Free Cybersecurity-Architecture-and-Engineering Exam braindumps download (Cybersecurity-Architecture-and-Engineering exam dumps Free)

QUESTION: 76

An IT team must allow on-premises users to log in to the Azure portal using their corporate credentials.

Which strategy should be used to enable identity federation in this scenario?

Encrypting with Transport Layer Security (TLS)
Deploying a hardware-based two-factor authentication (2FA) solution
Integrating with lightweight directory access protocol (LDAP)
Configuring third-party authentication with Security Assertion Markup Language (SAML)

Answer(s): D

Explanation:

The correct answer is D -- Configuring third-party authentication with Security Assertion Markup Language (SAML).

According to the WGU KFO1 / D488 Study Guide, SAML enables Single Sign-On (SSO) and federated identity across different domains by securely exchanging authentication and authorization data between an identity provider (such as an organization's Active Directory Federation Services) and a service provider (such as Azure). This allows on-premises users to log into cloud services using their existing corporate credentials.

TLS (A) provides secure communication but does not manage identity federation. 2FA (B) strengthens authentication but is not about identity federation setup. LDAP (C) is a protocol for accessing directory services, not specifically designed for federation across cloud platforms.

Reference:

Extract from Study Guide:

"SAML is used to implement Single Sign-On (SSO) and federated identity management, allowing organizations to extend on-premises authentication capabilities to cloud services seamlessly."

-- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Identity and Access Management Concepts

Show Answer Next Question

QUESTION: 77

The security team has been tasked with selecting a password complexity policy for the organization.

Which password complexity policy option should be recommended?

Twelve characters with no symbols or numbers
Sixteen characters with at least one letter, one number, and one symbol
Four characters with at least one letter or one number
Eight characters with no symbols or numbers

Answer(s): B

Explanation:

The correct answer is B -- Sixteen characters with at least one letter, one number, and one symbol.

According to the WGU Cybersecurity Architecture and Engineering (KFO1 / D488) Study Guide, strong password policies must enforce a minimum length (preferably 12 to 16 characters) and require complexity, including uppercase and lowercase letters, numbers, and special characters. Sixteen- character passwords that include varied character types greatly increase the difficulty for attackers using brute-force or dictionary attacks.

Options A, C, and D either lack complexity or have too few characters, making them vulnerable to attacks.

Reference:

Extract from Study Guide:

"A strong password should be at least 1216 characters long and include a mix of uppercase letters, lowercase letters, numbers, and special characters to maximize resistance to brute-force attacks."

-- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Identity and AccessManagement Concepts

Show Answer Next Question

QUESTION: 78

An organization's board of directors is reviewing the risk register and attempting to evaluate whether there is too much risk for the organization.

Which metric should the board review?

Risk appetite
Risk evaluation plan
Risk treatment plan
Risk tolerance

Answer(s): A

Explanation:

The correct answer is A -- Risk appetite.

As per the WGU Cybersecurity Architecture and Engineering (KFO1 / D488) coursework, risk appetite defines the amount and type of risk an organization is willing to accept in pursuit of its objectives. It is a strategic-level metric used by executive leadership and boards to determine if the current level of risk exceeds what the organization is comfortable handling.

Risk evaluation plans (B) outline how risks are assessed, treatment plans (C) describe mitigation actions, and risk tolerance (D) is more operational, defining acceptable variation from the appetite but not the overall strategic limit.

Reference:

Extract from Study Guide:

"Risk appetite represents the amount of risk an organization is willing to pursue or retain and is established by senior leadership as part of governance activities."

-- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Risk Management Concepts

Show Answer Next Question

QUESTION: 79

An on-call security engineer has been notified after business hours that a possible threat could be impacting production applications.

Which type of threat intelligence should be used by first responders?

Tactical
Commodity malware
Operational
Strategic

Answer(s): A

Explanation:

The correct answer is A -- Tactical.

Based on WGU Cybersecurity Architecture and Engineering (KFO1 / D488) study material, tactical threat intelligence provides technical details such as indicators of compromise (IOCs), IP addresses, file hashes, domain names, and other evidence needed to detect and respond to threats immediately. This type of intelligence is used by security teams to perform real-time monitoring and incident response.

Operational intelligence (C) addresses campaigns or actor behavior but is not immediately actionable. Strategic intelligence (D) provides high-level, long-term threat trends. Commodity malware (B) refers to low-level malware types, not intelligence classifications.

Reference:

Extract from Study Guide:

"Tactical threat intelligence focuses on technical indicators of compromise (IOCs) and immediate actionable information that responders use to detect and contain active threats."

-- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Threat Intelligence Concepts

Show Answer Next Question

QUESTION: 80

A company is moving its applications to the cloud and is concerned about cyber security threats. The security team has been tasked with providing a comprehensive view of how attackers gainaccess, move through networks, and carry out attacks.

Which framework identifies the seven phases of an attack, from initial infiltration to post- exploitation?

Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK) for industrial control systems (ICS)
MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK)
Cyber kill chain
Diamond Model of Intrusion Analysis

Answer(s): C

Explanation:

The correct answer is C -- Cyber kill chain.

The Cyber Kill Chain, developed by Lockheed Martin, is a model that breaks down a cyber attack into seven distinct phases: reconnaissance, weaponization, delivery, exploitation, installation, command and control (C2), and actions on objectives. According to the WGU Cybersecurity Architecture and Engineering (KFO1 / D488) study materials, this model helps security teams understand and interrupt an attack at various stages.

While MITRE ATT&CK (B) and its ICS variant (A) provide detailed mappings of techniques used by attackers, they are not structured specifically into seven phases like the Cyber Kill Chain. The Diamond Model (D) is an analysis methodology, not a phase-based model.

Reference:

Extract from Study Guide:

"The Cyber Kill Chain model divides the sequence of a cyber attack into seven phases, providing a structured method for analyzing and disrupting attacks."

-- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Attack Frameworks and Methodologies

Show Answer Next Question

Free Cybersecurity-Architecture-and-Engineering Exam Braindumps WGU Cybersecurity Architecture and Engineering (KFO1/D488) Questions 76–80 (page: 17)

QUESTION: 76

Explanation:

Reference:

QUESTION: 77

Explanation:

Reference:

QUESTION: 78

Explanation:

Reference:

QUESTION: 79

Explanation:

Reference:

QUESTION: 80

Explanation:

Reference:

Free Cybersecurity-Architecture-and-Engineering Exam Braindumps
WGU Cybersecurity Architecture and Engineering (KFO1/D488) Questions 76–80 (page: 17)