Cybersecurity Architecture and Engineering Online Practice Questions

Explanation:
The correct answer is D ― Installing endpoint protection software.
WGU Cybersecurity Architecture and Engineering (KFO1 / D488) teaches that endpoint protection (including antivirus, anti-malware, and endpoint detection and response) is critical for detecting, blocking, and removing commodity malware like ransomware and Trojans.
Firewalls (A) help with perimeter security but don't directly block malware on endpoints. Rerouting communications (B) is not a standard protection method. Two-factor authentication (C) secures logins but does not protect systems from malware infection.
Reference Extract from Study Guide:
"Endpoint protection software defends individual systems against malware threats by detecting, blocking, and removing malicious files and processes."
― WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Endpoint Security Solutions

Explanation:
The correct answer is D ― Secure Shell (SSH).
WGU Cybersecurity Architecture and Engineering (KFO1 / D488) materials state that SSH provides strong encryption and authentication for remote access over unsecured networks. SSH ensures that sessions are confidential and that only authorized users can access remote systems.
HTTP (A) and FTP (B) transmit data in plaintext and do not provide encryption. Telnet (C) also transmits data in plaintext and is insecure for remote access.
Reference Extract from Study Guide:
"Secure Shell (SSH) is used for secure remote management, offering encrypted communications and authentication mechanisms to protect against unauthorized access and eavesdropping."
― WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Secure Protocols and Communications

Explanation:
Alpha testing is a type of system testing that involves having end users test the system with simulated data and the help of the developer. This phase is crucial because:
Early feedback: Users provide early feedback on the usability and functionality of the system.
Bug identification: Developers can identify and fix bugs before the system is released for beta testing or production.
Simulated environment: The testing is done in a controlled, simulated environment, often within the development organization.
Alpha testing is followed by beta testing, where the system is tested in a real-world environment by end users without the developers' direct involvement.
Reference
Ron Patton, "Software Testing, " Sams Publishing.
Glenford J. Myers, "The Art of Software Testing, " Wiley.

Explanation:
DNSSEC (Domain Name System Security Extensions) is a security protocol that adds cryptographic validation to DNS responses, making it nearly impossible for attackers to spoof DNS responses or redirect users to malicious sites.
NIST SP 800-81 Rev. 2 (Secure Domain Name System (DNS) Deployment Guide):
“DNSSEC provides data origin authentication and data integrity to DNS responses using digital signatures, effectively mitigating spoofing and cache poisoning attacks.”
While patching and awareness are important, DNSSEC directly mitigates the technical risk described.
WGU Course Alignment:
Domain: System Security Engineering
Topic: Implement DNS hardening techniques such as DNSSEC

Explanation:
The correct answer is B ― Inherent risk.
WGU Cybersecurity Architecture and Engineering (KFO1 / D488) defines inherent risk as the level of risk that exists before any controls or mitigation strategies are implemented. When evaluating expansion into new regions, the corporation must first understand the baseline level of risk (political, regulatory, cyber threats, etc.) inherent to the new environment.
Impact (A) refers to consequences but doesn't capture the natural risk level. Threat of attack (C) and likelihood (D) are specific aspects, but inherent risk (B) provides a comprehensive starting point for evaluating all potential dangers.
Reference Extract from Study Guide:
"Inherent risk is the natural level of risk present in a business activity or environment before applying controls, critical for evaluating new ventures or expansions."
― WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Enterprise Risk Management