Discuss WGU Cybersecurity Architecture And Engineering (D488) Exam Topic 4 Question 12

While undergoing a security audit, it is determined that an organization has several backup repositories hosted in the cloud without any level of protection.

Which action should be taken to protect the backup repositories first?

AAudit access logs

BRun a vulnerability scan

CRestrict access to the backups

DDisable the backup repositories

Suggested Answer: C

The correct answer is C --- Restrict access to the backups.

According to WGU Cybersecurity Architecture and Engineering (KFO1 / D488), the first step in protecting sensitive data such as cloud backups is enforcing access controls to limit who can access the data. Restricting access immediately mitigates the risk of unauthorized exposure or tampering.

Auditing access logs (A) provides insight but does not actively protect. Running vulnerability scans (B) identifies issues but does not protect immediately. Disabling repositories (D) is not practical for maintaining backup availability.

Reference Extract from Study Guide:

'Access control is the first line of defense for sensitive data repositories, ensuring that only authorized users can access backup data.'

--- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Data Security and Access Control

=============================================

Get Premium Cybersecurity Architecture and Engineering (D488) Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

22 comments · newest first

Paul 2 days ago

Access logs are useful, but not the top priority here.

Shannan 7 days ago

Surprised they didn't have protection in place already!

Amber 12 days ago

I think running a vulnerability scan is more important.

Ruthann 17 days ago

Definitely should restrict access to the backups first.

Carma 23 days ago

Disabling the backups seems too extreme, right?

Kara 28 days ago

Agree, restricting access is a no-brainer here.

Tatum 1 month ago

Surprised they didn't have any protection in place at all!

Adrianna 1 month ago

I think running a vulnerability scan is more important!

Youlanda 1 month ago

Definitely need to restrict access to the backups first.

Malcom 2 months ago

Disabling the backups seems extreme, though.

Nadine 2 months ago

Agree, access restrictions are a must for cloud backups.

Tanesha 2 months ago

Surprised they had unprotected backups in the first place!

Geoffrey 2 months ago

I think running a vulnerability scan is more important!

Tambra 2 months ago

Definitely need to restrict access to the backups first.

Chandra 2 months ago

I’m leaning towards auditing access logs, but I wonder if that’s too late if the backups are already exposed.

Francisca 3 months ago

Running a vulnerability scan could be important too, but I feel like we should secure access first before scanning.

Adelina 3 months ago

I remember a practice question where we had to prioritize actions during a security audit, and restricting access was key.

Ciara 3 months ago

I think restricting access to the backups makes the most sense, but I’m not entirely sure if that’s the first step we should take.

Adela 3 months ago

Disabling the backup repositories seems too extreme; I don’t think that’s the right move unless there’s a major threat.

Leota 3 months ago

I feel like running a vulnerability scan could be important too, but it might be better to secure access first.

Terrilyn 4 months ago

I remember a practice question where we had to prioritize actions during a security audit, and restricting access was always emphasized.

Julio 5 months ago

I think restricting access to the backups is the most logical first step, but I’m not entirely sure if that’s enough on its own.

WGU Cybersecurity Architecture and Engineering (D488) Exam - Topic 4 Question 12 Discussion