Prep4sures Cybersecurity-Architecture-and-Engineering Real Exam Question Answers Updated [Apr 22, 2026]
Easily To Pass New WGU Cybersecurity-Architecture-and-Engineering Dumps with 215 Questions
NEW QUESTION # 27
A company is preparing to test its disaster recovery plan, which includes procedures for restoringcritical systems in the event of a disruption. The company wants to conduct a test that is as close to a real disaster as possible without actually disrupting business operations.
Which disaster recovery test will meet the needs of the company?
- A. Full interruption test
- B. Walk-through test
- C. Parallel simulation test
- D. Tabletop exercise
Answer: C
Explanation:
The correct answer is B - Parallel simulation test.
WGU Cybersecurity Architecture and Engineering (KFO1 / D488) defines a parallel simulation test as simulating a disaster recovery process where systems are restored at an alternate site without actually taking the primary systems offline. It allows organizations to test full restoration capabilities while avoiding disruption of live operations.
Walk-throughs (A) and tabletop exercises (D) are lower-impact simulations. Full interruption tests (C) would stop operations, which the company wants to avoid.
Reference Extract from Study Guide:
"Parallel simulation tests validate the ability to recover and operate critical systems at an alternate site without affecting primary business operations."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Disaster Recovery Testing Types
NEW QUESTION # 28
A government agency is evaluating its business continuity plan to ensure that its operations can continue during a crisis.
What is the term used to describe the critical services that must be maintained during a disruption?
- A. Mission essential functions (MEFs)
- B. Recovery point objective (RPO)
- C. Business continuity planning (BCP)
- D. Disaster recovery (DR)
Answer: A
Explanation:
The correct answer is D - Mission essential functions (MEFs).
WGU Cybersecurity Architecture and Engineering (KFO1 / D488) specifies that mission essential functions (MEFs) are those activities that must be maintained or resumed quickly during or after a disruption to ensure continuity of critical operations, particularly for government agencies.
BCP (A) is the plan itself. DR (B) focuses on IT and system recovery. RPO (C) measures acceptable data loss but does not define critical services.
Reference Extract from Study Guide:
"Mission essential functions (MEFs) are critical activities that must be performed continuously or resumed quickly after disruption to support business or agency operations."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Continuity of Operations Planning
NEW QUESTION # 29
What does the following SQL statement produce when executed?
SELECT ' FROM Customers
WHERE State = 'Arizona';
- A. All of the records from the Customers database
- B. All of the records from the Customers table
- C. All of the records from the Customers database that are located in Arizona
- D. All of the records from the Customers table that are located in Arizona
Answer: D
Explanation:
* The SQL statementSELECT * FROM Customers WHERE State = 'Arizona';is used to select records from theCustomerstable.
* TheSELECT *clause indicates that all columns from theCustomerstable should be returned.
* TheWHEREclause filters the rows to only include those where theStatecolumn value is'Arizona'.
* The result is a subset of theCustomerstable with all rows that match the condition.
References:
* "SQL For Dummies" by Allen G. Taylor.
* "SQL Pocket Guide" by Jonathan Gennick.
NEW QUESTION # 30
Which characteristic identifies intranet application software?
- A. Hosted by an outsourced provider
- B. Hosted by a third-party web portal
- C. Hosted on an individual computer
- D. Hosted in the internal business network
Answer: D
Explanation:
* Intranet Application Software:
* Intranet applications are designed to be used within an organization's internal network. They are not accessible from outside the organization unless through a secure connection like a VPN.
* Characteristics:
* Internal Hosting: These applications are hosted on servers within the business network, ensuring that only authorized internal users can access them.
* Security: Since they are hosted internally, they can be secured with internal security measures like firewalls and access controls.
* Incorrect Options:
* A: Describes applications hosted by external providers.
* C: Describes applications hosted by third-party web portals.
* D: Describes standalone applications on individual computers.
References:
* Intranet applications: Intranet Applications
NEW QUESTION # 31
A company's website is suddenly redirecting users to a suspicious landing page asking for personal information.
What is the most likely cause of the issue?
- A. Tampering
- B. Phishing
- C. Ransomware
- D. Exfiltration
Answer: A
Explanation:
The correct answer is C - Tampering.
WGU Cybersecurity Architecture and Engineering (KFO1 / D488) materials explain that tampering refers to unauthorized modifications of systems or data. In this case, the website being altered to redirect users to a malicious landing page indicates that an attacker has tampered with the legitimate website code or its DNS settings.
Exfiltration (A) refers to stealing data. Phishing (B) involves tricking users but not modifying a website.
Ransomware (D) encrypts systems for ransom, not cause redirection.
Reference Extract from Study Guide:
"Tampering involves the unauthorized modification of a system or its resources, often to redirect users to malicious destinations or to alter functionality in harmful ways."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Threat Categories and Impacts
NEW QUESTION # 32
A security engineer has been asked to audit unapproved changes that have recently taken place in a corporate application.
Which logging mechanism will create an audit trail?
- A. Packet capture logs
- B. NetFlow logs
- C. Access logs
- D. Router logs
Answer: C
Explanation:
The correct answer is B - Access logs.
As outlined in the WGU Cybersecurity Architecture and Engineering (KFO1 / D488) materials, access logs record who accessed which system components, when they did so, and what changes they made. These logs are vital for creating an audit trail that can be reviewed to detect unauthorized changes to applications or systems.
NetFlow logs (A) track network traffic flows but not system or application changes. Packet capture logs (C) deal with network data but are not specialized for auditing application-level events. Router logs (D) capture network device activity, not application access information.
Reference Extract from Study Guide:
"Access logs maintain detailed records of user actions within systems and applications, providing the necessary audit trail for tracking authorized and unauthorized activities."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Log Management Concepts
NEW QUESTION # 33
What allows a user to query information from an online database with a web application without revealing what they are viewing?
- A. Homomorphic encryption
- B. Secure function evaluation (SFE)
- C. Private function evaluation (PFE)
- D. Private information retrieval (PIR)
Answer: D
Explanation:
The correct answer is D - Private information retrieval (PIR).
WGU Cybersecurity Architecture and Engineering (KFO1 / D488) explains that PIR allows users to query a database in such a way that the server cannot determine what information the user is retrieving. It protects user privacy while enabling database interaction.
SFE (A) involves computing a function without revealing inputs. PFE (B) is similar to SFE but focuses on functions. Homomorphic encryption (C) allows computation but not necessarily private querying.
Reference Extract from Study Guide:
"Private Information Retrieval (PIR) enables users to access database information without revealing the nature of the query to the server, preserving user privacy."
NEW QUESTION # 34
What does the following SQL statement produce when executed?
SELECT ' FROM Customers
WHERE State = 'Arizona';
- A. All of the records from the Customers database
- B. All of the records from the Customers table
- C. All of the records from the Customers database that are located in Arizona
- D. All of the records from the Customers table that are located in Arizona
Answer: D
Explanation:
* The SQL statement provided is:
SELECT*FROMCustomersWHEREState='Arizona';
* SELECT *indicates that all columns from the table should be selected.
* FROM Customersspecifies the table from which to retrieve the data.
* WHERE State = 'Arizona'filters the results to include only those records where the State column has the value 'Arizona'.
* Therefore, the statement returns all records from the Customers table that are located in Arizona.
References:
* SQL SELECT statement documentation: SQL SELECT
* SQL WHERE clause documentation: SQL WHERE
NEW QUESTION # 35
What is the role of the CPU in a computing environment?
Choose 2 answers
- A. Storing data as it is being processed
- B. Carrying out the instructions of a computer program
- C. Containing an arithmetic logic unit (ALU) that performs arithmetic and logic operations
- D. Directing electrical current over the circuit board
- E. Connecting components to the system unit
Answer: B,C
Explanation:
* TheCentral Processing Unit (CPU)is the primary component of a computer that performs most of the processing inside a computer.
* Carrying out the instructions of a computer program: The CPU executes program instructions, which are the basic tasks that tell the computer what to do.
* Containing an arithmetic logic unit (ALU): The ALU performs all arithmetic and logic operations, such as addition, subtraction, and comparison.
* The CPU also manages data flow between the computer's other components.
* It fetches instructions from memory, decodes them, and then executes them, which involves performing calculations and making decisions.
References:
"Computer Organization and Design: The Hardware/Software Interface" by David A. Patterson and John L.
Hennessy.
"Modern Processor Design: Fundamentals of Superscalar Processors" by John Paul Shen and Mikko H.
Lipasti.
NEW QUESTION # 36
What are three operating systems that are commonly used today?
Choose 3 answers
- A. Microsoft Windows
- B. MySQL
- C. Microsoft Outlook
- D. Linux
- E. Mac OS
- F. Mozilla Firefox
Answer: A,D,E
Explanation:
* Operating Systems:
* Operating systems are software that manage computer hardware and software resources, providing common services for computer programs.
* Commonly Used Operating Systems:
* Mac OS: Developed by Apple Inc., used on Apple computers.
* Linux: An open-source operating system used on a wide variety of devices from servers to personal computers.
* Microsoft Windows: Developed by Microsoft, it is one of the most widely used operating systems for personal and business computers.
* Not Operating Systems:
* Microsoft Outlook: An email client, part of the Microsoft Office suite.
* MySQL: A relational database management system.
* Mozilla Firefox: A web browser.
References:
* Types of operating systems: Types of Operating Systems
* Mac OS:macOS
* Linux:Linux
* Microsoft Windows:Windows
NEW QUESTION # 37
In which state is data considered information?
- A. Processed
- B. Unprocessed
- C. Raw
- D. Input
Answer: A
Explanation:
Data is considered information when it has been processed and organized in a meaningful way. Raw data in its unprocessed state is not useful until it undergoes processing to become interpretable and actionable information. Processing can involve sorting, aggregating, and analyzing data to extract valuable insights.
NEW QUESTION # 38
Which block cipher mode of operation for encrypting data is simple and efficient but provides no confidentiality beyond that of the underlying block cipher?
- A. Output Feedback (OFB)
- B. Counter (CTR)
- C. Cipher Block Chaining (CBC)
- D. Electronic Codebook (ECB)
Answer: D
Explanation:
Electronic Codebook (ECB)is thesimplest modeof block cipher operation, but it encrypts each blockindependently, which results inidentical ciphertext for identical plaintext blocks- making itunsafe for use with structured or repetitive data.
NIST SP 800-38A (Recommendation for Block Cipher Modes of Operation):
"ECB reveals patterns in plaintext and should not be used when such patterns are meaningful and predictable." Though efficient, ECB lackssemantic securityand is rarely recommended in practice.
#WGU Course Alignment:
Domain:Cryptography
Topic:Evaluate block cipher modes for appropriate use cases
NEW QUESTION # 39
Which life cycle is part of the process for planning, creating, testing, and deploying information systems?
- A. System Development Life Cycle (SDLC)
- B. Database Creation System Life Cycle (DCSLC)
- C. Network Development Life Cycle (NDLC)
- D. Software Test Life Cycle (STLC)
Answer: A
Explanation:
The System Development Life Cycle (SDLC) is a process used for planning, creating, testing, and deploying an information system. It involves several stages, including requirements gathering, system design, implementation, testing, deployment, and maintenance. The SDLC ensures that the system meets the needs of users and is developed in a structuredand efficient manner.
NEW QUESTION # 40
What signals the development of scope creep?
- A. Many unplanned features have been added to the original project.
- B. Programmers are focused on a single feature.
- C. An extension to the deadline of the project is requested.
- D. The product does not satisfy all the requirements of the plan.
Answer: A
Explanation:
The development of scope creep is often signaled by the addition of many unplanned features to the original project. This indicates that the project scope is expanding beyond its initial boundaries. Key indicators include:
* Uncontrolled changesto the project scope.
* Continuous new requestsfrom stakeholders that were not part of the original requirements.
* Increased project complexityand difficulty in managing the project timeline and resources.
Scope creep can lead to delays, budget overruns, and project failure if not managed properly.
References
* Project Management Institute, "A Guide to the Project Management Body of Knowledge (PMBOK Guide)," PMI.
* Harold Kerzner, "Project Management: A Systems Approach to Planning, Scheduling, and Controlling," Wiley.
NEW QUESTION # 41
How should a security analyst detect a potential structured query language (SQL) injection attack?
