COMPREHENSIVE TEST BANK · 2026
/ 2027 EDITION
150
WGU D488
Questions
9
Cybersecurity Sections
Architecture 100%
Verified
and Engineering
Final
Examination
Complete test bank with 150 verified questions and
comprehensive A+ graded rationales. Covers all WGU
D488 competency domains including security
architecture, access control, cryptography, network
security, cloud infrastructure, application security,
risk management, endpoint hardening, and integrated
clinical scenarios aligned with 2026-2027 curriculum
Questions
standards.and Answers · Grade A · 100% Correct
Latest Update
WGU D488 CYBERSECURITY ARCHITECTURE AND
ENGINEERING · FINAL EXAM TEST BANK
,Section 1: Security Architecture and Design Principles
Secure Design, Security Models, and Frameworks (Q1-Q20)
Q1: A security architect is designing a system where no single individual can complete a critical transaction
end-to-end. Which secure design principle ensures that multiple people must participate to prevent fraud and
errors?
A. Separation of duties [CORRECT]
B. Defense in depth
C. Least privilege
D. Economy of mechanism
Correct Answer: A
Rationale: Separation of duties divides critical tasks among multiple individuals so that no single person can complete a sensitive
operation alone, thereby preventing fraud and reducing the risk of malicious or accidental errors. Defense in depth adds multiple layers
of security controls rather than relying on a single mechanism. Least privilege ensures users have only the minimum access necessary for
their job functions. Economy of mechanism refers to keeping security designs as simple as possible to reduce potential vulnerabilities.
Q2: A network administrator implements a firewall, then adds an intrusion detection system behind it, and
further deploys host-based security agents on all endpoints. Which security principle is being demonstrated?
A. Economy of mechanism
B. Defense in depth [CORRECT]
C. Open design
D. Fail secure
Correct Answer: B
Rationale: Defense in depth employs multiple layers of security controls so that if one layer fails, subsequent layers continue to provide
protection. In this scenario, the firewall (network layer), IDS (monitoring layer), and host-based agents (endpoint layer) create redundant
defensive barriers. Economy of mechanism favors simplicity in design. Open design means security should not depend on secrecy of the
design itself. Fail secure ensures a system defaults to a secure state when it fails.
Q3: According to the Bell-LaPadula security model, a subject with a "Secret" clearance is attempting to read
a file classified as "Top Secret." Which property prevents this action?
A. No write down (Simple Security Property)
B. No read up (Simple Security Property) [CORRECT]
C. No write up (*-Property)
D. No read down (Simple Security Property)
Correct Answer: B
Rationale: The Bell-LaPadula model focuses on confidentiality and enforces two key properties. The Simple Security Property ("no read
up") prevents a subject from reading an object at a higher classification level. In this case, a "Secret" subject cannot read "Top Secret"
data. The *-Property ("no write down") prevents a subject from writing to a lower classification level. Bell-LaPadula is designed to
prevent unauthorized disclosure of classified information in government and military environments.
Q4: An organization needs to ensure that high-integrity data cannot be corrupted by lower-integrity
processes. Which security model enforces "no read down" and "no write up" to protect data integrity?
A. Bell-LaPadula
B. Biba [CORRECT]
C. Clark-Wilson
D. Take-Grant
Correct Answer: B
Rationale: The Biba model focuses on integrity rather than confidentiality. It enforces the "no read down" rule (preventing high-integrity
subjects from reading low-integrity data) and the "no write up" rule (preventing low-integrity subjects from writing to high-integrity
, objects). Bell-LaPadula is the confidentiality counterpart with opposite rules. Clark-Wilson uses well-formed transactions and separation
of duties for integrity. Take-Grant addresses access control through rights propagation.
Q5: A financial institution implements a security model where all data modifications must occur through
predefined, verified transaction procedures, and no single employee can both initiate and approve a
transaction. Which security model best describes this approach?
A. Bell-LaPadula
B. Biba
C. Clark-Wilson [CORRECT]
D. Brewer-Nash
Correct Answer: C
Rationale: The Clark-Wilson integrity model uses two primary mechanisms: well-formed transactions (ensuring all data modifications
follow approved procedures) and separation of duties (requiring multiple individuals for critical operations). This model is specifically
designed for commercial environments like banking where data integrity is paramount. Bell-LaPadula addresses confidentiality, not
integrity. Biba addresses integrity through hierarchical labels rather than transaction procedures. Brewer-Nash (Chinese Wall) addresses
conflict-of-interest restrictions.
