Nov 19, 2025 Newest Cybersecurity-Architecture-and-Engineering Exam Dumps – Achieve Success in Actual Cybersecurity-Architecture-and-Engineering Exam
Updated WGU Cybersecurity-Architecture-and-Engineering Dumps – Check Free Cybersecurity-Architecture-and-Engineering Exam Dumps (2025)
NEW QUESTION # 40
What is the role of the compiler?
- A. To create an executable program by translating all of the code at one time
- B. To take the most recent line of code, translate it, and execute the machine code
- C. To create executable code that is compatible with different operating systems
- D. To run scripting languages to test one line of code at a time
Answer: A
Explanation:
Step by Step Comprehensive Detailed Explanation
A compiler is a program that translates source code written in a high-level programming language into machine code.
Definition: A compiler processes the entire source code of a program and translates it into a machine code executable.
Functionality: This process is typically done in several stages, including lexical analysis, syntax analysis, semantic analysis, optimization, and code generation.
Output: The result is an executable file that can be run on a specific operating system.
References
"Compilers: Principles, Techniques, and Tools" by Alfred V. Aho, Monica S. Lam, Ravi Sethi, and Jeffrey D.
Ullman
NISTIR 7860, "C++ Coding Standards"
NEW QUESTION # 41
What is the typical organizing principle of a database?
- A. Projection
- B. Modular
- C. Relational
- D. Selective
Answer: C
Explanation:
The relational model is the most common organizing principle of databases. In a relational database, data is organized into tables (or relations), where each table consists of rows and columns. Each row represents a record with a unique identifier, and each column represents a data field. This model allows for easy data retrieval and management through the use of structured query language (SQL).
NEW QUESTION # 42
Which two benefits do computer networks provide for businesses?
Choose 2 answers
- A. Organization cost savings
- B. Increased Internet communications speed
- C. Lower IT operations costs
- D. Improved information security
- E. Increased business efficiency
Answer: C
Explanation:
Computer networks provide several benefits for businesses, including:
* Lower IT operations costs: Networking allows businesses to share resources, such as printers and storage, reducing the need for individual equipment for each user and lowering overall IT costs.
* Increased business efficiency: Networks enable faster communication and data sharing between employees, departments, and locations, leading to more efficient business operations and improved collaboration.
NEW QUESTION # 43
Which risk management strategy will help prevent cheating using a learning management system as a platform?
- A. Implementation of secure user authentication protocols
- B. Configuration of the system to disable all Bluetooth services on all workstations
- C. Enforcement of a strict firewall policy to restrict access to the system's server
- D. Implementation of regular software updates and patch management
Answer: A
Explanation:
Preventing unauthorized access and impersonation during exams or coursework is critical in e-learning platforms.Strong user authentication(e.g., MFA, CAPTCHA, secure login mechanisms) ensures that only authorized users access exams and coursework.
NIST SP 800-63B (Digital Identity Guidelines - Authentication):
"Secure user authentication ensures the identity of individuals accessing sensitive applications, reducing the risk of impersonation and credential misuse." Firewall rules and patching are important, but they don't directly addressuser-level fraud prevention.
#WGU Course Alignment:
Domain:Access Control and Identity Management
Topic:Secure authentication mechanisms for web platforms
NEW QUESTION # 44
A healthcare organization is required to comply with the Health Insurance Portability and Accountability Act (HIPAA), which regulates the privacy and security of personal health information. The organization uses simple network management protocol (SNMP) to manage and monitor its network devices.
Which security control will protect the confidentiality of network device information within this organization?
- A. Access controls
- B. Network segmentation
- C. Encryption
- D. Security monitoring
Answer: C
Explanation:
The correct answer is C - Encryption.
WGU Cybersecurity Architecture and Engineering (KFO1 / D488) clearly states that encryption protects the confidentiality of transmitted information. In the case of SNMP (especially older versions like SNMPv1 and SNMPv2), communications are unencrypted, making encryption critical to protecting network management information from unauthorized disclosure.
Access controls (A) restrict who can access systems but do not encrypt data. Network segmentation (B) separates systems but does not encrypt traffic. Security monitoring (D) detects threats but does not protect data confidentiality.
Reference Extract from Study Guide:
"Encryption safeguards sensitive data transmitted over the network, ensuring confidentiality in compliance with privacy regulations such as HIPAA."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Network Security and Data Protection
NEW QUESTION # 45
Which block cipher mode of operation for encrypting data is simple and efficient but provides no confidentiality beyond that of the underlying block cipher?
