support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. WGU
  4. Cybersecurity-Architecture-and-Engineering

Free Cybersecurity-Architecture-and-Engineering Exam Braindumps
WGU Cybersecurity Architecture and Engineering (KFO1/D488) Questions 101–105 (page: 22)

Updated On: 11-Feb-2026
Page 22 of 48
PDF with 232 Questions

A company wants to secure its computer systems and prevent any unauthorized access to its network. The company wants to implement a security solution that can restrict network traffic to only approved services and applications.

Which security technology will meet the needs of this company?

  1. Antivirus tools
  2. Two-factor authentication
  3. Host-based firewall
  4. Hardware security module (HSM)

Answer(s): C

Explanation:

The correct answer is C -- Host-based firewall.

According to the WGU Cybersecurity Architecture and Engineering (KFO1 / D488) materials, a host- based firewall enforces traffic control policies at the endpoint level. It can allow or deny traffic based on application, port, IP address, and protocol rules, restricting access to only approved services and applications on a system.

Antivirus tools (A) detect malware but do not control network traffic. Two-factor authentication (B) secures user access but does not manage network traffic. HSMs (D) handle encryption keys, not network access control.


Reference:

Extract from Study Guide:

"Host-based firewalls restrict traffic at the system level, permitting only authorized services and applications, enhancing endpoint security."

-- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Endpoint Protection and Firewalls



A company is concerned about advanced persistent threats and wants to implement a security solution that can detect any unusual actions. The company wants to analyze the actions and trends of users and entities to identify any potential security risks.

Which security technology meets the needs of the company?

  1. User and entity behavior analytics (UEBA)
  2. Hardware security module (HSM)
  3. Antivirus tools
  4. Two-factor authentication

Answer(s): A

Explanation:

The correct answer is A -- User and entity behavior analytics (UEBA).

WGU Cybersecurity Architecture and Engineering (KFO1 / D488) explains that UEBA tools analyze patterns of user and entity behavior to detect anomalies that could indicate insider threats, compromised accounts, or advanced persistent threats (APTs). UEBA focuses on deviations from normal activity patterns to identify risks that traditional signature-based systems might miss.

HSMs (B) protect cryptographic keys but do not monitor behavior. Antivirus tools (C) detect known malware but do not perform behavioral analytics. Two-factor authentication (D) secures access but does not detect unusual behavior patterns.


Reference:

Extract from Study Guide:

"User and entity behavior analytics (UEBA) identifies potential security threats by analyzing deviations from typical user and system activity patterns."

-- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Threat Detection Technologies



A company wants to improve the security of its software development process and reduce the risk of vulnerabilities in its applications. The company is looking for a solution that can isolate its applications and provide a secure environment for development and testing.

Which security technology meets the needs of this company?

  1. Data loss prevention (DLP)
  2. Virtual private network (VPN)
  3. Firewall
  4. Containerization

Answer(s): D

Explanation:

The correct answer is D -- Containerization.

WGU Cybersecurity Architecture and Engineering (KFO1 / D488) material states that containerization provides isolated environments (containers) where applications can be developed, tested, and deployed securely. This isolation minimizes the risk of vulnerabilities affecting the host system or other applications, improving the overall security of the development process.

DLP (A) prevents data leakage but does not isolate applications. VPNs (B) secure network traffic but do not create isolated development environments. Firewalls (C) control network traffic but do not manage application-level isolation.


Reference:

Extract from Study Guide:

"Containerization secures application development and deployment by isolating applications in lightweight, standalone environments, reducing risk and improving manageability."

-- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Application Security Concepts



A medium-sized grocery chain with locations all across the United States has a new business requirement that all devices must authenticate to access its resources.

What should the grocery chain use for the devices to authenticate?

  1. Virtual private network (VPN)
  2. Public key infrastructure (PKI)
  3. Certificate signing
  4. Endpoint passwords

Answer(s): B

Explanation:

The correct answer is B -- Public key infrastructure (PKI).

According to the WGU Cybersecurity Architecture and Engineering (KFO1 / D488) Study Guide, PKI is the framework that enables the issuance and management of digital certificates used for device authentication. By using certificates, devices can securely authenticate themselves to access corporate resources without relying solely on passwords.

VPNs (A) secure network connections but do not authenticate devices themselves. Certificate signing (C) is a part of PKI but not the complete infrastructure. Endpoint passwords (D) authenticate users, not necessarily the devices.


Reference:

Extract from Study Guide:

"Public key infrastructure (PKI) enables the issuance of digital certificates used for authenticating users, systems, and devices, ensuring secure access control."

-- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Cryptography and PKI Concepts



An organization wants to implement a new encryption solution to protect sensitive data stored in a database. The organization wants to ensure that the encryption solution provides strong protection for the data and is willing to sacrifice performance.

Which type of encryption meets the needs of the organization?

  1. Stream ciphers
  2. Asymmetric encryption
  3. Hash functions
  4. Block ciphers

Answer(s): D

Explanation:

The correct answer is D -- Block ciphers.

Per the WGU Cybersecurity Architecture and Engineering (KFO1 / D488) materials, block ciphers encrypt fixed-size blocks of data at a time, providing strong security suitable for data at rest, such as databases. Though they may be less performance-efficient compared to stream ciphers, their strength makes them ideal for securing stored sensitive information.

Stream ciphers (A) are optimized for real-time encryption, not stored data. Asymmetric encryption (B) is slower and more suited for key exchange rather than large data encryption. Hash functions (C) provide integrity verification, not encryption.


Reference:

Extract from Study Guide:

"Block ciphers encrypt fixed-length blocks of data, providing robust security ideal for protecting data at rest, such as sensitive database information."

-- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Encryption Technologies



  PDF
Viewing page 22 of 48
Viewing questions 106 - 110 out of 232 questions


Post your Comments and Discuss WGU Cybersecurity-Architecture-and-Engineering exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!