Information-Technology-Management WGU Information Technology Management QGC2 Free Practice Exam Questions (2025 Updated)

In a bus topology, all devices share a single central cable (backbone). If this cable fails, the entire network becomes inoperable. This topology is simple and cost-effective but lacks redundancy.

Definition of Elevation of Privilege Attack:

This attack occurs when an attacker exploits vulnerabilities in systems to escalate their permissions beyond what they are authorized for, gaining access to sensitive data or control over the system.

Example in the Scenario:

The attacker uses a guest account, a low-privilege account, to exploit a system weakness and escalate their privileges, altering user account information.

Incorrect Options Analysis:

A. Packet tampering: Involves altering data packets, not access rights.

B. Spoofing: Involves impersonation, not privilege escalation.

D. Hoaxing: Refers to deceptive scams, unrelated to access rights.

References and Documents of Information Technology Management:

"Cybersecurity Vulnerabilities and Exploits" (CIS Controls).

ITIL Risk Management Framework (Axelos).

A firewall is a critical part of network security that monitors and controls incoming and outgoing network traffic based on predetermined security rules. Its function is to block unauthorized access while permitting legitimate communication, thereby serving as a barrier between trusted internal networks and untrusted external networks.

Option A: Incorrect—phishing is handled by user awareness and email filters, not firewalls alone.

Option B: Incorrect—malware detection is performed by antivirus/antimalware tools, not firewalls.

Option D: Incorrect—encryption keys are managed by cryptographic systems, not firewalls.

Thus, the function of a firewall is to control unauthorized access.

Leaders should promote ethical IT behavior by providing regular, ongoing training that communicates expectations, reinforces values, and keeps employees updated on evolving ethical standards and issues. Continuous training fosters a culture of integrity and accountability.

Option A: Incorrect, ethics should be an organization-wide responsibility, not siloed in departments.

Option C: Incorrect, a one-time onboarding session is insufficient for maintaining ethical awareness.

Option D: Incorrect, relying informally on team leaders does not ensure consistent organization-wide ethical practices.

Thus, the best approach is regular training on ethical expectations.

Importance of Corporate Culture in Technology Adoption:

Organizational culture directly influences employees’ willingness to adopt new technologies.

Resistance often stems from fear of change, lack of trust in technology, or inadequate training.

Steps Before Implementing a Unified Communications System:

Assess the corporate culture to identify barriers to adoption.

Develop a change management strategy to address concerns and align the system with company values.

Incorrect Options Analysis:

A. Pilot Testing: Useful later in implementation, but not the first step.

B. Employee Accessibility: Important but secondary to addressing cultural barriers.

D. Competitors’ Systems: Irrelevant to internal resistance issues.

References and Documents of Information Technology Management:

ITIL 4 Digital Transformation Guide (Axelos).

"Change Management in Technology Implementation" (Harvard Business Review).

Definition of Systems Thinking:

Systems thinking refers to the ability to understand and analyze how different components of a system interact and influence each other, especially at a broad organizational and strategic level.

For an IT leader, this means bridging the gap between technical operations and corporate strategy, enabling effective communication and alignment across all levels of the business.

Why Systems Thinking is Important for IT Leaders:

Ensures alignment of IT initiatives with organizational goals.

Facilitates problem-solving by understanding the broader impact of decisions.

Encourages cross-functional collaboration and holistic decision-making.

Incorrect Options Analysis:

B. Coordinate: While coordination is a skill, it does not encompass the strategic perspective described.

C. Courage: An important leadership trait, but not specific to systems-level thinking.

D. Breadth: Refers to having a wide range of knowledge, but lacks the systems-oriented focus.

References and Documents of Information Technology Management:

ITIL 4 Leadership Practices: Systems Thinking (Axelos).

"Systems Thinking for IT Leaders" (Harvard Business Review).

Benefits of In-House Development and Maintenance:

In-house teams gain deep knowledge of the organization’s business processes, enabling better alignment between IT systems and business needs.

Combines technical expertise with business insights, resulting in a workforce that understands the company’s unique challenges and opportunities.

