The correct first step in responding to a data breach, as emphasized in theWGU Cybersecurity Architecture and Engineering (KFO1 / D488)course material underIncident Responseprocedures, is tonotify affected users. This aligns with theContainment, Eradication, and Recoveryphase of theNIST Incident Response Lifecyclediscussed in the course content. Prompt notification is crucial to empower users to take immediate protective measures such as updating credentials or monitoring for identity theft.
While other actions like implementing access control policies or improving encryption are validpreventive or corrective controls, they are not theinitial response stepafter a breach is identified. Public announcements are typically handledafter internal assessmentsand legal compliance actions are underway.
Reference Extract from Study Guide:
"As soon as a breach affecting personal data is confirmed, organizations are obligated to notify impacted users in accordance with legal and ethical standards. Notification is part of the initial incident response phase and should occur immediately after verification of the breach."
-WGU KFO1 / D488 Study Guide: Incident Handling and Response

* Operating Systems:
* Operating systems are software that manage computer hardware and software resources, providing common services for computer programs.
* Commonly Used Operating Systems:
* Mac OS: Developed by Apple Inc., used on Apple computers.
* Linux: An open-source operating system used on a wide variety of devices from servers to personal computers.
* Microsoft Windows: Developed by Microsoft, it is one of the most widely used operating systems for personal and business computers.
* Not Operating Systems:
* Microsoft Outlook: An email client, part of the Microsoft Office suite.
* MySQL: A relational database management system.
* Mozilla Firefox: A web browser.
References:
* Types of operating systems: Types of Operating Systems
* Mac OS:macOS
* Linux:Linux
* Microsoft Windows:Windows

* Short-term storage of data on a motherboard is managed by Random Access Memory (RAM).
* RAM is volatile memory, meaning it temporarily stores data that is actively being used or processed by the CPU.
* The other options:
* The hard drive is used for long-term storage.
* BIOS (Basic Input/Output System) is firmware for hardware initialization.
* Read Only Memory (ROM) is used for permanent data storage that doesn't change.
* Thus, RAM is the correct answer for short-term data storage.
References:
* "Computer Organization and Architecture" by William Stallings, which covers the various types of memory.
* "Operating System Concepts" by Abraham Silberschatz, Peter B. Galvin, and Greg Gagne, which explains memory management.

Abastion scanneris a tool or hardened system that inspects network traffic and identifies security vulnerabilities, particularly those visible from an external (internet-facing) viewpoint. It plays a key role inpost-development assessment.
OWASP Testing Guide v4.2:
"Use bastion hosts or hardened scanners to perform vulnerability assessments from an attacker's perspective." This option is preferable for final validation before system release, especially when looking for exposure from the public internet.
#WGU Course Alignment:
Domain:System Security Engineering
Topic:Evaluate hardened systems and scanning tools during release validation

The correct answer is B - Password policies.
WGU Cybersecurity Architecture and Engineering (KFO1 / D488) emphasizes that strong password policies, including requirements for complexity, minimum length, expiration, and reuse restrictions, are essential for protecting user credentials from compromise.
Object storage (A) and removable storage (C) deal with data storage, not password management. Hardware key managers (D) manage cryptographic keys, not passwords directly.
Reference Extract from Study Guide:
"Implementing strong password policies enforces secure password practices among users, reducing the risk of credential compromise."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Identity and Access Management Controls