WGUl D488l Objectivel Assessmentl Guidel (Latestl 2025/l 2026l Update)l Cybersecurityl Architecturel andl Engineering|l Questionsl &l Answers|l Gradel A|l 100%l Correctl (Verifiedl Solutions)-l Galen
Q:l Sourcel Codel Escrow
Answer:
Identifiesl thatl al copyl ofl vendorl developedl sourcel codel isl providedl tol al trustedl thirdl partyl inl casel thel vendorl ceasesl tol bel inl business
Q:l Supportl Availability
Answer:
Definesl thel stepsl takenl tol verifyl thel typel andl levell ofl supportl tol bel providedl byl thel vendorl inl supportl ofl theirl productl orl service.l Oftenl definedl byl anl SLA
Q:l meetingl clientl requirements
Answer:
Describesl thel formall measuresl takenl tol validatel thatl thel vendor'sl deliveredl servicel orl productl offeringl alignsl tol establishedl requirements
Q:l Incidentl reportingl Requirements
Answer:
Legall contractsl shouldl clearlyl identifyl thel requirementl forl vendorsl tol providel timelyl notificationl regardingl anyl securityl incidents
Q:l Supplyl Chain
Answer:
Describesl alll ofl thel suppliers,l vendors,l andl partnersl neededl tol deliverl al finall product.
Q:l Cloudl Securityl Alliancel (CSA)l Securityl Trustl andl Riskl (STAR)
- / 4
Answer:
Programl thatl demonstratesl al cloudl servicel providersl adherencel tol keyl principlesl ofl transparency,l auditing,l andl bestl practicel securityl operations
Q:l Systeml andl Organizationl Controlsl (SOC)
Answer:
Usesl standardsl establishedl byl thel Americanl institutel ofl Certifiedl Publicl Accountantsl (AICPA)l tol evaluatel thel policies,l processes,l andl proceduresl inl placel andl designedl tol protectl technologyl andl financiall operations.
Q:l ISOl 27000l Series
Answer:
Onel ofl thel mostl widelyl referencedl andl oftenl discussedl securityl models •l Frameworkl forl informationl securityl thatl statesl organizationall securityl policyl isl neededl tol providel managementl directionl andl support •l Providesl al commonl basisl forl developingl organizationall security
Q:l CMMCl (Cybersecurityl Maturityl Modell Certification)
Answer:
Al setl ofl cybersecurityl standardsl developedl byl thel Unitedl Statesl Departmentl ofl Defensel andl designedl tol helpl fortifyl thel DoDl supplyl chainl byl requiringl suppliersl tol demonstratel thatl theyl havel maturel cybersecurityl capabilities
Q:l Protectedl Healthl Informationl (PHI)
Answer:
Anyl informationl aboutl healthl status,l provisionl ofl healthl care,l orl paymentl forl healthl carel thatl canl bel linkedl tol anl individual.l Thisl isl interpretedl ratherl broadlyl andl includesl anyl partl ofl al patient'sl medicall recordl orl paymentl history.
Q:l Personall Identifiablel Financiall Informationl (PIFI)
Answer:
Personall informationl aboutl al consumerl providedl tol al financiall institutionl thatl canl includel accountl number,l credit/debitl cardl number,l name,l sociall securityl numberl andl otherl information.
Q:l Intellectuall Propertyl (IP)
Answer: 2 / 4
Al legall terml forl intangiblel propertyl suchl asl "creationsl ofl thel mind"l suchl asl inventionsl andl designsl thatl arel usedl inl al commerciall setting.l Intellectuall propertyl isl protectedl byl law.
Q:l Datal Classificationl Levels
Answer:
Publicl -l Disclosurel wouldl notl causel al negativel impactl tol thel organization.Sensitivel -l Disclosurel wouldl causel harml tol thel organization.l Datal inl thisl classificationl requiresl speciall considerationl andl welll craftedl protectionsl tol ensurel itsl confidentiality,l integrityl andl availability.Confidentiall -l Disclosurel wouldl causel considerablel harml tol thel organization
Q:l Datal Retention
Answer:
Howl longl datal mustl bel keptl andl howl itl isl tol bel secured.l Definesl minimuml andl maximuml amountl ofl timel tol bel kept.
Q:l Datal Destruction
Answer:
Describesl thel legallyl compliantl meansl byl whichl datal isl removedl madel inaccessible
Q:l Sanitization
Answer:
Al generall terml describingl thel meansl byl whichl informationl isl removedl froml medial andl includesl methodsl suchl asl clear,l purge,l andl damage
Q:l Cryptol Erase
Answer:
Refersl tol thel sanitizationl ofl thel keyl usedl tol performl decryptionl ofl data,l makingl recoveryl ofl thel datal effectivelyl impossible.l Thisl isl particularlyl importantl whenl consideringl cloudl platformsl wherel datal isl storedl onl al devicel inaccessiblel tol thel owner
Q:l Clear
Answer:
Al typel ofl sanitizationl thatl involvesl multiplel block-levell overwritel cycles.
Q:l Purge
- / 4
Answer:
Al typel ofl sanitizationl thatl providesl effectivel protectionl froml alll recoveryl techniques,l includingl clean-rooml method
Q:l Damage
Answer:
Physicallyl breakingl al storagel devicel tol renderl itl uselessl orl inoperable
Q:l Datal sovereigntyl (Geographicl considerations)
Answer:
Identifiesl thatl thel lawsl governingl thel countryl inl whichl datal isl storedl havel controll overl thel datal andl describesl thel legall dynamicsl ofl datal collectionl andl usel inl al globall economy.
Q:l Attestationl ofl Compliancel (AOC)
Answer:
Describesl thel setl ofl policies,l contracts,l andl standardsl identifiedl asl essentiall inl thel agreementl betweenl twol partiesl Itl essentiallyl definesl howl thel relationsl willl bel governedl betweenl twol parties.
Q:l NIST
Answer:
Al nonl regulatoryl agencyl inl thel Unitedl Statesl thatl establishesl standardsl andl bestl practicesl acrossl thel entirel sciencel andl technologyl field.
Q:l Internationall Organizationl forl Standardizationl (ISO)
Answer:
Managesl andl publishesl al cybersecurityl frameworkl referredl tol asl ISOl 27Kl whichl includesl overl al dozenl standardsl includingl 27002l whichl definesl securityl controls
Q:l GDPRl (Generall Datal Protectionl Regulation)
Answer:
Provisionsl andl requirementsl protectingl thel personall datal ofl Europeanl Unionl (EU)l citizens.l Transfersl ofl personall datal outsidel thel EUl Singlel Marketl arel restrictedl unlessl protectedl byl like-for-likel regulations,l suchl asl thel US'sl Privacyl Shieldl requirements.
Q:l Sevenl Principlesl ofl GDPR
- / 4