- A. Electronic Codebook (ECB)
- B. Output Feedback (OFB)
- C. Counter (CTR)
- D. Cipher Block Chaining (CBC)
Answer: A
Explanation:
Electronic Codebook (ECB)is thesimplest modeof block cipher operation, but it encrypts each blockindependently, which results inidentical ciphertext for identical plaintext blocks- making itunsafe for use with structured or repetitive data.
NIST SP 800-38A (Recommendation for Block Cipher Modes of Operation):
"ECB reveals patterns in plaintext and should not be used when such patterns are meaningful and predictable." Though efficient, ECB lackssemantic securityand is rarely recommended in practice.
#WGU Course Alignment:
Domain:Cryptography
Topic:Evaluate block cipher modes for appropriate use cases
NEW QUESTION # 46
How do data support an organization's business goals?
- A. Data can be manipulated to support desired outcomes.
- B. Data create opportunities to compete for potential customers.
- C. Data ensure an organization's business goals are met.
- D. Data provide information for business decisions.
Answer: D
Explanation:
Data support an organization's business goals by providing crucial information that aids in making informed decisions. Analyzing data helps identify trends, measure performance, and uncover insights that drive strategic planning and operational improvements. This informed decision-making process is vital for achieving business goals and staying competitive in the market.
NEW QUESTION # 47
What type of a system requirement involves preventing unauthorized access to data?
- A. Security
- B. Design
- C. Accessibility
- D. User needs
Answer: A
Explanation:
A system requirement that involves preventing unauthorized access to data is aSecurityrequirement. Security requirements ensure that the system:
* Protects data integrity: Ensuring data is accurate and unchanged by unauthorized users.
* Maintains confidentiality: Preventing unauthorized access to sensitive information.
* Ensures availability: Making sure that data and resources are available to authorized users when needed.
Security requirements are critical for safeguarding the system against threats and vulnerabilities.
References
* Dieter Gollmann, "Computer Security," Wiley.
* Ross Anderson, "Security Engineering: A Guide to Building Dependable Distributed Systems," Wiley.
NEW QUESTION # 48
An IT organization needs to enable secure communication across virtual networks in Microsoft Azure and Amazon Web Services. Which protocol will offer the most reliable and secure method for data transport?
- A. Internet Protocol Security (IPsec)
- B. Secure Shell (SSH)
- C. File Transfer Protocol (FTP)
Answer: A
Explanation:
IPsecis anend-to-end encryption protocol suitethat operates at thenetwork layer, providingauthentication, integrity, and confidentialitybetween virtual networks-even across different cloud environments like Azure and AWS.
NIST SP 800-77 Rev. 1 (Guide to IPsec VPNs):
"IPsec provides network-layer protection through authentication headers (AH) and encapsulating security payloads (ESP), suitable for securing traffic across untrusted environments." FTP is insecure, and SSH is more suitable for command-line access or remote sessions-not secure VPC-to- VPC tunnels.
#WGU Course Alignment:
Domain:Cryptography
Topic:Use encryption protocols like IPsec for secure data transmission between networks
NEW QUESTION # 49
In which generation were computers first built with transistors?
- A. Fourth generation
- B. Second generation
- C. First generation
- D. Third generation
Answer: B
Explanation:
The second generation of computers (1956-1963) saw the introduction of transistors, which replaced vacuum tubes used in the first generation. Transistors allowed computers to be smaller, faster, more reliable, and more energy-efficient compared to their predecessors.
NEW QUESTION # 50
Which encryption technique can be used to enable a third-party provider to perform calculations on encrypted data without decrypting the data?
- A. Homomorphic encryption
- B. Private information retrieval (PIR)
- C. Secure Sockets Layer (SSL)
- D. Secure function evaluation (SFE)
Answer: A
Explanation:
The correct answer is A - Homomorphic encryption.
According to WGU Cybersecurity Architecture and Engineering (KFO1 / D488), homomorphic encryption allows computations to be performed directly on encrypted data without needing to decrypt it first. This ensures the confidentiality of the data even during processing.
SFE (B) allows two parties to jointly compute a function without revealing inputs but is not the same. SSL (C) secures communication channels. PIR (D) is for retrieving information privately, not computing on encrypted data.
