Free Cybersecurity-Architecture-and-Engineering Exam braindumps download (Cybersecurity-Architecture-and-Engineering exam dumps Free)

QUESTION: 86

A cybersecurity analyst at a healthcare organization was tasked with analyzing the indicators of compromise (IOCs) to identify potential threats and vulnerabilities within the enterprise. Theanalyst notices unknown users logging on to the company's wireless local-area network (WLAN).

What is a potential vulnerability the healthcare organization is facing based on the IOCs identified?

Unsecured wireless access points
Up-to-date anti-malware software
A strong password policy
Regular security awareness training for employees

Answer(s): A

Explanation:

The correct answer is A -- Unsecured wireless access points.

WGU Cybersecurity Architecture and Engineering (KFO1 / D488) explains that unauthorized logins to a WLAN often indicate poorly secured wireless access points, such as those lacking strong encryption (e.g., WPA2/WPA3), not using strong passwords, or having open accesswithout authentication. This vulnerability can allow attackers to access internal systems and sensitive data.

Up-to-date anti-malware software (B), a strong password policy (C), and regular security training (D) are good security practices but do not directly explain unauthorized WLAN access.

Reference:

Extract from Study Guide:

"Unauthorized wireless access often results from unsecured wireless configurations, including weak encryption, open networks, or default credentials, posing significant risks to organizational assets."

-- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Wireless Security Concepts

Show Answer Next Question

QUESTION: 87

An insurance agency is concerned that some employees could be mishandling funds and covering it up. The agency wants to temporarily block these employees from working and ensure that operations continue.

Which strategy should the agency implement?

Separation of duties
Mandatory vacation
Job rotation
Least privilege

Answer(s): B

Explanation:

The correct answer is B -- Mandatory vacation.

According to the WGU Cybersecurity Architecture and Engineering (KFO1 / D488) coursework, mandatory vacation policies require employees to take time off, during which their duties are either paused or performed by others. This break can reveal fraudulent activities, as the original employee cannot cover up their misconduct during their absence.

Separation of duties (A) prevents a single person from controlling critical processes but is not about temporarily removing an employee. Job rotation (C) moves employees between roles regularly but doesn't enforce a break. Least privilege (D) restricts access but does not address uncovering hidden misconduct.

Reference:

Extract from Study Guide:

"Mandatory vacations help detect fraudulent activities, as employee absence can expose irregularities that would otherwise remain hidden through continuous control over processes."

-- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Administrative Security Controls

Show Answer Next Question

QUESTION: 88

The cybersecurity analyst at a hardware company conducted a vulnerability assessment to identify potential security risks to the organization and discovered multiple vulnerabilities on the company's webpage. The analyst then provided the results to the chief information security officer (CISO), who then decided to decommission the website and create a new page with increased security controls.

Which risk mitigation strategy is demonstrated in this scenario?

Accept
Avoid
Transfer
Mitigate

Answer(s): B

Explanation:

The correct answer is B -- Avoid.

WGU Cybersecurity Architecture and Engineering (KFO1 / D488) materials explain that risk avoidance involves eliminating the source of risk entirely. In this scenario, by decommissioning the vulnerable website and starting anew, the organization is removing the risky environment instead of trying to fix or transfer the risk, which is a clear example of risk avoidance.

Accepting (A) would mean tolerating the risk without action. Transferring (C) would involve shifting the risk to a third party (like insurance). Mitigating (D) would involve reducing the risk without removing the vulnerable system.

Reference:

Extract from Study Guide:

"Risk avoidance entails eliminating the conditions that expose the organization to a threat, thereby completely removing the associated risk."

-- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Risk Response Strategies

Show Answer Next Question

QUESTION: 89

A project manager is working on a project that involves securing the network of a tall building. The manager is tasked with managing these risks effectively to ensure the successful completion of the project within a given time frame and budget. The manager identified multiple potential risks associated with the project.

What is the next step in the risk management life cycle?

Identify
Review
Assess
Control

Answer(s): C

Explanation:

The correct answer is C -- Assess.

As per WGU Cybersecurity Architecture and Engineering (KFO1 / D488) materials, after risks have been identified, the next step in the risk management life cycle is to assess them. Assessment involves analyzing and prioritizing the risks based on their potential impact and likelihood. Only after assessment can proper strategies be formulated for controlling and mitigating the risks.

Identification (A) occurs before assessment, while reviewing (B) and controlling (D) happen later in the process.

Reference:

Extract from Study Guide:

"Following the identification of risks, the risk management process proceeds to risk assessment, where risks are analyzed and prioritized based on likelihood and impact to guide mitigation efforts."

-- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Risk Management Process

Show Answer Next Question

QUESTION: 90

A company has recently experienced a data breach from an insider threat and wants to implement a policy to reduce the risk of similar incidents in the future. During the incident, the insider threat accessed sensitive information stored in the administrator account from their user account. The insider threat was not in a supervisory role at the time of the incident.

Which policy should the company implement?

Password complexity policy
Separation of duties
Least privilege
Job rotation

Answer(s): C

Explanation:

The correct answer is C -- Least privilege.

According to the WGU Cybersecurity Architecture and Engineering (KFO1 / D488) course material, the principle of least privilege ensures that users are granted only the minimum level of access required to perform their job functions. In this case, if the insider only had access to resources necessary for their user role, they would not have been able to access sensitive administrative information.

Password complexity (A) strengthens account security but does not prevent excessive access. Separation of duties (B) divides critical tasks but is not solely about limiting access. Job rotation (D) moves employees between roles but is not an access control measure.

Reference:

Extract from Study Guide:

"The principle of least privilege requires limiting user access rights to the minimum necessary to perform their tasks, reducing the risk of insider threats and unauthorized access to sensitive information."

-- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Access Control Principles

Show Answer Next Question

Free Cybersecurity-Architecture-and-Engineering Exam Braindumps WGU Cybersecurity Architecture and Engineering (KFO1/D488) Questions 86–90 (page: 19)

QUESTION: 86

Explanation:

Reference:

QUESTION: 87

Explanation:

Reference:

QUESTION: 88

Explanation:

Reference:

QUESTION: 89

Explanation:

Reference:

QUESTION: 90

Explanation:

Reference:

Free Cybersecurity-Architecture-and-Engineering Exam Braindumps
WGU Cybersecurity Architecture and Engineering (KFO1/D488) Questions 86–90 (page: 19)