WGU Updated Cybersecurity-Architecture-and-Engineering Exam Questions and Answers by emil

Risk avoidanceinvolves eliminating the source of risk altogether. In this case, the organization chose todecommission the vulnerable systeminstead of patching or compensating — a clear example of avoiding risk.

NIST SP 800-30 Rev. 1 (Risk Assessment Guide):

“Risk avoidance involves not performing the action that gives rise to the risk or eliminating the risk cause or consequence.”

This strategy is ideal when the cost or complexity of mitigation is too high or when risk to the business is unacceptable.

????WGU Course Alignment:

Domain:Security Models and Design

Topic:Understand and apply risk response strategies (avoid, accept, transfer, mitigate)

Preventing unauthorized access and impersonation during exams or coursework is critical in e-learning platforms.Strong user authentication(e.g., MFA, CAPTCHA, secure login mechanisms) ensures that only authorized users access exams and coursework.

NIST SP 800-63B (Digital Identity Guidelines – Authentication):

“Secure user authentication ensures the identity of individuals accessing sensitive applications, reducing the risk of impersonation and credential misuse.”

Firewall rules and patching are important, but they don't directly addressuser-level fraud prevention.

????WGU Course Alignment:

Domain:Access Control and Identity Management

Topic:Secure authentication mechanisms for web platforms