Q6: An organization discovers that its security processes are reactive and undocumented, with no formal
procedures in place. According to the Capability Maturity Model Integration (CMMI), at which level is this
organization currently operating?
A. Level 1: Initial [CORRECT]
B. Level 2: Managed
C. Level 3: Defined
D. Level 4: Quantitatively Managed
Correct Answer: A
Rationale: CMMI Level 1 (Initial) is characterized by ad hoc, reactive processes where activities are not planned or documented, and
success depends on individual effort rather than organizational structure. Level 2 (Managed) introduces basic project-level planning and
tracking. Level 3 (Defined) establishes organization-wide standard processes that are proactively managed. Level 4 (Quantitatively
Managed) adds measurable quality metrics and statistical analysis to the processes.
Q7: A company has established organization-wide standard security processes, documented procedures, and
proactively manages its security posture across all projects. At which CMMI level is this organization
operating?
A. Level 2: Managed
B. Level 3: Defined [CORRECT]
C. Level 4: Quantitatively Managed
D. Level 5: Optimizing
Correct Answer: B
Rationale: CMMI Level 3 (Defined) indicates that the majority of work is defined and processes are standardized across the
organization. At this level, activities are proactive rather than reactive, and there is organizational consistency in how security processes
are executed. Level 2 still relies on reactive management at the project level. Level 4 adds quantitative measurement and statistical
analysis. Level 5 focuses on continuous process improvement through optimization.
Q8: During a threat modeling exercise, a security team identifies a scenario where an attacker impersonates
a legitimate user to gain unauthorized access to system resources. Which category of the STRIDE threat
model does this represent?
A. Tampering
B. Spoofing [CORRECT]
C. Information Disclosure
D. Denial of Service
, Correct Answer: B
Rationale: In the STRIDE threat model, Spoofing refers to an attacker impersonating someone or something else to gain unauthorized
access. This includes identity spoofing, authentication bypass, and session hijacking. Tampering involves unauthorized modification of
data or code. Information Disclosure involves exposing private data to unauthorized parties. Denial of Service involves making a system
unavailable to legitimate users. STRIDE provides a comprehensive framework for identifying threats during the design phase of software
development.
Q9: A threat model reveals that an attacker could intercept and modify data transmitted between a client and
server. Which STRIDE category best describes this threat?
A. Repudiation
B. Tampering [CORRECT]
C. Elevation of Privilege
D. Denial of Service
Correct Answer: B
Rationale: Tampering in the STRIDE model refers to the unauthorized modification of data in transit or at rest. Intercepting and
modifying data between client and server is a classic tampering scenario that can be mitigated through encryption, message authentication
codes, and digital signatures. Repudiation refers to a user denying they performed an action. Elevation of Privilege involves gaining
unauthorized higher-level access. Denial of Service involves rendering a system unavailable.
Q10: A security engineer applies the principle that a security mechanism should be as simple as possible
because complexity increases the potential for vulnerabilities and makes verification harder. Which secure
design principle is being applied?
A. Economy of mechanism [CORRECT]
B. Complete mediation
C. Open design
D. Least privilege
Correct Answer: A
Rationale: Economy of mechanism (also known as Keep It Simple) dictates that security designs should be as simple and straightforward
as possible. Simple mechanisms are easier to implement correctly, verify for security, and maintain. Complex designs introduce more
attack surfaces and potential points of failure. Complete mediation requires every access to be checked against the access control
mechanism. Open design means security should not depend on keeping the design secret. Least privilege limits user access to the minimum
necessary.
Q11: An access control system is designed to check every single access request against its authorization
database rather than caching permissions. Which secure design principle is being enforced?
A. Economy of mechanism
B. Complete mediation [CORRECT]
C. Least privilege
D. Fail secure
Correct Answer: B
Rationale: Complete mediation requires that every access request be validated by the access control system, rather than relying on cached
permissions or shortcuts. This ensures that no access can bypass the security mechanism. Economy of mechanism favors design simplicity.
Least privilege limits access rights. Fail secure ensures systems default to a secure state upon failure. Complete mediation is critical for
maintaining the integrity of access control decisions.
Q12: When a security system fails, it is designed to deny all access rather than permit access. Which secure
design principle ensures that a failure does not result in a security breach?
