When is it better to purchase software rather than build a software solution in-house?
Correct Answer: C
It is better to purchase software rather than build a software solution in-house when there is a short timeline. Building software from scratch requires significant time for development, testing, and deployment. Purchasing off-the-shelf software can significantly reduce the time needed to implement a solution. Other considerations include: * Cost-effectiveness: Pre-built software can be more cost-effective than developing a custom solution, especially when factoring in the costs of development, maintenance, and support. * Immediate availability: Purchased software is usually ready to deploy immediately, whereas custom development can take months or even years. * Proven reliability: Commercial software often has a track record of reliability and user support, reducing the risk of bugs and issues that may arise with custom development. Therefore, when time is of the essence, purchasing software is the preferable option. References * Ian Sommerville, "Software Engineering," Pearson. * Steve McConnell, "Rapid Development: Taming Wild Software Schedules," Microsoft Press.
Question 77
A healthcare organization is required to comply with the Health Insurance Portability and Accountability Act (HIPAA), which regulates the privacy and security of personal health information. The organization uses simple network management protocol (SNMP) to manage and monitor its network devices. Which security control will protect the confidentiality of network device information within this organization?
Correct Answer: C
The correct answer is C - Encryption. WGU Cybersecurity Architecture and Engineering (KFO1 / D488) clearly states that encryption protects the confidentiality of transmitted information. In the case of SNMP (especially older versions like SNMPv1 and SNMPv2), communications are unencrypted, making encryption critical to protecting network management information from unauthorized disclosure. Access controls (A) restrict who can access systems but do not encrypt data. Network segmentation (B) separates systems but does not encrypt traffic. Security monitoring (D) detects threats but does not protect data confidentiality. Reference Extract from Study Guide: "Encryption safeguards sensitive data transmitted over the network, ensuring confidentiality in compliance with privacy regulations such as HIPAA." - WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Network Security and Data Protection