- A. By looking for database primary key changes on the production environment
- B. By looking for extra and unexpected symbols and characters in certain queries
- C. By looking for repeated failed login attempts to the database server
- D. By looking for administrative command attempts within database log files
Answer: B
Explanation:
The correct answer is A - By looking for extra and unexpected symbols and characters in certain queries.
According to WGU Cybersecurity Architecture and Engineering (KFO1 / D488), SQL injection attacks often include malicious SQL code in input fields, with unusual symbols such as semicolons, apostrophes, or comments (', --, ;). Analysts detect these attacks by monitoring for unexpected or abnormal input patterns in database queries.
Changes to primary keys (B) and repeated login failures (C) are unrelated to SQLi detection. Administrative commands (D) relate more to privilege escalation.
Reference Extract from Study Guide:
"SQL injection attacks typically involve abnormal input that includes special SQL characters or commands; monitoring for such anomalies can reveal attempted injections."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Application and Database Security Threats
NEW QUESTION # 42
Which device does a Local Area Network (LAN) need to communicate over the Internet?
- A. Router
- B. Multiplexer
- C. Repeater
- D. Switch
Answer: A
Explanation:
* A Local Area Network (LAN) requires a router to communicate over the Internet.
* The router serves as a gateway that connects the LAN to the external network (Internet) and directs data traffic between the LAN and the Internet.
* The other options:
* Multiplexer combines multiple signals into one.
* Repeater amplifies signals to extend the range.
* Switch connects devices within the LAN but does not facilitate Internet communication.
* Therefore, a router is the necessary device for a LAN to communicate over the Internet.
References:
* "Computer Networking: A Top-Down Approach" by James Kurose and Keith Ross, which explains network devices and their functions.
* "CCNA Routing and Switching Study Guide" by Todd Lammle, which covers routers and their roles in networks.
NEW QUESTION # 43
What is an information system?
- A. A collection of data to support an organization
- B. The computer hardware components
- C. A database utility from a third party
- D. The hardware that allows human-computer interactions
Answer: A
Explanation:
An information system is a coordinated set of components designed to collect, store, and process data, and to deliver information, knowledge, and digital products. Organizations use information systems to support operations, management, and decision-making. This includes both the technical components (hardware, software, databases, and networks) and the human components (people and processes).
NEW QUESTION # 44
Which is true about access rights?
- A. They limit users to permitted items.
- B. They are defined by the machine language.
- C. They are part of the System Development Life Cycle.
- D. They require the use of a compiler.
Answer: A
Explanation:
Access rights are critical components of access control mechanisms in information security. They specify what actions users or systems can perform on specific resources, limiting them to only permitted items.
* Definition: Access rights, also known as permissions, are rules that define the allowed actions on a resource (e.g., read, write, execute).
* Implementation: Access rights are typically implemented using Access Control Lists (ACLs), Role-Based Access Control (RBAC), or other access control models.
* Purpose: The main goal is to enforce the principle of least privilege, ensuring that users can only access the resources necessary for their role.
References
* NIST Special Publication 800-53
* ISO/IEC 27001:2013
* "Computer Security: Principles and Practice" by William Stallings
NEW QUESTION # 45
What is a component of IT infrastructure?
- A. Networks
- B. People
- C. Printer
- D. Data
Answer: A
Explanation:
IT infrastructure encompasses all the physical and virtual resources that support the flow,storage, processing, and analysis of data. Networks, which include the internet, intranets, and extranets, are fundamental components of IT infrastructure as they enable communication and data exchange between different hardware and software components.
NEW QUESTION # 46
A large healthcare provider is acquiring a small clinic and has identified a full understanding of the clinic's organizational risks. The large provider has several tools it can implement to reduce the clinic's identified risks.
Which type of risk response should the healthcare provider use?
- A. Risk avoidance
- B. Risk transference
- C. Risk mitigation
- D. Risk acceptance
Answer: C
Explanation:
The correct answer is B - Risk mitigation.
According to WGU Cybersecurity Architecture and Engineering (KFO1 / D488) course content, risk mitigation involves taking steps to reduce either the likelihood or the impact of risks. Since the healthcare provider plans to implement tools to lower the risks identified at the clinic, it is using a mitigation strategy, not avoiding, transferring, or simply accepting the risk.
