Important WGU (KFO1/D488) Cybersecurity Architecture and Engineering Exam Questions

Answer: C

Explanation:

The correct answer is C --- ChaCha.

According to WGU Cybersecurity Architecture and Engineering (KFO1 / D488) materials, ChaCha is a stream cipher developed as a variant of Salsa20. It offers enhanced security, improved performance, and resistance to cryptographic attacks. It is often combined with Poly1305 forauthenticated encryption, commonly used in modern secure communications.

CTR (A) and CBC (B) are block cipher modes, not stream ciphers. ECB (D) is a block cipher mode and is insecure due to its lack of diffusion properties.

Reference Extract from Study Guide:

'ChaCha is a modern stream cipher, evolved from Salsa20, designed for speed and security, and often used alongside Poly1305 for authenticated encryption.'

--- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Encryption Technologies

=============================================

Answer: C

Explanation:

The correct answer is C --- Implementing local drive encryption on employee laptops.

WGU Cybersecurity Architecture and Engineering (KFO1 / D488) explains that encryption protects sensitive data at rest, ensuring that if a laptop is lost or stolen, the data remains unreadable without the decryption key. This control directly addresses the protection of sensitive customer data.

Restricting software installation (A) is a good security practice but does not specifically protect stored sensitive data. Biometric authentication (B) strengthens authentication but does not encrypt data. Awareness training (D) helps users behave securely but does not technically protect the data itself.

Reference Extract from Study Guide:

'Local drive encryption protects sensitive data stored on mobile devices such as laptops, ensuring confidentiality even if the device is lost or stolen.'

--- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Endpoint Security and Device Hardening

=============================================

Answer: D

Explanation:

The correct answer is D --- Installing endpoint protection software.

WGU Cybersecurity Architecture and Engineering (KFO1 / D488) teaches that endpoint protection (including antivirus, anti-malware, and endpoint detection and response) is critical for detecting,blocking, and removing commodity malware like ransomware and Trojans.

Firewalls (A) help with perimeter security but don't directly block malware on endpoints. Rerouting communications (B) is not a standard protection method. Two-factor authentication (C) secures logins but does not protect systems from malware infection.

Reference Extract from Study Guide:

'Endpoint protection software defends individual systems against malware threats by detecting, blocking, and removing malicious files and processes.'

--- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Endpoint Security Solutions

=============================================

Answer: D

Explanation:

Business continuity planning (BCP) is essential because it ensures that an organization can quickly resume its critical functions after a disruption. The key aspects include:

Minimizing downtime: Strategies to restore business operations as quickly as possible.

Risk management: Identifying potential threats and creating plans to mitigate their impact.

Data recovery: Ensuring that data can be restored quickly in the event of a loss.

Communication plans: Establishing protocols for communicating with employees, customers, and stakeholders during and after a disruption.

The primary goal of BCP is to ensure the quickest return to business operations, maintaining service levels and minimizing financial losses.

Reference

Andrew Hiles, 'The Definitive Handbook of Business Continuity Management,' Wiley.

Michael Wallace and Lawrence Webber, 'The Disaster Recovery Handbook,' AMACOM.

Answer: D

Explanation:

Tabletop exercisessimulate emergency scenarios in alow-risk, discussion-based format, allowing teams to walk through recovery procedures and decision-making without disrupting actual business operations.

NIST SP 800-84 (Guide to Test, Training, and Exercise Programs):

''Tabletop exercises are effective tools for validating plans and procedures in a discussion format without impacting normal operations.''

Full interruption tests are disruptive; checklists and walkthroughs offer lower fidelity evaluations.

WGU Course Alignment:

Domain:Business Continuity and Disaster Recovery

Topic:Test disaster plans using low-impact simulation techniques