Free WGU Cybersecurity-Architecture-and-Engineering Study Guides Exam Questions and Answer
Cybersecurity-Architecture-and-Engineering Exam Dumps, Cybersecurity-Architecture-and-Engineering Practice Test Questions
NEW QUESTION # 76
What is the purpose of the feature that allows only one user to modify a document at a time in collaboration software?
- A. Data integrity
- B. Data availability
- C. Data accessibility
- D. Data confidentiality
Answer: A
Explanation:
* The feature in collaboration software that allows only one user to modify a document at a time ensures data integrity.
* Data integrity refers to the accuracy and consistency of data over its lifecycle.
* By restricting modification access to one user at a time, the system prevents concurrent changes that could lead to data conflicts or corruption.
* The other options:
* Data availability ensures data is accessible when needed.
* Data confidentiality ensures data is protected from unauthorized access.
* Data accessibility refers to the ease of accessing data.
* Therefore, ensuring data integrity is the purpose of this feature.
References:
* "Database Systems: The Complete Book" by Hector Garcia-Molina, Jeffrey D. Ullman, and Jennifer Widom, which discusses data integrity.
* "Collaborative Computing: Theory, Practice, and Tools" by Vladimir Dimitrov, which covers features in collaboration software.
NEW QUESTION # 77
A company has recently completed its disaster recovery plan and is preparing to test it. The company's IT team has identified the need to simulate a disaster scenario to evaluate the effectiveness of the plan. The team has considered a few options, including a full interruption test, a walk-through, tabletop exercises, and checklists. They want to choose a testing method that will allow them to evaluate the plan in a controlled environment while minimizing the impact on the company's operations.
Which testing method will meet the needs of the company?
- A. Walk-through
- B. Checklists
- C. Full interruption test
- D. Tabletop exercises
Answer: D
Explanation:
The correct answer is B - Tabletop exercises.
WGU Cybersecurity Architecture and Engineering (KFO1 / D488) defines a tabletop exercise as a controlled simulation where participants discuss their roles during a simulated disaster scenario. It allows the evaluation of the plan without causing real disruption to operations.
Walk-throughs (A) review plans but are less interactive. Checklists (C) are passive validation. Full interruption tests (D) would disrupt operations, which the company wants to avoid.
Reference Extract from Study Guide:
"Tabletop exercises allow teams to simulate disaster scenarios in a controlled, discussion-based format, helping validate plans without impacting real-world operations."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Disaster Recovery Testing Methods
NEW QUESTION # 78
An organization wants to implement a new encryption solution to protect sensitive data stored in a database.
The organization wants to ensure that the encryption solution provides strong protection for the data and is willing to sacrifice performance.
Which type of encryption meets the needs of the organization?
- A. Hash functions
- B. Block ciphers
- C. Asymmetric encryption
- D. Stream ciphers
Answer: B
Explanation:
The correct answer is D - Block ciphers.
Per the WGU Cybersecurity Architecture and Engineering (KFO1 / D488) materials, block ciphers encrypt fixed-size blocks of data at a time, providing strong security suitable for data at rest, such as databases.
Though they may be less performance-efficient compared to stream ciphers, their strength makes them ideal for securing stored sensitive information.
Stream ciphers (A) are optimized for real-time encryption, not stored data. Asymmetric encryption (B) is slower and more suited for key exchange rather than large data encryption. Hash functions (C) provide integrity verification, not encryption.
Reference Extract from Study Guide:
"Block ciphers encrypt fixed-length blocks of data, providing robust security ideal for protecting data at rest, such as sensitive database information."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Encryption Technologies
NEW QUESTION # 79
Which item information should be stored in a database to determine an order total?
- A. Item description
- B. Item unit price
- C. Item restock levels
- D. Item order line
Answer: B
Explanation:
To determine an order total, the item unit price is essential because it represents the cost per unit of the item.
By multiplying the unit price by the quantity ordered, you can calculate the total cost for each item in the order, and then sum these totals to get the overall order total.
NEW QUESTION # 80
How do data support an organization's business goals?
- A. Data create opportunities to compete for potential customers.
- B. Data provide information for business decisions.
- C. Data ensure an organization's business goals are met.
- D. Data can be manipulated to support desired outcomes.
Answer: B
Explanation:
Data support an organization's business goals by providing crucial information that aids in making informed decisions. Analyzing data helps identify trends, measure performance, and uncover insights that drive strategic planning and operational improvements. This informed decision-making process is vital for achieving business goals and staying competitive in the market.
NEW QUESTION # 81
Which system conversion method deploys the new system while the old system is still operational in order to compare output?
- A. Direct
- B. Phased
- C. Parallel
- D. Pilot
Answer: C
Explanation:
Parallel conversion is a system deployment method where the new system is implemented and runs alongside the old system for a period of time. This method allows for:
* Comparison of outputs: Ensuring that the new system produces the same or better results as the old system.
* Risk reduction: If there are issues with the new system, the old system can still be used without interrupting business operations.
* User adaptation: Users can get accustomed to the new system while still having access to the familiar old system.
Parallel conversion is often used to minimize the risk associated with deploying a new system.
References
* Harold Kerzner, "Project Management: A Systems Approach to Planning, Scheduling, and Controlling," Wiley.
* Kathy Schwalbe, "Information Technology Project Management," Cengage Learning.
NEW QUESTION # 82
A financial institution is planning to conduct a business impact analysis (BIA) to evaluate the criticality of its business processes and functions.
Which steps will allow the company to perform a BIA?
- A. Determine recovery time objectives and recovery point objectives, develop recovery strategies, and document the recovery plan
- B. Develop business continuity plans and procedures, establish a crisis management team, and test the plan regularly
- C. Monitor network and system activity, detect security incidents, and respond quickly to minimize the impact on critical business processes
- D. Determine business processes and recovery criticality, identify resource requirements, and identify recovery priorities for system resources
Answer: D
Explanation:
The correct answer is C - Determine business processes and recovery criticality, identify resource requirements, and identify recovery priorities for system resources.
According to WGU Cybersecurity Architecture and Engineering (KFO1 / D488), a BIA identifies critical business functions, determines the impact of disruptions, and establishes recovery priorities, including resource needs.
A (monitoring) relates to incident response. B (developing BCP) is after BIA. D (recovery strategies) is part of disaster recovery planning after BIA findings.
Reference Extract from Study Guide:
"Business impact analysis (BIA) involves determining critical business processes, evaluating their recovery requirements, and prioritizing system recovery efforts."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Business Impact Analysis Procedures
NEW QUESTION # 83
Which life cycle is part of the process for planning, creating, testing, and deploying information systems?
- A. System Development Life Cycle (SDLC)
- B. Database Creation System Life Cycle (DCSLC)
- C. Network Development Life Cycle (NDLC)
- D. Software Test Life Cycle (STLC)
Answer: A
Explanation:
The System Development Life Cycle (SDLC) is a process used for planning, creating, testing, and deploying an information system. It involves several stages, including requirements gathering, system design, implementation, testing, deployment, and maintenance. The SDLC ensures that the system meets the needs of users and is developed in a structuredand efficient manner.
NEW QUESTION # 84
In which type of network topology are the networked devices connected to a central device like a hub or switch?
- A. Ring
- B. Star
- C. Mesh
- D. Bus
Answer: B
Explanation:
* In a star network topology, each network device is connected to a central device like a hub or a switch.
* This central device acts as a repeater for data flow.
* The other options:
* Bus topology uses a single central cable.
* Mesh topology involves each device being connected to every other device.
* Ring topology connects devices in a circular fashion.
* Therefore, the star topology correctly describes a network where devices connect to a central hub or switch.
References:
* "Data and Computer Communications" by William Stallings, which explains different network topologies.
* "Network+ Guide to Networks" by Jill West, Tamara Dean, and Jean Andrews, which covers network configurations.
NEW QUESTION # 85
Why is business continuity planning essential?
- A. It allows for succession planning.
- B. It ensures that the company will be profitable.
- C. It ensures that the company will avoid asset loss.
- D. It allows for the quickest return to business operations.
Answer: D
Explanation:
Business continuity planning (BCP) is essential because it ensures that an organization can quickly resume its critical functions after a disruption. The key aspects include:
* Minimizing downtime: Strategies to restore business operations as quickly as possible.
* Risk management: Identifying potential threats and creating plans to mitigate their impact.
* Data recovery: Ensuring that data can be restored quickly in the event of a loss.
* Communication plans: Establishing protocols for communicating with employees, customers, and stakeholders during and after a disruption.
The primary goal of BCP is to ensure the quickest return to business operations, maintaining service levels and minimizing financial losses.
References
* Andrew Hiles, "The Definitive Handbook of Business Continuity Management," Wiley.
* Michael Wallace and Lawrence Webber, "The Disaster Recovery Handbook," AMACOM.
NEW QUESTION # 86
Which IT role is responsible for the installation and maintenance of hardware and software that make up a computer network?
