Key details for this exam, checked against the published exam outline
Each question shows the correct answer and an explanation of why it is right
Which type of cybersecurity threat collects information from a system without authorization?
Comprehensive and Detailed Explanation From Exact Extract:
Spyware is malicious software specifically designed to covertly collect information from a user's device or network without authorization. It can monitor browsing habits, capture credentials, log keystrokes, or harvest system and application data, then send this information to an attacker.
Why C is correct: Spyware's core purpose is unauthorized information collection, aligning exactly with the description in the question.
Why the others are incorrect:
A . Ransomware -- Encrypts or locks data/systems and demands payment for restoration; its primary goal is extortion, not information collection.
B . Brute force attack -- A method of systematically guessing passwords or keys; it is an attack technique, not software focused on secretly gathering data.
D . Man-in-the-middle -- An attacker intercepts and possibly alters communication between two parties; while it can be used to capture information, it is a network attack position, not specifically malware installed on a system for ongoing data collection like spyware.
What is the role of executive sponsors in a project?
Role of Executive Sponsors in a Project:
Executive sponsors are senior stakeholders responsible for providing financial resources and ensuring the project aligns with organizational strategy.
They advocate for the project at the executive level and help remove obstacles that could hinder its success.
Key Responsibilities:
Securing funding and allocating resources.
Ensuring alignment with business goals and priorities.
Supporting the project team by addressing high-level challenges.
Incorrect Options Analysis:
A . Tracking milestones: This is typically the role of the project manager.
B . Developing the project plan: Also the responsibility of the project manager.
D . Representing staff interests: Sponsors focus on organizational priorities, not individual interests.
and Documents of Information Technology Management:
'Executive Sponsorship in Project Management' (PMI Whitepaper).
ITIL Governance and Sponsorship Guidelines (Axelos).
What does the Information Technology Infrastructure Library (ITIL) provide to organizations in managing IT services?
ITIL provides a structured framework and guidance for organizations to manage IT services effectively. It outlines best practices, processes, and operational considerations for delivering IT services in alignment with business needs. ITIL is not about enforcing control, compliance, or ethics oversight---it focuses on service management practices that ensure consistent quality and continual improvement.
Option A: Incorrect, ITIL does not enforce controls but provides guidance.
Option C: Incorrect, ITIL focuses on internal IT service alignment with business goals, not primarily compliance.
Option D: Incorrect, ITIL is not centered on ethical oversight but on operational best practices.
Thus, the correct answer is provision of structured guidance for operational considerations.
WGU Information Technology Management -- IT Service Management, section on ITIL Framework for Service Management.
What is the goal of the maintenance phase in the system development life cycle (SDLC)?
In the maintenance phase of the SDLC, the goal is to ensure the system continues to meet business needs by fixing defects, applying updates, and implementing enhancements. This phase ensures the system remains secure, reliable, and effective after deployment.
Option B: Gathering requirements occurs in the planning/analysis phase.
Option C: Unit testing is part of the testing phase, not maintenance.
Option D: Designing and deploying the architecture occurs in development and implementation phases.
Thus, the goal of the maintenance phase is to fix defects and update the software.
WGU Information Technology Management -- Systems Development Life Cycle, section on Maintenance Phase.
Which step involves validating a user's identity before allowing access to a system or resource?
Authentication is the process of validating a user's identity before granting access to a system or resource. Examples include passwords, biometrics, and multifactor authentication.
Option A (Confidentiality): Ensures data is only accessible to authorized users, not the identity check itself.
Option B (Authorization): Occurs after authentication, determining what resources a verified user may access.
Option C (Accounting): Tracks user activity for auditing purposes.
Thus, the step that validates identity is Authentication.
WGU Information Technology Management -- Security Principles, section on AAA Framework (Authentication, Authorization, Accounting).
Which tool can be used to list project tasks vertically against project time frame listed horizontally?
Definition of a Gantt Chart:
A Gantt chart is a visual tool used to list project tasks vertically and plot the time frame horizontally.
It displays task durations, dependencies, and progress, helping in scheduling and tracking.
Key Features of a Gantt Chart:
Represents tasks as horizontal bars proportional to their duration.
Helps identify task sequencing and overlaps.
Incorrect Options Analysis:
A . PERT Chart: Used for analyzing project timelines and task dependencies but not for plotting tasks against a timeline.
B . Project Model: Not a visual tool; it's a conceptual representation of the project process.
C . Venn Diagram: Used for illustrating logical relationships, not task scheduling.
and Documents of Information Technology Management:
PMBOK Guide (Project Scheduling Tools).
ITIL Project Management Best Practices (Axelos).
6 domains from the WGU Information-Technology-Management exam outline, with approximate weightings. Every sample question above is tagged with the domain it comes from
IT Leaders examine how standard applications and information systems deliver value to organizations. Focus on business value propositions, conveying technical value to decision makers, demonstrating return on investment, and building stakeholder support for technology initiatives.
IT Managers study proven methods for obtaining, creating, and implementing information systems that meet business needs. Learn techniques for selecting suitable technology solutions, overseeing implementation projects, and matching technology investments with organizational objectives.
IT Security Managers explore risk management, disaster recovery, and cybersecurity for organizational protection. Review strategies for recognizing and reducing technology risks, preparing for business continuity, and executing security protocols to safeguard resources and data.
IT Leaders investigate fundamental computer hardware, software, and networking elements in business systems. Learn how to communicate information about technical systems effectively and understand how diverse technology components enable business operations.
IT Support Specialists gain insight into how emerging technologies shape modern business environments. Explore how innovations improve decision-making, efficiency, and overall business performance within organizations.
IT Compliance Technicians examine how to recognize personal bias and understand potential legal issues tied to it. Learn ways to apply interventions that promote fairness, ethical conduct, and lawful technology practices.
Common questions about the exam itself
