WGU D488 Cybersecurity Architecture & Engineering - Final
Exam Practice Questions & Answers
This exam assesses mastery of security architecture foundations and design principles, including threat modeling,
security frameworks (e.g., NIST CSF 2.0, ISO/IEC 27001:2022), defense-in-depth, zero trust, and secure design
patterns. It emphasizes applying these principles to complex, real-world scenarios to evaluate architectural
decisions and trade-offs. It contains 148 multiple-choice questions, each with four distractors and a fully worked
rationale that explains why the keyed answer is correct. Content is organized into 12 focused sections: Security
Architecture Foundations and Design Principles, Threat Modeling and Risk Assessment, Network Security
Architecture and Segmentation, Identity and Access Management (IAM), Cryptography and Key Management,
Endpoint and Host Security, Cloud and Virtualization Security Architecture, Security Operations, Monitoring, and
Incident Response, Resilience, Business Continuity, and Disaster Recovery, Secure Software and Systems
Development, Governance, Compliance, and Security Frameworks, Emerging Technologies and Zero Trust
Architecture. Targeted learning outcomes include: Apply security architecture frameworks and design principles
to analyze and evaluate system architectures.; Integrate threat modeling and risk assessment into the design
lifecycle to identify and mitigate vulnerabilities.; Design resilient and secure architectures using defense-in-depth,
zero trust, and least privilege concepts.. Every item has been reviewed for clinical accuracy, current guidelines,
and clarity so that students can study with confidence and self-correct as they work through the bank. Use it as a
Section 1: Security Architecture Foundations and Design Principles (Questions 1-13)
1 Which security architecture principle is most directly violated by granting all
employees domain admin rights for convenience?
A) Defense in depth
B) Least privilege
C) Separation of duties
D) Zero trust
Answer: B
Rationale: Least privilege mandates that users have only the minimum access
necessary for their job functions. Granting domain admin rights to all
employees violates this by providing excessive privileges. Defense in depth
involves layered controls, separation of duties divides tasks, and zero trust is a
model that assumes no implicit trust, but the direct violation is least privilege.
2 In threat modeling, which step immediately follows identifying threats and
vulnerabilities?
A) Determine countermeasures
B) Assess risk
C) Document the model
D) Validate the model
,Answer: B
Rationale: After identifying threats and vulnerabilities, the next logical step in
threat modeling is to assess the risk associated with each threat. Only then can
appropriate countermeasures be determined. Documentation and validation
occur throughout, but risk assessment is the immediate next step.
3 Which security design principle is best illustrated by implementing multiple
overlapping controls (e.g., firewall, IDS, encryption) to protect an asset?
A) Defense in depth
B) Least common mechanism
C) Open design
D) Psychological acceptability
Answer: A
Rationale: Defense in depth uses multiple layers of security controls so that if
one fails, others still protect the asset. Least common mechanism minimizes
shared resources, open design avoids security through obscurity, and
psychological acceptability ensures usability, but none describe overlapping
controls.
4 Which zero trust principle is most challenged by allowing internal network
traffic to bypass authentication?
A) Assume breach
B) Verify explicitly
C) Least privilege access
D) Microsegmentation
Answer: B
Rationale: Zero trust requires explicit verification of every access request,
regardless of network location. Bypassing authentication for internal traffic
violates 'verify explicitly.' Assume breach is about minimizing blast radius,
least privilege limits access, and microsegmentation is a technique, but the
direct challenge is to verification.
5 Which security architecture framework emphasizes identifying and
prioritizing risks to critical assets through a continuous cycle?
A) NIST Cybersecurity Framework (CSF) 2.0
B) ISO/IEC 27001:2022
,C) COBIT 2019
D) SABSA
Answer: A
Rationale: NIST CSF 2.0 provides a continuous cycle of Identify, Protect,
Detect, Respond, and Recover, with a strong emphasis on risk management to
critical assets. ISO/IEC 27001 is a certifiable standard for an ISMS, COBIT is
an IT governance framework, and SABSA is a security architecture framework,
but NIST CSF explicitly focuses on the continuous risk cycle.
6 Which design principle is violated when a system fails open (allows access)
upon error?
