1|Page
WGU D488 Security Architecture Exam Prep
Document 2026/2027 ||Verified Exam|| Western
Governors University | Security Architecture, IAM &
Zero Trust ||Verified Questions with Detailed
Rationales
The chief technology officer for a small publishing
company has been tasked with improving the company's
security posture. As part of a network upgrade, the
company has decided to implement intrusion detection,
spam filtering, content filtering, and antivirus controls. The
project needs to be completed using the least amount of
infrastructure while meeting all requirements.
Which solution fulfills these requirements?
A) Deploying an anti-spam gateway
B) Deploying a proxy server
C) Deploying a unified threat management (UTM)
appliance
D) Deploying a web application firewall (WAF) - Answer-C)
Deploying a unified threat management (UTM) appliance
,2|Page
The security team plans to deploy an intrusion detection
system (IDS) solution to alert engineers about inbound
threats. The team already has a database of signatures
that they want the IDS solution to validate.
Which detection technique meets the requirements?
A) Intrusion detection
B) Deep packet inspection
C) Signature-based detection
D) Intrusion prevention - Answer-C) Signature-based
detection
An IT organization had a security breach after deploying
an update to its production web servers. The application
currently goes through a manual update process a few
times per year. The security team needs to recommend a
failback option for future deployments.
Which solution fulfills these requirements?
A) Implementing a code scanner
,3|Page
B) Implementing code signing
C) Implementing versioning
D) Implementing a security requirements traceability
matrix (SRTM) - Answer-C) Implementing versioning
A software development team is working on a new mobile
application that will be used by customers. The security
team must ensure that builds of the application will be
trusted by a variety of mobile devices.
Which solution fulfills these requirements?
A) Code scanning
B) Regression testing
C) Code signing
D) Continuous delivery - Answer-C) Code signing
An IT organization recently suffered a data leak incident.
Management has asked the security team to implement a
print blocking mechanism for all documents stored on a
corporate file share.
, 4|Page
Which solution fulfills these requirements?
A) Virtual desktop infrastructure (VDI)
B) Remote Desktop Protocol (RDP)
C) Digital rights management (DRM)
D) Watermarking - Answer-C) Digital rights management
(DRM)
The security team recently enabled public access to a web
application hosted on a server inside the corporate
network. The developers of the application report that the
server has received several structured query language
(SQL) injection attacks in the past several days. The team
needs to deploy a solution that will block the SQL injection
attacks.
Which solution fulfills these requirements?
A) Virtual private network (VPN)
B) Security information and event management (SIEM)
C) Web application firewall (WAF)
D) Secure Socket Shell (SSH) - Answer-C) Web
application firewall (WAF)
WGU D488 Security Architecture Exam Prep
Document 2026/2027 ||Verified Exam|| Western
Governors University | Security Architecture, IAM &
Zero Trust ||Verified Questions with Detailed
Rationales
The chief technology officer for a small publishing
company has been tasked with improving the company's
security posture. As part of a network upgrade, the
company has decided to implement intrusion detection,
spam filtering, content filtering, and antivirus controls. The
project needs to be completed using the least amount of
infrastructure while meeting all requirements.
Which solution fulfills these requirements?
A) Deploying an anti-spam gateway
B) Deploying a proxy server
C) Deploying a unified threat management (UTM)
appliance
D) Deploying a web application firewall (WAF) - Answer-C)
Deploying a unified threat management (UTM) appliance
,2|Page
The security team plans to deploy an intrusion detection
system (IDS) solution to alert engineers about inbound
threats. The team already has a database of signatures
that they want the IDS solution to validate.
Which detection technique meets the requirements?
A) Intrusion detection
B) Deep packet inspection
C) Signature-based detection
D) Intrusion prevention - Answer-C) Signature-based
detection
An IT organization had a security breach after deploying
an update to its production web servers. The application
currently goes through a manual update process a few
times per year. The security team needs to recommend a
failback option for future deployments.
Which solution fulfills these requirements?
A) Implementing a code scanner
,3|Page
B) Implementing code signing
C) Implementing versioning
D) Implementing a security requirements traceability
matrix (SRTM) - Answer-C) Implementing versioning
A software development team is working on a new mobile
application that will be used by customers. The security
team must ensure that builds of the application will be
trusted by a variety of mobile devices.
Which solution fulfills these requirements?
A) Code scanning
B) Regression testing
C) Code signing
D) Continuous delivery - Answer-C) Code signing
An IT organization recently suffered a data leak incident.
Management has asked the security team to implement a
print blocking mechanism for all documents stored on a
corporate file share.
, 4|Page
Which solution fulfills these requirements?
A) Virtual desktop infrastructure (VDI)
B) Remote Desktop Protocol (RDP)
C) Digital rights management (DRM)
D) Watermarking - Answer-C) Digital rights management
(DRM)
The security team recently enabled public access to a web
application hosted on a server inside the corporate
network. The developers of the application report that the
server has received several structured query language
(SQL) injection attacks in the past several days. The team
needs to deploy a solution that will block the SQL injection
attacks.
Which solution fulfills these requirements?
A) Virtual private network (VPN)
B) Security information and event management (SIEM)
C) Web application firewall (WAF)
D) Secure Socket Shell (SSH) - Answer-C) Web
application firewall (WAF)