Why Other Options are Incorrect:

A. Financial savings: In-house development often incurs higher costs due to salaries, training, and infrastructure.

B. Utilizing state-of-the-art resources: This is typically a benefit of outsourcing, not in-house development.

D. Fastest development time: In-house development is often slower compared to outsourcing due to limited resources.

References and Documents of Information Technology Management:

"In-House vs. Outsourced Development: A Comparative Analysis" (Forrester).

ITIL Service Design and Workforce Development (Axelos).

Unified communications (UC) integrates various communication tools such as instant messaging, email, voice, video conferencing, and collaboration platforms into a single interface. The primary benefit is enhanced collaboration, allowing teams to work together seamlessly across multiple channels and geographic locations.

Option A: Incorrect—UC focuses on communication, not resource speed.

Option B: Incorrect—UC does not provide additional storage.

Option C: Incorrect—billing is unrelated to unified communications.

Thus, the benefit of unified communications is enhanced collaboration.

An Extranet extends an organization’s internal network to provide controlled access to external users such as suppliers, vendors, and business partners. It uses security mechanisms like authentication and encryption to ensure that only authorized external parties can access the relevant internal resources.

Option A (Intranet): Internal-only network for employees; not accessible to outside users.

Option B (VPN): Provides secure remote connections for users but does not inherently grant controlled access to internal systems for external organizations.

Option C (LAN): A local network limited to internal devices in a small geographic area.

Thus, the correct type of network is an Extranet.

The SDLC begins with identifying business needs, which define why a new system or software is required. These needs are analyzed to determine requirements and ensure that the system aligns with organizational goals.

Option A: Budget approval comes later in project initiation.

Option B: Stakeholder buy-in is important but occurs after business needs are defined.

Option C: Planning is the second step, following the identification of needs.

Thus, the SDLC starts with Business needs.

Design Phase in SDLC:

During the design phase, detailed descriptions of system features and operations are developed. This includes creating architectural diagrams, prototypes, and technical specifications.

Key Activities in the Design Phase:

Translating business requirements into technical blueprints.

Defining user interfaces, workflows, data structures, and system behavior.

Incorrect Options Analysis:

B. High-level strategy and goals: Refers to the planning phase.

C. Requirements identification: Part of the analysis phase.

D. Refining project goals: Occurs during analysis, not design.

References and Documents of Information Technology Management:

"System Design Practices in SDLC" (TechRepublic).

ITIL Technical Design Framework (Axelos).

In the Transition phase of the Rational Unified Process (RUP), the system is deployed into the production environment, and ownership of the system is formally transferred to stakeholders. This phase involves user training, fine-tuning, and final acceptance, ensuring that the business takes responsibility for the system.

Option B (Inception): Defines the project scope and business case.

Option C (Elaboration): Focuses on refining requirements and validating architecture.

Option D (Construction): Involves building and coding the system.

Thus, system ownership is assigned to stakeholders in the Transition phase.

Prototypes are used in business analysis to model system requirements and gather early feedback from stakeholders. They provide a tangible representation of requirements, allowing users to visualize and test functionality before full-scale development begins.

Option A: Coding the back end is not the purpose of a prototype.

Option B: User manuals and simulations come later in training or documentation.

Option D: Branding and visual design are separate from business analysis.

Thus, the purpose of prototypes is to model requirements and gather early feedback from stakeholders.

An Online Transaction Processing (OLTP) system supports real-time processing of sales and inventory data. In retail, OLTP systems update information immediately as transactions occur, enabling front-line employees to make accurate, real-time decisions on sales, stock, and customer service.

Option B: Decision support systems (DSS) help managers with complex analysis, not real-time retail decisions.

Option C: Management information systems (MIS) provide summaries and reports, not live updates.

Option D: CRM systems manage customer relationships, not transaction-level sales and inventory.

Thus, the system is Online Transaction Processing (OLTP).

Comprehensive and Detailed Explanation From Exact Extract:

In management and leadership principles, empowerment means giving employees the authority, autonomy, and confidence to make decisions, solve problems, and take ownership of their work. A leader demonstrates empowerment by supporting employee decision-making, encouraging them to use their judgment, and backing them when they take responsible initiative.

Key points associated with empowerment in IT and organizational leadership concepts include:

Delegating decision-making authority where appropriate.

Encouraging employees to propose solutions, not just follow instructions.

Providing support, coaching, and resources, then trusting the team to act.

