WGU D830 YCN1 TASK 2:
SECURITY ANALYSIS OF AN
ORGANIZATION'S SYSTEMS |
LATEST MOCK PRACTICE SET
140 Questions with Answers and Detailed Rationales
100 PERCENT GUARANTEED PASS
INSTANT DOWNLOAD ANSWERS INCLUDED
IMPORTANCE OF THIS DOCUMENT
This comprehensive examination preparation guide has been meticulously developed to help you succeed in the
WGU D830 YCN1 TASK 2: SECURITY ANALYSIS OF AN ORGANIZATION'S SYSTEMS | 2026 UPDATE WITH
COMPLETE SOLUTIONS.. It contains 140 carefully selected questions that reflect the most current exam content
and testing strategies. Each question is accompanied by a correct answer and a detailed rationale that explains
the underlying pathophysiology, pharmacology, or clinical reasoning.
Self-Assessment – Test your knowledge and Exam Preparation – Familiarize yourself with the
identify areas requiring further question format and content
study areas
Concept Reinforcement – Deepen your Confidence Building – Develop test-taking
understanding through strategies and reduce
evidence-based exam anxiety
rationales
Time Management – Practice answering
questions under simulated
exam conditions
Review Summary 140 Questions
Foundations - Application - WGU D830 YCN1 TASK 2 Security Analysis OF AN Organization S Systems
2026 Update WITH Complete Solutions Cybersecurity / Information Assurance Graduate
All answers with rationales
,Table of Contents
Content Area Questions Key Topics
Security Analysis AND RISK 1-24 Security, Access, Analyst, Critical, Application
Assessment
System AND Network 25-48 Security, Model, Primary, Analyst, Incident
Security Architecture
Vulnerability Management 49-72 Security, Application, Effective, Analyst, Critical
AND Penetration Testing
Security Policies Standards 73-96 Security, Analyst, Reviewing, Application, Response
AND Procedures
Incident Response AND 97-120 Security, Critical, Analyst, Control, Application
Disaster Recovery
Access Control AND Identity 121-140 Security, Application, Server, Analyst, Domain
Management
TOTAL 140 All questions include answers and detailed rationales
,Section A - Security Analysis AND RISK Assessment
Q1.
During a threat modeling exercise for a cloud-native application, the team identifies that
an attacker could exploit a misconfigured Identity and Access Management (IAM) role to
escalate privileges via a compromised CI/CD pipeline. Which threat modeling
methodology would most effectively capture the attack path from pipeline compromise to
privilege escalation, and what is the primary advantage of that approach?
A. STRIDE, because it categorizes threats B. Attack trees, because they model the
by type and ensures comprehensive attacker's goals and systematically
coverage of spoofing, tampering, enumerate attack vectors, making it easy to
repudiation, information disclosure, denial of identify the chain of events leading to
service, and elevation of privilege. privilege escalation.
C. PASTA, because it aligns business D. LINDUN, because it focuses on data flow
impact with technical analysis and provides and trust boundaries, explicitly mapping how
a seven-step process that includes data moves across trust levels and where
application decomposition and attack IAM misconfigurations can be exploited.
modeling.
Correct: B - Attack trees, because they model the attacker's goals and systematically
enumerate attack vectors, making it easy to identify the chain of events leading to
privilege escalation.
Rationale:Attack trees are specifically designed to model attacker goals and enumerate all
possible attack paths, making them ideal for visualizing the chain from CI/CD compromise to
privilege escalation. STRIDE is more of a classification scheme, PASTA is a risk-centric
methodology but not as focused on path enumeration, and LINDUN is not a standard threat
modeling methodology.
Q2.
A security analyst is evaluating a potential zero-day vulnerability in a legacy system that
cannot be patched immediately. The system processes sensitive financial data and is
internet-facing. Which risk treatment strategy is most appropriate in the short term, and
why?
A. Risk avoidance: take the system offline B. Risk mitigation: implement compensating
until a patch is available, eliminating controls such as network segmentation,
exposure but potentially disrupting business WAF rules, and enhanced monitoring to
operations. reduce the likelihood of exploitation.
C. Risk transfer: purchase a cyber insurance D. Risk acceptance: document the risk and
policy to cover potential losses, shifting the continue operations, since the vulnerability
financial impact to the insurer. is unproven and the cost of mitigation may
exceed the potential impact.
Page 3
, Section A - Security Analysis AND RISK Assessment
Correct: B - Risk mitigation: implement compensating controls such as network
segmentation, WAF rules, and enhanced monitoring to reduce the likelihood of
exploitation.
Rationale:Risk mitigation is the most appropriate because it reduces the risk to an
acceptable level without fully halting operations. Avoidance is too disruptive, transfer does not
reduce the likelihood of a breach, and acceptance is risky given the sensitive data and
internet exposure. Compensating controls are a standard approach for unpatched
vulnerabilities.
Q3.
Which of the following best describes the primary purpose of a security architecture
review in the context of a comprehensive security analysis?
A. To verify that all security patches have B. To assess the alignment of the
been applied to the organization's systems. organization's security controls with its
business objectives and risk appetite.
C. To identify the root cause of a recent D. To ensure that the organization's security
security incident and prevent recurrence. policies are compliant with industry
regulations.
Correct: B - To assess the alignment of the organization's security controls with its
business objectives and risk appetite.
Rationale:A security architecture review evaluates the overall design of security controls and
how they support business goals and risk tolerance. It is not about patch management (A),
incident post-mortem (C), or mere regulatory compliance (D), though those may be part of a
broader assessment. The review focuses on the effectiveness and alignment of the security
architecture.
Q4.
A security analyst is conducting a vulnerability scan of a network and discovers that a
critical web application is running an outdated version of Apache Struts. The analyst
verifies that the vulnerability is exploitable. What is the next best step according to a
typical vulnerability management lifecycle?
A. Immediately shut down the web B. Assign a risk score based on CVSS and
application to prevent exploitation. asset criticality, and schedule remediation
based on the organization's patch
management policy.
C. Notify law enforcement about the D. Ignore the finding because it is a false
potential breach. positive.
Correct: B - Assign a risk score based on CVSS and asset criticality, and schedule
remediation based on the organization's patch management policy.
Page 4
SECURITY ANALYSIS OF AN
ORGANIZATION'S SYSTEMS |
LATEST MOCK PRACTICE SET
140 Questions with Answers and Detailed Rationales
100 PERCENT GUARANTEED PASS
INSTANT DOWNLOAD ANSWERS INCLUDED
IMPORTANCE OF THIS DOCUMENT
This comprehensive examination preparation guide has been meticulously developed to help you succeed in the
WGU D830 YCN1 TASK 2: SECURITY ANALYSIS OF AN ORGANIZATION'S SYSTEMS | 2026 UPDATE WITH
COMPLETE SOLUTIONS.. It contains 140 carefully selected questions that reflect the most current exam content
and testing strategies. Each question is accompanied by a correct answer and a detailed rationale that explains
the underlying pathophysiology, pharmacology, or clinical reasoning.
Self-Assessment – Test your knowledge and Exam Preparation – Familiarize yourself with the
identify areas requiring further question format and content
study areas
Concept Reinforcement – Deepen your Confidence Building – Develop test-taking
understanding through strategies and reduce
evidence-based exam anxiety
rationales
Time Management – Practice answering
questions under simulated
exam conditions
Review Summary 140 Questions
Foundations - Application - WGU D830 YCN1 TASK 2 Security Analysis OF AN Organization S Systems
2026 Update WITH Complete Solutions Cybersecurity / Information Assurance Graduate
All answers with rationales
,Table of Contents
Content Area Questions Key Topics
Security Analysis AND RISK 1-24 Security, Access, Analyst, Critical, Application
Assessment
System AND Network 25-48 Security, Model, Primary, Analyst, Incident
Security Architecture
Vulnerability Management 49-72 Security, Application, Effective, Analyst, Critical
AND Penetration Testing
Security Policies Standards 73-96 Security, Analyst, Reviewing, Application, Response
AND Procedures
Incident Response AND 97-120 Security, Critical, Analyst, Control, Application
Disaster Recovery
Access Control AND Identity 121-140 Security, Application, Server, Analyst, Domain
Management
TOTAL 140 All questions include answers and detailed rationales
,Section A - Security Analysis AND RISK Assessment
Q1.
During a threat modeling exercise for a cloud-native application, the team identifies that
an attacker could exploit a misconfigured Identity and Access Management (IAM) role to
escalate privileges via a compromised CI/CD pipeline. Which threat modeling
methodology would most effectively capture the attack path from pipeline compromise to
privilege escalation, and what is the primary advantage of that approach?
A. STRIDE, because it categorizes threats B. Attack trees, because they model the
by type and ensures comprehensive attacker's goals and systematically
coverage of spoofing, tampering, enumerate attack vectors, making it easy to
repudiation, information disclosure, denial of identify the chain of events leading to
service, and elevation of privilege. privilege escalation.
C. PASTA, because it aligns business D. LINDUN, because it focuses on data flow
impact with technical analysis and provides and trust boundaries, explicitly mapping how
a seven-step process that includes data moves across trust levels and where
application decomposition and attack IAM misconfigurations can be exploited.
modeling.
Correct: B - Attack trees, because they model the attacker's goals and systematically
enumerate attack vectors, making it easy to identify the chain of events leading to
privilege escalation.
Rationale:Attack trees are specifically designed to model attacker goals and enumerate all
possible attack paths, making them ideal for visualizing the chain from CI/CD compromise to
privilege escalation. STRIDE is more of a classification scheme, PASTA is a risk-centric
methodology but not as focused on path enumeration, and LINDUN is not a standard threat
modeling methodology.
Q2.
A security analyst is evaluating a potential zero-day vulnerability in a legacy system that
cannot be patched immediately. The system processes sensitive financial data and is
internet-facing. Which risk treatment strategy is most appropriate in the short term, and
why?
A. Risk avoidance: take the system offline B. Risk mitigation: implement compensating
until a patch is available, eliminating controls such as network segmentation,
exposure but potentially disrupting business WAF rules, and enhanced monitoring to
operations. reduce the likelihood of exploitation.
C. Risk transfer: purchase a cyber insurance D. Risk acceptance: document the risk and
policy to cover potential losses, shifting the continue operations, since the vulnerability
financial impact to the insurer. is unproven and the cost of mitigation may
exceed the potential impact.
Page 3
, Section A - Security Analysis AND RISK Assessment
Correct: B - Risk mitigation: implement compensating controls such as network
segmentation, WAF rules, and enhanced monitoring to reduce the likelihood of
exploitation.
Rationale:Risk mitigation is the most appropriate because it reduces the risk to an
acceptable level without fully halting operations. Avoidance is too disruptive, transfer does not
reduce the likelihood of a breach, and acceptance is risky given the sensitive data and
internet exposure. Compensating controls are a standard approach for unpatched
vulnerabilities.
Q3.
Which of the following best describes the primary purpose of a security architecture
review in the context of a comprehensive security analysis?
A. To verify that all security patches have B. To assess the alignment of the
been applied to the organization's systems. organization's security controls with its
business objectives and risk appetite.
C. To identify the root cause of a recent D. To ensure that the organization's security
security incident and prevent recurrence. policies are compliant with industry
regulations.
Correct: B - To assess the alignment of the organization's security controls with its
business objectives and risk appetite.
Rationale:A security architecture review evaluates the overall design of security controls and
how they support business goals and risk tolerance. It is not about patch management (A),
incident post-mortem (C), or mere regulatory compliance (D), though those may be part of a
broader assessment. The review focuses on the effectiveness and alignment of the security
architecture.
Q4.
A security analyst is conducting a vulnerability scan of a network and discovers that a
critical web application is running an outdated version of Apache Struts. The analyst
verifies that the vulnerability is exploitable. What is the next best step according to a
typical vulnerability management lifecycle?
A. Immediately shut down the web B. Assign a risk score based on CVSS and
application to prevent exploitation. asset criticality, and schedule remediation
based on the organization's patch
management policy.
C. Notify law enforcement about the D. Ignore the finding because it is a false
potential breach. positive.
Correct: B - Assign a risk score based on CVSS and asset criticality, and schedule
remediation based on the organization's patch management policy.
Page 4
