Get WGU (KFO1/D488) Cybersecurity Architecture and Engineering Exam Practice Questions - Real and Updated

Answer : A

The correct answer is A --- Expiration.

According to WGU Cybersecurity Architecture and Engineering (KFO1 / D488), password expiration policies require users to change their passwords after a certain period, ensuring that long-term credential exposure risk is minimized.

Length (B) defines minimum password size. Recovery (C) relates to resetting forgotten passwords. Complexity (D) enforces character requirements, not age.

Reference Extract from Study Guide:

'Password expiration policies require users to update passwords regularly, minimizing the risk of long-term credential exposure.'

--- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Password Security Best Practices

=============================================

Answer : C

It is better to purchase software rather than build a software solution in-house when there is a short timeline. Building software from scratch requires significant time for development, testing, and deployment. Purchasing off-the-shelf software can significantly reduce the time needed to implement a solution. Other considerations include:

Cost-effectiveness: Pre-built software can be more cost-effective than developing a custom solution, especially when factoring in the costs of development, maintenance, and support.

Immediate availability: Purchased software is usually ready to deploy immediately, whereas custom development can take months or even years.

Proven reliability: Commercial software often has a track record of reliability and user support, reducing the risk of bugs and issues that may arise with custom development.

Therefore, when time is of the essence, purchasing software is the preferable option.

Reference

Ian Sommerville, 'Software Engineering,' Pearson.

Steve McConnell, 'Rapid Development: Taming Wild Software Schedules,' Microsoft Press.

Answer : C

The correct answer is C --- Implementing a mobile device management (MDM) solution.

WGU Cybersecurity Architecture and Engineering (KFO1 / D488) describes that an MDM solution enables organizations to enforce security policies on personal devices, such as encryption, remote wipe capabilities, and application controls. MDM allows safe access to corporate resources while managing the inherent risks of BYOD environments.

Blocking access (A) contradicts the BYOD policy goal. Security audits (B) monitor but do not control personal devices. Awareness training (D) is important but does not enforce technical protections on devices.

Reference Extract from Study Guide:

'Mobile device management (MDM) solutions enforce security policies on employee-owned devices, ensuring compliance and reducing the risks associated with BYOD implementations.'

--- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Mobile Device Security

=============================================

Answer : B

The correct answer is B --- Avoid.

WGU Cybersecurity Architecture and Engineering (KFO1 / D488) materials explain that risk avoidance involves eliminating the source of risk entirely. In this scenario, by decommissioning the vulnerable website and starting anew, the organization is removing the risky environment instead of trying to fix or transfer the risk, which is a clear example of risk avoidance.

Accepting (A) would mean tolerating the risk without action. Transferring (C) would involve shifting the risk to a third party (like insurance). Mitigating (D) would involve reducing the risk without removing the vulnerable system.

Reference Extract from Study Guide:

'Risk avoidance entails eliminating the conditions that expose the organization to a threat, thereby completely removing the associated risk.'

--- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Risk Response Strategies

Answer : B

The correct answer is B --- Public key infrastructure (PKI).

According to the WGU Cybersecurity Architecture and Engineering (KFO1 / D488) Study Guide, PKI is the framework that enables the issuance and management of digital certificates used for device authentication. By using certificates, devices can securely authenticate themselves to access corporate resources without relying solely on passwords.

VPNs (A) secure network connections but do not authenticate devices themselves. Certificate signing (C) is a part of PKI but not the complete infrastructure. Endpoint passwords (D) authenticate users, not necessarily the devices.

Reference Extract from Study Guide:

'Public key infrastructure (PKI) enables the issuance of digital certificates used for authenticating users, systems, and devices, ensuring secure access control.'

--- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Cryptography and PKI Concepts

=============================================