WGU D488 Security Architecture Exam Prep
Document 2026/2027 | Western Governors
University | Security Architecture, IAM & Zero
Trust | 70 Verified Questions with Detailed
Rationales
SECTION 1: SECURITY ARCHITECTURE & DESIGN
(Questions 1-20)
Q1. What is the primary goal of defense-in-depth?
A) To rely on a single strong security control
B) To eliminate all threats completely
C) To implement multiple layers of security controls
D) To focus only on network security
Correct Answer: C
Rationale: Defense-in-depth uses layered security measures so that if one
control fails, others still provide protection. This approach ensures that no
single point of failure compromises the entire system. Multiple layers
address physical, technical, and administrative controls to create
redundancy in protection .
Q2. Which of the following is the core principle of Zero Trust
architecture?
A) Trust all internal traffic and verify external traffic
B) Trust never, always verify
C) Trust only after successful authentication once
D) Trust based on network location
Correct Answer: B
,Rationale: Zero Trust architecture assumes no implicit trust granted to any
user or device based solely on network location (i.e., inside vs. outside the
corporate perimeter). Every access request must be fully authenticated,
authorized, and encrypted before granting access. This follows the principle
of "never trust, always verify" .
Q3. Which security model focuses primarily on confidentiality and is
commonly used in government and military systems?
A) Biba Model
B) Clark-Wilson Model
C) Bell-LaPadula Model
D) Brewer-Nash Model
Correct Answer: C
Rationale: The Bell-LaPadula model enforces confidentiality using the rules
"no read up" (a subject cannot read an object at a higher classification level)
and "no write down" (a subject cannot write to an object at a lower
classification level). This model is designed to prevent unauthorized
disclosure of classified information and is the foundation for mandatory
access control (MAC) in government systems .
Q4. A security architect is designing a strategy to help the
organization continue operating during a cyber-attack. Which three
of the following will help accomplish this objective?
A) Heterogeneity
B) Clustering
C) Course of Action (COA) development
D) Migrating to the cloud
Correct Answer: A, B, C
Rationale: Heterogeneity (using diverse components) adds complexity that
can slow adversaries; Clustering provides redundancy through multiple
processing nodes; COA development ensures operational continuity during
attacks by defining response actions. While cloud migration may offer
benefits, it is not specifically an operational continuity strategy during an
attack .
Q5. The principle of "separation of duties" is designed to prevent
which of the following?
A) Unauthorized access by a single individual
B) System performance degradation
, C) Data loss due to hardware failure
D) Network congestion
Correct Answer: A
Rationale: Separation of duties requires multiple individuals to complete a
critical task (e.g., approving a large payment or deploying code). This
reduces the risk of fraud, errors, or misuse by ensuring that no single person
has excessive control over a sensitive process. It is a key internal control
used to prevent conflicts of interest and detect unauthorized actions .
Q6. A security architect is implementing a secure system
development lifecycle (SDLC). In which phase should threat
modeling be performed?
A) Requirements and design
B) Implementation
C) Testing
D) Maintenance
Correct Answer: A
Rationale: Threat modeling should occur during the design
phase (Requirements and Design) to identify potential security risks before
any code is written. Addressing threats at this stage is significantly less
costly and more effective than fixing vulnerabilities after implementation or
deployment .
Q7. What is the primary purpose of a Trusted Platform Module
(TPM)?
A) To encrypt all network traffic
B) To provide hardware-based cryptographic functions and secure key
storage
C) To monitor network intrusion attempts
D) To manage user authentication
Correct Answer: B
Rationale: A TPM is a hardware chip on the motherboard that stores
cryptographic keys, passwords, and certificates securely. It provides
hardware-based security functions such as secure key generation, random
number generation, and attestation. It is commonly used for full disk
encryption (BitLocker) and secure boot .
Q8. Measured boot differs from secure boot in that measured boot:
Document 2026/2027 | Western Governors
University | Security Architecture, IAM & Zero
Trust | 70 Verified Questions with Detailed
Rationales
SECTION 1: SECURITY ARCHITECTURE & DESIGN
(Questions 1-20)
Q1. What is the primary goal of defense-in-depth?
A) To rely on a single strong security control
B) To eliminate all threats completely
C) To implement multiple layers of security controls
D) To focus only on network security
Correct Answer: C
Rationale: Defense-in-depth uses layered security measures so that if one
control fails, others still provide protection. This approach ensures that no
single point of failure compromises the entire system. Multiple layers
address physical, technical, and administrative controls to create
redundancy in protection .
Q2. Which of the following is the core principle of Zero Trust
architecture?
A) Trust all internal traffic and verify external traffic
B) Trust never, always verify
C) Trust only after successful authentication once
D) Trust based on network location
Correct Answer: B
,Rationale: Zero Trust architecture assumes no implicit trust granted to any
user or device based solely on network location (i.e., inside vs. outside the
corporate perimeter). Every access request must be fully authenticated,
authorized, and encrypted before granting access. This follows the principle
of "never trust, always verify" .
Q3. Which security model focuses primarily on confidentiality and is
commonly used in government and military systems?
A) Biba Model
B) Clark-Wilson Model
C) Bell-LaPadula Model
D) Brewer-Nash Model
Correct Answer: C
Rationale: The Bell-LaPadula model enforces confidentiality using the rules
"no read up" (a subject cannot read an object at a higher classification level)
and "no write down" (a subject cannot write to an object at a lower
classification level). This model is designed to prevent unauthorized
disclosure of classified information and is the foundation for mandatory
access control (MAC) in government systems .
Q4. A security architect is designing a strategy to help the
organization continue operating during a cyber-attack. Which three
of the following will help accomplish this objective?
A) Heterogeneity
B) Clustering
C) Course of Action (COA) development
D) Migrating to the cloud
Correct Answer: A, B, C
Rationale: Heterogeneity (using diverse components) adds complexity that
can slow adversaries; Clustering provides redundancy through multiple
processing nodes; COA development ensures operational continuity during
attacks by defining response actions. While cloud migration may offer
benefits, it is not specifically an operational continuity strategy during an
attack .
Q5. The principle of "separation of duties" is designed to prevent
which of the following?
A) Unauthorized access by a single individual
B) System performance degradation
, C) Data loss due to hardware failure
D) Network congestion
Correct Answer: A
Rationale: Separation of duties requires multiple individuals to complete a
critical task (e.g., approving a large payment or deploying code). This
reduces the risk of fraud, errors, or misuse by ensuring that no single person
has excessive control over a sensitive process. It is a key internal control
used to prevent conflicts of interest and detect unauthorized actions .
Q6. A security architect is implementing a secure system
development lifecycle (SDLC). In which phase should threat
modeling be performed?
A) Requirements and design
B) Implementation
C) Testing
D) Maintenance
Correct Answer: A
Rationale: Threat modeling should occur during the design
phase (Requirements and Design) to identify potential security risks before
any code is written. Addressing threats at this stage is significantly less
costly and more effective than fixing vulnerabilities after implementation or
deployment .
Q7. What is the primary purpose of a Trusted Platform Module
(TPM)?
A) To encrypt all network traffic
B) To provide hardware-based cryptographic functions and secure key
storage
C) To monitor network intrusion attempts
D) To manage user authentication
Correct Answer: B
Rationale: A TPM is a hardware chip on the motherboard that stores
cryptographic keys, passwords, and certificates securely. It provides
hardware-based security functions such as secure key generation, random
number generation, and attestation. It is commonly used for full disk
encryption (BitLocker) and secure boot .
Q8. Measured boot differs from secure boot in that measured boot:
