WGU D488 CYBERSECURITY
ARCHITECTURE AND ENGINEERING OA
ACTUAL EXAM 2026 WITH REAL
QUESTIONS AND VERIFIED CORRECT
ANSWERS | ALREADY GRADED A+ | D488
OA PREP TEST BANK LATEST EXAM 2026
Which network security solution would control access to a network and is open-
source?
A. Software Guard Extension
B. Secure Authentication
C. Packet Fence
D. Poly1305
C. Packet Fence
A developer wants to create a certificate to show the browser plugin is trusted.
What could the developer use?
A. SSH key
B. Digital signature
C. Code signing
D. NAC (network access control) authentication
C. Code signing
What certificate can a developer use to show that a browser plugin is trusted and
has undergone an identity check by a certificate authority (CA)?
,A. SSH key
B. Digital signature
C. Code signing
D. NAC (network access control) authentication
C. Code signing
Which authentication mechanism uses public key authentication by specifying a
remote user's public key in a locally stored list of authorized keys on the server?
A. Digital signature
B. Code signing
C. SSH key
D. NAC (network access control) authentication
C. SSH key
What cryptographic function combines two functions to authenticate a sender and
prove the integrity of a message?
A. NAC (network access control) authentication
B. Code signing
C. Digital signature
D. SSH key
C. Digital signature
Which client authentication mechanism can help a server verify that a connection
request is originating from a pre-authorized endpoint?
A. SSH key
B. Digital signature
C. Code signing
D. NAC (network access control) authentication
D. NAC (network access control) authentication
What type of certificate requires an identity check and validation by a certificate
authority before being issued to a software publisher?
,A. SSH key
B. NAC (network access control) authentication
C. Code signing
D. Digital signature
C. Code signing
A software process that authenticates through certificates wants to check to see if a
certificate is still valid. What can the process check? (Select all that apply.)
1. CRL (Certificate Revocation List)
2. RA (Registration Authority)
3. OCSP (Online Certificate Status Protocol)
4. CSR (Certificate Signing Request)
A) 1, 2
B) 1, 3
C) 2, 3
D) 2, 4
B) 1, 3
Which method allows a process to check if a certificate is still valid by referencing
a list of revoked and suspended certificates?
A. RA (Registration Authority)
B. OCSP (Online Certificate Status Protocol)
C. CRL (Certificate Revocation List)
D. CSR (Certificate Signing Request)
C. CRL (Certificate Revocation List)
Which protocol provides a more efficient way to check the status of a certificate
without returning the entire certificate revocation list (CRL)?
A. OCSP (Online Certificate Status Protocol)
B. RA (Registration Authority)
C. CRL (Certificate Revocation List)
D. CSR (Certificate Signing Request)
A. OCSP (Online Certificate Status Protocol)
, What role does a registration authority (RA) play in the certificate process?
A. It checks the certificate status using OCSP
B. It maintains a list of revoked certificates
C. It accepts requests for digital certificates and validates the requestor
D. It generates certificate signing requests
C. It accepts requests for digital certificates and performs various additional steps
to validate the requestor has the authorization to do so.
What is a certificate signing request (CSR), and what information does it contain?
A. It is a list of revoked certificates
B. It is a request generated on the device needing the certificate, containing
necessary information for certificate creation
C. It is a protocol that checks certificate status
D. It is a registration authority validating certificate requests
B. It is a request generated on the device needing the certificate, containing
necessary information for certificate creation
Which protocol enables a server to communicate the status of a requested
certificate without returning an entire list?
A. CRL (Certificate Revocation List)
B. RA (Registration Authority)
C. OCSP (Online Certificate Status Protocol)
D. CSR (Certificate Signing Request)
C. OCSP (Online Certificate Status Protocol)
Which of the following does Public Key Infrastructure (PKI) NOT support?
