Cybersecurity-Architecture-and-Engineering Tested & Approved Courses and Certificates Study Materials
Validate your Skills with Updated Courses and Certificates Exam Questions & Answers and Test Engine
NEW QUESTION # 118
A healthcare provider is developing a disaster recovery plan and wants to determine the longest duration that its systems or applications can be down before causing significant damage to the business.
What is the term used to describe this metric?
- A. Recovery time objective (RTO)
- B. Business continuity planning (BCP)
- C. Disaster recovery (DR)
- D. Business impact analysis (BIA)
Answer: A
Explanation:
The correct answer is A - Recovery time objective (RTO).
According to WGU Cybersecurity Architecture and Engineering (KFO1 / D488), the RTO is the maximum acceptable amount of time that a system, application, or process can be offline after a failure before unacceptable consequences occur to the business.
BIA (B) is the process of analyzing impact. BCP (C) is the overall plan for maintaining operations. DR (D) refers to the broader recovery effort.
Reference Extract from Study Guide:
"Recovery time objective (RTO) defines the maximum tolerable downtime for critical systems before significant business impact occurs."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Recovery Objectives and Disaster Recovery Metrics
NEW QUESTION # 119
An organization wants to ensure that its website is free of certain vulnerabilities before the final handoff to the client. What testing method should the organization use to inspect traffic and detect potential issues?
- A. Port scanner
- B. HTTP interceptor
- C. Bastion scanner
Answer: C
Explanation:
Abastion scanneris a tool or hardened system that inspects network traffic and identifies security vulnerabilities, particularly those visible from an external (internet-facing) viewpoint. It plays a key role inpost-development assessment.
OWASP Testing Guide v4.2:
"Use bastion hosts or hardened scanners to perform vulnerability assessments from an attacker's perspective." This option is preferable for final validation before system release, especially when looking for exposure from the public internet.
#WGU Course Alignment:
Domain:System Security Engineering
Topic:Evaluate hardened systems and scanning tools during release validation
NEW QUESTION # 120
A large corporation is considering expanding its operations into a new geographic region. The corporation is concerned about the potential dangers associated with this expansion.
What is the most important factor to consider when evaluating the potential risks in this scenario?
- A. Impact of attack
- B. Threat of attack
- C. Likelihood of attack
- D. Inherent risk
Answer: D
Explanation:
The correct answer is B - Inherent risk.
WGU Cybersecurity Architecture and Engineering (KFO1 / D488) defines inherent risk as the level of risk that exists before any controls or mitigation strategies are implemented. When evaluating expansion into new regions, the corporation must first understand the baseline level of risk (political, regulatory, cyber threats, etc.) inherent to the new environment.
Impact (A) refers to consequences but doesn't capture the natural risk level. Threat of attack (C) and likelihood (D) are specific aspects, but inherent risk (B) provides a comprehensive starting point for evaluating all potential dangers.
Reference Extract from Study Guide:
"Inherent risk is the natural level of risk present in a business activity or environment before applying controls, critical for evaluating new ventures or expansions."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Enterprise Risk Management
NEW QUESTION # 121
A cybersecurity analyst at a manufacturing company is tasked with analyzing the indicators of compromise (IOCs) to identify potential threats and vulnerabilities within the organization. While viewing the security information and event management (SIEM), the analyst notices an unknown IP address logging on to the company's Secure Shell (SSH) server.
Which potential vulnerability is the manufacturing company facing?
- A. Weak passwords
- B. Enumeration
- C. Unpatched software
- D. Exfiltration
Answer: A
Explanation:
The correct answer is D - Weak passwords.
According to WGU Cybersecurity Architecture and Engineering (KFO1 / D488), unauthorized SSH access from an unknown IP address often suggests that the attacker exploited weak or compromised passwords to gain access. Weak passwords are a common vulnerability for services exposed to the internet, especially SSH servers.
Exfiltration (A) refers to data theft after access, not initial unauthorized access. Unpatched software (B) might lead to other vulnerabilities but is not indicated here. Enumeration (C) is gathering information but not gaining login access directly.
Reference Extract from Study Guide:
"Weak or compromised passwords are a primary cause of unauthorized access, particularly for remote management interfaces such as SSH."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Authentication Security BestPractices
NEW QUESTION # 122
How do data support an organization's business goals?
- A. Data create opportunities to compete for potential customers.
- B. Data ensure an organization's business goals are met.
- C. Data can be manipulated to support desired outcomes.
- D. Data provide information for business decisions.
Answer: D
Explanation:
Data support an organization's business goals by providing crucial information that aids in making informed decisions. Analyzing data helps identify trends, measure performance, and uncover insights that drive strategic planning and operational improvements. This informed decision-making process is vital for achieving business goals and staying competitive in the market.
NEW QUESTION # 123
A retail company has recently implemented a new point of sale (POS) system that is critical to its business.
Which security control is essential for protecting the availability of the POS system?