Risk acceptance (A) means taking no action. Risk transference (C) shifts responsibility elsewhere, such as through insurance. Risk avoidance (D) involves eliminating the risky activity entirely.
Reference Extract from Study Guide:
"Risk mitigation is the process of implementing measures to reduce the likelihood or impact of identified risks, often through security controls or operational changes."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Risk Response Strategies
NEW QUESTION # 47
The security team manages a set of legacy firewalls that have been in production for nearly ten years. The organization recently issued a mandate requiring that all firewalls be configured with intrusion detection controls that alert the team in real time based on inbound threats.
Which solution meets these requirements?
- A. Replacing the legacy firewalls with next-generation firewalls (NGFWs)
- B. Replacing the legacy firewalls with a load balancer
- C. Replacing the legacy firewalls with a security information and event management (SIEM) appliance
- D. Replacing the legacy firewalls with a reverse proxy
Answer: A
Explanation:
The correct answer is C - Replacing the legacy firewalls with next-generation firewalls (NGFWs).
WGU Cybersecurity Architecture and Engineering (KFO1 / D488) outlines that NGFWs integrate advanced features like intrusion detection and prevention, application control, and real-time threat intelligence. They are designed to detect and alert on inbound threats as required by the mandate.
SIEM appliances (A) collect logs and correlate events but do not replace firewall functionality. Load balancers (B) manage traffic distribution, not threat detection. Reverse proxies (D) secure and balance traffic for web servers, not general firewall traffic.
Reference Extract from Study Guide:
"Next-generation firewalls (NGFWs) provide integrated intrusion detection and prevention capabilities, fulfilling modern security requirements for real-time threat monitoring and alerting."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Firewall Technologies and Modern Security Controls
NEW QUESTION # 48
An organization wants to ensure that its website is free of certain vulnerabilities before the final handoff to the client. What testing method should the organization use to inspect traffic and detect potential issues?
- A. Bastion scanner
- B. HTTP interceptor
- C. Port scanner
Answer: A
Explanation:
Abastion scanneris a tool or hardened system that inspects network traffic and identifies security vulnerabilities, particularly those visible from an external (internet-facing) viewpoint. It plays a key role inpost-development assessment.
OWASP Testing Guide v4.2:
"Use bastion hosts or hardened scanners to perform vulnerability assessments from an attacker's perspective." This option is preferable for final validation before system release, especially when looking for exposure from the public internet.
#WGU Course Alignment:
Domain:System Security Engineering
Topic:Evaluate hardened systems and scanning tools during release validation
NEW QUESTION # 49
Which key exchange algorithm is based on advanced cryptography algorithms and is a more efficient alternative to traditional key exchange algorithms?
- A. Digital Signature Algorithm (DSA)
- B. Elliptic Curve Diffie-Hellman (ECDH)
- C. Diffie-Hellman (DH)
- D. Rivest-Shamir-Adleman (RSA)
Answer: B
Explanation:
The correct answer is B - Elliptic Curve Diffie-Hellman (ECDH).
WGU Cybersecurity Architecture and Engineering (KFO1 / D488) material highlights that ECDH is an enhanced, more efficient form of the traditional Diffie-Hellman key exchange, using elliptic curve cryptography (ECC). It provides similar security with much smaller key sizes, improving performance and efficiency.
DH (A) is the traditional method but is less efficient. RSA (C) is primarily used for encryption and digital signatures. DSA (D) is used for digital signatures, not for key exchange.
Reference Extract from Study Guide:
"Elliptic Curve Diffie-Hellman (ECDH) enhances traditional key exchange by utilizing elliptic curve cryptography, offering higher security with smaller key sizes and improved efficiency."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Cryptographic Key Management
NEW QUESTION # 50
......
Latest Cybersecurity-Architecture-and-Engineering Study Guides 2026 - With Test Engine PDF: https://www.prep4sures.top/Cybersecurity-Architecture-and-Engineering-exam-dumps-torrent.html
Get New Cybersecurity-Architecture-and-Engineering Practice Test Questions Answers: https://drive.google.com/open?id=10X0wDDxfuTdrHoaFGPsXY5lcImdHMmaZ