2025 WGU D488 Cybersecurity Architecture and
Engineering Oa/ Wgu D488 Objective
Assessment 2025 Test Bank 1 With 360 Actual
Exam Questions And Correct Answers Graded A+
guaranteed Pass / D488 OA Prep Test Bank 1
The security team recently enabled public access to a web application hosted on a server inside the corporate
network. The developers of the application report that the server has received several structured query language
(SQL) injection attacks in the past several days. The team needs to deploy a solution that will block the SQL injection
attacks.
Which solution fulfills these requirements?
A) Virtual private network (VPN)
B) Security information and event management (SIEM)
C) Web application firewall (WAF)
D) Secure Socket Shell (SSH)
C) Web application firewall (WAF)
An IT security team has been notified that external contractors are using their personal laptops to gain access to the
corporate network. The team needs to recommend a solution that will prevent unapproved devices from accessing
the network.
Which solution fulfills these requirements?
A) Implementing a demilitarized zone (DMZ)
B) Installing a hardware security module
C) Implementing port security
D) Deploying a software firewall
C) Implementing port security
The chief technology officer for a small publishing company has been tasked with improving the company's security
posture. As part of a network upgrade, the company has decided to implement intrusion detection, spam filtering,
content filtering, and antivirus controls. The project needs to be completed using the least amount of infrastructure
while meeting all requirements.
Which solution fulfills these requirements?
A) Deploying an anti-spam gateway
,B) Deploying a proxy server
C) Deploying a unified threat management (UTM) appliance
D) Deploying a web application firewall (WAF)
C) Deploying a unified threat management (UTM) appliance
Which Orange Book level is considered mandatory protections and is based on the Bell-LaPadula security model?
AA
BC
CD
D B - ANS :D
During an XOR operation, two bits are combined. Both values are the same.
What will be the result of this combination?
A1
B0
C OR
D X - ANS :B
Which section of the Minimum Security Requirements for Multi-User Operating System (NISTIR 5153) document
addresses end-to-end user accountability?
A access control
B audit
C data integrity
D system integrity - ANS :B
Which encryption algorithm is based on the Diffie-Hellman key agreement?
A Knapsack
B International Data Encryption Algorithm
,C El Gamal
D HAVAL - ANS :C
What is meant by the term fail-safe?
A system's ability to switch over to a backup system in the event of a failure
B system's ability to preserve a secure state before and after failure
C system's ability to recover automatically through a reboot
D system's ability to terminate processes when a failure is identified - ANS :D
You need to store some magnetic storage devices in a temporary storage facility.
At which temperature could damage start to occur?
A 350 degrees Fahrenheit
B 100 degrees Fahrenheit
C 90 degrees Fahrenheit
D 175 degrees Fahrenheit - ANS :B
You need to decrypt a file that is encrypted using asymmetric encryption.
What should be used to decrypt the file?
A public key
B plaintext
C message digest
D private key - ANS :D
Which statement is true of the Rijndael algorithm?
A Rijndael uses variable block lengths and variable key lengths.
, B Rijndael uses fixed block lengths and fixed key lengths.
C Rijndael uses variable block lengths and fixed key lengths.
D Rijndael uses fixed block lengths and variable key lengths. - ANS :A
You are responsible for managing the virtual computers on your network.
Which guideline is important when managing virtual computers?
A Update the operating system and applications only on the host computer.
B Implement a firewall only on the host computer.
C Install and update the antivirus program only on the host computer.
D Isolate the host computer and each virtual computer from each other. - ANS :D
Given two messages, M1 and M2, what is the LEAST likely outcome when using the same one-way hash function, H,
to encrypt the messages?
A H(M1) = H(M2)
B H(M1) is not equal to H(M2)
C H(M1) > H(M2)
D H(M1) < H(M2) - ANS :A
Your organization has decided to implement the Diffie-Hellman asymmetric algorithm.
Which statement is true of this algorithm's key exchange?
A Authorized users exchange public keys over a secure medium.
B Unauthorized users exchange public keys over a nonsecure medium.
C Authorized users exchange secret keys over a nonsecure medium.
D Authorized users need not exchange secret keys. - ANS :C
Which processes control the flow of information in the lattice-based access control (LBAC) model?
