backup.
Electronic Vaulting - Correct answer-A storage scenario in which database backups
are transferred to a remote site in a bulk transfer fashion. The remote location may
be a dedicated alternative recovery site (such as a hot site) or simply an offsite
location managed within the company or by a contractor for the purpose of
maintaining backup data
full backup - Correct answer-A complete copy of data contained on the protected
device on the backup media.
Full-interruption tests - Correct answer-operate like parallel tests, but they involve
actually shutting down operations at the primary site and shifting them to the
recovery site.
Parallel tests - Correct answer-represent the next level in testing and involve
relocating personnel to the alternate recovery site and implementing site activation
procedures.
Simulation tests - Correct answer-are similar to the structured walk-throughs. In
simulation tests, disaster recovery team members are presented with a scenario and
asked to develop an appropriate response without shutting down operations.
©COPYRIGHT 2025 ALL RIGHTS RESERVED 2
and Answers
Common Vulnerabilities and Exposures (CVE) - Correct answer-Provides a
naming system for describing security vulnerabilities.
Common Vulnerability Scoring System (CVSS) - Correct answer-provides a
standardized scoring system for describing the severity of security vulnerabilities.
Common Configuration Enumeration (CCE) - Correct answer-provides a naming
system for system configuration issues.
Common Platform Enumeration (CPE) - Correct answer-provides a naming system
for operating systems, applications, and devices.
Extensible Configuration Checklist Description Format (XCCDF) - Correct
answer-provides a language for specifying security checklists.
Open Vulnerability and Assessment Language (OVAL) - Correct answer-provides a
language for describing security testing procedures.
Vulnerability scans automatically - Correct answer-probe systems, applications,
and networks, looking for weaknesses that may be exploited by an attacker.
©COPYRIGHT 2025 ALL RIGHTS RESERVED 1
, differential backup - Correct answer-A type of partial backup that involves copying
all changes made since the last full backup. Thus, each new differential backup file
contains the cumulative effects of all activity since the last full backup.
Electronic Vaulting - Correct answer-A storage scenario in which database backups
are transferred to a remote site in a bulk transfer fashion. The remote location may
be a dedicated alternative recovery site (such as a hot site) or simply an offsite
location managed within the company or by a contractor for the purpose of
maintaining backup data
full backup - Correct answer-A complete copy of data contained on the protected
device on the backup media.
Full-interruption tests - Correct answer-operate like parallel tests, but they involve
actually shutting down operations at the primary site and shifting them to the
recovery site.
Parallel tests - Correct answer-represent the next level in testing and involve
relocating personnel to the alternate recovery site and implementing site activation
procedures.
Simulation tests - Correct answer-are similar to the structured walk-throughs. In
simulation tests, disaster recovery team members are presented with a scenario and
asked to develop an appropriate response without shutting down operations.
©COPYRIGHT 2025 ALL RIGHTS RESERVED 2
