1
WGU D488 Cybersecurity Architecture and Engineering
Final Exam 2026/2027 Actual Exam - Complete Questions
with Detailed Rationales | 100% Verified Graded A+ Pass
Guaranteed - A+ Graded
Section 1: Security Architecture Fundamentals & Frameworks (Q1-15)
Q1: A security architect is using the SABSA framework to develop a security architecture for a
global enterprise. At which layer of the SABSA matrix are the business attributes, such as
business goals and core values, defined?
A. Conceptual Layer
B. Logical Layer
C. Physical Layer
D. Component Layer
Correct Answer: A
Rationale: The SABSA Conceptual Layer focuses on the business context, defining what the
business does, its goals, and its values, which drives the rest of the security architecture. The
Logical layer defines the logical security services, the Physical layer defines the technology
mechanisms, and the Component layer deals with specific vendor products.
Q2: During a security architecture review using TOGAF, the architect needs to ensure that the
implemented security controls align with the changing business requirements and technology
landscape. Which phase of the TOGAF Architecture Development Method (ADM) is primarily
responsible for ongoing architecture governance and change management?
A. Phase A: Architecture Vision
B. Phase E: Opportunities and Solutions
C. Phase G: Implementation Governance
D. Phase H: Architecture Change Management
Correct Answer: D
Rationale: TOGAF Phase H (Architecture Change Management) ensures that the architecture
remains relevant and effective by managing changes to the architecture in a cohesive manner.
,2
Phase G governs the implementation of a specific project, while Phase A establishes the initial
vision, and Phase E identifies work packages.
Q3: An enterprise architect is utilizing the Zachman Framework to categorize architectural
artifacts. Which intersection in the Zachman matrix answers the question "Where?" from the
perspective of the system model (i.e., where the system is located within the network topology)?
A. Planner: Location (Where)
B. Owner: Location (Where)
C. Designer: Location (Where)
D. Builder: Location (Where)
Correct Answer: C
Rationale: In the Zachman Framework, the "Where" column represents distribution and location.
The "Designer" row represents the system model perspective, detailing how the system meets the
business requirements, including its logical network placement and distribution. The Planner row
represents scope, and the Owner row represents the enterprise model.
Q4: A Chief Information Security Officer (CISO) wants to map the organization's current
security capabilities to the NIST Cybersecurity Framework (CSF) to identify gaps. Which CSF
core function focuses on developing and implementing safeguards to ensure the delivery of
critical services?
A. Identify
B. Protect
C. Detect
D. Respond
Correct Answer: B
Rationale: The NIST CSF "Protect" function encompasses the safeguards and controls
implemented to ensure the delivery of critical services, including access control, awareness
training, data security, and protective technology. "Identify" focuses on understanding risk,
"Detect" on finding incidents, and "Respond" on taking action during an incident.
,3
Q5: When designing a security program aligned with ISO/IEC 27001, an architect must define
the Statement of Applicability (SoA). What does the SoA document?
A. A complete inventory of all physical and logical assets
B. The risk assessment methodology used by the organization
C. The controls that are applicable and their justification for implementation or exclusion
D. The legal, regulatory, and contractual requirements
Correct Answer: C
Rationale: The Statement of Applicability (SoA) is a mandatory ISO 27001 document that lists
all Annex A controls, identifies which are applicable to the organization, and justifies why they
are implemented or why they are excluded. Asset inventories and risk methodologies are separate
documents.
Q6: A security architect is designing a data center network. To adhere to the principle of "defense
in depth," which architectural approach should the architect implement?
A. Relying entirely on a robust next-generation firewall at the perimeter
B. Implementing multiple overlapping security controls across physical, network, and
application layers
C. Focusing all security efforts on encrypting data at rest
D. Deploying a single, highly sensitive intrusion prevention system at the internet border
Correct Answer: B
Rationale: Defense in depth ensures that if one security control fails, other controls are in place
to protect the asset. This requires layering multiple different types of controls (physical,
technical, administrative) rather than relying on a single perimeter or a single control type.
Q7: An organization requires that database administrators (DBAs) cannot alter financial records,
and accountants cannot modify database schemas. Which security architecture principle is being
enforced?
A. Least Privilege
B. Separation of Duties
C. Defense in Depth
, 4
D. Fail Secure
Correct Answer: B
Rationale: Separation of Duties (SoD) divides critical tasks among multiple individuals to
prevent fraud or error. Least privilege restricts access rights to the minimum necessary, but SoD
specifically ensures that no single person has complete control over a sensitive process.
Q8: A newly deployed access control system fails to respond to authentication requests during a
power outage. The doors remain locked, preventing both unauthorized entry and authorized exit.
Which security design principle does this demonstrate?
A. Fail Safe
B. Fail Secure
C. Economy of Mechanism
D. Open Design
Correct Answer: B
Rationale: "Fail secure" means that when a system fails, it defaults to a state that prevents
unauthorized access, even if it inconveniences authorized users (e.g., doors locking). "Fail safe"
would default to a state that prevents harm to people (e.g., doors unlocking to allow evacuation
during a fire).
Q9: A security architect is evaluating two authentication systems. System A is complex with
many interdependent components, while System B uses a simple, streamlined design. Applying
the principle of "Economy of Mechanism," which system should the architect prefer and why?
A. System A, because complex systems provide more features
B. System B, because simpler designs are easier to verify and less prone to flaws
C. System A, because interdependent components provide redundancy
D. System B, because it is likely to be cheaper to purchase
Correct Answer: B
Rationale: The principle of Economy of Mechanism states that security designs should be as
simple and small as possible. Simple designs have fewer attack surfaces, are easier to inspect and
test, and are less likely to contain hidden vulnerabilities than complex, interdependent systems.
