2025 Best Cybersecurity-Architecture-and-Engineering Exam Preparation Material with New Dumps Questions
Free Cybersecurity-Architecture-and-Engineering Exam Files Verified & Correct Answers Downloaded Instantly
NEW QUESTION # 124
What are three operating systems that are commonly used today?
Choose 3 answers
- A. Microsoft Windows
- B. Linux
- C. Mac OS
- D. Mozilla Firefox
- E. Microsoft Outlook
- F. MySQL
Answer: A,B,C
Explanation:
* Operating Systems:
* Operating systems are software that manage computer hardware and software resources, providing common services for computer programs.
* Commonly Used Operating Systems:
* Mac OS: Developed by Apple Inc., used on Apple computers.
* Linux: An open-source operating system used on a wide variety of devices from servers to personal computers.
* Microsoft Windows: Developed by Microsoft, it is one of the most widely used operating systems for personal and business computers.
* Not Operating Systems:
* Microsoft Outlook: An email client, part of the Microsoft Office suite.
* MySQL: A relational database management system.
* Mozilla Firefox: A web browser.
References:
* Types of operating systems: Types of Operating Systems
* Mac OS:macOS
* Linux:Linux
* Microsoft Windows:Windows
NEW QUESTION # 125
A software development company is concerned about the potential risks associated with exploits that target vulnerabilities in the Linux operating system used by the company's servers. The company has decided to implement hardening techniques and endpoint security controls to mitigate the risk.
Which hardening technique will meet the needs of this company?
- A. Implementing a host-based intrusion detection and prevention system
- B. Enforcing strict access control policies for all users
- C. Conducting regular security assessments and penetration testing
- D. Implementing shell restrictions
Answer: D
Explanation:
The correct answer is C - Implementing shell restrictions.
According to WGU Cybersecurity Architecture and Engineering (KFO1 / D488), shell restrictions on Linux systems can prevent users (or attackers) from executing unauthorized commands, significantly reducing the exploitation risk on Linux servers.
Host-based IDPS (A) detects attacks but does not directly harden the OS. Access control (B) andassessments
/penetration testing (D) are important but do not focus specifically on securing the Linux shell environment.
Reference Extract from Study Guide:
"Implementing shell restrictions on Linux systems minimizes the attack surface by limiting the ability of users and processes to execute unauthorized commands."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Linux System Hardening Techniques
NEW QUESTION # 126
How are IT and globalization related?
- A. IT allows businesses to create a global common gateway interface (CGI).
- B. IT allows businesses to reach global HIPAA compliance.
- C. IT allows businesses to have a global reach.
- D. IT allows businesses to create tax havens for global companies.
Answer: C
Explanation:
Information Technology (IT) has revolutionized the way businesses operate, enabling them to reach global markets and audiences. IT facilitates communication, data exchange, and operational efficiency across borders, allowing companies to manage global operations and engage with international customers seamlessly.
This global reach is a critical aspect of modern business strategies, driven by advancements in IT infrastructure and services.
NEW QUESTION # 127
Which two languages are scripted?
Choose 2 answers
- A. Python
- B. C
- C. PHP
- D. Ada
Answer: A,C
Explanation:
Scripting languages are designed for integrating and communicating with other programming languages.
* Python: A high-level scripting language known for its readability and extensive library support.
* PHP: A server-side scripting language used primarily for web development.
References
* "Python Crash Course" by Eric Matthes
* "PHP and MySQL Web Development" by Luke Welling and Laura Thomson
NEW QUESTION # 128
A retail company has recently implemented a new point of sale (POS) system that is critical to its business.
Which security control is essential for protecting the availability of the POS system?
- A. Enforcing strict access controls on the POS system
- B. Regularly updating the POS system with the latest security patches
- C. Backing up the data stored in the POS system and having a disaster recovery plan
- D. Implementing intrusion detection and prevention systems
Answer: B
Explanation:
Theavailabilityof the POS system depends on itsresilience against known vulnerabilities. Applyingregular security patchesensures that attackers cannot exploit outdated components, which could crash or disrupt the POS system.
NIST SP 800-40 Rev. 3 (Guide to Enterprise Patch Management):
"Prompt application of security patches mitigates vulnerabilities that can be exploited to disrupt system availability or compromise data." Backups protect from data loss, butpatching is proactive protectionfor uptime and availability.
#WGU Course Alignment:
Domain:Security Operations and Monitoring
Topic:Maintain system availability through proactive patch management
NEW QUESTION # 129
A system analyst is reviewing risk documents and noticed that the date of many risks are more than three years old.
