WGU D488 Pre-Assessment
Cybersecurity Architecture
and Engineering
Test Guide Questions and Answers
100 Comprehensive Questions | 9 Sections | Grade A
Aligned with 2026-2027 WGU Curriculum Standards
Scenario-Based | Application-Focused | Critical Thinking
Latest Update: 2026/2027 Edition
,WGU D488 Pre-Assessment Exam 2026/2027 Cybersecurity Architecture and Engineering
How to Use This Exam Guide
This comprehensive pre-assessment exam contains 100 carefully crafted multiple-choice questions organized into nine
sections aligned with the WGU D488 Cybersecurity Architecture and Engineering competency framework. Each
question includes four answer options (A-D), the correct answer clearly marked, and a detailed rationale explaining why
the answer is correct and why the distractors are incorrect. The questions are designed to mirror the actual WGU D488
Pre-Assessment difficulty level and cover all key competency areas including security models, access control,
cryptography, network security, cloud security, application security, risk management, endpoint security, and integrated
scenario-based critical thinking.
Cognitive level distribution: 25% recall (direct knowledge questions), 55% application (scenario-based questions
requiring applied understanding), and 20% analysis (critical thinking questions requiring synthesis of multiple concepts).
Use this guide to identify knowledge gaps and strengthen your understanding of cybersecurity architecture and
engineering principles.
Section 1: Security Architecture and Design Principles
(Secure Design, Security Models, and Frameworks)
Q1:
A financial institution is designing a new security architecture. The chief security architect insists that no single security
control should be able to compromise the entire system if it fails. Which secure design principle does this BEST represent?
A. Separation of duties
B. Defense in depth
C. Least privilege
D. Fail secure
Correct Answer: C
Defense in depth ensures that multiple layers of security controls are implemented so that if one control fails, additional controls
continue to protect the system. Separation of duties divides critical tasks among multiple individuals to prevent fraud. Least
privilege ensures users have only the minimum access necessary. Fail secure ensures a system defaults to a secure state
when it fails, but it does not inherently provide multiple layers of protection.
Q2:
A government agency classifies documents using labels such as Top Secret, Secret, and Confidential. The security policy
mandates that personnel with a Secret clearance cannot write information to a Top Secret document. Which security model
enforces this specific rule?
A. Biba Model
B. Bell-LaPadula Model
C. Clark-Wilson Model
D. Brewer-Nash Model
Correct Answer: B
The Bell-LaPadula Model focuses on confidentiality and enforces two key rules: the Simple Security Property (no read up) and
the *-Property (no write down). The scenario describes the *-Property, where a subject at a lower clearance level cannot write
to a higher classification level, preventing the downward flow of sensitive information. The Biba Model focuses on integrity with
the inverse rules. Clark-Wilson uses well-formed transactions and separation of duties for integrity.
Q3:
A hospital implements a policy where two nurses must independently verify a medication dosage before administration. No
single nurse can complete the process alone. Which secure design principle is being applied?
2
, WGU D488 Pre-Assessment Exam 2026/2027 Cybersecurity Architecture and Engineering
A. Economy of mechanism
B. Least privilege
C. Separation of duties
D. Complete mediation
Correct Answer: C
Separation of duties requires that critical operations be divided among two or more individuals so that no single person can
complete a sensitive action independently. This prevents insider fraud and errors. Economy of mechanism refers to keeping
security designs simple. Least privilege limits access rights to the minimum necessary. Complete mediation ensures every
access request is checked against the access control system.
Q4:
An organization has achieved a level where all processes are documented, standardized, and integrated across the enterprise.
Proactive monitoring and quantitative analysis are used to continuously improve processes. At which CMMI level is this
organization operating?
A. Level 3: Defined
B. Level 4: Quantitatively Managed
C. Level 5: Optimizing
D. Level 2: Managed
Correct Answer: C
CMMI Level 5 (Optimizing) is characterized by continuous process improvement based on quantitative feedback and
data-driven analysis. Level 3 (Defined) means processes are documented and standardized but not yet quantitatively
managed. Level 4 (Quantitatively Managed) adds metrics and statistical analysis but does not emphasize continuous
optimization. Level 2 (Managed) indicates reactive project-level planning without organizational standardization.
Q5:
A software development team is performing threat modeling on a new web application. They identify a scenario where an
attacker could forge their identity to gain unauthorized access. Under the STRIDE threat model framework, which category
does this threat fall into?
A. Tampering
B. Information Disclosure
C. Spoofing
D. Elevation of Privilege
Correct Answer: C
STRIDE categorizes threats into six types: Spoofing (identity forgery), Tampering (data modification), Repudiation (denying
actions), Information Disclosure (data exposure), Denial of Service (availability attacks), and Elevation of Privilege (gaining
unauthorized privileges). Identity forgery is specifically Spoofing. Tampering involves modifying data. Information Disclosure
involves exposing data. Elevation of Privilege involves gaining higher-level access.
Q6:
A security engineer is designing an access control system for a military installation where all users are assigned security
clearances and all data is labeled with classification levels. Users cannot change access permissions regardless of their
position. Which access control model is MOST appropriate?
A. Discretionary Access Control (DAC)
B. Role-Based Access Control (RBAC)
C. Attribute-Based Access Control (ABAC)
D. Mandatory Access Control (MAC)
Correct Answer: D
Mandatory Access Control (MAC) uses system-enforced labels such as Top Secret, Secret, and Confidential. The system
determines access based on clearance levels and data classification, and users cannot modify access permissions. DAC
allows owners to determine access. RBAC assigns access based on job roles. ABAC uses attributes such as location,
department, and time for access decisions.
