WGU D488 - OFFICIAL EXAM
OBJECTIVE ASSESSMENT - EXAM
WGU D488 Final Exam Test Bank
(Latest Update 2026/2027)
Cybersecurity Architecture and
Engineering | Questions and Answers
WGU D488 | Cybersecurity Architecture and Engineering
75 100% 2026/2027
QUESTIONS VERIFIED ANSWERS EDITION
TOPICS COVERED Secure Software and System Design
Security Operations and Risk Management
Cryptography and Public Key Infrastructure
Incident Response and Compliance
Identity and Access Management (IAM)
Network Security Architecture
COVER PAGE - 1
,SECTION 1 | Cryptography and Public Key Infrastructure | Q1-Q15 | WGU D488 2026/2027
Q1 Question 1 of 75
A financial institution is selecting a symmetric cipher for protecting customer records at rest in a
database column. The security architect mandates AES-256 in GCM mode rather than CBC. Which
property of GCM is the primary reason for this choice?
A. GCM provides built-in authenticated encryption eliminating the need for a separate HMAC step.
B. GCM supports longer key lengths than CBC, increasing brute-force resistance.
C. GCM operates as a stream cipher allowing partial block encryption without padding.
D. GCM uses a static initialization vector simplifying key management operations.
Correct Answer: A
Rationale:
GCM (Galois/Counter Mode) combines AES encryption with Galois-field authentication, producing both ciphertext and
an authentication tag in one pass. CBC only provides confidentiality and requires a separate HMAC, which if
misapplied leads to padding-oracle vulnerabilities. The other options either misstate GCM properties or describe
irrelevant features.
Q2 Question 2 of 75
A software engineer is implementing RSA encryption for exchanging session keys between
microservices. The security team mandates OAEP padding instead of PKCS#1 v1.5. Which specific
attack does OAEP primarily prevent?
A. Brute-force attacks against short RSA key lengths under 1024 bits.
B. Bleichenbacher's adaptive chosen-ciphertext attack on padding oracles.
C. Side-channel timing attacks exploiting modular exponentiation.
D. Shor's algorithm decryption attempts from quantum processors.
Correct Answer: B
Rationale:
OAEP (Optimal Asymmetric Encryption Padding) introduces randomized padding and a Feistel network structure that
prevents Bleichenbacher's attack, which leverages oracle responses about PKCS#1 v1.5 padding validity to decrypt
ciphertext incrementally. OAEP does not address quantum threats, timing, or brute force on short keys.
WGU D488 Final Exam Test Bank 2026/2027 - Cybersecurity Architecture and Engineering | Passing Score: 80% | Page 2 of 42
,Q3 Question 3 of 75
A DevOps team configures TLS 1.3 for a customer-facing web application and observes the
handshake completes in a single round trip, down from two in TLS 1.2. Which protocol change most
directly enables this reduction?
A. Substitution of ChaCha20-Poly1305 as the default symmetric cipher suite.
B. Adoption of SHA-384 as the required message authentication code.
C. Removal of RSA key exchange in favor of mandatory (EC)DHE with forward secrecy.
D. Introduction of session tickets signed with Ed25519 signatures.
Correct Answer: C
Rationale:
TLS 1.3 removes RSA key exchange and all static key exchange mechanisms, requiring ephemeral Diffie-Hellman.
This allows the client to send key share material in its first flight, collapsing the handshake to 1-RTT (and 0-RTT for
resumed sessions). Cipher choice and MAC algorithm do not affect round-trip count.
Q4 Question 4 of 75
A cryptography library maintainer is evaluating SHA-3 as a replacement for SHA-256 in a
hardware-constrained IoT firmware. Which structural difference distinguishes SHA-3 from SHA-2?
A. SHA-3 employs a longer block size making it resistant to length-extension attacks natively.
B. SHA-3 mandates a 512-bit output to qualify for SHA-3 family compliance.
C. SHA-3 relies on the same compression function as SHA-2 with a different initialization vector.
D. SHA-3 uses a sponge construction with Keccak permutation rather than a Merkle-Damgard structure.
Correct Answer: D
Rationale:
SHA-3 is built on the Keccak sponge construction, which absorbs input and squeezes output through a permutation,
fundamentally different from SHA-2's Merkle-Damgard compression. This makes SHA-3 natively resistant to
length-extension attacks without needing HMAC. Output size is configurable (224, 256, 384, or 512 bits).