What should be proposed to leadership regarding these risks?
- A. A process to evaluate how risks are captured on risk documents
- B. A process to determine how involved leadership is in assignment risk scores
- C. A process to confirm that risk documents are readily available to all individuals
- D. A process to reassess risks on a defined schedule
Answer: D
Explanation:
The correct answer is A - A process to reassess risks on a defined schedule.
Based on the WGU Cybersecurity Architecture and Engineering (KFO1 / D488) Study Guide, risks must be reassessed periodically because the threat landscape, organizational assets, and business processes evolve over time. Risks identified years ago might have changed in likelihood, impact, or may have been mitigated already. Therefore, it is essential to establish a formal process for periodic risk review and reassessment to maintain accurate and actionable risk profiles.
Availability of risk documents (B), methods of capture (C), and leadership involvement in scoring (D) are important, but they do not directly address the primary issue of outdated risk assessments.
Reference Extract from Study Guide:
"Organizations must implement a periodic review and reassessment process for risks to ensure that risk profiles reflect the current threat environment, organizational changes, and mitigation efforts."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Risk Management Framework
NEW QUESTION # 130
The development team has requested permission to use several open-source libraries to build a corporate web application.
Which resource can the security team recommend to ensure these libraries can be trusted?
- A. Agile software development
- B. Waterfall software development
- C. Common Vulnerabilities and Exposures (CVE)
- D. Continuous delivery
Answer: C
Explanation:
The correct answer is C - Common Vulnerabilities and Exposures (CVE).
WGU Cybersecurity Architecture and Engineering (KFO1 / D488) highlights that the CVE database provides information about publicly disclosed cybersecurity vulnerabilities in software, including open-source libraries.
By consulting the CVE list, the security team can assess whether the open-source libraries have known vulnerabilities before approving their use.
Agile (A) and Waterfall (B) are software development methodologies, not vulnerability databases. Continuous delivery (D) refers to automated software deployment and not vulnerability assessment.
Reference Extract from Study Guide:
"The Common Vulnerabilities and Exposures (CVE) database provides standardized information on publicly known cybersecurity vulnerabilities, enabling risk assessment of software components."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Vulnerability Management Concepts
NEW QUESTION # 131
A company has recently implemented a hybrid cloud deployment. The security team has been notified about thousands of failed attempts to connect to routers and switches in the on-premises network. A solution must be implemented to block connections after three unsuccessful SSH attempts on any network device.
- A. Data Loss Prevention
- B. Firewall
- C. Intrusion Prevention System (IPS)
Answer: C
Explanation:
AnIntrusion Prevention System (IPS)detects and blocks malicious activity in real time based on defined policies or behavior patterns. IPS tools can enforcerate limiting,connection attempts, and evenauto- blockingafter repeated failures.
NIST SP 800-94 Rev. 1:
"Intrusion prevention systems not only detect potential incidents but actively prevent attempts such as brute- force attacks on services like SSH." Firewalls may filter traffic, but only an IPSactively terminates or blocks behavior-based threats like repeated failed logins.
#WGU Course Alignment:
Domain:Network Security
Topic:Deploy and configure IPS for automated protection against brute-force attacks
NEW QUESTION # 132
An IT organization has recently suffered multiple data breaches. The security operations center (SOC) team has been tasked with preventing future breaches by implementing user monitoring. The proposed solution must provide insights about unusual user behaviors from a variety of internal corporate resources.
- A. Security information and event management (SIEM)
- B. Web application firewall (WAF)
- C. Virtual private network (VPN)
- D. Secure Shell (SSH) Protocol
Answer: A
Explanation:
SIEM systemsconsolidate logs and events from across the enterprise and apply behavior analysis and correlation rules to detect suspicious activity, including lateral movement, brute force, and privilege escalation.
NIST SP 800-137 (Information Security Continuous Monitoring for Federal Information Systems and Organizations):
"SIEM solutions provide security teams with insight into potentially malicious activity and enable proactive incident detection and response."
#WGU Course Alignment:
Domain:Security Operations and Monitoring
Topic:Utilize SIEM for real-time user behavior analysis
NEW QUESTION # 133
Which risk management strategy will help prevent cheating using a learning management system as a platform?
- A. Implementation of secure user authentication protocols
- B. Configuration of the system to disable all Bluetooth services on all workstations
- C. Implementation of regular software updates and patch management
- D. Enforcement of a strict firewall policy to restrict access to the system's server
Answer: A
Explanation:
Preventing unauthorized access and impersonation during exams or coursework is critical in e-learning platforms.Strong user authentication(e.g., MFA, CAPTCHA, secure login mechanisms) ensures that only authorized users access exams and coursework.
