WGU D488 Final Exam Test Bank (Latest 2025/ 2026 Update) Cybersecurity Architecture and Engineering| Questions & Answers| Grade A| 100% Correct (Verified Solutions)

WGU D488 Final Exam Test Bank (Latest 2025/ 2026 Update) Cybersecurity Architecture and Engineering| Questions & Answers| Grade A| 100% Correct (Verified Solutions) QUESTION A company is looking to protect sensitive data stored on its storage devices and ensure that this data is secure from unauthorized access. The company is looking for a solution that provides a high level of security and protection for its data. Which security technology will protect sensitive data stored on the company's storage devices by automatically initiating security procedures as they are written to the device? A) Self-encrypting drives B) Hardware security module (HSM) C) Two-factor authentication D) Measured boot Answer: A) Self-encrypting drives QUESTION A company is concerned about advanced persistent threats and targeted attacks on its computer systems. The company wants to implement a security solution that can detect and respond to any suspicious activity on its systems. Which security technology meets the needs of this company? A) Endpoint detection and response (EDR) software B) Hardware security module (HSM) C) Two-factor authentication D) Antivirus tools Answer: A) Endpoint detection and response (EDR) software QUESTION An enterprise is deploying a new software application that requires a cryptographic protocol to secure data transmission. The application will be used to process sensitive customer information, and the company wants to ensure that the data is protected during transmission. Which cryptographic protocol meets the needs of the enterprise? A) Transport Layer Security (TLS) with Advanced Encryption Standard (AES) B) Secure Sockets Layer (SSL) with Data Encryption Standard (DES) C) Point-to-Point Tunneling Protocol (PPTP) with Triple Data Encryption Standard (3DES) D) Hypertext Transfer Protocol Secure (HTTPS) with Rivest-Shamir-Adleman (RSA) Answer: A) Transport Layer Security (TLS) with Advanced Encryption Standard (AES) QUESTION Which emerging technology has the potential to significantly impact the security of current encryption methods by making it possible to quickly solve mathematical problems that are currently considered difficult or impossible to solve? A) Quantum computing B) Blockchain C) Artificial intelligence (AI) D) Augmented reality (AR) Answer: A) Quantum computing QUESTION Which public-key cryptosystem uses prime factorization as the basis for its security? A) Rivest-Shamir-Adleman (RSA) B) Digital Signature Algorithm (DSA) C) Elliptic Curve Digital Signature Algorithm (ECDSA) D) Diffie-Hellman (DH) Answer: A) Rivest-Shamir-Adleman (RSA) QUESTION The company plans to deploy a cryptographic system for their digital signatures, which employs a public key cryptosystem that is based on figures described by the equation y^2 = x^3 + ax + b. Which public-key cryptosystem does this describe? A) Elliptic Curve Digital Signature Algorithm (ECDSA) B) Rivest-Shamir-Adleman (RSA) C) Digital Signature Algorithm (DSA) D) Diffie-Hellman (DH) Answer: A) Elliptic Curve Digital Signature Algorithm (ECDSA) QUESTION Which key exchange algorithm is used to establish a shared secret key between two parties without the need for a pre-shared secret or public key exchange? A) Diffie-Hellman (DH) B) Rivest-Shamir-Adleman (RSA) C) Digital Signature Algorithm (DSA) D) Elliptic Curve Diffie-Hellman (ECDH) Answer: A) Diffie-Hellman (DH) QUESTION Which block cipher mode of operation is resistant to ciphertext manipulation attacks by the previous ciphertext block with the current plaintext block before encryption? A) Cipher block chaining (CBC) B) Electronic codebook (ECB) C) Output feedback (OFB) D) Counter (CTR) Answer: A) Cipher block chaining (CBC) QUESTION Which authenticated encryption mode of operation uses a one-time key and a function to provide strong message authentication and is designed to be fast? A) Poly1305 B) Cipher block chaining (CBC) C) Electronic codebook (ECB) D) Counter (CTR) Answer: A) Poly1305 QUESTION Which risk management strategy will ensure the security of data stored on a software application? A) Encryption of all sensitive data stored within the application B) Installation of the latest antivirus software on all computers that access the application C) Configuration of the application to require strong, unique passwords for all user accounts D) Implementation of a strict firewall policy to restrict access to the application's server Answer: A) Encryption of all sensitive data stored within the application QUESTION Which risk management strategy will reduce the threat surface on a new web application? A) Use of hardening measures to remove unnecessary services, protocols, and applications B) Implementation of end-to-end encryption for all user data C) Configuration of the web application to disable all external device connections on all workstations D) Implementation of regular virus scanning for all workstations Answer: A) Use of hardening measures to remove unnecessary services, protocols, and applications QUESTION Which statement describes the role of risk tolerance in the development of a financial services company's mobile application for managing customer accounts and on-the-go transactions? A) Risk tolerance helps the company determine the acceptable level of risk for the mobile application based on its potential impact on the company and its customers. B) Risk tolerance determines the specific security controls that must be implemented in the mobile application. C) Risk tolerance ensures that the company's development team is trained in cybersecurity best practices. D) Risk tolerance guides the decision-making process regarding the trade-off between the level of innovation and the level of risk in the mobile application. Answer: A) Risk tolerance helps the company determine the acceptable level of risk for the mobile application based on its potential impact on the company and its customers. QUESTION A software company uses a structured query language (SQL) database to store customer data, such as names, addresses, and credit card information. The IT security team has identified several potential vulnerabilities that could result in a data breach, including SQL injection attacks and weak authentication controls. Which risk management strategy can reduce the risk of a data breach? A) Enforcing strong authentication controls and limiting access to the SQL database to help prevent unauthorized access B) Encrypting sensitive customer information stored in the SQL database to help prevent unauthorized access C) Implementing intrusion detection and prevention systems to help detect and prevent unauthorized access to the SQL database D) Regularly scanning the SQL database for vulnerabilities and taking action to remediate them Answer: A) Enforcing strong authentication controls and limiting access to the SQL database to help prevent unauthorized access QUESTION A retail company is required to comply with the Payment Card Industry Data Security Standard (PCI DSS), which establishes security requirements for companies that process, store, or transmit credit card information. The company is planning to integrate wireless networks into its stores to provide free Wi-Fi to customers. Which Wi-Fi encryption standard will meet the needs of the company? A) WPA2 with Advanced Encryption Standard (AES) encryption B) WPA with Temporal Key Integrity Protocol (TKIP) encryption C) WEP encryption D) Open network Answer: A) WPA2 with Advanced Encryption Standard (AES) encryption QUESTION A European Union (EU) company is required to comply with the General Data Protection Regulation (GDPR), which sets requirements for the protection of personal data for EU residents. Which security control will secure web applications and protect personal data of EU residents in compliance with the General Data Protection Regulation (GDPR)? A) Encryption B) Authentication and authorization C) Input validation D) Security monitoring Answer: A) Encryption QUESTION Which security control will secure a web-based credit monitoring service and protect credit information of consumers in compliance with Fair Credit Reporting Act (FCRA) requirements? A) Access controls B) Penetration testing C) Input validation D) Secure coding practices Answer: A) Access controls QUESTION A financial institution is required to comply with the Payment Card Industry Data Security Standard (PCI DSS), which sets requirements for the protection of payment card data. The institution uses various software programs and utilities to manage payment card data, and it is essential to ensure that only authorized programs and utilities are allowed on the institution's systems. Which security control will meet the needs of the institution? A) Application allowlisting B) Password policies