WGU D483 COMPREHENSIVE SCRIPT
SOLVED QUESTIONS AND ANSWERS
GRADED A+
◉ False Positive
Answer: Legitimate activity incorrectly identified as malicious.
◉ False Negative
Answer: Malicious activity that is not detected.
◉ What is MOST important for effective continuous monitoring
besides technology?
Answer: Trained personnel and defined escalation procedures.
◉ SOAR
Answer: Security Orchestration, Automation, and Response;
coordinates tools and automates security workflows.
◉ What are the three primary SOAR focus areas?
Answer: Threat and vulnerability management, incident response,
and security operations automation.
,◉ How does SOAR differ from SIEM?
Answer: SIEM collects and analyzes events; SOAR coordinates and
automates the response.
◉ A SIEM generates an alert, then another platform blocks the IP
and opens a ticket. Which platform performed the response?
Answer: SOAR.
◉ Provisioning
Answer: The deployment and setup of organizational hardware,
software, devices, and other assets.
◉ What should occur when an asset is added or removed?
Answer: The asset inventory should be updated.
◉ Asset Inventory
Answer: A maintained record of organizational assets.
◉ What is the BEST reason to maintain an accurate asset
inventory?
Answer: Assets cannot be properly secured, monitored, or
managed if the organization does not know they exist.
◉ Asset Management Life Cycle
Answer: Plan, request, procure, receive, manage, and retire.
, ◉ Secure Provisioning
Answer: Deploying hardware, software, or devices in a secure,
policy-compliant configuration.
◉ Why should vendor default settings be changed before
deployment?
Answer: Defaults may include known accounts, passwords, and
insecure configurations.
◉ System Hardening
Answer: Reducing attack surface by removing unnecessary
services, changing defaults, applying patches, and enforcing
secure settings.
◉ What should be updated whenever a new asset is deployed?
Answer: The asset inventory.
◉ What guides configuration management?
Answer: Policies, standards, baselines, and procedures.
◉ How does automation help secure provisioning?
Answer: It improves consistency and reduces deployment time
and manual errors.
SOLVED QUESTIONS AND ANSWERS
GRADED A+
◉ False Positive
Answer: Legitimate activity incorrectly identified as malicious.
◉ False Negative
Answer: Malicious activity that is not detected.
◉ What is MOST important for effective continuous monitoring
besides technology?
Answer: Trained personnel and defined escalation procedures.
◉ SOAR
Answer: Security Orchestration, Automation, and Response;
coordinates tools and automates security workflows.
◉ What are the three primary SOAR focus areas?
Answer: Threat and vulnerability management, incident response,
and security operations automation.
,◉ How does SOAR differ from SIEM?
Answer: SIEM collects and analyzes events; SOAR coordinates and
automates the response.
◉ A SIEM generates an alert, then another platform blocks the IP
and opens a ticket. Which platform performed the response?
Answer: SOAR.
◉ Provisioning
Answer: The deployment and setup of organizational hardware,
software, devices, and other assets.
◉ What should occur when an asset is added or removed?
Answer: The asset inventory should be updated.
◉ Asset Inventory
Answer: A maintained record of organizational assets.
◉ What is the BEST reason to maintain an accurate asset
inventory?
Answer: Assets cannot be properly secured, monitored, or
managed if the organization does not know they exist.
◉ Asset Management Life Cycle
Answer: Plan, request, procure, receive, manage, and retire.
, ◉ Secure Provisioning
Answer: Deploying hardware, software, or devices in a secure,
policy-compliant configuration.
◉ Why should vendor default settings be changed before
deployment?
Answer: Defaults may include known accounts, passwords, and
insecure configurations.
◉ System Hardening
Answer: Reducing attack surface by removing unnecessary
services, changing defaults, applying patches, and enforcing
secure settings.
◉ What should be updated whenever a new asset is deployed?
Answer: The asset inventory.
◉ What guides configuration management?
Answer: Policies, standards, baselines, and procedures.
◉ How does automation help secure provisioning?
Answer: It improves consistency and reduces deployment time
and manual errors.