NIST SP 800-63B (Digital Identity Guidelines - Authentication):
"Secure user authentication ensures the identity of individuals accessing sensitive applications, reducing the risk of impersonation and credential misuse." Firewall rules and patching are important, but they don't directly addressuser-level fraud prevention.
#WGU Course Alignment:
Domain:Access Control and Identity Management
Topic:Secure authentication mechanisms for web platforms
NEW QUESTION # 134
Which characteristic identifies intranet application software?
- A. Hosted in the internal business network
- B. Hosted by an outsourced provider
- C. Hosted on an individual computer
- D. Hosted by a third-party web portal
Answer: A
Explanation:
* Intranet Application Software:
* Intranet applications are designed to be used within an organization's internal network. They are not accessible from outside the organization unless through a secure connection like a VPN.
* Characteristics:
* Internal Hosting: These applications are hosted on servers within the business network, ensuring that only authorized internal users can access them.
* Security: Since they are hosted internally, they can be secured with internal security measures like firewalls and access controls.
* Incorrect Options:
* A: Describes applications hosted by external providers.
* C: Describes applications hosted by third-party web portals.
* D: Describes standalone applications on individual computers.
References:
* Intranet applications: Intranet Applications
NEW QUESTION # 135
Which peripheral replaces the mouse on a mobile device?
- A. USB
- B. Camera
- C. Stylus
- D. Jack
Answer: C
NEW QUESTION # 136
The security team has been notified about multiple man-in-the-middle (MITM) attacks happening on the wireless network over the past thirty days. Management has agreed to upgrade the network infrastructure to help eliminate these attacks.
Which solution fulfills these requirements?
- A. Layer 3 switch
- B. Inline network encryptor
- C. Wireless intrusion prevention system (WIPS)
- D. Security information and event management (SIEM)
Answer: C
Explanation:
The correct answer is B - Wireless intrusion prevention system (WIPS).
According to WGU Cybersecurity Architecture and Engineering (KFO1 / D488), a WIPS actively monitors wireless networks for unauthorized access points and malicious activity, such as man-in-the-middle (MITM) attacks. It can automatically detect, alert, and prevent wireless threats in real time, which is exactly what the organization requires to counteract MITM attacks on the wireless network.
A SIEM (A) collects logs and generates alerts but does not prevent wireless attacks. An inline encryptor (C) encrypts data but does not prevent wireless attacks. A Layer 3 switch (D) operates at the network layer and does not prevent wireless-specific threats.
Reference Extract from Study Guide:
"A wireless intrusion prevention system (WIPS) detects and prevents unauthorized access points and malicious wireless activity, including man-in-the-middle attacks."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Wireless Security and Threat Prevention
NEW QUESTION # 137
What are two roles of a DNS?
Choose 2 answers
- A. Creating IP addresses if it cannot find an alias
- B. Sending packets along a pathway that connects it to the Internet
- C. Storing the IP address
- D. Translating an IP alias to an actual IP address
Answer: C,D
Explanation:
* The Domain Name System (DNS) has several key roles, including:
* Storing the IP addresses associated with domain names.
* Translating human-readable domain names (aliases) into IP addresses that computers use to identify each other on the network.
* The other options:
* Creating IP addresses if it cannot find an alias is incorrect; DNS does not create IP addresses.
* Sending packets along a pathway that connects it to the Internet is the role of routers and not DNS.
* Therefore, storing the IP address and translating an IP alias to an actual IP address are the correct roles of DNS.
References:
* "DNS and BIND" by Paul Albitz and Cricket Liu, which details the functions and roles of DNS.
* "The Practice of System and Network Administration" by Thomas Limoncelli, Christina Hogan, and Strata Chalup, which explains DNS operations.
NEW QUESTION # 138
A financial institution is planning to conduct a business impact analysis (BIA) to evaluate the criticality of its business processes and functions.
Which steps will allow the company to perform a BIA?
- A. Develop business continuity plans and procedures, establish a crisis management team, and test the plan regularly
- B. Determine business processes and recovery criticality, identify resource requirements, and identify recovery priorities for system resources
- C. Determine recovery time objectives and recovery point objectives, develop recovery strategies, and document the recovery plan
- D. Monitor network and system activity, detect security incidents, and respond quickly to minimize the impact on critical business processes
Answer: B
Explanation:
The correct answer is C - Determine business processes and recovery criticality, identify resource requirements, and identify recovery priorities for system resources.