WGU D488 Final Exam Test Bank 2026/2027 - Cybersecurity Architecture and Engineering | Passing Score: 80% | Page 3 of 42
, Q5 Question 5 of 75
A system architect is choosing between RSA-2048 and ECDSA with the P-256 curve for signing JWT
tokens in a high-throughput API gateway. Which advantage does ECDSA provide in this scenario?
A. Equivalent security with substantially smaller key and signature sizes reducing token bloat.
B. Faster verification due to simpler mathematical operations on integers rather than curves.
C. Native support for encryption in addition to digital signatures.
D. Resistance to quantum decryption attacks through elliptic curve discrete log hardness.
Correct Answer: A
Rationale:
ECDSA P-256 provides comparable security to RSA-2048 but with a 256-bit key and 64-byte signature versus a
256-byte RSA signature, materially reducing JWT size and bandwidth. ECDSA verification is generally slower than
RSA at equivalent security levels, and ECDSA is signature-only. Neither algorithm is quantum-resistant.
Q6 Question 6 of 75
A security engineer needs to derive multiple independent symmetric keys from a single 256-bit master
secret stored in a hardware security module. Which construction should the engineer use?
A. PBKDF2 with one million iterations and a random salt per derivation.
B. HKDF with a salt and context-specific info parameter to derive labeled subkeys.
C. Direct truncation of the master secret into 128-bit segments for each derived key.
D. AES-CBC encryption of a counter value using the master secret as the key.
Correct Answer: B
Rationale:
HKDF (HMAC-based Key Derivation Function, RFC 5869) is purpose-built for deriving independent keys from a
master key using extract-then-expand phases with salt and context info. Truncation risks correlation, PBKDF2 is
intended for password stretching (not key derivation from strong material), and AES-CBC of a counter is non-standard
and lacks cryptographic binding.
WGU D488 Final Exam Test Bank 2026/2027 - Cybersecurity Architecture and Engineering | Passing Score: 80% | Page 4 of 42
OBJECTIVE ASSESSMENT - EXAM
WGU D488 Final Exam Test Bank
(Latest Update 2026/2027)
Cybersecurity Architecture and
Engineering | Questions and Answers
WGU D488 | Cybersecurity Architecture and Engineering
75 100% 2026/2027
QUESTIONS VERIFIED ANSWERS EDITION
TOPICS COVERED Secure Software and System Design
Security Operations and Risk Management
Cryptography and Public Key Infrastructure
Incident Response and Compliance
Identity and Access Management (IAM)
Network Security Architecture
COVER PAGE - 1
,SECTION 1 | Cryptography and Public Key Infrastructure | Q1-Q15 | WGU D488 2026/2027
Q1 Question 1 of 75
A financial institution is selecting a symmetric cipher for protecting customer records at rest in a
database column. The security architect mandates AES-256 in GCM mode rather than CBC. Which
property of GCM is the primary reason for this choice?
A. GCM provides built-in authenticated encryption eliminating the need for a separate HMAC step.
B. GCM supports longer key lengths than CBC, increasing brute-force resistance.
C. GCM operates as a stream cipher allowing partial block encryption without padding.
D. GCM uses a static initialization vector simplifying key management operations.
Correct Answer: A
Rationale:
GCM (Galois/Counter Mode) combines AES encryption with Galois-field authentication, producing both ciphertext and
an authentication tag in one pass. CBC only provides confidentiality and requires a separate HMAC, which if
misapplied leads to padding-oracle vulnerabilities. The other options either misstate GCM properties or describe
irrelevant features.
Q2 Question 2 of 75
A software engineer is implementing RSA encryption for exchanging session keys between
microservices. The security team mandates OAEP padding instead of PKCS#1 v1.5. Which specific
attack does OAEP primarily prevent?
