WGU Cybersecurity Architecture and Engineering (KFO1/D488) - Cybersecurity-Architecture-and-Engineering Exam Practice Test

Question 1

A company is developing a new mobile application to support external customers and contractors. The application needs to allow users to sign in using third-party social identities.
What is the best protocol?

A. Lightweight Directory Access Protocol (LDAP)

B. Security Assertion Markup Language (SAML)

C. Open Authorization (OAuth)

D. Kerberos

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 2

After a recent security assessment, it was discovered that many company devices have unnecessary ports opened to the network.
What should the company configure to fix this?

A. Device hardening

B. Intrusion prevention system

C. Intrusion detection system

D. Web application firewall

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 3

A retail company wants to establish the frequency at which it needs to back up its critical data to ensure it can be restored in case of a disruption with the least amount of acceptable data loss.
What is the term used to describe this metric?

A. Business Impact Analysis (BIA)

B. Disaster Recovery (DR)

C. Recovery Point Objective (RPO)

D. Continuous Data Protection (CDP)

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 4

A cloud hosting provider is concerned about the potential risks associated with attacks that target the confidentiality and integrity of sensitive data stored on its servers' volatile storage. The provider has decided to implement hardening techniques and endpoint security controls to mitigate the risk.
Which hardening technique will meet the needs of this provider?

A. Enforcing a strong password complexity policy for all user accounts

B. Implementing secure encrypted enclaves and Advanced Micro Devices (AMD) Secure Memory Encryption

C. Conducting regular security awareness training for all employees

D. Implementing a next-generation antivirus system to detect and prevent malware attacks

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 5

A healthcare organization is required to comply with the Health Insurance Portability and Accountability Act (HIPAA), which regulates the privacy and security of personal health information. The organization uses simple network management protocol (SNMP) to manage and monitor its network devices.
Which security control will protect the confidentiality of network device information within this organization?

A. Security monitoring

B. Encryption

C. Network segmentation

D. Access controls

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 6

A security team is investigating multiple man-in-the-middle attacks that have taken place on the corporate network over the past few months. The team needs a solution that will ensure that data is not exposed if a man- in-the-middle attack occurs in the future.
What is the best solution?

A. Ensuring all users have complex passwords

B. Encrypting data

C. Enforcing password history

D. Disabling Wi-Fi connections

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 7

The security operations center (SOC) team has been alerted about malicious traffic on the corporate network and is concerned about a distributed denial of service (DDoS) attack. An analyst has been tasked with inspecting network traffic in the on-premises data center to investigate the issue.
Which type of file should the analyst use to inspect the traffic?

A. Syslog messages

B. Web server access log

C. Operating system event log

D. Packet capture

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 8

How does application software differ from operating systems?
Choose 2 answers

A. Application software supports the computer hardware system directly.

B. Application software consists of programs that end users run to accomplish business or personal tasks, such as e-mail.

C. Application software includes word processors and spreadsheet software that are useful to end users.

D. Application software includes system utilities that run on demand of the user.

Correct Answer: B,C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 9

A company is moving its applications to the cloud and is concerned about cyber security threats. The security team has been tasked with providing a comprehensive view of how attackers gainaccess, move through networks, and carry out attacks.
Which framework identifies the seven phases of an attack, from initial infiltration to post-exploitation?

A. Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK) for industrial control systems (ICS)

B. MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK)

C. Cyber kill chain

D. Diamond Model of Intrusion Analysis

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 10

What are two differences between a handheld computer and a desktop?
Choose 2 answers.

A. A desktop has more internal storage.

B. A desktop has more memory.

C. A handheld has more memory.

D. A handheld has more internal storage.

Correct Answer: A,B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 11

Which key exchange algorithm is based on advanced cryptography algorithms and is a more efficient alternative to traditional key exchange algorithms?

A. Rivest-Shamir-Adleman (RSA)

B. Digital Signature Algorithm (DSA)

C. Diffie-Hellman (DH)

D. Elliptic Curve Diffie-Hellman (ECDH)

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

WGU Cybersecurity Architecture and Engineering (KFO1/D488) - Cybersecurity-Architecture-and-Engineering Exam Practice Test

Latest Update

Useful Links

Contact Us