Pass WGU Cybersecurity-Architecture-and-Engineering Exam with Guarantee Updated 215 Questions [Q12-Q34]

Rate this post

Pass WGU Cybersecurity-Architecture-and-Engineering Exam with Guarantee Updated 215 Questions

Latest Cybersecurity-Architecture-and-Engineering Pass Guaranteed Exam Dumps Certification Sample Questions

NO.12 The security team has been notified about multiple man-in-the-middle (MITM) attacks happening on the wireless network over the past thirty days. Management has agreed to upgrade the network infrastructure to help eliminate these attacks.
Which solution fulfills these requirements?

Security information and event management (SIEM)

Wireless intrusion prevention system (WIPS)

Inline network encryptor

Layer 3 switch

NO.13 A company wants to secure its computer systems and prevent any unauthorized access to its network. The company wants to implement a security solution that can restrict network traffic to only approved services and applications.
Which security technology will meet the needs of this company?

Host-based firewall

Two-factor authentication

Hardware security module (HSM)

Antivirus tools

NO.14 Which two benefits do computer networks provide for businesses?
Choose 2 answers

Increased Internet communications speed

Increased business efficiency

Organization cost savings

Lower IT operations costs

Improved information security

NO.15 What are two roles of a DNS?
Choose 2 answers

Creating IP addresses if it cannot find an alias

Storing the IP address

Translating an IP alias to an actual IP address

Sending packets along a pathway that connects it to the Internet

NO.16 How should a security analyst detect a potential structured query language (SQL) injection attack?

By looking for extra and unexpected symbols and characters in certain queries

By looking for database primary key changes on the production environment

By looking for repeated failed login attempts to the database server

By looking for administrative command attempts within database log files

NO.17 Which method is frequently used to protect software?

Trademarks

GNU General Public License

Copyrights

Fair use

NO.18 When is it better to purchase software rather than build a software solution in-house?

When the company has very specific needs

When the company wants internal growth

When there is a short timeline

When the company wants to develop the skill sets of its internal IT staff

NO.19 Which IT role is responsible for installing new hardware and troubleshooting existing hardware?

Web administrator

System administrator

Security administrator

Network administrator

NO.20 A healthcare organization is required to comply with the Health Insurance Portability and Accountability Act (HIPAA), which regulates the privacy and security of personal health information. The organization uses simple network management protocol (SNMP) to manage and monitor its network devices.
Which security control will protect the confidentiality of network device information within this organization?

Access controls

Network segmentation

Encryption

Security monitoring

NO.21 In which state is data considered information?

Raw

Input

Unprocessed

Processed

NO.22 A company may choose to use CDs, DVDs, hard drives, or even cloud storage for data backup.
Which aspect of data backup does this statement describe?

Data mirroring

Incremental backups

Image backups

Backup media

NO.23 An organization is experiencing multiple instances of attempted access from geographicallocations where there are no corporate offices or staff.
What should a network administrator do to prevent further access attempts?

Adjust the rule sets within the Security Information and Event Manager (SIEM) tool

Adjust the Domain Name Service (DNS) server A Records

Adjust the main proxy server to only allow specific addresses

Adjust the firewall configuration to drop traffic from these addresses

NO.24 How does application software differ from operating systems?
Choose 2 answers

Application software includes system utilities that run on demand of the user.

Application software consists of programs that end users run to accomplish business or personal tasks, such as e-mail.

Application software includes word processors and spreadsheet software that are useful to end users.

Application software supports the computer hardware system directly.

NO.25 An IT organization recently implemented a hybrid cloud deployment. The security team must be able to correlate event data combined from different sources in a central location.

Intrusion Detection System (IDS)

File Integrity Monitoring (FIM)

Security Information and Event Management (SIEM)

Data Loss Prevention (DLP)

NO.26 A company has discovered a vulnerability in its lightweight directory access protocol (LDAP) implementation, which could potentially allow unauthorized access to sensitive information. The company has decided to implement risk mitigation strategies to reduce the risk associated with this vulnerability.
Which risk mitigation strategy will meet the needs of the company?

Conducting regular security awareness training for employees to prevent social engineering attacks targeting LDAP credentials

Regularly backing up data stored in the LDAP server to prevent data loss in the event of a breach

Implementing intrusion detection and prevention systems (IDPS) to monitor for suspicious activities and potential LDAP attacks

Implementing strong authentication mechanisms and encryption protocols to secure communication between the LDAP server and clients

NO.27 A software development company is required to comply with the Payment Card Industry Data Security Standard (PCI DSS), which sets requirements for the protection of cardholder data. The company uses Secure Shell (SSH) to connect to its cloud-based development environment, which contains cardholder data.
Which security control will meet the needs of the company?

Patch management

Network segmentation

Strong authentication

Vulnerability analysis

NO.28 A healthcare organization is concerned about the potential risks associated with unauthorized access to sensitive patient information on its endpoint devices. The organization has decided to implement hardening techniques and endpoint security controls to mitigate the risk.
Which hardening technique will meet the needs of this organization?

Enforcing strict password policies for all user accounts

Conducting regular vulnerability assessments and penetration testing

Implementing a network-based intrusion detection and prevention system

Logging and monitoring endpoint devices

NO.29 How can the organizational culture support ethical guidelines?

By outlining the roles of IT specialists in the organization

By outlining the protocols to support security and privacy of data

By creating the system requirements for computers in the organization

By creating the government regulations that apply to the organization

NO.30 An IT team has been tasked with improving an organization’s security posture to defend against potential malicious actors.
What is the first step when hunting for potential threats?

Deploy an anti-malware solution

Implement an intrusion detection system

Form an incident response team

Establish a baseline for normal activity

NO.31 A company is concerned about the potential risks associated with unauthorized modifications to the basic input
/output system (BIOS) firmware on its servers. The company has decided to implement hardening techniques and endpoint security controls to mitigate the risk.
Which technique will prevent unauthorized modifications to the BIOS firmware on a server?

BIOS monitoring

Using an intrusion detection system to detect and prevent attacks

Conducting regular backups of the server’s data

BIOS protection

NO.32 Which software allows the user to easily access the hardware of a computer?

Productivity

FTP client

Application

Operating system

NO.33 What is the role of the CPU in a computing environment?
Choose 2 answers

Carrying out the instructions of a computer program

Storing data as it is being processed

Directing electrical current over the circuit board

Connecting components to the system unit

Containing an arithmetic logic unit (ALU) that performs arithmetic and logic operations

NO.34 Which encryption technique can be used to enable a third-party provider to perform calculations on encrypted data without decrypting the data?

Homomorphic encryption

Secure function evaluation (SFE)

Secure Sockets Layer (SSL)

Private information retrieval (PIR)