WGU D488 OA FINAL EXAM /WGU D488
CYBERSECURITY ARCHITECTURE &
ENGINEERING EXAM 2026 WITH ACTUAL
CORRECT QUESTIONS AND VERIFIED
DETAILED ANSWERS| FREQUENTLY TESTED
QUESTIONS AND SOLUTIONS|ALREADY
GRADED A+|NEWEST|BRAND NEW
VERSION!!|GUARANTEED PASS
A systems designer needs to set up a protocol to facilitate secure authorization and access to
resources within a user profile between sites without sharing passwords. Which protocol should
the systems designer use?
A - OAuth
B - LDAPS
C - RADIUS
D - Diameter
A - OAuth
OAuth facilitates sharing of information (resources) within a user profile between sites. The
user can use that account to log on to an OAuth consumer site without giving the password to
the consumer site.
Secure Lightweight Directory Access Protocol (LDAPS) is a method of implementing LDAP,
using Secure Sockets Layer/Transport Layer Security (SSL/TLS) encryption protocols. LDAPS
prevent eavesdropping and man-in-the-middle attacks.
The Remote Authentication Dial-in User Service (RADIUS) standard is primarily for network
access control. There are several RADIUS server and client products available.
Diameter improves upon RADIUS by strengthening some of its weaknesses. Diameter is a
stronger protocol in many ways but is not as widespread in its implementation due to the lack
of products using it.
1|Page
,A systems engineer is working in conjunction with security and has set up a data loss prevention
solution. The engineer wants to set a remediation action that will quarantine and replace files
with a file describing the policy violation and how the user can release it. What should the
systems engineer choose?
A - Alert
B - Block
C - Quarantine
D - Tombstone
D - Tombstone
Tombstone quarantines the original file and replaces it with a file describing the policy
violation and how the user can release it again.
Alert mode allows copying, but the management system records an incident and may alert an
administrator.
Block mode prevents the user from copying the original file, although the user retains access
to it. The user may be alerted to the policy violation, but the system will log it as an incident
by the management engine.
Quarantine denies the user access to the original file. The system might accomplish this by
encrypting the file in place or moving it to a quarantine area in the file system.
A penetration tester is attempting to target core mechanisms that enable integration and
orchestration of the entire information systems and technology landscape. Which of the
following should the pen tester pursue?
A - Containers
B - APIs
C - SOAR
D - IdP
B - APIs
Application Programming Interfaces (APIs) provide the core mechanisms that enable
integration and orchestration of the entire information systems and technology landscape.
APIs are a major component of interacting with containers. Containers provide the capability
for applications to run virtual instances independently from the traditional hypervisor virtual
2|Page
,machine approach.
Security orchestration, automation, and response (SOAR) automate some of the routine tasks
ordinarily performed by security personnel in response to a security incident.
An identity provider (IdP) allows users to access various service providers (SPs) by
authenticating the user and granting a token for access to the SP.
A security architect is reviewing password compliance within the organization. Which NIST
standard can the security architect refer to for password compliance?
A - NIST 800-53
B - NIST 800-63
C - NIST 800-84
D - NIST 800-207
B - NIST 800-63
The NIST SP 800-63 is the most recent guidance issued by NIST. It also deprecates some of the
"traditional" elements of password policy and is worth review and consideration.
NIST 800-53 Security and Privacy Controls for Information Systems outlines necessary controls
for audits of information systems used for certification.
The National Institute of Standards and Technology (NIST) Special Publication (SP) 800-84,
"Guide to Test, Training, and Exercise Programs for IT Plans and Capabilities," includes an
after-action report template that helps with documentation and findings.
NIST SP 800-207 is the standard for Zero Trust Architecture. Zero Trust does not define
security via network boundaries but instead via resources such as users, services, and
workflows.
A systems administrator is working with a developer to upgrade to the latest version of Java, but
first, the sysadmin wants to see whether changes in code have caused previously existing
functionality to fail. What is this called?
A - Unit test
B - Regression test
C - Integration test
D - Solution design
3|Page
, B - Regression test
A regression test evaluates whether changes in code have caused previously existing
functionality to fail.
Unit tests ensure that a particular block of code performs the exact action intended and
provides the exact output expected. In a unit test, the developer writes a simple "pass/no
pass" test for code.
In an integration test, the developer tests individual components of a system together to
ensure that they interact as expected.
Solution design is the second step of the software development life cycle which incorporates
secure coding patterns and best practice guidance from organizations such as the Open Web
Application Security Project (OWASP).
A security architect is setting up access control and needs the most fine-grained type of access
control model. Which one should the security architect use?
A - MAC
B - ABAC
C - DAC
D - RBAC
B - ABAC
Attribute-based Access Control (ABAC) is the most fine-grained type of access control model.
ABAC systems are capable of making access decisions based on subject and object attributes
plus any context-sensitive or system-wide attributes.
Mandatory Access Control (MAC) refers to the idea of security clearance levels. Rather than
defining ACLs on resources, the security architect grants each object and each subject a
clearance level referred to as a label.
Discretionary Access Control (DAC) refers to the primacy of the resource owner. The owner is
originally the creator of a file or service, although the owner can assign ownership to another
user.