A) Fail-safe defaults
B) Least privilege
C) Complete mediation
D) Economy of mechanism
Answer: A
Rationale: Fail-safe defaults dictate that access decisions should default to
denial in case of failure. Failing open violates this principle by granting access
on error. Least privilege limits rights, complete mediation checks every access,
and economy of mechanism simplifies design, but fail-safe defaults is directly
about failure behavior.
7 Which security architecture layer is primarily concerned with protecting data
at rest and in transit?
A) Network security
B) Application security
C) Data security
D) Endpoint security
Answer: C
Rationale: Data security focuses on protecting data throughout its lifecycle,
including at rest and in transit, via encryption, access controls, and other
mechanisms. Network security protects the infrastructure, application security
secures software, and endpoint security protects devices, but data security is
specifically about the data itself.
, 8 Which security architecture principle is most closely associated with the
concept of 'need-to-know'?
A) Least privilege
B) Separation of duties
C) Defense in depth
D) Least common mechanism
Answer: A
Rationale: Need-to-know is a core component of least privilege, ensuring users
only access information necessary for their tasks. Separation of duties divides
responsibilities, defense in depth layers controls, and least common mechanism
reduces shared resources, but need-to-know directly reflects least privilege.
9 In security architecture, which term describes the process of dividing a
system into smaller, isolated components to limit the impact of a breach?
A) Layering
B) Segmentation
C) Abstraction
D) Encapsulation
Answer: B
Rationale: Segmentation divides a system into isolated segments (e.g., network
segments, microservices) to contain breaches. Layering stacks controls,
abstraction hides details, and encapsulation bundles data with methods, but
segmentation specifically limits blast radius.
10 Which security design principle is most directly supported by conducting
regular code reviews and penetration testing?
A) Open design
B) Security through obscurity
C) Defense in depth
D) Least privilege
Answer: A
Rationale: Open design asserts that security should not depend on secrecy of the
design or implementation; public scrutiny through reviews and testing
improves security. Security through obscurity relies on secrecy, defense in
depth layers controls, and least privilege limits access, but open design is
directly supported by transparency and testing.
Exam Practice Questions & Answers
This exam assesses mastery of security architecture foundations and design principles, including threat modeling,
security frameworks (e.g., NIST CSF 2.0, ISO/IEC 27001:2022), defense-in-depth, zero trust, and secure design
patterns. It emphasizes applying these principles to complex, real-world scenarios to evaluate architectural
decisions and trade-offs. It contains 148 multiple-choice questions, each with four distractors and a fully worked
rationale that explains why the keyed answer is correct. Content is organized into 12 focused sections: Security
Architecture Foundations and Design Principles, Threat Modeling and Risk Assessment, Network Security
Architecture and Segmentation, Identity and Access Management (IAM), Cryptography and Key Management,
Endpoint and Host Security, Cloud and Virtualization Security Architecture, Security Operations, Monitoring, and
Incident Response, Resilience, Business Continuity, and Disaster Recovery, Secure Software and Systems
Development, Governance, Compliance, and Security Frameworks, Emerging Technologies and Zero Trust
Architecture. Targeted learning outcomes include: Apply security architecture frameworks and design principles
to analyze and evaluate system architectures.; Integrate threat modeling and risk assessment into the design
lifecycle to identify and mitigate vulnerabilities.; Design resilient and secure architectures using defense-in-depth,
zero trust, and least privilege concepts.. Every item has been reviewed for clinical accuracy, current guidelines,
and clarity so that students can study with confidence and self-correct as they work through the bank. Use it as a
Section 1: Security Architecture Foundations and Design Principles (Questions 1-13)
1 Which security architecture principle is most directly violated by granting all
employees domain admin rights for convenience?
A) Defense in depth
B) Least privilege
C) Separation of duties
D) Zero trust
Answer: B
Rationale: Least privilege mandates that users have only the minimum access
necessary for their job functions. Granting domain admin rights to all
employees violates this by providing excessive privileges. Defense in depth
involves layered controls, separation of duties divides tasks, and zero trust is a
model that assumes no implicit trust, but the direct violation is least privilege.
