WGU D488 -EXAM CYBERSECURITY
ARCHITECTURE AND ENGINEERING
CASP+ EXAM | QUESTIONS AND
ANSWERS RATED A+ | 100% CORRECT |
2025/2026 GUIDE
A financial institution is required to comply with the Payment Card Industry
Data Security Standard (PCI DSS), which sets requirements for the
protection of payment card data. The institution uses various software
programs and utilities to manage payment card data, and it is essential to
ensure that only authorized programs and utilities are allowed on the
institution's systems.
Which security control will meet the needs of the institution?
A) Application allowlisting
B) Password policies
C) Firewall configuration
D) File integrity monitoring
-Correct Answer- A) Application allowlisting
A regional hospital with budget constraints stores critical patient information
and medical records on local servers.
Which type of disaster recovery site will ensure that the hospital can quickly
resume operations in case of a disaster?
,A) A warm site that is partially equipped with the necessary hardware and
software to be operational in a short period of time
B) A fully equipped site with necessary hardware and software that is
operational at all times
C) A geographically distant site with redundant hardware and software that
can be used to quickly take over operations
D) A site with minimal hardware and software capabilities that can be
activated on an as-needed basis
-Correct Answer- A) A warm site that is partially equipped with the
necessary hardware and software to be operational in a short period of
time
A manufacturing company is evaluating continuity options for its critical
systems and data.
Which protocol will ensure that the company can respond to an unexpected
event by ensuring that its critical systems are available and responsive with
minimal downtime and data loss
A) Disaster recovery (DR) protocol, to ensure that recovery procedures are
executed in a consistent and efficient manner
B) Simple network management protocol (SNMP), to monitor network
devices and proactively detect issues before they cause downtime
C) File transfer protocol (FTP), to transfer large files between systems and
ensure that critical data is backed up and can be restored quickly in the
event of a system outage
D) Hypertext transfer protocol (HTTP), to enable communication between
,web servers and clients and ensure that critical web-based applications
remain available during a system outage
-Correct Answer- A) Disaster recovery (DR) protocol, to ensure that
recovery procedures are executed in a consistent and efficient manner
An e-commerce company is developing a disaster recovery plan and wants
to determine how long its systems or applications can be down before
causing significant harm to the business.
What is the term used to describe this metric?
A) Maximum tolerable downtime (MTD)
B) Recovery point objective (RPO)
C) Business continuity planning (BCP)
D) Business impact analysis (BIA)
-Correct Answer- A) Maximum tolerable downtime (MTD)
A company is planning to update its disaster recovery plan to ensure that it
meets the latest regulations on securing personally identifiable information
(PII).
What is the term used to describe the process of identifying and evaluating
the effect that the updated plan will have on the company's operations and
stakeholders?
A) Privacy Impact Assessment (PIA)
B) Business continuity planning (BCP)
C) Disaster recovery (DR)
D) Risk assessment
, -Correct Answer- A) Privacy Impact Assessment (PIA)
In the event of a cyberattack, a company's security team needs to be able
to respond quickly and remediate the issue to minimize the impact.
Which solution will streamline the incident response process
A) Security orchestration, automation, and response (SOAR)
B) Security information and event management (SIEM)
C) Firewall
D) Intrusion detection system (IDS)
-Correct Answer- A) Security orchestration, automation, and response
(SOAR)
A company's website is a critical component of their business operations.
However, due to an unexpected disaster, their website is experiencing a
high volume of traffic, which is negatively affecting its performance. As part
of their disaster recovery plan, the company is looking for a solution that
can improve website speed and performance.
Which solution will meet the needs of the company?
A) Content delivery network (CDN)
B) Web application firewall (WAF)
C) Data loss prevention (DLP)
D) Network access control (NAC)
-Correct Answer- A) Content delivery network (CDN)
ARCHITECTURE AND ENGINEERING
CASP+ EXAM | QUESTIONS AND
ANSWERS RATED A+ | 100% CORRECT |
2025/2026 GUIDE
A financial institution is required to comply with the Payment Card Industry
Data Security Standard (PCI DSS), which sets requirements for the
protection of payment card data. The institution uses various software
programs and utilities to manage payment card data, and it is essential to
ensure that only authorized programs and utilities are allowed on the
institution's systems.
Which security control will meet the needs of the institution?
A) Application allowlisting
B) Password policies
C) Firewall configuration
D) File integrity monitoring
-Correct Answer- A) Application allowlisting
A regional hospital with budget constraints stores critical patient information
and medical records on local servers.
Which type of disaster recovery site will ensure that the hospital can quickly
resume operations in case of a disaster?
,A) A warm site that is partially equipped with the necessary hardware and
software to be operational in a short period of time
B) A fully equipped site with necessary hardware and software that is
operational at all times
C) A geographically distant site with redundant hardware and software that
can be used to quickly take over operations
D) A site with minimal hardware and software capabilities that can be
activated on an as-needed basis
-Correct Answer- A) A warm site that is partially equipped with the
necessary hardware and software to be operational in a short period of
time
A manufacturing company is evaluating continuity options for its critical
systems and data.
Which protocol will ensure that the company can respond to an unexpected
event by ensuring that its critical systems are available and responsive with
minimal downtime and data loss
A) Disaster recovery (DR) protocol, to ensure that recovery procedures are
executed in a consistent and efficient manner
B) Simple network management protocol (SNMP), to monitor network
devices and proactively detect issues before they cause downtime
C) File transfer protocol (FTP), to transfer large files between systems and
ensure that critical data is backed up and can be restored quickly in the
event of a system outage
D) Hypertext transfer protocol (HTTP), to enable communication between
,web servers and clients and ensure that critical web-based applications
remain available during a system outage
-Correct Answer- A) Disaster recovery (DR) protocol, to ensure that
recovery procedures are executed in a consistent and efficient manner
An e-commerce company is developing a disaster recovery plan and wants
to determine how long its systems or applications can be down before
causing significant harm to the business.
What is the term used to describe this metric?
A) Maximum tolerable downtime (MTD)
B) Recovery point objective (RPO)
C) Business continuity planning (BCP)
D) Business impact analysis (BIA)
-Correct Answer- A) Maximum tolerable downtime (MTD)
A company is planning to update its disaster recovery plan to ensure that it
meets the latest regulations on securing personally identifiable information
(PII).
What is the term used to describe the process of identifying and evaluating
the effect that the updated plan will have on the company's operations and
stakeholders?
A) Privacy Impact Assessment (PIA)
B) Business continuity planning (BCP)
C) Disaster recovery (DR)
D) Risk assessment
, -Correct Answer- A) Privacy Impact Assessment (PIA)
In the event of a cyberattack, a company's security team needs to be able
to respond quickly and remediate the issue to minimize the impact.
Which solution will streamline the incident response process
A) Security orchestration, automation, and response (SOAR)
B) Security information and event management (SIEM)
C) Firewall
D) Intrusion detection system (IDS)
-Correct Answer- A) Security orchestration, automation, and response
(SOAR)
A company's website is a critical component of their business operations.
However, due to an unexpected disaster, their website is experiencing a
high volume of traffic, which is negatively affecting its performance. As part
of their disaster recovery plan, the company is looking for a solution that
can improve website speed and performance.
Which solution will meet the needs of the company?
A) Content delivery network (CDN)
B) Web application firewall (WAF)
C) Data loss prevention (DLP)
D) Network access control (NAC)
-Correct Answer- A) Content delivery network (CDN)