A. Fail open
B. Fail secure [CORRECT]
C. Open design
D. Economy of mechanism
/ 2027 EDITION
150
WGU D488
Questions
9
Cybersecurity Sections
Architecture 100%
Verified
and Engineering
Final
Examination
Complete test bank with 150 verified questions and
comprehensive A+ graded rationales. Covers all WGU
D488 competency domains including security
architecture, access control, cryptography, network
security, cloud infrastructure, application security,
risk management, endpoint hardening, and integrated
clinical scenarios aligned with 2026-2027 curriculum
Questions
standards.and Answers · Grade A · 100% Correct
Latest Update
WGU D488 CYBERSECURITY ARCHITECTURE AND
ENGINEERING · FINAL EXAM TEST BANK
,Section 1: Security Architecture and Design Principles
Secure Design, Security Models, and Frameworks (Q1-Q20)
Q1: A security architect is designing a system where no single individual can complete a critical transaction
end-to-end. Which secure design principle ensures that multiple people must participate to prevent fraud and
errors?
A. Separation of duties [CORRECT]
B. Defense in depth
C. Least privilege
D. Economy of mechanism
Correct Answer: A
Rationale: Separation of duties divides critical tasks among multiple individuals so that no single person can complete a sensitive
operation alone, thereby preventing fraud and reducing the risk of malicious or accidental errors. Defense in depth adds multiple layers
of security controls rather than relying on a single mechanism. Least privilege ensures users have only the minimum access necessary for
their job functions. Economy of mechanism refers to keeping security designs as simple as possible to reduce potential vulnerabilities.
Q2: A network administrator implements a firewall, then adds an intrusion detection system behind it, and
further deploys host-based security agents on all endpoints. Which security principle is being demonstrated?
A. Economy of mechanism
B. Defense in depth [CORRECT]
C. Open design
D. Fail secure
Correct Answer: B
Rationale: Defense in depth employs multiple layers of security controls so that if one layer fails, subsequent layers continue to provide
protection. In this scenario, the firewall (network layer), IDS (monitoring layer), and host-based agents (endpoint layer) create redundant
defensive barriers. Economy of mechanism favors simplicity in design. Open design means security should not depend on secrecy of the
design itself. Fail secure ensures a system defaults to a secure state when it fails.
Q3: According to the Bell-LaPadula security model, a subject with a "Secret" clearance is attempting to read
a file classified as "Top Secret." Which property prevents this action?
A. No write down (Simple Security Property)
B. No read up (Simple Security Property) [CORRECT]
C. No write up (*-Property)
D. No read down (Simple Security Property)
Correct Answer: B
Rationale: The Bell-LaPadula model focuses on confidentiality and enforces two key properties. The Simple Security Property ("no read
up") prevents a subject from reading an object at a higher classification level. In this case, a "Secret" subject cannot read "Top Secret"
data. The *-Property ("no write down") prevents a subject from writing to a lower classification level. Bell-LaPadula is designed to
prevent unauthorized disclosure of classified information in government and military environments.
Q4: An organization needs to ensure that high-integrity data cannot be corrupted by lower-integrity
processes. Which security model enforces "no read down" and "no write up" to protect data integrity?
A. Bell-LaPadula
B. Biba [CORRECT]
C. Clark-Wilson
D. Take-Grant
Correct Answer: B
Rationale: The Biba model focuses on integrity rather than confidentiality. It enforces the "no read down" rule (preventing high-integrity
subjects from reading low-integrity data) and the "no write up" rule (preventing low-integrity subjects from writing to high-integrity
, objects). Bell-LaPadula is the confidentiality counterpart with opposite rules. Clark-Wilson uses well-formed transactions and separation
of duties for integrity. Take-Grant addresses access control through rights propagation.
Q5: A financial institution implements a security model where all data modifications must occur through
predefined, verified transaction procedures, and no single employee can both initiate and approve a
transaction. Which security model best describes this approach?
A. Bell-LaPadula
B. Biba
C. Clark-Wilson [CORRECT]
D. Brewer-Nash
Correct Answer: C
Rationale: The Clark-Wilson integrity model uses two primary mechanisms: well-formed transactions (ensuring all data modifications
follow approved procedures) and separation of duties (requiring multiple individuals for critical operations). This model is specifically
designed for commercial environments like banking where data integrity is paramount. Bell-LaPadula addresses confidentiality, not
integrity. Biba addresses integrity through hierarchical labels rather than transaction procedures. Brewer-Nash (Chinese Wall) addresses
conflict-of-interest restrictions.