Engineering Oa/ Wgu D488 Objective
Assessment 2025 Test Bank 1 With 360 Actual
Exam Questions And Correct Answers Graded A+
guaranteed Pass / D488 OA Prep Test Bank 1
The security team recently enabled public access to a web application hosted on a server inside the corporate
network. The developers of the application report that the server has received several structured query language
(SQL) injection attacks in the past several days. The team needs to deploy a solution that will block the SQL injection
attacks.
Which solution fulfills these requirements?
A) Virtual private network (VPN)
B) Security information and event management (SIEM)
C) Web application firewall (WAF)
D) Secure Socket Shell (SSH)
C) Web application firewall (WAF)
An IT security team has been notified that external contractors are using their personal laptops to gain access to the
corporate network. The team needs to recommend a solution that will prevent unapproved devices from accessing
the network.
Which solution fulfills these requirements?
A) Implementing a demilitarized zone (DMZ)
B) Installing a hardware security module
C) Implementing port security
D) Deploying a software firewall
C) Implementing port security
The chief technology officer for a small publishing company has been tasked with improving the company's security
posture. As part of a network upgrade, the company has decided to implement intrusion detection, spam filtering,
content filtering, and antivirus controls. The project needs to be completed using the least amount of infrastructure
while meeting all requirements.
Which solution fulfills these requirements?
A) Deploying an anti-spam gateway
,B) Deploying a proxy server
C) Deploying a unified threat management (UTM) appliance
D) Deploying a web application firewall (WAF)
C) Deploying a unified threat management (UTM) appliance
Which Orange Book level is considered mandatory protections and is based on the Bell-LaPadula security model?
AA
BC
CD
D B - ANS :D
During an XOR operation, two bits are combined. Both values are the same.
What will be the result of this combination?
A1
B0
C OR
D X - ANS :B
Which section of the Minimum Security Requirements for Multi-User Operating System (NISTIR 5153) document
addresses end-to-end user accountability?
A access control
B audit
C data integrity
D system integrity - ANS :B
Which encryption algorithm is based on the Diffie-Hellman key agreement?
A Knapsack
B International Data Encryption Algorithm
,C El Gamal
D HAVAL - ANS :C
What is meant by the term fail-safe?
A system's ability to switch over to a backup system in the event of a failure
B system's ability to preserve a secure state before and after failure
C system's ability to recover automatically through a reboot
D system's ability to terminate processes when a failure is identified - ANS :D
You need to store some magnetic storage devices in a temporary storage facility.
At which temperature could damage start to occur?
A 350 degrees Fahrenheit
B 100 degrees Fahrenheit
C 90 degrees Fahrenheit
D 175 degrees Fahrenheit - ANS :B
You need to decrypt a file that is encrypted using asymmetric encryption.
What should be used to decrypt the file?
A public key
B plaintext
C message digest
D private key - ANS :D
Which statement is true of the Rijndael algorithm?
A Rijndael uses variable block lengths and variable key lengths.
, B Rijndael uses fixed block lengths and fixed key lengths.
C Rijndael uses variable block lengths and fixed key lengths.
D Rijndael uses fixed block lengths and variable key lengths. - ANS :A
You are responsible for managing the virtual computers on your network.
Which guideline is important when managing virtual computers?
A Update the operating system and applications only on the host computer.
B Implement a firewall only on the host computer.
C Install and update the antivirus program only on the host computer.
D Isolate the host computer and each virtual computer from each other. - ANS :D
Given two messages, M1 and M2, what is the LEAST likely outcome when using the same one-way hash function, H,
to encrypt the messages?
A H(M1) = H(M2)
B H(M1) is not equal to H(M2)
C H(M1) > H(M2)
D H(M1) < H(M2) - ANS :A
Your organization has decided to implement the Diffie-Hellman asymmetric algorithm.
Which statement is true of this algorithm's key exchange?
A Authorized users exchange public keys over a secure medium.
B Unauthorized users exchange public keys over a nonsecure medium.
C Authorized users exchange secret keys over a nonsecure medium.
D Authorized users need not exchange secret keys. - ANS :C
Which processes control the flow of information in the lattice-based access control (LBAC) model?
