Important WGU (KFO1/D488) Cybersecurity Architecture and Engineering Exam Questions

Answer: B

Explanation:

Organizational culture can support ethical guidelines by establishing clear protocols and policies that promote the security and privacy of data. This includes:

Data protection policies: Guidelines on how data should be handled, stored, and protected.

Ethical behavior: Encouraging employees to adhere to ethical standards and practices.

Training and awareness: Regular training sessions to educate employees on security best practices and ethical behavior.

Incident response: Protocols for responding to data breaches and other security incidents.

A strong organizational culture that prioritizes data security and privacy helps ensure that ethical guidelines are consistently followed.

Reference

Michael E. Whitman and Herbert J. Mattord, 'Principles of Information Security,' Cengage Learning.

Rebecca Herold, 'Managing an Information Security and Privacy Awareness and Training Program,' CRC Press.

Answer: C

Explanation:

The correct answer is C --- Least privilege.

According to the WGU Cybersecurity Architecture and Engineering (KFO1 / D488) course material, the principle of least privilege ensures that users are granted only the minimum level of access required to perform their job functions. In this case, if the insider only had access to resources necessary for their user role, they would not have been able to access sensitive administrative information.

Password complexity (A) strengthens account security but does not prevent excessive access. Separation of duties (B) divides critical tasks but is not solely about limiting access. Job rotation (D) moves employees between roles but is not an access control measure.

Reference Extract from Study Guide:

'The principle of least privilege requires limiting user access rights to the minimum necessary to perform their tasks, reducing the risk of insider threats and unauthorized access to sensitive information.'

--- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Access Control Principles

=============================================

Answer: D

Explanation:

The IT role responsible for the installation and maintenance of hardware and software that make up a computer network is the Network Administrator. Their responsibilities include:

Network installation: Setting up and configuring network hardware, such as routers, switches, firewalls, and servers.

Network maintenance: Ensuring the network operates smoothly, performing regular updates, and troubleshooting issues.

Security management: Implementing security measures to protect the network from unauthorized access, attacks, and breaches.

Performance monitoring: Monitoring network performance and making necessary adjustments to optimize speed and reliability.

Therefore, the Network Administrator is the correct role for these responsibilities.

Reference

William Stallings, 'Data and Computer Communications,' Pearson.

Andrew S. Tanenbaum and David J. Wetherall, 'Computer Networks,' Pearson.

Answer: B

Explanation:

The correct answer is B --- Advanced Encryption Standard (AES).

According to WGU Cybersecurity Architecture and Engineering (KFO1 / D488), AES is a widely adopted symmetric encryption standard that ensures the confidentiality and integrity of sensitive data, including patient health information, which HIPAA mandates to protect. AES is considered highly secure and efficient for encrypting stored or transmitted healthcare data.

WEP (A) is outdated and insecure. SMTP (C) is a protocol for sending emails, not encryption. RSA (D) is an asymmetric encryption method typically used for key exchanges, not bulk data encryption.

Reference Extract from Study Guide:

'Advanced Encryption Standard (AES) is recommended for encrypting sensitive healthcare data, providing strong protection for confidentiality and integrity in HIPAA-regulated environments.'

--- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Encryption Standards and Regulatory Compliance

=============================================

Answer: D

Explanation:

An input device is any hardware component that allows a user to enter data into a computer.

A scanner is an input device that converts physical documents into digital format.

The other options:

Printer is an output device.

Flash drive is a storage device.

CD can be both storage and media for input/output depending on the context but is not primarily used for direct data input.

Therefore, a scanner is the correct answer for an input device.

'Introduction to Computer Science' by ITL Education Solutions Limited, which discusses input and output devices.

'Digital Fundamentals' by Thomas L. Floyd, which includes information on various peripherals.