WGU Updated Cybersecurity-Architecture-and-Engineering Exam Questions and Answers by pia

Abastion scanneris a tool or hardened system that inspects network traffic and identifies security vulnerabilities, particularly those visible from an external (internet-facing) viewpoint. It plays a key role inpost-development assessment.

OWASP Testing Guide v4.2:

"Use bastion hosts or hardened scanners to perform vulnerability assessments from an attacker’s perspective."

This option is preferable for final validation before system release, especially when looking for exposure from the public internet.

????WGU Course Alignment:

Domain:System Security Engineering

Topic:Evaluate hardened systems and scanning tools during release validation

The correct order of project phases according to the Project Management Institute (PMI) and other standard project management methodologies is:

Initiation: This phase involves defining the project at a high level and getting approval to start.

Planning: In this phase, detailed planning is done to set the project's scope, objectives, and procedures.

Executing: This phase is where the project plan is put into action and the project deliverables are created.

Monitoring and Controlling: This phase involves tracking, reviewing, and regulating the project’s progress and performance, ensuring that everything aligns with the project plan.

Closing: This is the final phase, where the project is formally closed, and final deliverables are handed over.

References

Project Management Institute, "A Guide to the Project Management Body of Knowledge (PMBOK Guide)," PMI.

Harold Kerzner, "Project Management: A Systems Approach to Planning, Scheduling, and Controlling," Wiley.

The correct answer is C — Structured Query Language (SQL) injection attacks.

As per WGU Cybersecurity Architecture and Engineering (KFO1 / D488), a Web Application Firewall (WAF) protects web applications by filtering and monitoring HTTP traffic. It isspecifically effective against attacks such as SQL injection, cross-site scripting (XSS), and other application-layer vulnerabilities.

Phishing (A) and social engineering (D) involve human deception, not web application vulnerabilities. Brute force attacks (B) typically target authentication but are not the primary focus of a WAF.

Reference Extract from Study Guide:

"A web application firewall (WAF) detects and prevents attacks against web applications, including SQL injection and cross-site scripting (XSS)."

— WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Web Application Firewall and Threat Protection

=============================================

Proprietary softwareis a type of software that is owned by an individual or a company.

It is usually sold commercially and comes with acommercial software license.

This type of license typically restricts the ways in which the software can be used, modified, and distributed.

Users must agree to the terms of the license, which often include restrictions on copying, sharing, and modifying the software.

Example:Microsoft Windows and Adobe Photoshop are proprietary software products.