WGU C844 Emerging Technologies in Cybersecurity -
Comprehensive Study Guide
How to Use This Guide: Read each question, formulate your own answer, and then
compare it with the provided explanation. The explanations are designed to reinforce
key concepts and terminology.
Domain 1: Foundational Concepts & The Evolving Threat Landscape
1. What is the primary characteristic of an "emerging technology" in
cybersecurity?
ANSWER: An emerging technology is one that is newly developed or rapidly evolving,
creating novel capabilities but also introducing new, often not fully understood, attack
vectors and security challenges.
2. How does the "attack surface" change with the adoption of new technologies
like IoT and cloud computing?
ANSWER: The attack surface expands dramatically. IoT adds billions of new, often
poorly secured endpoints, while cloud computing moves the surface from a defined
corporate network to a shared responsibility model with a third-party provider.
3. Explain the concept of "cyber resilience" and why it's more critical than ever.
ANSWER: Cyber resilience is an organization's ability to continuously deliver the
intended outcome despite adverse cyber events. It goes beyond prevention to include
detection, response, and recovery, ensuring business continuity when attacks inevitably
occur.
4. What is the "Zero Trust" security model, and what core principle does it
challenge?
ANSWER: Zero Trust is a security model based on the principle "never trust, always
verify." It challenges the traditional "trust but verify" model by eliminating implicit trust,
regardless of whether the access request comes from inside or outside the corporate
network.
5. Define the "Cyber Kill Chain" framework developed by Lockheed Martin.
ANSWER: The Cyber Kill Chain is a model that outlines the stages of a cyberattack, from
, reconnaissance to weaponization, delivery, exploitation, installation, command and
control (C2), and actions on objectives. It helps defenders identify and break the attack
chain at various points.
6. What is the difference between a threat, a vulnerability, and a risk?
ANSWER:
Threat: A potential event that can cause harm (e.g., a hacker).
Vulnerability: A weakness in a system that can be exploited (e.g., unpatched software).
Risk: The potential for loss or damage when a threat exploits a vulnerability (e.g., a
hacker using the unpatched software to steal data).
7. Why is "security by design" a crucial philosophy for emerging technologies?
ANSWER: Security by design integrates security controls and considerations into the
system development lifecycle from the very beginning, rather than being bolted on as
an afterthought. This is more effective and cost-efficient than trying to secure a finished
product.
8. What role does "threat intelligence" play in defending against advanced
persistent threats (APTs)?
ANSWER: Threat intelligence provides evidence-based knowledge about existing or
emerging threats. It helps organizations understand APT actors' tactics, techniques, and
procedures (TTPs), allowing for more proactive and targeted defenses.
9. Describe the "Shared Responsibility Model" in cloud security.
ANSWER: It defines the security obligations of the cloud provider and the cloud
customer. The provider is responsible for the security of the cloud (infrastructure), while
the customer is responsible for security in the cloud (data, access management, OS
configuration).
10. What is "defense in depth"?
ANSWER: Defense in depth is a layered security approach that uses multiple, redundant
defensive mechanisms to protect assets. If one layer fails, another layer is in place to
thwart an attack.
Domain 2: Cloud Security & Virtualization
Comprehensive Study Guide
How to Use This Guide: Read each question, formulate your own answer, and then
compare it with the provided explanation. The explanations are designed to reinforce
key concepts and terminology.
Domain 1: Foundational Concepts & The Evolving Threat Landscape
1. What is the primary characteristic of an "emerging technology" in
cybersecurity?
ANSWER: An emerging technology is one that is newly developed or rapidly evolving,
creating novel capabilities but also introducing new, often not fully understood, attack
vectors and security challenges.
2. How does the "attack surface" change with the adoption of new technologies
like IoT and cloud computing?
ANSWER: The attack surface expands dramatically. IoT adds billions of new, often
poorly secured endpoints, while cloud computing moves the surface from a defined
corporate network to a shared responsibility model with a third-party provider.
3. Explain the concept of "cyber resilience" and why it's more critical than ever.
ANSWER: Cyber resilience is an organization's ability to continuously deliver the
intended outcome despite adverse cyber events. It goes beyond prevention to include
detection, response, and recovery, ensuring business continuity when attacks inevitably
occur.
4. What is the "Zero Trust" security model, and what core principle does it
challenge?
ANSWER: Zero Trust is a security model based on the principle "never trust, always
verify." It challenges the traditional "trust but verify" model by eliminating implicit trust,
regardless of whether the access request comes from inside or outside the corporate
network.
5. Define the "Cyber Kill Chain" framework developed by Lockheed Martin.
ANSWER: The Cyber Kill Chain is a model that outlines the stages of a cyberattack, from
, reconnaissance to weaponization, delivery, exploitation, installation, command and
control (C2), and actions on objectives. It helps defenders identify and break the attack
chain at various points.
6. What is the difference between a threat, a vulnerability, and a risk?
ANSWER:
Threat: A potential event that can cause harm (e.g., a hacker).
Vulnerability: A weakness in a system that can be exploited (e.g., unpatched software).
Risk: The potential for loss or damage when a threat exploits a vulnerability (e.g., a
hacker using the unpatched software to steal data).
7. Why is "security by design" a crucial philosophy for emerging technologies?
ANSWER: Security by design integrates security controls and considerations into the
system development lifecycle from the very beginning, rather than being bolted on as
an afterthought. This is more effective and cost-efficient than trying to secure a finished
product.
8. What role does "threat intelligence" play in defending against advanced
persistent threats (APTs)?
ANSWER: Threat intelligence provides evidence-based knowledge about existing or
emerging threats. It helps organizations understand APT actors' tactics, techniques, and
procedures (TTPs), allowing for more proactive and targeted defenses.
9. Describe the "Shared Responsibility Model" in cloud security.
ANSWER: It defines the security obligations of the cloud provider and the cloud
customer. The provider is responsible for the security of the cloud (infrastructure), while
the customer is responsible for security in the cloud (data, access management, OS
configuration).
10. What is "defense in depth"?
ANSWER: Defense in depth is a layered security approach that uses multiple, redundant
defensive mechanisms to protect assets. If one layer fails, another layer is in place to
thwart an attack.
Domain 2: Cloud Security & Virtualization
