WGU Updated Cybersecurity-Architecture-and-Engineering Exam Questions and Answers by santino

The correct answer is D — Business assets that will be stored in the new system.

As described in WGU Cybersecurity Architecture and Engineering (KFO1 / D488), the first step in risk management is identifying and classifying assets that need protection. Without understanding the business assets, you cannot properly assess threats, vulnerabilities, or impacts.

Threats (A), impacts (B), and vulnerabilities (C) are assessed after assets are identified.

Reference Extract from Study Guide:

"Identifying and classifying business assets is the first step in the risk management process, as assets drive the prioritization of threats and mitigations."

— WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Risk Identification and Asset Classification

================

Security edge devices(such as NGFWs, IDS/IPS, and secure gateways) are deployed at thenetwork perimeterto inspect and filter traffic, providing aninitial layer of defenseagainst external threats before they reach internal systems.

NIST SP 800-41 Rev. 1:

“Edge security devices enforce security policy at network boundaries and act as a first line of defense by preventing unauthorized or malicious traffic from entering the internal network.”

They are not TPMs or SIEMs, though they maygenerate dataconsumed by SIEMs.

????WGU Course Alignment:

Domain:Network Security

Topic:Deploy perimeter defense technologies at network entry points

The correct answer is D — Security information and event management (SIEM).

WGU Cybersecurity Architecture and Engineering (KFO1 / D488) explains that a SIEM solution collects, correlates, and analyzes logs and events from multiple sources to detect unusual patterns of behavior across an organization’s infrastructure. SIEM systems are specifically designed for centralized monitoring and alerting on suspicious activities, which helps prevent future breaches.

VPN (A) secures communications but does not monitor behavior. SSH (B) is a secure protocol for remote access but not a monitoring tool. WAF (C) protects web applications but does not monitor user behavior across systems.

Reference Extract from Study Guide:

"Security information and event management (SIEM) platforms aggregate and analyze security data from across an enterprise, providing actionable insights into anomalous user activities and potential threats."

— WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Security Monitoring and Event Management

=============================================

The correct answer is B — Password policies.

WGU Cybersecurity Architecture and Engineering (KFO1 / D488) emphasizes that strong password policies, including requirements for complexity, minimum length, expiration, and reuse restrictions, are essential for protecting user credentials from compromise.

Object storage (A) and removable storage (C) deal with data storage, not password management. Hardware key managers (D) manage cryptographic keys, not passwords directly.

Reference Extract from Study Guide:

"Implementing strong password policies enforces secure password practices among users, reducing the risk of credential compromise."

— WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Identity and Access Management Controls

=============================================