Skip to content
CramShare
PremiumPractice exam

WGU D488 – Cybersecurity Architecture & Engineering, Objective Assessment Practice Review

COMP100 Computer Science — exam and revision material · Other

Updated today

Computer Science exam material, 33 pages. Originally published on StudyMerit.

Pages
33
Academic year
2025/2026
Language
English

What’s included

Preview 3 of 33 pages

See the first 3 pages exactly as they appear in the document.

Read page 2 as text

D488 - Cybersecurity Architecture & Engineering Leave the first rating Students also studied Science Computer Science Computer Security and Reliability Save Groups Flashcard sets Study guides D488 - Cybersecurity Architecture a ... 1,074 terms SpaceChimpanzee Preview D488 OA 48 terms jroger96 Preview D488 19 terms lcerv337 Preview D487: S 58 terms cha Which type of security should a business use on its layer 2 switch to isolate the finance network from other departmental networks? A - Virtual Private Network (VPN) B - Internet Protocol Security (IPSec) C - Virtual Local Area Network (VLAN) D - Remotely Triggered Black Hole (RTBH) C - Virtual Local Area Network (VLAN) VLANs allow companies to logically segment network traffic, ensuring devices on different VLANs cannot communicate unless otherwise specified in a layer 3 device like a router. Which type of software testing should be used when there has been a change within the existing environment? A - Regression Testing B - Penetration Testing C - Requirements Testing D - Release Testing A - Regression Testing Regression testing ensures that recent changes within the environment have not introduced new defects or broken existing functionality. Which security technique should be used to detect a weak password that may match common dictionary words? A - Password Spraying B - Password Auditing C - Password Guessing D - Password History B - Password Auditing Password auditing allows for existing passwords to be compared against known weak passwords to help determine the security of a credential. Terms in this set (106) Hide definitions

Read page 3 as text

What should an organization implement if it wants users of their site to provide a password, memorable word, and pin? A - Multi-factor authentication (MFA) B - Two-factor authentication (2FA) C - Two-step verification D - Single-factor authentication A - Multi-factor authentication MFA enhances security by requiring multiple forms of authentication, therefore reducing the risk of unauthorized access. A network technician is asked by their manager to update security to block several known bad actor IP addresses. A - Signature rules B - Firewall rules C - Behavior rules D - Data loss prevention (DLP) rules B - Firewall rules Firewall rules can be set up to deny traffic coming from known malicious IP addresses. On a shopping website, there is a 500-millisecond delay when the authorized payment button is selected for purchases. Attackers have been running a script to alter the final payment that takes 200 milliseconds. Which vulnerability on the website is being targeted by the attackers? A - Buffer Overflow B - Integer Overflow C - Broken Authentication D - Race Condition D - Race Condition A race condition occurs when multiple processes or actions are executed simultaneously, and the outcome depends on the sequence or timing of events. A company wants to provide laptops to its employees so they can work remotely. What should be implemented to ensure only work applications can be installed on company laptops? A - Containerization B - Token-based access C - Patch repository D - Whitelisting D - Whitelisting Whitelisting ensures that only approved applications can be installed and executed on company laptops. What should a business use to provide non-repudiation for emails between employees? A - TLS/SSL B - AES-256 C - S/MIME D - IPSec C - S/MIME (Secure/Multipurpose Internet Mail Extensions) S/MIME provides non-repudiation for emails by using digital signatures. Which strategy is appropriate for a risk management team to determine if a business has insufficient security controls? A - Qualitative assessment B - Gap assessment C - Quantitative risk assessment D - Impact assessment B - Gap assessment A gap assessment identifies the gaps between the current security control and the desired or required levels of security.

30 more pages after this

You’ve read 3 of 33. Unlock once and it stays in your library — and if the rest doesn’t match what you just read, you get a refund.

Others on this course also opened

$11.50

Yours permanently