- A. Web administrator
- B. IT manager
- C. Database support specialist
- D. Network administrator
Answer: D
Explanation:
The IT role responsible for the installation and maintenance of hardware and software that make up a computer network is the Network Administrator. Their responsibilities include:
* Network installation: Setting up and configuring network hardware, such as routers, switches, firewalls, and servers.
* Network maintenance: Ensuring the network operates smoothly, performing regular updates, and troubleshooting issues.
* Security management: Implementing security measures to protect the network from unauthorized access, attacks, and breaches.
* Performance monitoring: Monitoring network performance and making necessary adjustments to optimize speed and reliability.
Therefore, the Network Administrator is the correct role for these responsibilities.
References
* William Stallings, "Data and Computer Communications," Pearson.
* Andrew S. Tanenbaum and David J. Wetherall, "Computer Networks," Pearson.
NEW QUESTION # 87
An e-learning company uses Amazon Simple Storage Service (Amazon S3) to store e-books and video files that are served to customers through a custom application. The company has realized that someone has been stealing its intellectual property.
Which threat actor is most likely in this scenario?
- A. Novice hacker
- B. Advanced persistent threat
- C. Competitor
- D. Hacktivist
Answer: C
Explanation:
The correct answer is C - Competitor.
According to WGU Cybersecurity Architecture and Engineering (KFO1 / D488), competitors often attempt to steal intellectual property to gain a business advantage. Given the theft of valuable business assets (e-books and videos), the most likely actor is a competitor motivated by financial or market advantage, not ideology or random hacking.
An APT (A) is usually nation-state-sponsored and targets critical infrastructure. A novice hacker (B) might deface or cause damage but is less likely focused on IP theft. Hacktivists (D) are politically motivated, not financially.
Reference Extract from Study Guide:
"Competitors may engage in cyber espionage to steal intellectual property and gain market advantage, representing a significant threat to business assets."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Threat Actor Categories
NEW QUESTION # 88
An organization sends customers e-mail messages based on their purchase patterns.
Which characteristic of quality data does this represent?
- A. Accurate
- B. Thorough
- C. Relevant
- D. Timely
Answer: C
Explanation:
The characteristic of quality data represented here is relevance. When an organization sends customers email messages based on their purchase patterns, it ensures that the information is relevant to the customers' interests and needs. Relevant data is tailored to the specific context in which it is used, enhancing its value and effectiveness.
NEW QUESTION # 89
A cybersecurity analyst at a manufacturing company is tasked with analyzing the Indicators of Compromise (IOCs) to identify potential threats and vulnerabilities within the organization.While viewing the Security Information and Event Management (SIEM), the analyst notices an unknown IP address logging in to the company's Secure Shell (SSH) server.
- A. Weak passwords
- B. Enumeration
- C. Exfiltration
- D. Unpatched software
Answer: A
Explanation:
An unknown IP address successfully logging in viaSSHindicates that authentication was achieved - likely due toweak or reused passwords. This is not enumeration or vulnerability exploitation, but acredential-based compromise.
NIST SP 800-118 (Guide to Enterprise Password Management):
"Weak, default, or reused passwords are among the most exploited vulnerabilities in enterprise networks, particularly on remote access services such as SSH." This is one of the most common findings inSIEM alertswhen password policies and access control mechanisms are improperly enforced.
#WGU Course Alignment:
Domain:System Security Engineering
Topic:Implement strong authentication practices and monitor remote access
NEW QUESTION # 90
A company is planning to implement a new cloud-based system to store sensitive customer information.
What should be identified in the first step of the risk management process for this project?
- A. Business assets that will be stored in the new system
- B. Potential business impacts of a security breach
- C. Potential vulnerabilities of the new system
- D. Possible threats to the new system
Answer: A
Explanation:
The correct answer is D - Business assets that will be stored in the new system.
As described in WGU Cybersecurity Architecture and Engineering (KFO1 / D488), the first step in risk management is identifying and classifying assets that need protection. Without understanding the business assets, you cannot properly assess threats, vulnerabilities, or impacts.
Threats (A), impacts (B), and vulnerabilities (C) are assessed after assets are identified.
Reference Extract from Study Guide:
"Identifying and classifying business assets is the first step in the risk management process, as assets drive the prioritization of threats and mitigations."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Risk Identification and Asset Classification
NEW QUESTION # 91
......
Latest Cybersecurity-Architecture-and-Engineering Actual Free Exam Questions Updated 215 Questions: https://examcollection.actualcollection.com/Cybersecurity-Architecture-and-Engineering-exam-questions.html