- Study guides, Class notes & Summaries

A software company suspects that employees have set up automatic corporate email forwarding to their personal inboxes against company policy. The company hires forensic investigators to identify the employees violating policy, with the intention of issuing warnings to them. Which type of cybercrime investigation approach is this company taking? Civil Criminal Administrative Punitive Correct Answer- Administrative Which model or legislation applies a holistic approach toward any criminal ...

-

20 pages

Written in 2023/2024

Grade A+

Lanari

A combined mail server and calendaring server environment contains no secure sockets layer (SSL) certificate. Which security principle of the CIA triad is affected by the lack of an SSL certificate? A Confidentiality B Integrity C Authentication D Availability Correct Answer-A A company does not have a disaster recovery plan (DRP) and suffers a multiday power outage. Which provisioning should the company perform to provide stable power for a long period of time? A Purchase generators ...

-

83 pages

Written in 2023/2024

Grade A+

Lanari

What is a step for constructing a threat model for a project when using practical risk analysis? A Align your business goals B Apply engineering methods C Estimate probability of project time D Make a list of what you are trying to protect - ANSWER-D Which cyber threats are typically surgical by nature, have highly specific targeting, and are technologically sophisticated? A Tactical attacks B Criminal attacks C Strategic attacks D User-specific attacks - ANSWER-A Which type of cybera...

-

152 pages

Written in 2025/2026

Grade A+

elitenurse

WGU Master's Course C706 - Secure Software Design UPDATED ACTUAL Questions and CORRECT Answers

-

68 pages

Written in 2025/2026

Grade A+

STANFORDGRADESS

Measures to maintain data integrity may include a checksum and access control. A False B True - B ________ is the assurance that the systems responsible for delivering, storing, and processing information are accessible when required by authorized users. A Integrity B Confidentiality C Availability D Authenticity - C Measures to maintain data availability do not include redundant systems' disk array and clustered machines, antivirus software to stop worms from destroying networks, ...

-

91 pages

Written in 2024/2025

Grade A+

TUTORJOEL

Which of the following techniques is used by an attacker to perform automated searches on the target website and collect specified information, such as employee names and email addresses? A Web spidering B Website mirroring C Monitoring of web updates D Website link extraction - A Jude, an attacker, has targeted an organization's communication network. While conducting initial footprinting, he used a Google dork to find the VoIP login portals of the organization. What is the Google ...

-

26 pages

Written in 2024/2025

Grade A+

TUTORJOEL

________ is a publicly available and free list or dictionary of standardized identifiers for common software vulnerabilities and exposures. A CVE B CSV C CVVS D CVSS - A ________ is a cloud-based service that gives you immediate, global visibility into where your IT systems might be vulnerable to the latest internet threats and how to protect them. A Nikto B Nessus Professional C OpenVAS D Qualys VM - D ________ is an assessment solution for identifying vulnerabilities, configuratio...

-

60 pages

Written in 2024/2025

Grade A+

TUTORJOEL

A software company suspects that employees have set up automatic corporate email forwarding to their personal inboxes against company policy. The company hires forensic investigators to identify the employees violating policy, with the intention of issuing warnings to them. Which type of cybercrime investigation approach is this company taking? Civil Criminal Administrative Punitive Correct Answer- Administrative Which model or legislation applies a holistic approach toward any criminal ...

-

20 pages

Written in 2023/2024

Grade A+

Lanari

A combined mail server and calendaring server environment contains no secure sockets layer (SSL) certificate. Which security principle of the CIA triad is affected by the lack of an SSL certificate? A Confidentiality B Integrity C Authentication D Availability Correct Answer-A A company does not have a disaster recovery plan (DRP) and suffers a multiday power outage. Which provisioning should the company perform to provide stable power for a long period of time? A Purchase generators ...

-

83 pages

Written in 2023/2024

Grade A+

Lanari

A software company suspects that employees have set up automatic corporate email forwarding to their personal inboxes against company policy. The company hires forensic investigators to identify the employees violating policy, with the intention of issuing warnings to them. Which type of cybercrime investigation approach is this company taking? Civil Criminal Administrative Punitive Correct Answer- Administrative Which model or legislation applies a holistic approach toward any criminal ...

-

20 pages

Written in 2023/2024

Grade A+

Lanari

Which due diligence activity for supply chain security should occur in the initiation phase of the software acquisition life cycle? A Developing a request for proposal (RFP) that includes supply chain security risk management B Lessening the risk of disseminating information during disposal C Facilitating knowledge transfer between suppliers D Mitigating supply chain security risk by providing user guidance Correct Answer- A Which due diligence activity for supply chain security investigat...

-

65 pages

Written in 2023/2024

Grade A+

Lanari