WGU D341 – Cybersecurity Architecture
Final Prep Exam (Latest Update
2026/2027) Questions and Verified
Answers | 100% Correct | Grade A.
1. Which cybersecurity principle ensures that users have access only
to the resources necessary to perform their job duties?
A. Defense in depth
B. Least privilege
C. Separation of duties
D. Availability
Rationale: The principle of least privilege limits user permissions to only
those required for assigned tasks. This minimizes the attack surface and
reduces the potential damage from compromised accounts, insider
threats, or accidental misuse. It is one of the most fundamental security
principles in cybersecurity architecture.
2. Which framework is built around five core functions: Identify,
Protect, Detect, Respond, and Recover?
A. COBIT
B. ISO/IEC 27001
,C. NIST Cybersecurity Framework (CSF)
D. ITIL
Rationale: The NIST Cybersecurity Framework organizes cybersecurity
activities into the five core functions of Identify, Protect, Detect,
Respond, and Recover. These functions help organizations manage
cybersecurity risks using a flexible and scalable approach.
3. Which security architecture model assumes that no device or user
should be trusted by default?
A. Bell-LaPadula Model
B. Clark-Wilson Model
C. Zero Trust Architecture
D. Biba Model
Rationale: Zero Trust Architecture operates on the principle of "never
trust, always verify." Every user, device, and application must
continuously authenticate and authorize access regardless of location.
4. What is the primary objective of network segmentation?
A. Increase network bandwidth
B. Improve internet speed
C. Limit lateral movement during an attack
D. Eliminate the need for firewalls
Rationale: Network segmentation divides a network into smaller
security zones. If an attacker compromises one segment, segmentation
,prevents easy movement to other parts of the network, reducing the
impact of a breach.
5. Which security control is considered preventive?
A. Security Information and Event Management (SIEM)
B. Audit log review
C. Multi-factor authentication (MFA)
D. Incident response
Rationale: Preventive controls stop security incidents before they occur.
Multi-factor authentication strengthens authentication by requiring
multiple forms of verification, making unauthorized access significantly
more difficult.
6. Which CIA Triad component focuses on preventing unauthorized
disclosure of information?
A. Confidentiality
B. Integrity
C. Availability
D. Accountability
Rationale: Confidentiality ensures that information is accessible only to
authorized individuals through encryption, access controls, and
authentication mechanisms.
7. What is the primary benefit of implementing defense in depth?
, A. Eliminates all cyber threats
B. Provides multiple layers of security controls
C. Reduces hardware requirements
D. Removes the need for authentication
Rationale: Defense in depth employs multiple overlapping security
controls. If one layer fails, additional layers continue protecting systems
and data, increasing overall resilience.
8. Which technology provides secure remote access by encrypting
communications across untrusted networks?
A. VLAN
B. NAC
C. VPN
D. Proxy server
Rationale: Virtual Private Networks (VPNs) encrypt network traffic
between remote users and organizational resources, protecting data
from interception over public networks.
9. Which architectural component commonly inspects incoming and
outgoing network traffic based on predefined security rules?
A. Switch
B. Firewall
C. Router
D. Hub
Final Prep Exam (Latest Update
2026/2027) Questions and Verified
Answers | 100% Correct | Grade A.
1. Which cybersecurity principle ensures that users have access only
to the resources necessary to perform their job duties?
A. Defense in depth
B. Least privilege
C. Separation of duties
D. Availability
Rationale: The principle of least privilege limits user permissions to only
those required for assigned tasks. This minimizes the attack surface and
reduces the potential damage from compromised accounts, insider
threats, or accidental misuse. It is one of the most fundamental security
principles in cybersecurity architecture.
2. Which framework is built around five core functions: Identify,
Protect, Detect, Respond, and Recover?
A. COBIT
B. ISO/IEC 27001
,C. NIST Cybersecurity Framework (CSF)
D. ITIL
Rationale: The NIST Cybersecurity Framework organizes cybersecurity
activities into the five core functions of Identify, Protect, Detect,
Respond, and Recover. These functions help organizations manage
cybersecurity risks using a flexible and scalable approach.
3. Which security architecture model assumes that no device or user
should be trusted by default?
A. Bell-LaPadula Model
B. Clark-Wilson Model
C. Zero Trust Architecture
D. Biba Model
Rationale: Zero Trust Architecture operates on the principle of "never
trust, always verify." Every user, device, and application must
continuously authenticate and authorize access regardless of location.
4. What is the primary objective of network segmentation?
A. Increase network bandwidth
B. Improve internet speed
C. Limit lateral movement during an attack
D. Eliminate the need for firewalls
Rationale: Network segmentation divides a network into smaller
security zones. If an attacker compromises one segment, segmentation
,prevents easy movement to other parts of the network, reducing the
impact of a breach.
5. Which security control is considered preventive?
A. Security Information and Event Management (SIEM)
B. Audit log review
C. Multi-factor authentication (MFA)
D. Incident response
Rationale: Preventive controls stop security incidents before they occur.
Multi-factor authentication strengthens authentication by requiring
multiple forms of verification, making unauthorized access significantly
more difficult.
6. Which CIA Triad component focuses on preventing unauthorized
disclosure of information?
A. Confidentiality
B. Integrity
C. Availability
D. Accountability
Rationale: Confidentiality ensures that information is accessible only to
authorized individuals through encryption, access controls, and
authentication mechanisms.
7. What is the primary benefit of implementing defense in depth?
, A. Eliminates all cyber threats
B. Provides multiple layers of security controls
C. Reduces hardware requirements
D. Removes the need for authentication
Rationale: Defense in depth employs multiple overlapping security
controls. If one layer fails, additional layers continue protecting systems
and data, increasing overall resilience.
8. Which technology provides secure remote access by encrypting
communications across untrusted networks?
A. VLAN
B. NAC
C. VPN
D. Proxy server
Rationale: Virtual Private Networks (VPNs) encrypt network traffic
between remote users and organizational resources, protecting data
from interception over public networks.
9. Which architectural component commonly inspects incoming and
outgoing network traffic based on predefined security rules?
A. Switch
B. Firewall
C. Router
D. Hub