According to WGU Cybersecurity Architecture and Engineering (KFO1 / D488), a BIA identifies critical business functions, determines the impact of disruptions, and establishes recovery priorities, including resource needs.
A (monitoring) relates to incident response. B (developing BCP) is after BIA. D (recovery strategies) is part of disaster recovery planning after BIA findings.
Reference Extract from Study Guide:
"Business impact analysis (BIA) involves determining critical business processes, evaluating their recovery requirements, and prioritizing system recovery efforts."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Business Impact Analysis Procedures
NEW QUESTION # 139
A government agency is planning a hybrid cloud deployment. Strict controls must be in placethat can label classified data. The solution must ensure that access rights will be granted based on the user's government security classification.
- A. Role-Based Access Control (RBAC)
- B. Mandatory Access Control (MAC)
- C. Attribute-Based Access Control (ABAC)
Answer: B
Explanation:
Mandatory Access Control (MAC)is the access control model used in environments that manage classified information such as government or military systems. Under MAC, access is based onsecurity labels(e.g., Top Secret, Confidential), and userscannot changeaccess controls.
NIST SP 800-53 Rev. 5 - AC-3 (Access Enforcement):
"MAC policies enforce access based on system-enforced labels, without user discretion, and are ideal for high- security environments where strict data control is essential." MAC is theonly modelwhere access control decisions arecentrally controlled and enforced by a policy administrator, making it ideal for environments requiringdata labeling and user classification.
#WGU Course Alignment:
Domain:Access Control and Identity Management
Topic:Understand and apply MAC for high-security environments
NEW QUESTION # 140
Which two benefits do computer networks provide for businesses?
Choose 2 answers
- A. Increased business efficiency
- B. Improved information security
- C. Organization cost savings
- D. Lower IT operations costs
- E. Increased Internet communications speed
Answer: D
NEW QUESTION # 141
A cloud hosting provider is concerned about the potential risks associated with attacks that target the confidentiality and integrity of sensitive data stored on its servers' volatile storage. The provider has decided to implement hardening techniques and endpoint security controls to mitigate the risk.
Which hardening technique will meet the needs of this provider?
- A. Implementing a next-generation antivirus system to detect and prevent malware attacks
- B. Conducting regular security awareness training for all employees
- C. Enforcing a strong password complexity policy for all user accounts
- D. Implementing secure encrypted enclaves and Advanced Micro Devices (AMD) Secure Memory Encryption
Answer: D
Explanation:
The correct answer is A - Implementing secure encrypted enclaves and Advanced Micro Devices (AMD) Secure Memory Encryption.
WGU Cybersecurity Architecture and Engineering (KFO1 / D488) explains that encryption at the memory level (such as AMD SME) and secure enclaves protect data in volatile memory, safeguarding it even if physical attacks occur.
Security training (B), antivirus (C), and password policies (D) improve security generally but do not specifically address data in volatile memory.
Reference Extract from Study Guide:
"Encrypted enclaves and secure memory encryption protect sensitive data in volatile storage, maintaining confidentiality and integrity even during advanced attacks."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Server and Memory Security Controls
NEW QUESTION # 142
Which risk management strategy will ensure the secure configuration and deployment of a new online banking system and help prevent credit card fraud?
- A. Configuration of the system to disable all email services on all workstations
- B. Implementation of a strict firewall policy to restrict access to the system's server
- C. Implementation of real-time transaction monitoring
- D. Use of regular system backups to an off-site location
Answer: C
Explanation:
Real-time transaction monitoringhelps detect and respond to fraudulent activities (e.g., unauthorized access, anomalous transactions) as they happen. It's critical in high-risk environments likeonline banking systems.
FFIEC IT Examination Handbook (Retail Payment Systems):
"Real-time fraud detection systems monitor for suspicious or anomalous transactions that may indicate identity theft, account takeover, or credit card fraud." This is anactive, risk-aware controlthat's far more effective than backups or email restrictions for this use case.
#WGU Course Alignment:
Domain:Security Operations and Monitoring
Topic:Implement real-time monitoring systems for financial fraud detection
NEW QUESTION # 143
......
Instant Download Cybersecurity-Architecture-and-Engineering Dumps Q&As Provide PDF&Test Engine: https://www.actualtestsit.com/WGU/Cybersecurity-Architecture-and-Engineering-exam-prep-dumps.html