Reference Extract from Study Guide:
"Homomorphic encryption allows operations on encrypted data, enabling secure processing by third parties without exposing underlying data."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Advanced Encryption Techniques
NEW QUESTION # 51
What are two differences between a handheld computer and a desktop?
Choose 2 answers.
- A. A desktop has more internal storage.
- B. A handheld has more memory.
- C. A handheld has more internal storage.
- D. A desktop has more memory.
Answer: A,D
Explanation:
Desktops typically have more memory (RAM) and internal storage (hard drives or SSDs) compared to handheld computers. This allows desktops to handle more intensive computing tasks and store larger amounts of data. Handheld devices, on the other hand, prioritize portability and battery life over high storage and memory capacity.
NEW QUESTION # 52
Which risk management strategy will help prevent cheating using a learning management system as a platform?
- A. Implementation of secure user authentication protocols
- B. Configuration of the system to disable all Bluetooth services on all workstations
- C. Enforcement of a strict firewall policy to restrict access to the system's server
- D. Implementation of regular software updates and patch management
Answer: A
Explanation:
The correct answer is C - Implementation of secure user authentication protocols.
WGU Cybersecurity Architecture and Engineering (KFO1 / D488) emphasizes that secure authentication mechanisms, like strong passwords, multifactor authentication, and session management, prevent unauthorized access and impersonation, thus helping prevent cheating inlearning platforms.
Firewall policies (A) and disabling Bluetooth (B) harden systems but do not directly address authentication.
Software updates (D) protect against system vulnerabilities but not user integrity.
Reference Extract from Study Guide:
"Secure authentication protocols ensure that users accessing learning management systems are properly verified, reducing risks of impersonation and cheating."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Secure Access Control and Identity Verification
NEW QUESTION # 53
A company has recently failed a security audit. Many of the end users have passwords older than 365 days.
Which password policy type will prevent this issue?
- A. Recovery
- B. Length
- C. Expiration
- D. Complexity
Answer: C
Explanation:
The correct answer is A - Expiration.
According to WGU Cybersecurity Architecture and Engineering (KFO1 / D488), password expiration policies require users to change their passwords after a certain period, ensuring that long-term credential exposure risk is minimized.
Length (B) defines minimum password size. Recovery (C) relates to resetting forgotten passwords.
Complexity (D) enforces character requirements, not age.
Reference Extract from Study Guide:
"Password expiration policies require users to update passwords regularly, minimizing the risk of long-term credential exposure."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Password Security Best Practices
NEW QUESTION # 54
Why should an information technology (IT) professional be aware of professional associations?
- A. Professional associations upgrade the company's network.
- B. Professional associations will ensure higher quality work.
- C. Professional associations give feedback to management.
- D. Professional associations provide up-to-date training.
Answer: D
Explanation:
Professional associations are vital for IT professionals because they:
* Provide up-to-date training: Offering courses, certifications, and workshops to keep members current with the latest technologies, practices, and industry standards.
* Networking opportunities: Facilitating connections with other professionals in the field, which can lead to job opportunities and collaborations.
* Professional development: Offering resources and support for career growth and development.
* Industry standards and best practices: Providing guidelines and frameworks to ensure high-quality work and ethical practices.
Staying engaged with professional associations helps IT professionals remain knowledgeable and competent in their field.
References
* CompTIA, "Advancing the Global IT Industry."
* ISACA, "Building a Better Digital World."
NEW QUESTION # 55
Which device does a Local Area Network (LAN) need to communicate over the Internet?
- A. Router
- B. Multiplexer
- C. Switch
- D. Repeater
Answer: A
Explanation:
* A Local Area Network (LAN) requires a router to communicate over the Internet.
* The router serves as a gateway that connects the LAN to the external network (Internet) and directs data traffic between the LAN and the Internet.
* The other options:
* Multiplexer combines multiple signals into one.
* Repeater amplifies signals to extend the range.
* Switch connects devices within the LAN but does not facilitate Internet communication.
* Therefore, a router is the necessary device for a LAN to communicate over the Internet.
References:
* "Computer Networking: A Top-Down Approach" by James Kurose and Keith Ross, which explains network devices and their functions.
* "CCNA Routing and Switching Study Guide" by Todd Lammle, which covers routers and their roles in networks.
