1|Page
WGU D488 CYBERSECURITY ARCHITECTURE AND
ENGINEERING PREP EXAM VERSION 1, 2 AND 3
WITH 500+ QUESTIONS AND DETAILED ANSWERS
THE LATEST UPDATED EXAM BANK INCLUDING
EXPERT VERIFIED SOLUTIONS FOR A SURE PASS
An IT organization had a security breach after deploying an update to its
production web servers. The application currently goes through a manual update
process a few times per year. The security team needs to recommend a failback
option for future deployments.
Which solution fulfills these requirements?
A) Implementing a code scanner
B) Implementing code signing
C) Implementing versioning
D) Implementing a security requirements traceability matrix (SRTM)
C) Implementing versioning
A software development team is working on a new mobile application that will be
used by customers. The security team must ensure that builds of the application
will be trusted by a variety of mobile devices.
Which solution fulfills these requirements?
A) Code scanning
B) Regression testing
C) Code signing
D) Continuous delivery
C) Code signing
,2|Page
An IT organization recently suffered a data leak incident. Management has asked
the security team to implement a print blocking mechanism for all documents
stored on a corporate file share.
Which solution fulfills these requirements?
A) Virtual desktop infrastructure (VDI)
B) Remote Desktop Protocol (RDP)
C) Digital rights management (DRM)
D) Watermarking
C) Digital rights management (DRM)
A company has recently discovered that a competitor is distributing copyrighted
videos produced by the in-house marketing team. Management has asked the
security team to prevent these types of violations in the future.
Which solution fulfills these requirements?
A) Virtual desktop infrastructure (VDI)
B) Secure Socket Shell (SSH)
C) Digital rights management (DRM)
D) Remote Desktop Protocol (RDP)
C) Digital rights management (DRM)
,3|Page
A security team has been tasked with performing regular vulnerability scans for a
cloud-based infrastructure.
How should these vulnerability scans be conducted when implementing zero trust
security?
A) Manually
B) Annually
C) Automatically
D) As needed
C) Automatically
A healthcare company needs to ensure that medical researchers cannot
inadvertently share protected health information (PHI) data from medical records.
What is the best solution?
A) Encryption
B) Metadata
C) Anonymization
D) Obfuscation
C) Anonymization
A security team has been tasked with mitigating the risk of stolen credentials after
a recent breach. The solution must isolate the use of privileged accounts. In the
, 4|Page
future, administrators must request access to mission-critical services before they
can perform their tasks.
What is the best solution?
A) Identity and access management (IAM)
B) Password policies
C) Privileged access management (PAM)
D) Password complexity
C) Privileged access management (PAM)
An IT security team has been notified that external contractors are using their
personal laptops to gain access to the corporate network. The team needs To
recommend a solution that will prevent unapproved devices from accessing the
network.
Which solution fulfills these requirements?
A) Implementing a demilitarized zone (DMZ)
B) Installing a hardware security module
C) Implementing port security
D) Deploying a software firewall
C) Implementing port security
An engineer deploys a cloud access security broker (CASB) solution to mediate
access to cloud services by users across all types of devices. As the engineer
utilizes a reverse proxy in the deployment, how is the CASB configured?
WGU D488 CYBERSECURITY ARCHITECTURE AND
ENGINEERING PREP EXAM VERSION 1, 2 AND 3
WITH 500+ QUESTIONS AND DETAILED ANSWERS
THE LATEST UPDATED EXAM BANK INCLUDING
EXPERT VERIFIED SOLUTIONS FOR A SURE PASS
An IT organization had a security breach after deploying an update to its
production web servers. The application currently goes through a manual update
process a few times per year. The security team needs to recommend a failback
option for future deployments.
Which solution fulfills these requirements?
A) Implementing a code scanner
B) Implementing code signing
C) Implementing versioning
D) Implementing a security requirements traceability matrix (SRTM)
C) Implementing versioning
A software development team is working on a new mobile application that will be
used by customers. The security team must ensure that builds of the application
will be trusted by a variety of mobile devices.
Which solution fulfills these requirements?
A) Code scanning
B) Regression testing
C) Code signing
D) Continuous delivery
C) Code signing
,2|Page
An IT organization recently suffered a data leak incident. Management has asked
the security team to implement a print blocking mechanism for all documents
stored on a corporate file share.
Which solution fulfills these requirements?
A) Virtual desktop infrastructure (VDI)
B) Remote Desktop Protocol (RDP)
C) Digital rights management (DRM)
D) Watermarking
C) Digital rights management (DRM)
A company has recently discovered that a competitor is distributing copyrighted
videos produced by the in-house marketing team. Management has asked the
security team to prevent these types of violations in the future.
Which solution fulfills these requirements?
A) Virtual desktop infrastructure (VDI)
B) Secure Socket Shell (SSH)
C) Digital rights management (DRM)
D) Remote Desktop Protocol (RDP)
C) Digital rights management (DRM)
,3|Page
A security team has been tasked with performing regular vulnerability scans for a
cloud-based infrastructure.
How should these vulnerability scans be conducted when implementing zero trust
security?
A) Manually
B) Annually
C) Automatically
D) As needed
C) Automatically
A healthcare company needs to ensure that medical researchers cannot
inadvertently share protected health information (PHI) data from medical records.
What is the best solution?
A) Encryption
B) Metadata
C) Anonymization
D) Obfuscation
C) Anonymization
A security team has been tasked with mitigating the risk of stolen credentials after
a recent breach. The solution must isolate the use of privileged accounts. In the
, 4|Page
future, administrators must request access to mission-critical services before they
can perform their tasks.
What is the best solution?
A) Identity and access management (IAM)
B) Password policies
C) Privileged access management (PAM)
D) Password complexity
C) Privileged access management (PAM)
An IT security team has been notified that external contractors are using their
personal laptops to gain access to the corporate network. The team needs To
recommend a solution that will prevent unapproved devices from accessing the
network.
Which solution fulfills these requirements?
A) Implementing a demilitarized zone (DMZ)
B) Installing a hardware security module
C) Implementing port security
D) Deploying a software firewall
C) Implementing port security
An engineer deploys a cloud access security broker (CASB) solution to mediate
access to cloud services by users across all types of devices. As the engineer
utilizes a reverse proxy in the deployment, how is the CASB configured?