- A. Backing up the data stored in the POS system and having a disaster recovery plan
- B. Regularly updating the POS system with the latest security patches
- C. Enforcing strict access controls on the POS system
- D. Implementing intrusion detection and prevention systems
Answer: B
Explanation:
Theavailabilityof the POS system depends on itsresilience against known vulnerabilities. Applyingregular security patchesensures that attackers cannot exploit outdated components, which could crash or disrupt the POS system.
NIST SP 800-40 Rev. 3 (Guide to Enterprise Patch Management):
"Prompt application of security patches mitigates vulnerabilities that can be exploited to disrupt system availability or compromise data." Backups protect from data loss, butpatching is proactive protectionfor uptime and availability.
#WGU Course Alignment:
Domain:Security Operations and Monitoring
Topic:Maintain system availability through proactive patch management
NEW QUESTION # 124
Which action should an IT department take if an organization decides to expand its business by selling products online?
- A. Make sure the website can handle e-commerce transactions
- B. Market the company's products or services
- C. Ensure that the strategic goals aligned with the organization's mission statement
- D. Manage capital to ensure a successful website
Answer: A
Explanation:
When an organization decides to expand its business by selling products online, the IT department needs to ensure that the website is equipped to handle e-commerce transactions. This involves:
* Setting up a secure online payment system: Ensuring that payment gateways and encryption methods are in place to protect sensitive customer data.
* Scalability: Making sure the website infrastructure can handle increased traffic and transaction volumes without compromising performance.
* Integration: Ensuring the e-commerce platform is integrated with the organization's existing systems, such as inventory management, order fulfillment, and customer relationship management (CRM) systems.
* Compliance: Adhering to regulatory requirements and industry standards for online transactions, such as PCI DSS compliance for payment processing.
Therefore, making sure the website can handle e-commerce transactions is crucial for a successful online business expansion.
References
* Efraim Turban, Judy Whiteside, David King, and Jon Outland, "Introduction to Electronic Commerce and Social Commerce," Springer.
* Laudon, K.C. and Traver, C.G., "E-commerce 2020-2021: Business, Technology, Society," Pearson.
NEW QUESTION # 125
A company has recently experienced a data breach in which customer information was stolen. The company is concerned about the potential for future data breaches. A review of the incident revealed that the breach originated from stolen credentials.
Which security measure will meet the needs of this company?
- A. Implementing two-factor authentication
- B. Installing a security information and event management (SIEM) system
- C. Providing regular security awareness training to employees
- D. Conducting background checks on employees
Answer: A
Explanation:
The correct answer is A - Implementing two-factor authentication.
According to WGU Cybersecurity Architecture and Engineering (KFO1 / D488) content, two-factor authentication (2FA) strengthens authentication processes by requiring users to provide two forms of evidence (e.g., password + SMS code or authentication app) before accessing systems. Even if credentials are stolen, without the second factor, attackers would be unable to log in.
Background checks (B) are important for insider threats but not stolen external credentials. Security awareness training (C) is good practice but does not technically prevent the misuse of stolen credentials.
SIEM systems (D) help detect breaches but do not stop unauthorized access at the authentication layer.
Reference Extract from Study Guide:
"Two-factor authentication mitigates the risks associated with credential theft by requiring an additional factor, significantly improving the security posture."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Authentication and Identity Management
NEW QUESTION # 126
An e-learning company uses Amazon Simple Storage Service (Amazon S3) to store e-books and video files that are served to customers through a custom application. The company has realized that someone has been stealing its intellectual property.
Which threat actor is most likely in this scenario?
- A. Advanced persistent threat
- B. Competitor
- C. Novice hacker
- D. Hacktivist
Answer: B
Explanation:
The correct answer is C - Competitor.
According to WGU Cybersecurity Architecture and Engineering (KFO1 / D488), competitors often attempt to steal intellectual property to gain a business advantage. Given the theft of valuable business assets (e-books and videos), the most likely actor is a competitor motivated by financial or market advantage, not ideology or random hacking.
An APT (A) is usually nation-state-sponsored and targets critical infrastructure. A novice hacker (B) might deface or cause damage but is less likely focused on IP theft. Hacktivists (D) are politically motivated, not financially.
Reference Extract from Study Guide:
"Competitors may engage in cyber espionage to steal intellectual property and gain market advantage, representing a significant threat to business assets."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Threat Actor Categories
NEW QUESTION # 127
Which technique allows someone to obtain a password while it is in transit?
- A. Phishing
- B. Black hat
- C. Packet sniffing
- D. Buffer overflow
Answer: C
Explanation:
* Packet sniffing is a technique used to capture and analyze network traffic, which can include intercepting passwords while they are in transit.
* When data packets are transmitted over a network, a packet sniffer can capture these packets, and if they are not encrypted, it can read sensitive information like passwords.
* The other options:
* Buffer overflow is a type of attack that exploits a program's memory handling.