WGU D488 Cybersecurity Architecture and Engineering
Final Exam 2026/2027 Actual Exam - Complete Questions
with Detailed Rationales | 100% Verified Graded A+ Pass
Guaranteed - A+ Graded
Section 1: Security Architecture Fundamentals & Frameworks (Q1-15)
Q1: A security architect is using the SABSA framework to develop a security architecture for a
global enterprise. At which layer of the SABSA matrix are the business attributes, such as
business goals and core values, defined?
A. Conceptual Layer
B. Logical Layer
C. Physical Layer
D. Component Layer
Correct Answer: A
Rationale: The SABSA Conceptual Layer focuses on the business context, defining what the
business does, its goals, and its values, which drives the rest of the security architecture. The
Logical layer defines the logical security services, the Physical layer defines the technology
mechanisms, and the Component layer deals with specific vendor products.
Q2: During a security architecture review using TOGAF, the architect needs to ensure that the
implemented security controls align with the changing business requirements and technology
landscape. Which phase of the TOGAF Architecture Development Method (ADM) is primarily
responsible for ongoing architecture governance and change management?
A. Phase A: Architecture Vision
B. Phase E: Opportunities and Solutions
C. Phase G: Implementation Governance
D. Phase H: Architecture Change Management
Correct Answer: D
Rationale: TOGAF Phase H (Architecture Change Management) ensures that the architecture
remains relevant and effective by managing changes to the architecture in a cohesive manner.
,2
Phase G governs the implementation of a specific project, while Phase A establishes the initial
vision, and Phase E identifies work packages.
Q3: An enterprise architect is utilizing the Zachman Framework to categorize architectural
artifacts. Which intersection in the Zachman matrix answers the question "Where?" from the
perspective of the system model (i.e., where the system is located within the network topology)?
A. Planner: Location (Where)
B. Owner: Location (Where)
C. Designer: Location (Where)
D. Builder: Location (Where)
Correct Answer: C
Rationale: In the Zachman Framework, the "Where" column represents distribution and location.
The "Designer" row represents the system model perspective, detailing how the system meets the
business requirements, including its logical network placement and distribution. The Planner row
represents scope, and the Owner row represents the enterprise model.
Q4: A Chief Information Security Officer (CISO) wants to map the organization's current
security capabilities to the NIST Cybersecurity Framework (CSF) to identify gaps. Which CSF
core function focuses on developing and implementing safeguards to ensure the delivery of
critical services?
A. Identify
B. Protect
C. Detect
D. Respond
Correct Answer: B
Rationale: The NIST CSF "Protect" function encompasses the safeguards and controls
implemented to ensure the delivery of critical services, including access control, awareness
training, data security, and protective technology. "Identify" focuses on understanding risk,
"Detect" on finding incidents, and "Respond" on taking action during an incident.
,3
Q5: When designing a security program aligned with ISO/IEC 27001, an architect must define
the Statement of Applicability (SoA). What does the SoA document?
A. A complete inventory of all physical and logical assets
B. The risk assessment methodology used by the organization
C. The controls that are applicable and their justification for implementation or exclusion
D. The legal, regulatory, and contractual requirements
Correct Answer: C
Rationale: The Statement of Applicability (SoA) is a mandatory ISO 27001 document that lists
all Annex A controls, identifies which are applicable to the organization, and justifies why they
are implemented or why they are excluded. Asset inventories and risk methodologies are separate
documents.
Q6: A security architect is designing a data center network. To adhere to the principle of "defense
in depth," which architectural approach should the architect implement?
A. Relying entirely on a robust next-generation firewall at the perimeter
B. Implementing multiple overlapping security controls across physical, network, and
application layers
C. Focusing all security efforts on encrypting data at rest
D. Deploying a single, highly sensitive intrusion prevention system at the internet border
Correct Answer: B
Rationale: Defense in depth ensures that if one security control fails, other controls are in place
to protect the asset. This requires layering multiple different types of controls (physical,
technical, administrative) rather than relying on a single perimeter or a single control type.
Q7: An organization requires that database administrators (DBAs) cannot alter financial records,
and accountants cannot modify database schemas. Which security architecture principle is being
enforced?
A. Least Privilege
B. Separation of Duties
C. Defense in Depth
, 4
D. Fail Secure
Correct Answer: B
Rationale: Separation of Duties (SoD) divides critical tasks among multiple individuals to
prevent fraud or error. Least privilege restricts access rights to the minimum necessary, but SoD
specifically ensures that no single person has complete control over a sensitive process.
Q8: A newly deployed access control system fails to respond to authentication requests during a
power outage. The doors remain locked, preventing both unauthorized entry and authorized exit.
Which security design principle does this demonstrate?
A. Fail Safe
B. Fail Secure
C. Economy of Mechanism
D. Open Design
Correct Answer: B
Rationale: "Fail secure" means that when a system fails, it defaults to a state that prevents
unauthorized access, even if it inconveniences authorized users (e.g., doors locking). "Fail safe"
would default to a state that prevents harm to people (e.g., doors unlocking to allow evacuation
during a fire).
Q9: A security architect is evaluating two authentication systems. System A is complex with
many interdependent components, while System B uses a simple, streamlined design. Applying
the principle of "Economy of Mechanism," which system should the architect prefer and why?
A. System A, because complex systems provide more features
B. System B, because simpler designs are easier to verify and less prone to flaws
C. System A, because interdependent components provide redundancy
D. System B, because it is likely to be cheaper to purchase
Correct Answer: B
Rationale: The principle of Economy of Mechanism states that security designs should be as
simple and small as possible. Simple designs have fewer attack surfaces, are easier to inspect and
test, and are less likely to contain hidden vulnerabilities than complex, interdependent systems.
