WGU D488 OBJECTIVE ASSESSMENT EXAM |
CYBERSECURITY ARCHITECTURE &
ENGINEERING OA EXAM | 100% CORRECTLY
ANSWERED & RATED A+ | 2025/2026 GUIDE
Which type of security should a business use on its layer 2 switch to isolate
the finance network from other departmental networks?
A - Virtual Private Network (VPN)
B - Internet Protocol Security (IPSec)
C - Virtual Local Area Network (VLAN)
D - Remotely Triggered Black Hole (RTBH)
-Correct Answer- C - Virtual Local Area Network (VLAN)
VLANs allow companies to logically segment network traffic, ensuring
devices on different VLANs cannot communicate unless otherwise
specified in a layer 3 device like a router.
,Which type of software testing should be used when there has been a
change within the existing environment?
A - Regression Testing
B - Penetration Testing
C - Requirements Testing
D - Release Testing
-Correct Answer- A - Regression Testing
Regression testing ensures that recent changes within the environment
have not introduced new defects or broken existing functionality.
Which security technique should be used to detect a weak password that
may match common dictionary words?
A - Password Spraying
B - Password Auditing
C - Password Guessing
D - Password History
-Correct Answer- B - Password Auditing
,Password auditing allows for existing passwords to be compared against
known weak passwords to help determine the security of a credential.
What should an organization implement if it wants users of their site to
provide a password, memorable word, and pin?
A - Multi-factor authentication (MFA)
B - Two-factor authentication (2FA)
C - Two-step verification
D - Single-factor authentication
-Correct Answer- A - Multi-factor authentication
MFA enhances security by requiring multiple forms of authentication,
therefore reducing the risk of unauthorized access.
A network technician is asked by their manager to update security to block
several known bad actor IP addresses.
A - Signature rules
B - Firewall rules
C - Behavior rules
D - Data loss prevention (DLP) rules
, -Correct Answer- B - Firewall rules
Firewall rules can be set up to deny traffic coming from known malicious IP
addresses.
On a shopping website, there is a 500-millisecond delay when the
authorized payment button is selected for purchases. Attackers have been
running a script to alter the final payment that takes 200 milliseconds.
Which vulnerability on the website is being targeted by the attackers?
A - Buffer Overflow
B - Integer Overflow
C - Broken Authentication
D - Race Condition
-Correct Answer- D - Race Condition
A race condition occurs when multiple processes or actions are executed
simultaneously, and the outcome depends on the sequence or timing of
events.
CYBERSECURITY ARCHITECTURE &
ENGINEERING OA EXAM | 100% CORRECTLY
ANSWERED & RATED A+ | 2025/2026 GUIDE
Which type of security should a business use on its layer 2 switch to isolate
the finance network from other departmental networks?
A - Virtual Private Network (VPN)
B - Internet Protocol Security (IPSec)
C - Virtual Local Area Network (VLAN)
D - Remotely Triggered Black Hole (RTBH)
-Correct Answer- C - Virtual Local Area Network (VLAN)
VLANs allow companies to logically segment network traffic, ensuring
devices on different VLANs cannot communicate unless otherwise
specified in a layer 3 device like a router.
,Which type of software testing should be used when there has been a
change within the existing environment?
A - Regression Testing
B - Penetration Testing
C - Requirements Testing
D - Release Testing
-Correct Answer- A - Regression Testing
Regression testing ensures that recent changes within the environment
have not introduced new defects or broken existing functionality.
Which security technique should be used to detect a weak password that
may match common dictionary words?
A - Password Spraying
B - Password Auditing
C - Password Guessing
D - Password History
-Correct Answer- B - Password Auditing
,Password auditing allows for existing passwords to be compared against
known weak passwords to help determine the security of a credential.
What should an organization implement if it wants users of their site to
provide a password, memorable word, and pin?
A - Multi-factor authentication (MFA)
B - Two-factor authentication (2FA)
C - Two-step verification
D - Single-factor authentication
-Correct Answer- A - Multi-factor authentication
MFA enhances security by requiring multiple forms of authentication,
therefore reducing the risk of unauthorized access.
A network technician is asked by their manager to update security to block
several known bad actor IP addresses.
A - Signature rules
B - Firewall rules
C - Behavior rules
D - Data loss prevention (DLP) rules
, -Correct Answer- B - Firewall rules
Firewall rules can be set up to deny traffic coming from known malicious IP
addresses.
On a shopping website, there is a 500-millisecond delay when the
authorized payment button is selected for purchases. Attackers have been
running a script to alter the final payment that takes 200 milliseconds.
Which vulnerability on the website is being targeted by the attackers?
A - Buffer Overflow
B - Integer Overflow
C - Broken Authentication
D - Race Condition
-Correct Answer- D - Race Condition
A race condition occurs when multiple processes or actions are executed
simultaneously, and the outcome depends on the sequence or timing of
events.
