Page 1 of 147
WGU D488 OA AND PRE- ASSESSMENT NEWEST 2025 TEST
BANK| D488 CYBERSECURITY ARCHITECTURE AND
ENGINEERING EXAM PREP WITH COMPLETE 350 REAL
EXAM QUESTIONS AND CORRECT DETAILED ANSWERS
(VERIFIED ANSWERS) GRADED A+ (BRAND NEW!!)
A company wants to provide laptops to its employees so they can work
remotely. What should be implemented to ensure only work applications
can be installed on company laptops?
A. Containerization
B. Token-based access
C. Patch repository
D. Whitelisting - Correct Answer – D. Whitelisting
Whitelisting ensures that only approved applications can be installed and
executed on company laptops.
What should a business use to provide non-repudiation for emails
between employees?
A. TLS/SSL
B. AES-256
C. S/MIME
D. IPSec - Correct Answer – C. S/MIME (Secure/Multipurpose Internet
Mail Extensions)
S/MIME provides non-repudiation for emails by using digital signatures.
pg. 1
,Page 2 of 147
Which strategy is appropriate for a risk management team to determine
if a business has insufficient security controls?
A. Qualitative assessment
B. Gap assessment
C. Quantitative risk assessment
D. Impact assessment - Correct Answer – B. Gap assessment
A gap assessment identifies the gaps between the current security control
and the desired or required levels of security.
An organization has leased office space that is suitable for its computer
equipment so personnel and systems can be relocated if the main office
location is unavailable. It currently has some equipment. Which type of
site is the organization using?
A. Cold site
B. Warm site
C. Hot site
D. Mobile site - Correct Answer – B. Warm site
A warm site is a disaster recovery site that provides a partially equipped
facility that can be used to restore critical operations faster than having
no equipment at all.
What type of connectivity will allow key personnel to maintain
communication with one another and key network resources when the
main network is under attack?
A. Email
B. OOB
pg. 2
,Page 3 of 147
C. Teams
D. VNC - Correct Answer – B. OOB
What is a disadvantage when using a virtual desktop infrastructure
(VDI)?
A. Reliance on networks
B. Better use of hardware resources
C. Enhanced security
D. Standard operating environment (SOE) - Correct Answer – A.
Reliance on networks
What is used when my contractors use a tablet or thin client to access a
Windows 10 desktop in my data center?
A. OOB
B. MDM
C. VDI
D. SSH - Correct Answer – C. VDI
What type of routing will help to mitigate a DDoS attack?
A. OSPF
B. RTBH
C. RIP
D. EIGRP - Correct Answer – B. RTBH
pg. 3
, Page 4 of 147
What is it when SOC staff are failing to respond to alerts due to
excessive levels of alerts?
A. False positive
B. Alert fatigue
C. False negative
D. True positive - Correct Answer – B. Alert fatigue
What will I need to support on my network device in order to forward
truncated network traffic to a network monitoring tool?
A. NetFlow
B. sFlow
C. SIEM
D. System Logging Protocol (Syslog) - Correct Answer – B. sFlow
What type of security would I use on my layer 2 switch to isolate the
finance network from the development network?
A. VPN
B. IPsec
C. VLAN
D. RTBH - Correct Answer – C. VLAN
A risk assessment consultant is discussing segmentation options with a
client. What are a few standard options the consultant could offer?
A. VLANs
pg. 4
WGU D488 OA AND PRE- ASSESSMENT NEWEST 2025 TEST
BANK| D488 CYBERSECURITY ARCHITECTURE AND
ENGINEERING EXAM PREP WITH COMPLETE 350 REAL
EXAM QUESTIONS AND CORRECT DETAILED ANSWERS
(VERIFIED ANSWERS) GRADED A+ (BRAND NEW!!)
A company wants to provide laptops to its employees so they can work
remotely. What should be implemented to ensure only work applications
can be installed on company laptops?
A. Containerization
B. Token-based access
C. Patch repository
D. Whitelisting - Correct Answer – D. Whitelisting
Whitelisting ensures that only approved applications can be installed and
executed on company laptops.
What should a business use to provide non-repudiation for emails
between employees?
A. TLS/SSL
B. AES-256
C. S/MIME
D. IPSec - Correct Answer – C. S/MIME (Secure/Multipurpose Internet
Mail Extensions)
S/MIME provides non-repudiation for emails by using digital signatures.
pg. 1
,Page 2 of 147
Which strategy is appropriate for a risk management team to determine
if a business has insufficient security controls?
A. Qualitative assessment
B. Gap assessment
C. Quantitative risk assessment
D. Impact assessment - Correct Answer – B. Gap assessment
A gap assessment identifies the gaps between the current security control
and the desired or required levels of security.
An organization has leased office space that is suitable for its computer
equipment so personnel and systems can be relocated if the main office
location is unavailable. It currently has some equipment. Which type of
site is the organization using?
A. Cold site
B. Warm site
C. Hot site
D. Mobile site - Correct Answer – B. Warm site
A warm site is a disaster recovery site that provides a partially equipped
facility that can be used to restore critical operations faster than having
no equipment at all.
What type of connectivity will allow key personnel to maintain
communication with one another and key network resources when the
main network is under attack?
A. Email
B. OOB
pg. 2
,Page 3 of 147
C. Teams
D. VNC - Correct Answer – B. OOB
What is a disadvantage when using a virtual desktop infrastructure
(VDI)?
A. Reliance on networks
B. Better use of hardware resources
C. Enhanced security
D. Standard operating environment (SOE) - Correct Answer – A.
Reliance on networks
What is used when my contractors use a tablet or thin client to access a
Windows 10 desktop in my data center?
A. OOB
B. MDM
C. VDI
D. SSH - Correct Answer – C. VDI
What type of routing will help to mitigate a DDoS attack?
A. OSPF
B. RTBH
C. RIP
D. EIGRP - Correct Answer – B. RTBH
pg. 3
, Page 4 of 147
What is it when SOC staff are failing to respond to alerts due to
excessive levels of alerts?
A. False positive
B. Alert fatigue
C. False negative
D. True positive - Correct Answer – B. Alert fatigue
What will I need to support on my network device in order to forward
truncated network traffic to a network monitoring tool?
A. NetFlow
B. sFlow
C. SIEM
D. System Logging Protocol (Syslog) - Correct Answer – B. sFlow
What type of security would I use on my layer 2 switch to isolate the
finance network from the development network?
A. VPN
B. IPsec
C. VLAN
D. RTBH - Correct Answer – C. VLAN
A risk assessment consultant is discussing segmentation options with a
client. What are a few standard options the consultant could offer?
A. VLANs
pg. 4