NEW QUESTION # 56
The DevSecOps team for an organization manages a continuous integration and continuous deployment (CI
/CD) pipeline for a three-tier web application. Management has asked the team to perform a series of comprehensive post-deployment tests to make sure that all of the components of the application can interact and function properly.
What should the team recommend?
- A. Integration testing
- B. Dynamic code analysis
- C. Static code analysis
- D. Package scanning
Answer: A
Explanation:
The correct answer is C - Integration testing.
According to WGU Cybersecurity Architecture and Engineering (KFO1 / D488), integration testing verifies that different modules or components of an application work together as intended. This type of testing is essential after deployment to ensure the overall system functions correctly across all tiers (e.g., web, application, and database layers).
Static code analysis (A) examines source code without execution. Dynamic code analysis (B) tests running code for vulnerabilities but not necessarily component interaction. Package scanning (D) reviews third-party libraries for vulnerabilities but does not test integration.
Reference Extract from Study Guide:
"Integration testing verifies that multiple components of an application function correctly when combined, ensuring end-to-end system reliability post-deployment."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Secure Software Development and Testing
NEW QUESTION # 57
A software development company has experienced a noticeable slowdown in its network performance, which suggests that some machines on the network may have been infected by a botnet. The company has decided to analyze the threats and vulnerabilities within the enterprise based on the indicators of compromise to mitigate the risk.
What should the company do to detect a botnet and other malware-based threats within the enterprise based on the indicators of compromise?
- A. Implement a configuration management solution
- B. Use two-factor authentication for external users
- C. Define strict firewall rules
- D. Constantly scan for known signatures on every machine
Answer: D
Explanation:
The correct answer is C - Constantly scan for known signatures on every machine.
According to WGU Cybersecurity Architecture and Engineering (KFO1 / D488), scanning for known malware signatures is an essential method for detecting infections such as botnets. Signature-based detection compares files and behaviors against databases of known indicators of compromise (IOCs).
Two-factor authentication (A) protects login processes but does not detect malware. Firewall rules (B) help control access but do not detect infections. Configuration management (D) ensures system setup integrity but does not detect botnets.
Reference Extract from Study Guide:
"Signature-based scanning detects malware and botnets by comparing system files and behaviors against databases of known threats and indicators of compromise (IOCs)."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Malware Detection and Threat Response
NEW QUESTION # 58
A company may choose to use CDs, DVDs, hard drives, or even cloud storage for data backup.
Which aspect of data backup does this statement describe?
- A. Backup media
- B. Data mirroring
- C. Incremental backups
- D. Image backups
Answer: A
Explanation:
The statement refers to the different types of media that can be used for data backup. Backup media encompasses various storage devices and methods used to store copies of data. Examples include:
* CDs and DVDs: Optical storage media used for smaller-scale backups.
* Hard drives: Mechanical or solid-state drives used for local and external backups.
* Cloud storage: Online services providing remote storage and access to backups.
Choosing the appropriate backup media is crucial for ensuring data availability and recovery in case of data loss.
References
* David M. Kroenke and Randall J. Boyle, "Using MIS," Pearson.
* Curtis Preston, "Backup & Recovery: Inexpensive Backup Solutions for Open Systems," O'Reilly Media.
NEW QUESTION # 59
What is the vocabulary and set of rules for instructing a computer to perform certain tasks?
- A. Machine language
- B. Translator language
- C. Programming language
- D. Low-level language
Answer: C
Explanation:
A programming language is a formal language comprising a set of instructions that produce various kinds of output. Programming languages are used in computer programming to implement algorithms and manipulate data. They provide the vocabulary and grammatical rules for instructing a computer to perform specific tasks, allowing developers to write software programs that can be executed by a computer.
NEW QUESTION # 60
During a vulnerability assessment, several end-of-life operating systems were discovered within the environment. Which action should be taken to resolve the issue?
- A. Shutdown and remove the end-of-life machines
- B. Block the end-of-life machines
- C. Disconnect the end-of-life machines
- D. Upgrade the remaining end-of-life machines
Answer: D
Explanation:
Themost sustainable solutionto eliminate security risks associated with legacy systems is toupgrade themto supported versions that receive security updates and patches.
NIST SP 800-128 (Guide for Security-Focused Configuration Management):
"Systems running unsupported or outdated software must be prioritized for upgrade to ensure that known vulnerabilities are mitigated." While short-term isolation may work temporarily, it does not address theroot causeor meet compliance requirements long-term.
