Newly Released WGU Information-Technology-Management Exam PDF

Definition of Strategy in Business Layers:

Thestrategy layerfocuses ondetermining products or services, target customers, and competitive positioning.

It involves defining the organization's long-term goals and the means to achieve them in alignment with market needs and opportunities.

Why Strategy is Key to Product/Service Decisions:

Guides resource allocation to achieve competitive advantage.

Determines value propositions, customer segmentation, and market focus.

Incorrect Options Analysis:

A. Systems:Focuses on technology infrastructure, not business direction.

B. Operating:Deals with day-to-day operations, not strategic decisions.

C. Corporate:Relates to governance and overarching organizational management, not product/service specifics.

References and Documents of Information Technology Management:

"Business Strategy Fundamentals" (McKinsey & Co.).

ITIL 4 Service Strategy Practices (Axelos).

=========================

Definition of Spoofing:

Spoofing involvesforging the "from" addressin communications (e.g., emails) so that replies or interactions are misdirected.

Attackers use this method to impersonate trusted entities, steal sensitive information, or redirect responses to malicious actors.

Impact of Spoofing:

Misleads recipients into sharing sensitive information.

Often used in phishing and social engineering attacks.

Incorrect Options Analysis:

A. Packet tampering:Involves altering data packets during transmission.

C. Spyware:Refers to software that secretly monitors user activity.

D. Hoaxes:Refers to false warnings or scams, not address forgery.

References and Documents of Information Technology Management:

"Email Security and Spoofing Prevention" (NIST Cybersecurity Framework).

ITIL Security Management Practices (Axelos).

Common Risks of Outsourcing Software Development:

One of the most significant risks is the potential forbreaches of confidential information.

Outsourcing often involves sharing sensitive company data with third-party vendors, increasing the risk ofdata misuse or leaks.

Why This Risk is Common:

Outsourcing partners may not have the same level of security measures as the organization.

Compliance issues can arise if vendors do not adhere to industry regulations.

Incorrect Options Analysis:

B. High cost of developers' salaries:Outsourcing is generally cost-effective compared to in-house salaries.

C. Lack of flexibility:Many outsourcing providers are designed to adapt to changes.

D. Short-term contracts:While challenging, these are manageable compared to confidentiality risks.

References and Documents of Information Technology Management:

"Mitigating Outsourcing Risks: Confidentiality and Compliance" (Gartner).

ISO/IEC 27001 Security Standards (Data Protection in Outsourcing).