support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. WGU
  4. Cybersecurity-Architecture-and-Engineering

Free Cybersecurity-Architecture-and-Engineering Exam Braindumps
WGU Cybersecurity Architecture and Engineering (KFO1/D488) Questions 96–100 (page: 21)

Updated On: 11-Feb-2026
Page 21 of 48
PDF with 232 Questions

A company has recently experienced a data breach in which customer information was stolen. The company is concerned about the potential for future data breaches. A review of the incident revealed that the breach originated from stolen credentials.

Which security measure will meet the needs of this company?

  1. Implementing two-factor authentication
  2. Conducting background checks on employees
  3. Providing regular security awareness training to employees
  4. Installing a security information and event management (SIEM) system

Answer(s): A

Explanation:

The correct answer is A -- Implementing two-factor authentication.

According to WGU Cybersecurity Architecture and Engineering (KFO1 / D488) content, two-factor authentication (2FA) strengthens authentication processes by requiring users to provide two forms of evidence (e.g., password + SMS code or authentication app) before accessing systems. Even if credentials are stolen, without the second factor, attackers would be unable to log in.

Background checks (B) are important for insider threats but not stolen external credentials. Security awareness training (C) is good practice but does not technically prevent the misuse of stolen credentials. SIEM systems (D) help detect breaches but do not stop unauthorized access at the authentication layer.


Reference:

Extract from Study Guide:

"Two-factor authentication mitigates the risks associated with credential theft by requiring an additional factor, significantly improving the security posture."

-- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Authentication and Identity Management



A financial institution is concerned about a potential data breach due to employees accessing the company network using personal devices. They have decided to implement a bring your own device (BYOD) policy to mitigate the risk.

Which risk mitigation strategy will reduce the risk of a data breach in this scenario?

  1. Blocking access to the company network from personal devices
  2. Conducting regular security audits of the company network
  3. Implementing a mobile device management (MDM) solution
  4. Providing security awareness training for employees

Answer(s): C

Explanation:

The correct answer is C -- Implementing a mobile device management (MDM) solution.

WGU Cybersecurity Architecture and Engineering (KFO1 / D488) describes that an MDM solution enables organizations to enforce security policies on personal devices, such as encryption, remote wipe capabilities, and application controls. MDM allows safe access to corporate resources while managing the inherent risks of BYOD environments.

Blocking access (A) contradicts the BYOD policy goal. Security audits (B) monitor but do not control personal devices. Awareness training (D) is important but does not enforce technical protections on devices.


Reference:

Extract from Study Guide:

"Mobile device management (MDM) solutions enforce security policies on employee-owned devices, ensuring compliance and reducing the risks associated with BYOD implementations."

-- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Mobile Device Security



A financial services company is concerned about the potential risks associated with sensitive customer data stored on employee laptops. The company has decided to implement hardening techniques and endpoint security controls to mitigate the risk.

Which hardening technique will meet the needs of this company?

  1. Restricting user permissions for laptop software installation
  2. Implementing biometric authentication for laptop log-ins
  3. Implementing local drive encryption on employee laptops
  4. Conducting regular security awareness training for employees

Answer(s): C

Explanation:

The correct answer is C -- Implementing local drive encryption on employee laptops.

WGU Cybersecurity Architecture and Engineering (KFO1 / D488) explains that encryption protects sensitive data at rest, ensuring that if a laptop is lost or stolen, the data remains unreadable without the decryption key. This control directly addresses the protection of sensitive customer data.

Restricting software installation (A) is a good security practice but does not specifically protect stored sensitive data. Biometric authentication (B) strengthens authentication but does not encrypt data. Awareness training (D) helps users behave securely but does not technically protect the data itself.


Reference:

Extract from Study Guide:

"Local drive encryption protects sensitive data stored on mobile devices such as laptops, ensuring confidentiality even if the device is lost or stolen."

-- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Endpoint Security and Device Hardening



A cloud service provider is concerned about the potential risks associated with hardware-based attacks on its virtual machines. The provider has decided to implement hardening techniques and endpoint security controls to mitigate the risk.

Which hardening technique will meet the needs of this provider?

  1. Conducting regular vulnerability assessments and penetration testing
  2. Disabling central processing unit (CPU) virtualization support
  3. Implementing a web application firewall to monitor incoming traffic
  4. Enforcing strict access control policies for all users

Answer(s): A

Explanation:

The correct answer is A -- Conducting regular vulnerability assessments and penetration testing.

According to the WGU Cybersecurity Architecture and Engineering (KFO1 / D488) materials, performing vulnerability assessments and penetration testing helps identify weaknesses in both hardware and virtual environments. Regular testing ensures that any hardware-related vulnerabilities are discovered and addressed before they can be exploited.

Disabling CPU virtualization support (B) would prevent virtual machines from running, defeating the purpose. A web application firewall (C) monitors traffic at the application layer but does not address hardware risks. Access control policies (D) are important but not directly tied to detecting hardware vulnerabilities.


Reference:

Extract from Study Guide:

"Regular vulnerability assessments and penetration testing identify weaknesses in hardware and software environments, providing critical insights for maintaining a hardened and secure posture."

-- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Security Testing and Assessment



A company wants to ensure that the integrity of its systems is maintained during the startup process.

Which security technology can ensure the integrity of the system during startup by verifying that the system has not been compromised?

  1. Two-factor authentication
  2. Intrusion detection system (IDS)
  3. Hardware security module (HSM)
  4. Measured boot

Answer(s): D

Explanation:

The correct answer is D -- Measured boot.

WGU Cybersecurity Architecture and Engineering (KFO1 / D488) explains that Measured Boot, often implemented with Trusted Platform Modules (TPMs), ensures that each component of theboot process is verified for integrity. It provides cryptographic evidence that the system's startup sequence has not been tampered with.

Two-factor authentication (A) secures user logins but does not verify boot integrity. IDS (B) monitors network or host behavior but does not protect the boot process. HSM (C) secures cryptographic operations, not the system boot.


Reference:

Extract from Study Guide:

"Measured Boot verifies the integrity of the boot process, providing assurance that the system has not been compromised during startup."

-- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), System Hardening and Trusted Computing



  PDF
Viewing page 21 of 48
Viewing questions 101 - 105 out of 232 questions


Post your Comments and Discuss WGU Cybersecurity-Architecture-and-Engineering exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!