Q6: An organization discovers that its security processes are reactive and undocumented, with no formal
procedures in place. According to the Capability Maturity Model Integration (CMMI), at which level is this
organization currently operating?
A. Level 1: Initial [CORRECT]
B. Level 2: Managed
C. Level 3: Defined
D. Level 4: Quantitatively Managed
Correct Answer: A
Rationale: CMMI Level 1 (Initial) is characterized by ad hoc, reactive processes where activities are not planned or documented, and
success depends on individual effort rather than organizational structure. Level 2 (Managed) introduces basic project-level planning and
tracking. Level 3 (Defined) establishes organization-wide standard processes that are proactively managed. Level 4 (Quantitatively
Managed) adds measurable quality metrics and statistical analysis to the processes.
Q7: A company has established organization-wide standard security processes, documented procedures, and
proactively manages its security posture across all projects. At which CMMI level is this organization
operating?
A. Level 2: Managed
B. Level 3: Defined [CORRECT]
C. Level 4: Quantitatively Managed
D. Level 5: Optimizing
Correct Answer: B
Rationale: CMMI Level 3 (Defined) indicates that the majority of work is defined and processes are standardized across the
organization. At this level, activities are proactive rather than reactive, and there is organizational consistency in how security processes
are executed. Level 2 still relies on reactive management at the project level. Level 4 adds quantitative measurement and statistical
analysis. Level 5 focuses on continuous process improvement through optimization.
Q8: During a threat modeling exercise, a security team identifies a scenario where an attacker impersonates
a legitimate user to gain unauthorized access to system resources. Which category of the STRIDE threat
model does this represent?
A. Tampering
B. Spoofing [CORRECT]
C. Information Disclosure
D. Denial of Service
, Correct Answer: B
Rationale: In the STRIDE threat model, Spoofing refers to an attacker impersonating someone or something else to gain unauthorized
access. This includes identity spoofing, authentication bypass, and session hijacking. Tampering involves unauthorized modification of
data or code. Information Disclosure involves exposing private data to unauthorized parties. Denial of Service involves making a system
unavailable to legitimate users. STRIDE provides a comprehensive framework for identifying threats during the design phase of software
development.
Q9: A threat model reveals that an attacker could intercept and modify data transmitted between a client and
server. Which STRIDE category best describes this threat?
A. Repudiation
B. Tampering [CORRECT]
C. Elevation of Privilege
D. Denial of Service
Correct Answer: B
Rationale: Tampering in the STRIDE model refers to the unauthorized modification of data in transit or at rest. Intercepting and
modifying data between client and server is a classic tampering scenario that can be mitigated through encryption, message authentication
codes, and digital signatures. Repudiation refers to a user denying they performed an action. Elevation of Privilege involves gaining
unauthorized higher-level access. Denial of Service involves rendering a system unavailable.
Q10: A security engineer applies the principle that a security mechanism should be as simple as possible
because complexity increases the potential for vulnerabilities and makes verification harder. Which secure
design principle is being applied?
A. Economy of mechanism [CORRECT]
B. Complete mediation
C. Open design
D. Least privilege
Correct Answer: A
Rationale: Economy of mechanism (also known as Keep It Simple) dictates that security designs should be as simple and straightforward
as possible. Simple mechanisms are easier to implement correctly, verify for security, and maintain. Complex designs introduce more
attack surfaces and potential points of failure. Complete mediation requires every access to be checked against the access control
mechanism. Open design means security should not depend on keeping the design secret. Least privilege limits user access to the minimum
necessary.
Q11: An access control system is designed to check every single access request against its authorization
database rather than caching permissions. Which secure design principle is being enforced?
A. Economy of mechanism
B. Complete mediation [CORRECT]
C. Least privilege
D. Fail secure
Correct Answer: B
Rationale: Complete mediation requires that every access request be validated by the access control system, rather than relying on cached
permissions or shortcuts. This ensures that no access can bypass the security mechanism. Economy of mechanism favors design simplicity.
Least privilege limits access rights. Fail secure ensures systems default to a secure state upon failure. Complete mediation is critical for
maintaining the integrity of access control decisions.
Q12: When a security system fails, it is designed to deny all access rather than permit access. Which secure
design principle ensures that a failure does not result in a security breach?
A. Fail open
B. Fail secure [CORRECT]
C. Open design
D. Economy of mechanism
