support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. WGU
  4. Cybersecurity-Architecture-and-Engineering

Free Cybersecurity-Architecture-and-Engineering Exam Braindumps
WGU Cybersecurity Architecture and Engineering (KFO1/D488) Questions 66–70 (page: 15)

Updated On: 11-Feb-2026
Page 15 of 48
PDF with 232 Questions

HOTSPOT

Match the legislative purpose with the corresponding legislation.

Answer options may be used more than once or not at all.

  1. See Explanation for the Answer.

Answer(s): A

Explanation:

DMCA (Digital Millennium Copyright Act)

Purpose: The DMCA makes it illegal to violate copyrights by disseminating digitized material.

The DMCA was enacted in 1998 to address the issues of digital rights management and copyright infringement in the digital age. It provides legal protection to copyright holders against unauthorized copying, sharing, and distribution of their digital works. The legislation criminalizes the production and dissemination of technology, devices, or services intended tocircumvent measures that control access to copyrighted works (commonly known as DRM--Digital Rights Management).

DMCA Overview - U.S. Copyright Office

HIPAA (Health Insurance Portability and Accountability Act)

Purpose: Prohibits agencies from distributing an individual's health information without the individual's consent.

HIPAA, enacted in 1996, is designed to protect individuals' medical records and other personal health information. The Privacy Rule under HIPAA sets standards for the protection of health information by health plans, healthcare clearinghouses, and healthcare providers that conduct certain healthcare transactions electronically. It mandates the protection and confidential handling of protected health information (PHI).


Reference:

HIPAA Privacy Rule - U.S. Department of Health & Human Services

FERPA (Family Educational Rights and Privacy Act)

Purpose: Gives students the right to access their own educational records and prevents schools from distributing student records without permission.

FERPA is a federal law enacted in 1974 that protects the privacy of student education records. It grants parents certain rights with respect to their children's education records, which transfer to the student when they reach 18 years of age or attend a school beyond the high school level. FERPA requires that schools must have written permission from the student or parent to release any information from a student's education record.

FERPA Regulations - U.S. Department of Education



How can the organizational culture support ethical guidelines?

  1. By outlining the roles of IT specialists in the organization
  2. By outlining the protocols to support security and privacy of data
  3. By creating the system requirements for computers in the organization
  4. By creating the government regulations that apply to the organization

Answer(s): B

Explanation:

Organizational culture can support ethical guidelines by establishing clear protocols and policies that promote the security and privacy of data. This includes:

Data protection policies: Guidelines on how data should be handled, stored, and protected.

Ethical behavior: Encouraging employees to adhere to ethical standards and practices.

Training and awareness: Regular training sessions to educate employees on security best practices and ethical behavior.

Incident response: Protocols for responding to data breaches and other security incidents.

A strong organizational culture that prioritizes data security and privacy helps ensure that ethical guidelines are consistently followed.


Reference:

Michael E. Whitman and Herbert J. Mattord, "Principles of Information Security," Cengage Learning.

Rebecca Herold, "Managing an Information Security and Privacy Awareness and Training Program," CRC Press.



Why should an information technology (IT) professional be aware of professional associations?

  1. Professional associations provide up-to-date training.
  2. Professional associations will ensure higher quality work.
  3. Professional associations upgrade the company's network.
  4. Professional associations give feedback to management.

Answer(s): A

Explanation:

Professional associations are vital for IT professionals because they:

Provide up-to-date training: Offering courses, certifications, and workshops to keep members current with the latest technologies, practices, and industry standards.

Networking opportunities: Facilitating connections with other professionals in the field, which can lead to job opportunities and collaborations.

Professional development: Offering resources and support for career growth and development.

Industry standards and best practices: Providing guidelines and frameworks to ensure high-quality work and ethical practices.

Staying engaged with professional associations helps IT professionals remain knowledgeable and competent in their field.


Reference:

CompTIA, "Advancing the Global IT Industry."

ISACA, "Building a Better Digital World."



A security team has been informed that user data on the network has been compromised.

What is the first step the organization should take to respond to this data breach?

  1. Notify affected users of the incident
  2. Implement an access control policy
  3. Increase encryption levels
  4. Publicly announce the breach

Answer(s): A

Explanation:

The correct first step in responding to a data breach, as emphasized in theWGU Cybersecurity Architecture and Engineering (KFO1 / D488)course material underIncident Responseprocedures, is tonotify affected users. This aligns with theContainment, Eradication, and Recoveryphase of theNIST Incident Response Lifecyclediscussed in the course content. Prompt notification is crucial to empower users to take immediate protective measures such as updating credentials or monitoring for identity theft.

While other actions like implementing access control policies or improving encryption are validpreventive or corrective controls, they are not theinitial response stepafter a breach is identified. Public announcements are typically handledafter internal assessmentsand legal compliance actions are underway.


Reference:

Extract from Study Guide:

"As soon as a breach affecting personal data is confirmed, organizations are obligated to notify impacted users in accordance with legal and ethical standards. Notification is part of the initial incident response phase and should occur immediately after verification of the breach."

--WGU KFO1 / D488 Study Guide: Incident Handling and Response



Management has asked its networking team to recommend a solution for direct communication between multiple virtual networks in the cloud. The solution must utilize the least amount of administrative effort.

Which solution meets the requirements?

  1. Virtual network peering
  2. Virtual local area network
  3. Remote Desktop Protocol
  4. Domain name system

Answer(s): A

Explanation:

The correct answer is A -- Virtual network peering.

According to the WGU Cybersecurity Architecture and Engineering (KFO1 / D488) Study Guide, virtual network peering enables direct communication between two or more virtual networks without the need for gateways, VPNs, or additional configurations. It allows seamless interconnectivity with minimal administrative overhead. Peered networks can communicate as if they were part of the same network, which meets the organization's request for the least administrative effort.

Other options like Virtual LANs (B) operate within the same network and don't span multiple virtual networks. Remote Desktop Protocol (C) is used for remote access, not network interconnection. Domain Name System (D) resolves names to IP addresses but does not establish communication pathways between networks.


Reference:

Extract from Study Guide:

"Virtual network peering provides a low-latency, high-bandwidth connection between virtual networks with minimal administrative setup. It is the recommended solution for direct communication across cloud-based virtual networks."

-- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Network Architectures Module



  PDF
Viewing page 15 of 48
Viewing questions 71 - 75 out of 232 questions


Post your Comments and Discuss WGU Cybersecurity-Architecture-and-Engineering exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!