3
Cybersecurity Architecture
and Engineering
Test Guide Questions and Answers
100 Comprehensive Questions | 9 Sections | Grade A
Aligned with 2026-2027 WGU Curriculum Standards
Scenario-Based | Application-Focused | Critical Thinking
Latest Update: 2026/2027 Edition
,WGU D488 Pre-Assessment Exam 2026/2027 Cybersecurity Architecture and Engineering
How to Use This Exam Guide
This comprehensive pre-assessment exam contains 100 carefully crafted multiple-choice questions organized into nine
sections aligned with the WGU D488 Cybersecurity Architecture and Engineering competency framework. Each
question includes four answer options (A-D), the correct answer clearly marked, and a detailed rationale explaining why
the answer is correct and why the distractors are incorrect. The questions are designed to mirror the actual WGU D488
Pre-Assessment difficulty level and cover all key competency areas including security models, access control,
cryptography, network security, cloud security, application security, risk management, endpoint security, and integrated
scenario-based critical thinking.
Cognitive level distribution: 25% recall (direct knowledge questions), 55% application (scenario-based questions
requiring applied understanding), and 20% analysis (critical thinking questions requiring synthesis of multiple concepts).
Use this guide to identify knowledge gaps and strengthen your understanding of cybersecurity architecture and
engineering principles.
Section 1: Security Architecture and Design Principles
(Secure Design, Security Models, and Frameworks)
Q1:
A financial institution is designing a new security architecture. The chief security architect insists that no single security
control should be able to compromise the entire system if it fails. Which secure design principle does this BEST represent?
A. Separation of duties
B. Defense in depth
C. Least privilege
D. Fail secure
Correct Answer: C
Defense in depth ensures that multiple layers of security controls are implemented so that if one control fails, additional controls
continue to protect the system. Separation of duties divides critical tasks among multiple individuals to prevent fraud. Least
privilege ensures users have only the minimum access necessary. Fail secure ensures a system defaults to a secure state
when it fails, but it does not inherently provide multiple layers of protection.
Q2:
A government agency classifies documents using labels such as Top Secret, Secret, and Confidential. The security policy
mandates that personnel with a Secret clearance cannot write information to a Top Secret document. Which security model
enforces this specific rule?
A. Biba Model
B. Bell-LaPadula Model
C. Clark-Wilson Model
D. Brewer-Nash Model
Correct Answer: B
The Bell-LaPadula Model focuses on confidentiality and enforces two key rules: the Simple Security Property (no read up) and
the *-Property (no write down). The scenario describes the *-Property, where a subject at a lower clearance level cannot write
to a higher classification level, preventing the downward flow of sensitive information. The Biba Model focuses on integrity with
the inverse rules. Clark-Wilson uses well-formed transactions and separation of duties for integrity.
Q3:
A hospital implements a policy where two nurses must independently verify a medication dosage before administration. No
single nurse can complete the process alone. Which secure design principle is being applied?
2
, WGU D488 Pre-Assessment Exam 2026/2027 Cybersecurity Architecture and Engineering
A. Economy of mechanism
B. Least privilege
C. Separation of duties
D. Complete mediation
Correct Answer: C
Separation of duties requires that critical operations be divided among two or more individuals so that no single person can
complete a sensitive action independently. This prevents insider fraud and errors. Economy of mechanism refers to keeping
security designs simple. Least privilege limits access rights to the minimum necessary. Complete mediation ensures every
access request is checked against the access control system.
Q4:
An organization has achieved a level where all processes are documented, standardized, and integrated across the enterprise.
Proactive monitoring and quantitative analysis are used to continuously improve processes. At which CMMI level is this
organization operating?
A. Level 3: Defined
B. Level 4: Quantitatively Managed
C. Level 5: Optimizing
D. Level 2: Managed
Correct Answer: C
CMMI Level 5 (Optimizing) is characterized by continuous process improvement based on quantitative feedback and
data-driven analysis. Level 3 (Defined) means processes are documented and standardized but not yet quantitatively
managed. Level 4 (Quantitatively Managed) adds metrics and statistical analysis but does not emphasize continuous
optimization. Level 2 (Managed) indicates reactive project-level planning without organizational standardization.
Q5:
A software development team is performing threat modeling on a new web application. They identify a scenario where an
attacker could forge their identity to gain unauthorized access. Under the STRIDE threat model framework, which category
does this threat fall into?
A. Tampering
B. Information Disclosure
C. Spoofing
D. Elevation of Privilege
Correct Answer: C
STRIDE categorizes threats into six types: Spoofing (identity forgery), Tampering (data modification), Repudiation (denying
actions), Information Disclosure (data exposure), Denial of Service (availability attacks), and Elevation of Privilege (gaining
unauthorized privileges). Identity forgery is specifically Spoofing. Tampering involves modifying data. Information Disclosure
involves exposing data. Elevation of Privilege involves gaining higher-level access.
Q6:
A security engineer is designing an access control system for a military installation where all users are assigned security
clearances and all data is labeled with classification levels. Users cannot change access permissions regardless of their
position. Which access control model is MOST appropriate?
A. Discretionary Access Control (DAC)
B. Role-Based Access Control (RBAC)
C. Attribute-Based Access Control (ABAC)
D. Mandatory Access Control (MAC)
Correct Answer: D
Mandatory Access Control (MAC) uses system-enforced labels such as Top Secret, Secret, and Confidential. The system
determines access based on clearance levels and data classification, and users cannot modify access permissions. DAC
allows owners to determine access. RBAC assigns access based on job roles. ABAC uses attributes such as location,
department, and time for access decisions.
3
