WGU D488 Cybersecurity Architecture & Engineering – Final
Exam Practice Questions & Answers
Instructions: This comprehensive practice exam contains 150 questions covering advanced topics in
cybersecurity architecture, engineering principles, risk management frameworks, and secure design.
Select the best answer. Answers are in bold and rationales are in italic.
1. Which of the following best describes the primary difference between cybersecurity architecture
and cybersecurity engineering?
A) Architecture focuses on strategic design; engineering focuses on implementation.
B) Architecture is only for networks; engineering is for applications.
C) Architecture is a subset of engineering.
D) There is no difference; the terms are interchangeable.
Answer: A
Rationale: Cybersecurity architecture is the high-level design and structure of a security system, defining
components, relationships, and principles. Cybersecurity engineering is the process of building,
implementing, and maintaining those security solutions. Architecture sets the vision; engineering
executes it.
2. In the SABSA framework, which of the following layers is concerned with the physical infrastructure
and security mechanisms?
A) Business View
B) Architect's View
C) Builder's View
D) Operational View
Answer: D
Rationale: SABSA (Sherwood Applied Business Security Architecture) has six layers. The Operational View
(Physical layer) deals with the actual technology, hardware, and software components used to
implement security, such as firewalls, IDS/IPS, and cryptographic devices.
3. Which of the following is a primary characteristic of the "Zero Trust" security model?
A) Implicit trust for users and devices inside the corporate network.
B) Continuous verification of identity and device health for every access request.
C) Reliance on perimeter-based security controls only.
D) Trust based solely on IP address and location.
Answer: B
Rationale: Zero Trust is a security model that eliminates implicit trust. It requires continuous verification
of every access request, regardless of whether it originates from inside or outside the network, enforcing
least-privilege access and micro-segmentation.
,4. What is the primary purpose of a "Threat Model" in the secure design process?
A) To identify and prioritize potential threats and vulnerabilities in a system.
B) To create a list of all possible attacks.
C) To design the user interface.
D) To write the system's source code.
Answer: A
Rationale: Threat modeling is a structured process to identify, assess, and prioritize potential security
threats to a system. It helps architects and engineers understand the attack surface, identify
vulnerabilities, and design appropriate countermeasures early in the development lifecycle.
5. Which of the following is a key component of the "STRIDE" threat modeling framework?
A) Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege.
B) Secure, Trustworthy, Resilient, Integrated, Defensible, Encrypted.
C) Strategy, Technology, Risk, Identity, Defense, Execution.
D) Scanning, Testing, Reporting, Incident, Detection, Eradication.
Answer: A
Rationale: STRIDE is a threat modeling framework developed by Microsoft. It categorizes threats into six
types: Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of
Privilege. This helps in systematically identifying threats during the design phase.
6. Which of the following is an example of a "Compensating Control"?
A) A control that directly addresses a specific risk.
B) A control that is implemented when the primary control is not feasible, providing equivalent
protection.
C) A control that is always the most expensive option.
D) A control that is only used for compliance purposes.
Answer: B
Rationale: A compensating control is a management, operational, or technical control that is used when
a primary control is not feasible or cost-effective. It must provide a similar level of protection and be
approved by the appropriate authority.
7. In the context of risk management, what is "Inherent Risk"?
A) The risk level after implementing security controls.
B) The risk level before any controls are implemented.
C) The risk that is transferred to an insurance company.
D) The risk that is completely ignored.
Answer: B
Rationale: Inherent risk is the natural level of risk that exists in a system or process without any security
controls or mitigations in place. It represents the full potential exposure if no action is taken.
,8. Which of the following is a principle of "Secure Design" that emphasizes simplicity?
A) Economy of Mechanism
B) Separation of Privilege
C) Complete Mediation
D) Least Common Mechanism
Answer: A
Rationale: The Principle of Economy of Mechanism states that security mechanisms should be as simple
and small as possible. Simpler designs are easier to analyze, verify, and maintain, leading to fewer
potential vulnerabilities.
9. Which of the following is a primary responsibility of a "Security Architect" during the SDLC?
A) Writing the code for the application.
B) Conducting the final user acceptance testing.
C) Ensuring that security requirements are integrated into the design and architecture.
D) Managing the project budget.
Answer: C
Rationale: A Security Architect's primary role in the SDLC is to define security requirements, create secure
architecture designs, and ensure that security is "baked in" from the beginning, rather than "bolted on"
at the end.
10. Which of the following is a primary security benefit of "Microservices" architecture?
A) It simplifies the overall system, making it easier to secure.
B) It allows for independent deployment and updates, reducing the attack surface.
C) It inherently eliminates the need for authentication.
D) It reduces the number of APIs required.
