Information-Technology-Management Exam Dumps - WGU Information Technology Management QGC2

Primary Elements of Information Infrastructure:

Business Continuity Plans (BCP): Ensure that critical business operations continue during and after a disruption.

Disaster Recovery Plans (DRP): Focus on restoring IT systems and data after a disaster.

Backup and Recovery Plans: Protect against data loss and enable data restoration after failures.

Why Other Options Are Incorrect:

Option B (Augmentation plans): Not a standard element of information infrastructure.

Option C (Authentication plans): Authentication is part of security protocols, not infrastructure support.

An IT ethics policy exists to guide decision-making based on organizational values, ethical standards, and professional conduct. It ensures that IT professionals act responsibly when handling data, systems, and technology, especially regarding privacy, security, intellectual property, and appropriate use of resources.

Option A: Too narrow—approval for new technologies is a governance process, not the purpose of ethics policy.

Option B: Incorrect—ethics policies are broader than adherence to technical rules.

Option D: Too narrow—ethical behavior extends far beyond project budgeting.

Therefore, the correct answer is that an IT ethics policy exists to guide decisions based on values and standards.

Prototypes are used in business analysis to model system requirements and gather early feedback from stakeholders. They provide a tangible representation of requirements, allowing users to visualize and test functionality before full-scale development begins.

Option A: Coding the back end is not the purpose of a prototype.

Option B: User manuals and simulations come later in training or documentation.

Option D: Branding and visual design are separate from business analysis.

Thus, the purpose of prototypes is to model requirements and gather early feedback from stakeholders.

Comprehensive and Detailed Explanation From Exact Extract:

System testing is a phase in the SDLC where the entire integrated system is tested as a whole to ensure it behaves as specified. The primary purpose of system testing is to verify that the complete system meets the defined functional and non-functional requirements (such as performance, reliability, and security) documented earlier in the lifecycle.

Unlike unit testing, which focuses on individual components, or integration testing, which focuses on interactions between components, system testing validates the end-to-end behavior of the solution from the perspective of overall requirements.

Option A (To review the individual components of the system) describes unit testing, not system testing.

Option B (To gather the system’s user requirements) is an activity of the requirements analysis phase, which occurs before design and development.

Option C (To design the software architecture) corresponds to the design phase, not the testing phase.

Thus, the purpose of system testing is to verify the system meets specific requirements, making D the correct answer.

Comprehensive and Detailed Explanation From Exact Extract:

Security and compliance risk in outsourcing is heavily influenced by legal jurisdiction, regulatory alignment, and data protection laws. Onshore outsourcing keeps services and data handling within the same country, under the same legal and regulatory framework, making it generally the outsourcing model with the least security compliance risk.

Advantages of onshore outsourcing for compliance:

Alignment with the same national data protection and privacy laws.

Fewer complexities around cross-border data transfer regulations.

Easier auditing, oversight, and enforcement of security standards.

Better alignment with industry-specific regulations (financial, healthcare, government).

Why the other options have higher risk:

A. Cloud-based outsourcing – Cloud services can be onshore or offshore; by itself, “cloud-based” does not guarantee lower compliance risk and can introduce complexity depending on data location.

B. Nearshore outsourcing – Nearshore may reduce some challenges, but the service provider is still under a different national jurisdiction.

C. Offshore outsourcing – Typically involves the highest compliance complexity, due to different laws, regulations, and data-transfer restrictions.

Therefore, onshore outsourcing is the model with the least security compliance risk, making D the correct answer.

An Extranet extends an organization’s internal network to provide controlled access to external users such as suppliers, vendors, and business partners. It uses security mechanisms like authentication and encryption to ensure that only authorized external parties can access the relevant internal resources.

Option A (Intranet): Internal-only network for employees; not accessible to outside users.

Option B (VPN): Provides secure remote connections for users but does not inherently grant controlled access to internal systems for external organizations.

Option C (LAN): A local network limited to internal devices in a small geographic area.

Thus, the correct type of network is an Extranet.

Comprehensive and Detailed Explanation From Exact Extract:

A Trojan horse (or simply “Trojan”) is a type of malware that pretends to be legitimate or useful software to trick users into installing or running it. Once executed, it can create backdoors, download additional malicious components, or allow unauthorized access to the system, while often hiding its true purpose.

Why B is correct: A Trojan disguises itself as something benign or helpful (such as a free utility, game, or update) in order to deceive the user and gain access. This matches the definition given in standard cybersecurity sections of IT management materials.

Why the others are incorrect:

A. Keylogger – Specializes in capturing keystrokes to steal information like passwords; it may be delivered by a Trojan, but the defining behavior is keystroke logging, not masquerading as legitimate software.

C. Spyware – Secretly monitors user activity and sends data to an attacker; it focuses on surveillance, not necessarily on pretending to be legitimate software as its core characteristic.

D. Rootkit – Designed to hide the presence of malware or attackers by modifying system processes and tools; its main role is stealth and persistence, not initial disguise as legitimate software.

Definition of a Gantt Chart:

A Gantt chart is a visual tool used to list project tasks vertically and plot the time frame horizontally.

It displays task durations, dependencies, and progress, helping in scheduling and tracking.

Key Features of a Gantt Chart:

Represents tasks as horizontal bars proportional to their duration.

Helps identify task sequencing and overlaps.

Incorrect Options Analysis:

A. PERT Chart: Used for analyzing project timelines and task dependencies but not for plotting tasks against a timeline.

B. Project Model: Not a visual tool; it’s a conceptual representation of the project process.

C. Venn Diagram: Used for illustrating logical relationships, not task scheduling.

References and Documents of Information Technology Management:

PMBOK Guide (Project Scheduling Tools).

ITIL Project Management Best Practices (Axelos).