2 In threat modeling, which step immediately follows identifying threats and
vulnerabilities?
A) Determine countermeasures
B) Assess risk
C) Document the model
D) Validate the model
,Answer: B
Rationale: After identifying threats and vulnerabilities, the next logical step in
threat modeling is to assess the risk associated with each threat. Only then can
appropriate countermeasures be determined. Documentation and validation
occur throughout, but risk assessment is the immediate next step.
3 Which security design principle is best illustrated by implementing multiple
overlapping controls (e.g., firewall, IDS, encryption) to protect an asset?
A) Defense in depth
B) Least common mechanism
C) Open design
D) Psychological acceptability
Answer: A
Rationale: Defense in depth uses multiple layers of security controls so that if
one fails, others still protect the asset. Least common mechanism minimizes
shared resources, open design avoids security through obscurity, and
psychological acceptability ensures usability, but none describe overlapping
controls.
4 Which zero trust principle is most challenged by allowing internal network
traffic to bypass authentication?
A) Assume breach
B) Verify explicitly
C) Least privilege access
D) Microsegmentation
Answer: B
Rationale: Zero trust requires explicit verification of every access request,
regardless of network location. Bypassing authentication for internal traffic
violates 'verify explicitly.' Assume breach is about minimizing blast radius,
least privilege limits access, and microsegmentation is a technique, but the
direct challenge is to verification.
5 Which security architecture framework emphasizes identifying and
prioritizing risks to critical assets through a continuous cycle?
A) NIST Cybersecurity Framework (CSF) 2.0
B) ISO/IEC 27001:2022
,C) COBIT 2019
D) SABSA
Answer: A
Rationale: NIST CSF 2.0 provides a continuous cycle of Identify, Protect,
Detect, Respond, and Recover, with a strong emphasis on risk management to
critical assets. ISO/IEC 27001 is a certifiable standard for an ISMS, COBIT is
an IT governance framework, and SABSA is a security architecture framework,
but NIST CSF explicitly focuses on the continuous risk cycle.
6 Which design principle is violated when a system fails open (allows access)
upon error?
A) Fail-safe defaults
B) Least privilege
C) Complete mediation
D) Economy of mechanism
Answer: A
Rationale: Fail-safe defaults dictate that access decisions should default to
denial in case of failure. Failing open violates this principle by granting access
on error. Least privilege limits rights, complete mediation checks every access,
and economy of mechanism simplifies design, but fail-safe defaults is directly
about failure behavior.
7 Which security architecture layer is primarily concerned with protecting data
at rest and in transit?
A) Network security
B) Application security
C) Data security
D) Endpoint security
Answer: C
Rationale: Data security focuses on protecting data throughout its lifecycle,
including at rest and in transit, via encryption, access controls, and other
mechanisms. Network security protects the infrastructure, application security
secures software, and endpoint security protects devices, but data security is
specifically about the data itself.
, 8 Which security architecture principle is most closely associated with the
concept of 'need-to-know'?
A) Least privilege
B) Separation of duties
C) Defense in depth
D) Least common mechanism
Answer: A
Rationale: Need-to-know is a core component of least privilege, ensuring users
only access information necessary for their tasks. Separation of duties divides
responsibilities, defense in depth layers controls, and least common mechanism
reduces shared resources, but need-to-know directly reflects least privilege.
9 In security architecture, which term describes the process of dividing a
system into smaller, isolated components to limit the impact of a breach?
A) Layering
B) Segmentation
C) Abstraction
D) Encapsulation
Answer: B
Rationale: Segmentation divides a system into isolated segments (e.g., network
segments, microservices) to contain breaches. Layering stacks controls,
abstraction hides details, and encapsulation bundles data with methods, but
segmentation specifically limits blast radius.
10 Which security design principle is most directly supported by conducting
regular code reviews and penetration testing?
A) Open design
B) Security through obscurity
C) Defense in depth
D) Least privilege
Answer: A
Rationale: Open design asserts that security should not depend on secrecy of the
design or implementation; public scrutiny through reviews and testing
improves security. Security through obscurity relies on secrecy, defense in
depth layers controls, and least privilege limits access, but open design is
directly supported by transparency and testing.