#WGU Course Alignment:
Domain:System Security Engineering
Topic:Perform lifecycle management and upgrade legacy systems
NEW QUESTION # 61
Which protocol can be used to provide secure email communication and ensure the confidentiality, integrity, and authenticity of email messages?
- A. Simple Mail Transfer Protocol (SMTP)
- B. Pretty Good Privacy (PGP)
- C. Secure/Multipurpose Internet Mail Extensions (S/MIME)
- D. Internet Protocol Security (IPsec)
Answer: C
Explanation:
The correct answer is C - Secure/Multipurpose Internet Mail Extensions (S/MIME).
As outlined in WGU Cybersecurity Architecture and Engineering (KFO1 / D488), S/MIME provides encryption, integrity, and authentication for email messages by using public key cryptography and digital signatures.
SMTP (A) is used for sending emails but does not secure them. PGP (B) also secures emails but is not a protocol; it is a program and standard. IPsec (D) secures network communications, not email specifically.
Reference Extract from Study Guide:
"Secure/Multipurpose Internet Mail Extensions (S/MIME) is a protocol used to encrypt and digitally sign email communications, ensuring confidentiality, integrity, and authenticity."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Secure Communication Technologies
NEW QUESTION # 62
The security team manages a set of legacy firewalls that have been in production for nearly ten years. The organization recently issued a mandate requiring that all firewalls be configured with intrusion detection controls that alert the team in real time based on inbound threats.
Which solution meets these requirements?
- A. Replacing the legacy firewalls with next-generation firewalls (NGFWs)
- B. Replacing the legacy firewalls with a load balancer
- C. Replacing the legacy firewalls with a reverse proxy
- D. Replacing the legacy firewalls with a security information and event management (SIEM) appliance
Answer: A
Explanation:
The correct answer is C - Replacing the legacy firewalls with next-generation firewalls (NGFWs).
WGU Cybersecurity Architecture and Engineering (KFO1 / D488) outlines that NGFWs integrate advanced features like intrusion detection and prevention, application control, and real-time threat intelligence. They are designed to detect and alert on inbound threats as required by the mandate.
SIEM appliances (A) collect logs and correlate events but do not replace firewall functionality. Load balancers (B) manage traffic distribution, not threat detection. Reverse proxies (D) secure and balance traffic for web servers, not general firewall traffic.
Reference Extract from Study Guide:
"Next-generation firewalls (NGFWs) provide integrated intrusion detection and prevention capabilities, fulfilling modern security requirements for real-time threat monitoring and alerting."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Firewall Technologies and Modern Security Controls
NEW QUESTION # 63
Which two languages are scripted?
Choose 2 answers
- A. C
- B. Ada
- C. PHP
- D. Python
Answer: C,D
Explanation:
Scripting languages are designed for integrating and communicating with other programming languages.
* Python: A high-level scripting language known for its readability and extensive library support.
* PHP: A server-side scripting language used primarily for web development.
References
* "Python Crash Course" by Eric Matthes
* "PHP and MySQL Web Development" by Luke Welling and Laura Thomson
NEW QUESTION # 64
Which is true about access rights?
- A. They are part of the System Development Life Cycle.
- B. They are defined by the machine language.
- C. They require the use of a compiler.
- D. They limit users to permitted items.
Answer: D
Explanation:
Access rights are critical components of access control mechanisms in information security. They specify what actions users or systems can perform on specific resources, limiting them to only permitted items.
* Definition: Access rights, also known as permissions, are rules that define the allowed actions on a resource (e.g., read, write, execute).
* Implementation: Access rights are typically implemented using Access Control Lists (ACLs), Role-Based Access Control (RBAC), or other access control models.
* Purpose: The main goal is to enforce the principle of least privilege, ensuring that users can only access the resources necessary for their role.
References
* NIST Special Publication 800-53
* ISO/IEC 27001:2013
* "Computer Security: Principles and Practice" by William Stallings
NEW QUESTION # 65
......
Actual Cybersecurity-Architecture-and-Engineering Exam Recently Updated Questions with Free Demo: https://www.dumpstests.com/Cybersecurity-Architecture-and-Engineering-latest-test-dumps.html
Valid Cybersecurity-Architecture-and-Engineering exam with WGU Real Exam Questions: https://drive.google.com/open?id=1FS_qH0iQ8bRqLWf7nVrMpwpiOAmhkk2h