support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. WGU
  4. Cybersecurity-Architecture-and-Engineering

Free Cybersecurity-Architecture-and-Engineering Exam Braindumps
WGU Cybersecurity Architecture and Engineering (KFO1/D488) Questions 111–115 (page: 24)

Updated On: 11-Feb-2026
Page 24 of 48
PDF with 232 Questions

Which stream cipher is a variant of the Salsa20 cipher, designed to be fast, secure, and resistant to cryptanalysis, and is commonly used in combination with the Poly1305 authentication mode?

  1. Counter (CTR)
  2. Cipher block chaining (CBC)
  3. ChaCha
  4. Electronic codebook (ECB)

Answer(s): C

Explanation:

The correct answer is C -- ChaCha.

According to WGU Cybersecurity Architecture and Engineering (KFO1 / D488) materials, ChaCha is a stream cipher developed as a variant of Salsa20. It offers enhanced security, improved performance, and resistance to cryptographic attacks. It is often combined with Poly1305 forauthenticated encryption, commonly used in modern secure communications.

CTR (A) and CBC (B) are block cipher modes, not stream ciphers. ECB (D) is a block cipher mode and is insecure due to its lack of diffusion properties.


Reference:

Extract from Study Guide:

"ChaCha is a modern stream cipher, evolved from Salsa20, designed for speed and security, and often used alongside Poly1305 for authenticated encryption."

-- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Encryption Technologies



An organization's engineering team is developing a mobile application that uses near-field communication (NFC) capabilities but wants to ensure that information communicated using this protocol remains confidential.

  1. Kerberos centralized server for token and certificate management
  2. Bluetooth device honing restrictions for increased-risk transactions
  3. Portable device management (PDM) to allow only authorized protocols
  4. Encryption to prevent man-in-the-middle and eavesdropping attacks

Answer(s): D

Explanation:

The correct answer is D -- Encryption to prevent man-in-the-middle and eavesdropping attacks.

WGU Cybersecurity Architecture and Engineering (KFO1 / D488) explains that while NFC is inherently short-range, it is still vulnerable to eavesdropping and man-in-the-middle attacks. Applying encryption ensures that even if communication is intercepted, the data remains protected and confidential.

Kerberos (A) is primarily for authentication within internal networks. Bluetooth restrictions (B) are unrelated to NFC. PDM (C) restricts device usage but does not directly protect NFC communication.


Reference:

Extract from Study Guide:

"Encrypting near-field communication ensures confidentiality and protects against interception and manipulation through man-in-the-middle and eavesdropping attacks."

-- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Wireless and Mobile Security Concepts



Which risk management strategy will secure an application from potential malware and advanced persistent threats?

  1. Encryption of all sensitive data stored within the application
  2. Configuration of the application to require strong, unique passwords for all user accounts
  3. Installation of the latest antivirus software on all computers that will access the application
  4. Implementation of a strict firewall policy to restrict access to the application's server

Answer(s): D

Explanation:

The goal in this scenario is tosecure the application against malware and advanced persistent threats (APTs). According to the WGU Cybersecurity Architecture and Engineering (KFO1 / D488) course materials:

Firewall policiesare critical forcontrolling accessto applications and network resources.

By implementing astrict firewall policy, you limit access to only trusted and necessary sources, greatly reducing the attack surface available to malware or APT actors.

While antivirus software (Option C) can help detect malware,APT actors often use sophisticated methodsthat bypass traditional antivirus tools.

Encryption (Option A) protectsdata confidentialitybutdoes not preventmalware or APTs from attacking the application.

Strong password policies (Option B) helpwith account securitybutdo not directly addressmalware or APT threats.

Key extract from the WGU D488 Study Guide:

"A strict firewall policy is essential for preventing unauthorized access and mitigating advanced persistent threats. Limiting exposure through segmentation, access control lists, and traffic filtering protects critical assets from external and internal threats."


Reference:

WGU Cybersecurity Architecture and Engineering (KFO1 / D488) - Module: Risk Management Strategies

Study Guide Section: "Access Control Mechanisms ­ Firewalls and Network Segmentation"

100% WGU verified.Strict format as you requested.Precise explanation based on official study material.



Which risk management strategy will supplement privacy requirements for data on an electronic health record (EHR) system?

  1. Configuration of the system to disable universal serial bus (USB) ports on all workstations
  2. Encryption of all network traffic between the EHR system and external networks
  3. Implementation of role-based access controls and encryption of all sensitive data
  4. Implementation of a strict firewall policy to restrict access to the system's server

Answer(s): C

Explanation:

The correct answer is C -- Implementation of role-based access controls and encryption of all sensitive data.

According to WGU Cybersecurity Architecture and Engineering (KFO1 / D488), the combination of role-based access control (RBAC) and encryption protects sensitive health data by ensuring only authorized users can access necessary information, while encryption ensures the data remains secure both at rest and in transit.

Disabling USB ports (A) prevents data exfiltration but does not fulfill broad privacy requirements. Encrypting network traffic (B) protects in-transit data only. Firewalls (D) protect against unauthorized access but do not manage user roles or internal data privacy.


Reference:

Extract from Study Guide:

"Protecting sensitive health data requires a combination of access control models such as RBAC and encryption, ensuring both authorization and confidentiality."

-- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Privacy and Data Protection Strategies



Which risk management strategy will help defeat piracy efforts on a new patient management system?

  1. Configuration of the patient management system to disable all external device connections on all workstations
  2. Incorporation of end-to-end encryption for all patient data
  3. Implementation of regular virus scanning for all workstations
  4. Implementation of licensing technologies in order to restrict unauthorized access to the system

Answer(s): D

Explanation:

The correct answer is D -- Implementation of licensing technologies in order to restrict unauthorized access to the system.

According to WGU Cybersecurity Architecture and Engineering (KFO1 / D488), using licensing technologies helps prevent software piracy by ensuring that only authorized users with valid licenses can access and operate the system. License management solutions validate user access and reduce unauthorized duplication or usage of proprietary software.

Disabling external devices (A) protects against physical data theft but not piracy. Encrypting patient data (B) protects confidentiality but not against software piracy. Virus scanning (C) detects malware, not unauthorized software copying.


Reference:

Extract from Study Guide:

"Licensing technologies enforce legal software use and prevent unauthorized access, helping organizations protect intellectual property and defeat piracy efforts."

-- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Software and Intellectual Property Protection



  PDF
Viewing page 24 of 48
Viewing questions 116 - 120 out of 232 questions


Post your Comments and Discuss WGU Cybersecurity-Architecture-and-Engineering exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!