WGU D483 EXAM SCRIPT PRACTICE
SOLUTION BUNDLED EXAMS 2026 EXAM
CLEARED.
◍ CVSS (Common Vulnerability Scoring System) Answer:
Framework for rating severity of vulnerabilities (0â€"10).
◍ NVD (National Vulnerability Database) Answer: US gov database
of CVEs with CVSS scores.
◍ Exploit Answer: Code or technique used to take advantage of a
vulnerability.
◍ Zero-Day Answer: A vulnerability not yet known to the vendor or
public.
◍ SIEM (Security Information and Event Management) Answer:
Centralized system that aggregates and analyzes logs from multiple
sources.
◍ Correlation Rule Answer: Logic in a SIEM to detect suspicious
patterns (e.g., multiple failed logins + privilege escalation).
, ◍ UEBA (User and Entity Behavior Analytics) Answer: Detects
anomalies by analyzing baseline behavior of users/devices.
◍ Indicator of Compromise (IoC) Answer: Evidence of malicious
activity (e.g., suspicious IP, hash, domain).
◍ Indicator of Attack (IoA) Answer: Signs of active attack attempts
(e.g., privilege escalation command, lateral movement).
◍ Containment Answer: Stopping the spread of an attack without
fully eliminating it.
◍ Eradication Answer: Removing the root cause of an incident (e.g.,
deleting malware).
◍ Recovery Answer: Restoring systems back into production safely.
◍ Lessons Learned Answer: Post-incident review to improve
processes.
◍ Tabletop Exercise Answer: Simulated incident walkthrough
without affecting production systems.
◍ SOX (Sarbanes-Oxley Act) Answer: US regulation enforcing
financial data integrity and reporting security.
SOLUTION BUNDLED EXAMS 2026 EXAM
CLEARED.
◍ CVSS (Common Vulnerability Scoring System) Answer:
Framework for rating severity of vulnerabilities (0â€"10).
◍ NVD (National Vulnerability Database) Answer: US gov database
of CVEs with CVSS scores.
◍ Exploit Answer: Code or technique used to take advantage of a
vulnerability.
◍ Zero-Day Answer: A vulnerability not yet known to the vendor or
public.
◍ SIEM (Security Information and Event Management) Answer:
Centralized system that aggregates and analyzes logs from multiple
sources.
◍ Correlation Rule Answer: Logic in a SIEM to detect suspicious
patterns (e.g., multiple failed logins + privilege escalation).
, ◍ UEBA (User and Entity Behavior Analytics) Answer: Detects
anomalies by analyzing baseline behavior of users/devices.
◍ Indicator of Compromise (IoC) Answer: Evidence of malicious
activity (e.g., suspicious IP, hash, domain).
◍ Indicator of Attack (IoA) Answer: Signs of active attack attempts
(e.g., privilege escalation command, lateral movement).
◍ Containment Answer: Stopping the spread of an attack without
fully eliminating it.
◍ Eradication Answer: Removing the root cause of an incident (e.g.,
deleting malware).
◍ Recovery Answer: Restoring systems back into production safely.
◍ Lessons Learned Answer: Post-incident review to improve
processes.
◍ Tabletop Exercise Answer: Simulated incident walkthrough
without affecting production systems.
◍ SOX (Sarbanes-Oxley Act) Answer: US regulation enforcing
financial data integrity and reporting security.
