WGU C795 OA Questions and Answers
Already Graded A
Common Vulnerabilities and Exposures (CVE) Correct Answer-Provides a naming system for
describing security vulnerabilities.
Common Vulnerability Scoring System (CVSS
...
WGU C795 OA Questions and Answers
Already Graded A
Common Vulnerabilities and Exposures (CVE) Correct Answer-Provides a naming system for
describing security vulnerabilities.
Common Vulnerability Scoring System (CVSS) Correct Answer-provides a standardized scoring
system for describing the severity of security vulnerabilities.
Common Configuration Enumeration (CCE) Correct Answer-provides a naming system for
system configuration issues.
Common Platform Enumeration (CPE) Correct Answer-provides a naming system for operating
systems, applications, and devices.
Extensible Configuration Checklist Description Format (XCCDF) Correct Answer-provides a
language for specifying security checklists.
Open Vulnerability and Assessment Language (OVAL) Correct Answer-provides a language for
describing security testing procedures.
Vulnerability scans automatically Correct Answer-probe systems, applications, and networks,
looking for weaknesses that may be exploited by an attacker.
differential backup Correct Answer-A type of partial backup that involves copying all changes
made since the last full backup. Thus, each new differential backup file contains the cumulative
effects of all activity since the last full backup.
Electronic Vaulting Correct Answer-A storage scenario in which database backups are
transferred to a remote site in a bulk transfer fashion. The remote location may be a dedicated
alternative recovery site (such as a hot site) or simply an offsite location managed within the
company or by a contractor for the purpose of maintaining backup data
full backup Correct Answer-A complete copy of data contained on the protected device on the
backup media.
Full-interruption tests Correct Answer-operate like parallel tests, but they involve actually
shutting down operations at the primary site and shifting them to the recovery site.
Parallel tests Correct Answer-represent the next level in testing and involve relocating personnel
to the alternate recovery site and implementing site activation procedures.
Simulation tests Correct Answer-are similar to the structured walk-throughs. In simulation tests,
disaster recovery team members are presented with a scenario and asked to develop an
appropriate response without shutting down operations.
Structured walk-through Correct Answer-takes testing one step further. In this type of test, often
referred to as a table-top exercise, members of the disaster recovery team gather in a large
conference room and role-play a disaster scenario.
Read-through test Correct Answer--simplest type of DRP test
-copies of the DRP is distributed to members of the disaster recovery team (DRT) for review
-ensures key personnel are aware of their responsibilities and have knowledge refreshed
-provides a chance for obsolete info to be updated
-helps update personnel lists
T&A training and awareness Correct Answer-o Orientation training for all new employees
o Initial training for employees taking on a new disaster recovery role for the first time
o Detailed refresher training for disaster recovery team members
Brief awareness refreshers for all other employees
[Show More]