A. Distribution
B. Integrity checks
C. Non-repudiation
D. Availability
D. Availability
ARCHITECTURE AND ENGINEERING OA
ACTUAL EXAM 2026 WITH REAL
QUESTIONS AND VERIFIED CORRECT
ANSWERS | ALREADY GRADED A+ | D488
OA PREP TEST BANK LATEST EXAM 2026
Which network security solution would control access to a network and is open-
source?
A. Software Guard Extension
B. Secure Authentication
C. Packet Fence
D. Poly1305
C. Packet Fence
A developer wants to create a certificate to show the browser plugin is trusted.
What could the developer use?
A. SSH key
B. Digital signature
C. Code signing
D. NAC (network access control) authentication
C. Code signing
What certificate can a developer use to show that a browser plugin is trusted and
has undergone an identity check by a certificate authority (CA)?
,A. SSH key
B. Digital signature
C. Code signing
D. NAC (network access control) authentication
C. Code signing
Which authentication mechanism uses public key authentication by specifying a
remote user's public key in a locally stored list of authorized keys on the server?
A. Digital signature
B. Code signing
C. SSH key
D. NAC (network access control) authentication
C. SSH key
What cryptographic function combines two functions to authenticate a sender and
prove the integrity of a message?
A. NAC (network access control) authentication
B. Code signing
C. Digital signature
D. SSH key
C. Digital signature
Which client authentication mechanism can help a server verify that a connection
request is originating from a pre-authorized endpoint?
A. SSH key
B. Digital signature
C. Code signing
D. NAC (network access control) authentication
D. NAC (network access control) authentication
What type of certificate requires an identity check and validation by a certificate
authority before being issued to a software publisher?
,A. SSH key
B. NAC (network access control) authentication
C. Code signing
D. Digital signature
C. Code signing
A software process that authenticates through certificates wants to check to see if a
certificate is still valid. What can the process check? (Select all that apply.)
1. CRL (Certificate Revocation List)
2. RA (Registration Authority)
3. OCSP (Online Certificate Status Protocol)
4. CSR (Certificate Signing Request)
A) 1, 2
B) 1, 3
C) 2, 3
D) 2, 4
B) 1, 3
Which method allows a process to check if a certificate is still valid by referencing
a list of revoked and suspended certificates?
A. RA (Registration Authority)
B. OCSP (Online Certificate Status Protocol)
C. CRL (Certificate Revocation List)
D. CSR (Certificate Signing Request)
C. CRL (Certificate Revocation List)
Which protocol provides a more efficient way to check the status of a certificate
without returning the entire certificate revocation list (CRL)?
A. OCSP (Online Certificate Status Protocol)
B. RA (Registration Authority)
C. CRL (Certificate Revocation List)
D. CSR (Certificate Signing Request)
A. OCSP (Online Certificate Status Protocol)
, What role does a registration authority (RA) play in the certificate process?
A. It checks the certificate status using OCSP
B. It maintains a list of revoked certificates
C. It accepts requests for digital certificates and validates the requestor
D. It generates certificate signing requests
C. It accepts requests for digital certificates and performs various additional steps
to validate the requestor has the authorization to do so.
What is a certificate signing request (CSR), and what information does it contain?
A. It is a list of revoked certificates
B. It is a request generated on the device needing the certificate, containing
necessary information for certificate creation
C. It is a protocol that checks certificate status
D. It is a registration authority validating certificate requests
B. It is a request generated on the device needing the certificate, containing
necessary information for certificate creation
Which protocol enables a server to communicate the status of a requested
certificate without returning an entire list?
A. CRL (Certificate Revocation List)
B. RA (Registration Authority)
C. OCSP (Online Certificate Status Protocol)
D. CSR (Certificate Signing Request)
C. OCSP (Online Certificate Status Protocol)
Which of the following does Public Key Infrastructure (PKI) NOT support?
A. Distribution
B. Integrity checks
C. Non-repudiation
D. Availability
D. Availability