Answer: B
Rationale: Microservices decompose a large application into smaller, loosely coupled services. This allows
each service to be developed, deployed, and updated independently, which limits the blast radius of a
compromise. It doesn't inherently simplify security (A) or eliminate the need for authentication (C).
11. Which of the following is a key principle of "Defense in Depth"?
A) Using a single, strong layer of defense is sufficient.
B) Implementing multiple, independent layers of security controls so that if one fails, others are still in
place.
C) Focusing all security efforts on the perimeter.
D) Relying solely on encryption for all security.
Answer: B
Rationale: Defense in Depth is a strategy of layering security controls. The idea is that no single control is
perfect; by having multiple layers, an attacker must breach several controls to reach the target.
, 12. Which of the following is a "Detective" security control?
A) A firewall rule that blocks malicious traffic.
B) An intrusion detection system (IDS) that alerts on suspicious activity.
C) An encryption policy that protects data at rest.
D) A security policy that mandates password complexity.
Answer: B
Rationale: Detective controls are designed to identify and alert on a security incident after it has
occurred. An IDS is a classic detective control, as it monitors for and reports on suspicious activity but
does not actively prevent it.
13. What is the primary purpose of a "Security Information and Event Management" (SIEM) system's
correlation engine?
A) To generate security awareness training reports.
B) To identify relationships between different security events and log entries.
C) To block all malicious network traffic automatically.
D) To manage the patch deployment process.
Answer: B
Rationale: The correlation engine is a core component of a SIEM. It analyzes and correlates seemingly
disparate logs from various sources to identify patterns that might indicate a security incident, reducing
false positives.
14. Which of the following is a characteristic of a "Privileged Access Management" (PAM) solution?
A) It manages standard user accounts for day-to-day tasks.
B) It manages, controls, and monitors access to privileged accounts.
C) It is a type of firewall.
D) It is primarily used for guest Wi-Fi access.
Answer: B
Rationale: PAM solutions are specifically designed to secure and manage privileged accounts (like root,
admin, service accounts) that have elevated access. They enforce least privilege, session recording, and
password rotation.
15. Which of the following is a primary benefit of implementing "Network Segmentation"?
A) It simplifies the overall network architecture.
B) It reduces the blast radius of a network compromise.
C) It eliminates the need for firewalls.
D) It ensures all traffic is encrypted.
Answer: B
Rationale: Network segmentation divides a network into smaller, isolated segments. This limits the
ability of an attacker to move laterally after gaining access to one part of the network, effectively
containing the breach.
Exam Practice Questions & Answers
Instructions: This comprehensive practice exam contains 150 questions covering advanced topics in
cybersecurity architecture, engineering principles, risk management frameworks, and secure design.
Select the best answer. Answers are in bold and rationales are in italic.
1. Which of the following best describes the primary difference between cybersecurity architecture
and cybersecurity engineering?
A) Architecture focuses on strategic design; engineering focuses on implementation.
B) Architecture is only for networks; engineering is for applications.
C) Architecture is a subset of engineering.
D) There is no difference; the terms are interchangeable.
Answer: A
Rationale: Cybersecurity architecture is the high-level design and structure of a security system, defining
components, relationships, and principles. Cybersecurity engineering is the process of building,
implementing, and maintaining those security solutions. Architecture sets the vision; engineering
executes it.
2. In the SABSA framework, which of the following layers is concerned with the physical infrastructure
and security mechanisms?
A) Business View
B) Architect's View
C) Builder's View
D) Operational View
Answer: D
Rationale: SABSA (Sherwood Applied Business Security Architecture) has six layers. The Operational View
(Physical layer) deals with the actual technology, hardware, and software components used to
implement security, such as firewalls, IDS/IPS, and cryptographic devices.
3. Which of the following is a primary characteristic of the "Zero Trust" security model?
A) Implicit trust for users and devices inside the corporate network.
B) Continuous verification of identity and device health for every access request.
C) Reliance on perimeter-based security controls only.
D) Trust based solely on IP address and location.
Answer: B
Rationale: Zero Trust is a security model that eliminates implicit trust. It requires continuous verification
of every access request, regardless of whether it originates from inside or outside the network, enforcing
least-privilege access and micro-segmentation.
,4. What is the primary purpose of a "Threat Model" in the secure design process?
A) To identify and prioritize potential threats and vulnerabilities in a system.
B) To create a list of all possible attacks.
C) To design the user interface.
D) To write the system's source code.
Answer: A
Rationale: Threat modeling is a structured process to identify, assess, and prioritize potential security
threats to a system. It helps architects and engineers understand the attack surface, identify
vulnerabilities, and design appropriate countermeasures early in the development lifecycle.
5. Which of the following is a key component of the "STRIDE" threat modeling framework?
A) Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege.
B) Secure, Trustworthy, Resilient, Integrated, Defensible, Encrypted.
