WGU D488 - Cybersecurity Architecture
& Engineering Questions and Answers
1. Which type of security should a business use on its layer 2 switch to isolate the
finance network from other departmental networks?
A - Virtual Private Network (VPN)
B - Internet Protocol Security (IPSec)
C - Virtual Local Area Network (VLAN)
D - Remotely Triggered Black Hole (RTBH)
ANS C - Virtual Local Area Network (VLAN)
VLANs allow companies to logically segment network traffic, ensuring devices on different VLANs cannot communicate unless
otherwise specified in a layer 3 device like a router.
2. Which type of software testing should be used when there has been a change
within the existing environment?
A - Regression Testing
B - Penetration Testing
C - Requirements Testing
D - Release Testing
ANS A - Regression Testing
Regression testing ensures that recent changes within the environment have not introduced new defects or broken existing
1/
111
,functionality.
3. Which security technique should be used to detect a weak password that may match
common dictionary words?
A - Password Spraying
B - Password Auditing
C - Password Guessing
D - Password History
ANS B - Password Auditing
Password auditing allows for existing passwords to be compared against known weak passwords to help determine the security
of a credential.
4. What should an organization implement if it wants users of their site to
provide a password, memorable word, and pin?
A - Multi-factor authentication (MFA)
B - Two-factor authentication (2FA)
C - Two-step verification
D - Single-factor authentication
ANS A - Multi-factor authentication
MFA enhances security by requiring multiple forms of authentication, therefore reducing the risk of unauthorized access.
5. A network technician is asked by their manager to update security to block
several known bad actor IP addresses.
2/
111
,A - Signature rules
B - Firewall rules
C - Behavior rules
D - Data loss prevention (DLP) rules
ANS B - Firewall rules
Firewall rules can be set up to deny traffic coming from known malicious IP addresses.
6. On a shopping website, there is a 500-millisecond delay when the authorized
payment button is selected for purchases. Attackers have been running a script to alter
the final payment that takes 200 milliseconds. Which vulnerability on the website is
being targeted by the attackers?
A - Buffer Overflow
B - Integer Overflow
C - Broken Authentication
D - Race Condition
ANS D - Race Condition
A race condition occurs when multiple processes or actions are executed simultaneously, and the outcome depends on the
sequence or timing of events.
7. A company wants to provide laptops to its employees so they can work remotely.
What should be implemented to ensure only work applications can be installed on
company laptops?
A - Containerization
3/
111
, B - Token-based access
C - Patch repository
D - Whitelisting
ANS D - Whitelisting
Whitelisting ensures that only approved applications can be installed and executed on company laptops.
8. What should a business use to provide non-repudiation for emails between
employees?
A - TLS/SSL
B - AES-256
C - S/MIME
D - IPSec
ANS C - S/MIME (Secure/Multipurpose Internet Mail Extensions)
S/MIME provides non-repudiation for emails by using digital signatures.
9. Which strategy is appropriate for a risk management team to determine if a
business has insufficient security controls?
A - Qualitative assessment
B - Gap assessment
C - Quantitative risk assessment
D - Impact assessment
ANS B - Gap assessment
4/
111
& Engineering Questions and Answers
1. Which type of security should a business use on its layer 2 switch to isolate the
finance network from other departmental networks?
A - Virtual Private Network (VPN)
B - Internet Protocol Security (IPSec)
C - Virtual Local Area Network (VLAN)
D - Remotely Triggered Black Hole (RTBH)
ANS C - Virtual Local Area Network (VLAN)
VLANs allow companies to logically segment network traffic, ensuring devices on different VLANs cannot communicate unless
otherwise specified in a layer 3 device like a router.
2. Which type of software testing should be used when there has been a change
within the existing environment?
A - Regression Testing
B - Penetration Testing
C - Requirements Testing
D - Release Testing
ANS A - Regression Testing
Regression testing ensures that recent changes within the environment have not introduced new defects or broken existing
1/
111
,functionality.
3. Which security technique should be used to detect a weak password that may match
common dictionary words?
A - Password Spraying
B - Password Auditing
C - Password Guessing
D - Password History
ANS B - Password Auditing
Password auditing allows for existing passwords to be compared against known weak passwords to help determine the security
of a credential.
4. What should an organization implement if it wants users of their site to
provide a password, memorable word, and pin?
A - Multi-factor authentication (MFA)
B - Two-factor authentication (2FA)
C - Two-step verification
D - Single-factor authentication
ANS A - Multi-factor authentication
MFA enhances security by requiring multiple forms of authentication, therefore reducing the risk of unauthorized access.
5. A network technician is asked by their manager to update security to block
several known bad actor IP addresses.
2/
111
,A - Signature rules
B - Firewall rules
C - Behavior rules
D - Data loss prevention (DLP) rules
ANS B - Firewall rules
Firewall rules can be set up to deny traffic coming from known malicious IP addresses.
6. On a shopping website, there is a 500-millisecond delay when the authorized
payment button is selected for purchases. Attackers have been running a script to alter
the final payment that takes 200 milliseconds. Which vulnerability on the website is
being targeted by the attackers?
A - Buffer Overflow
B - Integer Overflow
C - Broken Authentication
D - Race Condition
ANS D - Race Condition
A race condition occurs when multiple processes or actions are executed simultaneously, and the outcome depends on the
sequence or timing of events.
7. A company wants to provide laptops to its employees so they can work remotely.
What should be implemented to ensure only work applications can be installed on
company laptops?
A - Containerization
3/
111
, B - Token-based access
C - Patch repository
D - Whitelisting
ANS D - Whitelisting
Whitelisting ensures that only approved applications can be installed and executed on company laptops.
8. What should a business use to provide non-repudiation for emails between
employees?
A - TLS/SSL
B - AES-256
C - S/MIME
D - IPSec
ANS C - S/MIME (Secure/Multipurpose Internet Mail Extensions)
S/MIME provides non-repudiation for emails by using digital signatures.
9. Which strategy is appropriate for a risk management team to determine if a
business has insufficient security controls?
A - Qualitative assessment
B - Gap assessment
C - Quantitative risk assessment
D - Impact assessment
ANS B - Gap assessment
4/
111