Role-based Access Control (RBAC) adds an extra degree of centralized control to the DAC
4|Page
CYBERSECURITY ARCHITECTURE &
ENGINEERING EXAM 2026 WITH ACTUAL
CORRECT QUESTIONS AND VERIFIED
DETAILED ANSWERS| FREQUENTLY TESTED
QUESTIONS AND SOLUTIONS|ALREADY
GRADED A+|NEWEST|BRAND NEW
VERSION!!|GUARANTEED PASS
A systems designer needs to set up a protocol to facilitate secure authorization and access to
resources within a user profile between sites without sharing passwords. Which protocol should
the systems designer use?
A - OAuth
B - LDAPS
C - RADIUS
D - Diameter
A - OAuth
OAuth facilitates sharing of information (resources) within a user profile between sites. The
user can use that account to log on to an OAuth consumer site without giving the password to
the consumer site.
Secure Lightweight Directory Access Protocol (LDAPS) is a method of implementing LDAP,
using Secure Sockets Layer/Transport Layer Security (SSL/TLS) encryption protocols. LDAPS
prevent eavesdropping and man-in-the-middle attacks.
The Remote Authentication Dial-in User Service (RADIUS) standard is primarily for network
access control. There are several RADIUS server and client products available.
Diameter improves upon RADIUS by strengthening some of its weaknesses. Diameter is a
stronger protocol in many ways but is not as widespread in its implementation due to the lack
of products using it.
1|Page
,A systems engineer is working in conjunction with security and has set up a data loss prevention
solution. The engineer wants to set a remediation action that will quarantine and replace files
with a file describing the policy violation and how the user can release it. What should the
systems engineer choose?
A - Alert
B - Block
C - Quarantine
D - Tombstone
D - Tombstone
Tombstone quarantines the original file and replaces it with a file describing the policy
violation and how the user can release it again.
Alert mode allows copying, but the management system records an incident and may alert an
administrator.
Block mode prevents the user from copying the original file, although the user retains access
to it. The user may be alerted to the policy violation, but the system will log it as an incident
by the management engine.
Quarantine denies the user access to the original file. The system might accomplish this by
encrypting the file in place or moving it to a quarantine area in the file system.
A penetration tester is attempting to target core mechanisms that enable integration and
orchestration of the entire information systems and technology landscape. Which of the
following should the pen tester pursue?
A - Containers
B - APIs
C - SOAR
D - IdP
B - APIs
Application Programming Interfaces (APIs) provide the core mechanisms that enable
integration and orchestration of the entire information systems and technology landscape.
APIs are a major component of interacting with containers. Containers provide the capability
for applications to run virtual instances independently from the traditional hypervisor virtual
2|Page
,machine approach.
Security orchestration, automation, and response (SOAR) automate some of the routine tasks
ordinarily performed by security personnel in response to a security incident.
An identity provider (IdP) allows users to access various service providers (SPs) by
authenticating the user and granting a token for access to the SP.
A security architect is reviewing password compliance within the organization. Which NIST
standard can the security architect refer to for password compliance?
A - NIST 800-53
B - NIST 800-63
C - NIST 800-84
D - NIST 800-207
B - NIST 800-63
The NIST SP 800-63 is the most recent guidance issued by NIST. It also deprecates some of the
"traditional" elements of password policy and is worth review and consideration.
NIST 800-53 Security and Privacy Controls for Information Systems outlines necessary controls
for audits of information systems used for certification.
The National Institute of Standards and Technology (NIST) Special Publication (SP) 800-84,
"Guide to Test, Training, and Exercise Programs for IT Plans and Capabilities," includes an
after-action report template that helps with documentation and findings.
NIST SP 800-207 is the standard for Zero Trust Architecture. Zero Trust does not define
security via network boundaries but instead via resources such as users, services, and
workflows.
A systems administrator is working with a developer to upgrade to the latest version of Java, but
first, the sysadmin wants to see whether changes in code have caused previously existing
functionality to fail. What is this called?
A - Unit test
B - Regression test
C - Integration test
D - Solution design
3|Page
, B - Regression test
A regression test evaluates whether changes in code have caused previously existing
functionality to fail.
Unit tests ensure that a particular block of code performs the exact action intended and
provides the exact output expected. In a unit test, the developer writes a simple "pass/no
pass" test for code.
In an integration test, the developer tests individual components of a system together to
ensure that they interact as expected.
Solution design is the second step of the software development life cycle which incorporates
secure coding patterns and best practice guidance from organizations such as the Open Web
Application Security Project (OWASP).
A security architect is setting up access control and needs the most fine-grained type of access
control model. Which one should the security architect use?
A - MAC
B - ABAC
C - DAC
D - RBAC
B - ABAC
Attribute-based Access Control (ABAC) is the most fine-grained type of access control model.
ABAC systems are capable of making access decisions based on subject and object attributes
plus any context-sensitive or system-wide attributes.
Mandatory Access Control (MAC) refers to the idea of security clearance levels. Rather than
defining ACLs on resources, the security architect grants each object and each subject a
clearance level referred to as a label.
Discretionary Access Control (DAC) refers to the primacy of the resource owner. The owner is
originally the creator of a file or service, although the owner can assign ownership to another
user.
Role-based Access Control (RBAC) adds an extra degree of centralized control to the DAC
4|Page