C) Strategy, Technology, Risk, Identity, Defense, Execution.
D) Scanning, Testing, Reporting, Incident, Detection, Eradication.
Answer: A
Rationale: STRIDE is a threat modeling framework developed by Microsoft. It categorizes threats into six
types: Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of
Privilege. This helps in systematically identifying threats during the design phase.
6. Which of the following is an example of a "Compensating Control"?
A) A control that directly addresses a specific risk.
B) A control that is implemented when the primary control is not feasible, providing equivalent
protection.
C) A control that is always the most expensive option.
D) A control that is only used for compliance purposes.
Answer: B
Rationale: A compensating control is a management, operational, or technical control that is used when
a primary control is not feasible or cost-effective. It must provide a similar level of protection and be
approved by the appropriate authority.
7. In the context of risk management, what is "Inherent Risk"?
A) The risk level after implementing security controls.
B) The risk level before any controls are implemented.
C) The risk that is transferred to an insurance company.
D) The risk that is completely ignored.
Answer: B
Rationale: Inherent risk is the natural level of risk that exists in a system or process without any security
controls or mitigations in place. It represents the full potential exposure if no action is taken.
,8. Which of the following is a principle of "Secure Design" that emphasizes simplicity?
A) Economy of Mechanism
B) Separation of Privilege
C) Complete Mediation
D) Least Common Mechanism
Answer: A
Rationale: The Principle of Economy of Mechanism states that security mechanisms should be as simple
and small as possible. Simpler designs are easier to analyze, verify, and maintain, leading to fewer
potential vulnerabilities.
9. Which of the following is a primary responsibility of a "Security Architect" during the SDLC?
A) Writing the code for the application.
B) Conducting the final user acceptance testing.
C) Ensuring that security requirements are integrated into the design and architecture.
D) Managing the project budget.
Answer: C
Rationale: A Security Architect's primary role in the SDLC is to define security requirements, create secure
architecture designs, and ensure that security is "baked in" from the beginning, rather than "bolted on"
at the end.
10. Which of the following is a primary security benefit of "Microservices" architecture?
A) It simplifies the overall system, making it easier to secure.
B) It allows for independent deployment and updates, reducing the attack surface.
C) It inherently eliminates the need for authentication.
D) It reduces the number of APIs required.
Answer: B
Rationale: Microservices decompose a large application into smaller, loosely coupled services. This allows
each service to be developed, deployed, and updated independently, which limits the blast radius of a
compromise. It doesn't inherently simplify security (A) or eliminate the need for authentication (C).
11. Which of the following is a key principle of "Defense in Depth"?
A) Using a single, strong layer of defense is sufficient.
B) Implementing multiple, independent layers of security controls so that if one fails, others are still in
place.
C) Focusing all security efforts on the perimeter.
D) Relying solely on encryption for all security.
Answer: B
Rationale: Defense in Depth is a strategy of layering security controls. The idea is that no single control is
perfect; by having multiple layers, an attacker must breach several controls to reach the target.
, 12. Which of the following is a "Detective" security control?
A) A firewall rule that blocks malicious traffic.
B) An intrusion detection system (IDS) that alerts on suspicious activity.
C) An encryption policy that protects data at rest.
D) A security policy that mandates password complexity.
Answer: B
Rationale: Detective controls are designed to identify and alert on a security incident after it has
occurred. An IDS is a classic detective control, as it monitors for and reports on suspicious activity but
does not actively prevent it.
13. What is the primary purpose of a "Security Information and Event Management" (SIEM) system's
correlation engine?
A) To generate security awareness training reports.
B) To identify relationships between different security events and log entries.
C) To block all malicious network traffic automatically.
D) To manage the patch deployment process.
Answer: B
Rationale: The correlation engine is a core component of a SIEM. It analyzes and correlates seemingly
disparate logs from various sources to identify patterns that might indicate a security incident, reducing
false positives.
14. Which of the following is a characteristic of a "Privileged Access Management" (PAM) solution?
A) It manages standard user accounts for day-to-day tasks.
B) It manages, controls, and monitors access to privileged accounts.
C) It is a type of firewall.
D) It is primarily used for guest Wi-Fi access.
Answer: B
Rationale: PAM solutions are specifically designed to secure and manage privileged accounts (like root,
admin, service accounts) that have elevated access. They enforce least privilege, session recording, and
password rotation.
15. Which of the following is a primary benefit of implementing "Network Segmentation"?
A) It simplifies the overall network architecture.
B) It reduces the blast radius of a network compromise.
C) It eliminates the need for firewalls.
D) It ensures all traffic is encrypted.
Answer: B
Rationale: Network segmentation divides a network into smaller, isolated segments. This limits the
ability of an attacker to move laterally after gaining access to one part of the network, effectively
containing the breach.