Creating an environment where employees feel safe to contribute ideas and take ownership.

Why the other options are not the best match:

A. By outlining job expectations to enhance clarity – Setting clear expectations is part of good management, but it is more about structure and guidance than empowerment.

B. By using authority to oversee decisions – This reflects a control-oriented style, not empowerment. It centralizes decisions with the leader instead of sharing power.

C. By guiding strategy while involving team input – This is collaborative and positive, but the emphasis is still on the leader guiding strategy. Empowerment focuses more directly on enabling others to decide and act.

Therefore, the behavior that most clearly reflects empowerment is supporting employee decision-making, making D the correct answer.

Comprehensive and Detailed Explanation From Exact Extract:

Symmetrical (symmetric) encryption uses a single shared secret key for both encryption and decryption of data. Both the sender and the receiver must have access to the same key, and the security of the communication depends on keeping that key confidential.

Key points about symmetric encryption:

One key for both directions: The same key encrypts plaintext and decrypts ciphertext.

Fast and efficient: Often used for encrypting large amounts of data (e.g., AES).

Commonly used in secure channels after an initial key exchange has occurred.

Why the other options are incorrect:

A. Asymmetrical encryption – Uses a public key for encryption and a private key for decryption. It does not rely on a single shared secret key; rather, it uses a key pair.

B. Secure hashing – A hash function transforms data into a fixed-size value; it is one-way and does not support decryption. Hashing is not an encryption method for secure two-way communication.

C. Data masking – Obscures data (e.g., hiding digits of a credit card number) for privacy in non-production use or display; it is not an encryption method for secure communication.

Therefore, the correct answer is D. Symmetrical encryption, because it specifically involves secure communication using a shared secret key known to both parties.

ERP as an Organizational Backbone:

ERP provides a centralized platform for integrating and automating core business functions.

It supports decision-making by delivering comprehensive, real-time data insights to managers and stakeholders.

Key Role of ERP in Decision Support:

ERP systems enhance data consistency, accuracy, and availability, enabling informed decision-making at all levels of the organization.

Incorrect Options Analysis:

B. Supply Chain Management (SCM): Focuses on supply chain optimization, not overall decision support.

C. Unified Communications (UC): Enhances communication, not decision-making processes.

D. Customer Relationship Management (CRM): Targets customer interaction, not overarching business operations.

References and Documents of Information Technology Management:

"ERP as the Backbone of Decision Support" (Harvard Business Review).

ITIL Service Management Guides: ERP Best Practices (Axelos).

Definition of ERP Systems:

ERP systems facilitate data sharing and process integration across multiple departments within an organization, such as HR and purchasing.

These systems improve coordination and decision-making by maintaining a single source of truth.

Example of ERP Usage:

If the HR department needs to coordinate with the purchasing team for new employee resources, ERP ensures both have access to relevant information like budgets and procurement requirements.

Incorrect Options Analysis:

A. Executive Support (ES): Caters to strategic decision-making, not operational collaboration.

B. Geographic Information System (GIS): Deals with spatial and geographical data, not departmental coordination.

D. Customer Relationship Management (CRM): Manages customer interactions, not internal department processes.

References and Documents of Information Technology Management:

"ERP for Organizational Efficiency" (Forrester Research).

ITIL 4 Foundation: Enterprise Systems Overview (Axelos).

Comprehensive and Detailed Explanation From Exact Extract:

In the ITIL service lifecycle, Service Design is the stage that focuses on designing IT services so they can effectively support and meet business objectives and requirements. This stage is responsible for planning and designing new or changed services with the right processes, architectures, technologies, and measurements to ensure that, once implemented, the services are fit for purpose (utility) and fit for use (warranty) in alignment with business needs.

Service Design ensures that IT services are properly planned, specified, and structured before they are transitioned into the live environment. It covers aspects such as service level requirements, capacity, availability, continuity, security, and vendor management so that the IT organization can deliver services that support current and future business goals.

Service operation focuses on the day-to-day delivery and support of IT services once they are live.

Service transition is concerned with moving services from design to operation, managing change, release, and deployment.

Continual service improvement focuses on evaluating and improving services and processes over time.

Because Service Design is the stage that ensures IT services are planned and structured to meet business objectives, the correct answer is B. Service design.