* Phishing is a social engineering attack to deceive users into providing sensitive information.
* Black hat refers to a hacker with malicious intent, not a specific technique.
* Therefore, packet sniffing is the correct technique for obtaining passwords in transit.
References:
* "Network Security Essentials: Applications and Standards" by William Stallings, which explains packet sniffing and network security threats.
* "Computer Security: Principles and Practice" by William Stallings and Lawrie Brown, which covers network attack techniques including packet sniffing.
NEW QUESTION # 128
A government agency is planning a hybrid cloud deployment. Strict controls must be in place that can label classified data. The solution must ensure that access rights will be granted based on the user's government security classification.
Which type of access control should be used?
- A. Attribute-based access control (ABAC)
- B. Mandatory access control (MAC)
- C. Discretionary access control (DAC)
- D. Role-based access control (RBAC)
Answer: B
Explanation:
The correct answer is A - Mandatory access control (MAC).
Per WGU Cybersecurity Architecture and Engineering (KFO1 / D488) coursework, MAC is a strict access control model where access to resources is based on information labels (such as classified, secret, top secret) and user clearances. Only administrators define and control the policy rules, and users cannot alter access settings, making it ideal for environments where classification labels determine access rights, such as government systems.
ABAC (B) focuses on attributes but is more dynamic rather than based purely on rigid classifications. DAC (C) gives data owners control over access permissions, unsuitable for classified government environments.
RBAC (D) assigns permissions based on roles, but not necessarily aligned with security labels.
Reference Extract from Study Guide:
"Mandatory access control (MAC) enforces access policies based on fixed labels and security classifications, making it the preferred model for high-security environments like government agencies handling classified data."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Access Control Models
NEW QUESTION # 129
During a vulnerability assessment, several end-of-life operating systems were discovered within the environment. Which action should be taken to resolve the issue?
- A. Block the end-of-life machines
- B. Disconnect the end-of-life machines
- C. Upgrade the remaining end-of-life machines
- D. Shutdown and remove the end-of-life machines
Answer: C
Explanation:
Themost sustainable solutionto eliminate security risks associated with legacy systems is toupgrade themto supported versions that receive security updates and patches.
NIST SP 800-128 (Guide for Security-Focused Configuration Management):
"Systems running unsupported or outdated software must be prioritized for upgrade to ensure that known vulnerabilities are mitigated." While short-term isolation may work temporarily, it does not address theroot causeor meet compliance requirements long-term.
#WGU Course Alignment:
Domain:System Security Engineering
Topic:Perform lifecycle management and upgrade legacy systems
NEW QUESTION # 130
An IT organization has recently implemented a hybrid cloud deployment. The server team is deploying a new set of domain-joined Windows servers on cloud-based virtual machines. Users must be able to use their Active Directory credentials to sign in to applications regardless of whether they are running on Windows servers in the cloud or on-premises.
Which solution should be implemented to meet the requirements?
- A. Identity federation
- B. Privileged identity management
- C. Two-step verification
- D. Challenge-Handshake Authentication Protocol (CHAP)
Answer: A
Explanation:
The correct answer is D - Identity federation.
WGU Cybersecurity Architecture and Engineering (KFO1 / D488) details that identity federation enables users to authenticate using the same credentials across multiple systems and platforms, including hybrid cloud and on-premises environments. Federation facilitates Single Sign-On (SSO) and seamless authentication.
Two-step verification (A) improves authentication strength but does not federate identities. CHAP (B) is an old protocol for PPP connections. Privileged identity management (C) manages high-privilege accounts, not general user access across domains.
Reference Extract from Study Guide:
"Identity federation allows for seamless authentication across on-premises and cloud environments by trusting external identity providers, supporting Single Sign-On (SSO) and hybrid deployments."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Federation and Identity Management Concepts
NEW QUESTION # 131
Which software allows the user to easily access the hardware of a computer?
- A. Productivity
- B. FTP client
- C. Application
- D. Operating system
Answer: D
Explanation:
The operating system (OS) is the primary software that manages all the hardware and other software on a computer. It acts as an intermediary between users and the computer hardware. The OS handles basic tasks such as controlling and allocating memory, prioritizing system requests, controlling input and output devices, facilitating networking, and managing files. Examples include Windows, macOS, and Linux.
NEW QUESTION # 132
Which two benefits do computer networks provide for businesses?
Choose 2 answers
- A. Lower IT operations costs
- B. Increased business efficiency
- C. Increased Internet communications speed
- D. Organization cost savings
- E. Improved information security
Answer: A
NEW QUESTION # 133
......
Cybersecurity-Architecture-and-Engineering [Dec-2025] Newly Released] Cybersecurity-Architecture-and-Engineering Exam Questions For You To Pass: https://examsforall.actual4dump.com/WGU/Cybersecurity-Architecture-and-Engineering-actualtests-dumps.html