A. Brute-force attacks against short RSA key lengths under 1024 bits.
B. Bleichenbacher's adaptive chosen-ciphertext attack on padding oracles.
C. Side-channel timing attacks exploiting modular exponentiation.
D. Shor's algorithm decryption attempts from quantum processors.
Correct Answer: B
Rationale:
OAEP (Optimal Asymmetric Encryption Padding) introduces randomized padding and a Feistel network structure that
prevents Bleichenbacher's attack, which leverages oracle responses about PKCS#1 v1.5 padding validity to decrypt
ciphertext incrementally. OAEP does not address quantum threats, timing, or brute force on short keys.
WGU D488 Final Exam Test Bank 2026/2027 - Cybersecurity Architecture and Engineering | Passing Score: 80% | Page 2 of 42
,Q3 Question 3 of 75
A DevOps team configures TLS 1.3 for a customer-facing web application and observes the
handshake completes in a single round trip, down from two in TLS 1.2. Which protocol change most
directly enables this reduction?
A. Substitution of ChaCha20-Poly1305 as the default symmetric cipher suite.
B. Adoption of SHA-384 as the required message authentication code.
C. Removal of RSA key exchange in favor of mandatory (EC)DHE with forward secrecy.
D. Introduction of session tickets signed with Ed25519 signatures.
Correct Answer: C
Rationale:
TLS 1.3 removes RSA key exchange and all static key exchange mechanisms, requiring ephemeral Diffie-Hellman.
This allows the client to send key share material in its first flight, collapsing the handshake to 1-RTT (and 0-RTT for
resumed sessions). Cipher choice and MAC algorithm do not affect round-trip count.
Q4 Question 4 of 75
A cryptography library maintainer is evaluating SHA-3 as a replacement for SHA-256 in a
hardware-constrained IoT firmware. Which structural difference distinguishes SHA-3 from SHA-2?
A. SHA-3 employs a longer block size making it resistant to length-extension attacks natively.
B. SHA-3 mandates a 512-bit output to qualify for SHA-3 family compliance.
C. SHA-3 relies on the same compression function as SHA-2 with a different initialization vector.
D. SHA-3 uses a sponge construction with Keccak permutation rather than a Merkle-Damgard structure.
Correct Answer: D
Rationale:
SHA-3 is built on the Keccak sponge construction, which absorbs input and squeezes output through a permutation,
fundamentally different from SHA-2's Merkle-Damgard compression. This makes SHA-3 natively resistant to
length-extension attacks without needing HMAC. Output size is configurable (224, 256, 384, or 512 bits).
WGU D488 Final Exam Test Bank 2026/2027 - Cybersecurity Architecture and Engineering | Passing Score: 80% | Page 3 of 42
, Q5 Question 5 of 75
A system architect is choosing between RSA-2048 and ECDSA with the P-256 curve for signing JWT
tokens in a high-throughput API gateway. Which advantage does ECDSA provide in this scenario?
A. Equivalent security with substantially smaller key and signature sizes reducing token bloat.
B. Faster verification due to simpler mathematical operations on integers rather than curves.
C. Native support for encryption in addition to digital signatures.
D. Resistance to quantum decryption attacks through elliptic curve discrete log hardness.
Correct Answer: A
Rationale:
ECDSA P-256 provides comparable security to RSA-2048 but with a 256-bit key and 64-byte signature versus a
256-byte RSA signature, materially reducing JWT size and bandwidth. ECDSA verification is generally slower than
RSA at equivalent security levels, and ECDSA is signature-only. Neither algorithm is quantum-resistant.
Q6 Question 6 of 75
A security engineer needs to derive multiple independent symmetric keys from a single 256-bit master
secret stored in a hardware security module. Which construction should the engineer use?
A. PBKDF2 with one million iterations and a random salt per derivation.
B. HKDF with a salt and context-specific info parameter to derive labeled subkeys.
C. Direct truncation of the master secret into 128-bit segments for each derived key.
D. AES-CBC encryption of a counter value using the master secret as the key.
Correct Answer: B
Rationale:
HKDF (HMAC-based Key Derivation Function, RFC 5869) is purpose-built for deriving independent keys from a
master key using extract-then-expand phases with salt and context info. Truncation risks correlation, PBKDF2 is
intended for password stretching (not key derivation from strong material), and AES-CBC of a counter is non-standard
and lacks cryptographic binding.
WGU D488 Final Exam Test Bank 2026/2027 - Cybersecurity Architecture and Engineering | Passing Score: 80% | Page 4 of 42
