Cybersecurity-Architecture-and-Engineering無料問題集「WGU Cybersecurity Architecture and Engineering (KFO1/D488)」

質問 1

A corporate website is currently being redesigned, which leaves it vulnerable to security threats. Management does not want to provide an attacker with any information about the web server. Which strategy should be used to prevent an attacker from gaining unauthorized information?

（A）Enabling Hypertext Transfer Protocol Secure (HTTPS) over Domain Name Service (DNS)

（B）Obfuscating error messages on the site or within the Uniform Resource Locator (URL)

（C）Using HTTPS for all page and content requests

（D）Becoming PCI-DSS compliant and certified

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

A company wants to improve the security of its software development process and reduce the risk of vulnerabilities in its applications. The company is looking for a solution that can isolate its applications and provide a secure environment for development and testing.
Which security technology meets the needs of this company?

（A）Virtual private network (VPN)

（B）Firewall

（C）Data loss prevention (DLP)

（D）Containerization

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

What type of software utilizes a commercial software license?

（A）Open Source

（B）Proprietary

（C）Shareware

（D）Public Domain

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

After a recent security assessment, it was discovered that many company devices have unnecessary ports opened to the network.
What should the company configure to fix this?

（A）Intrusion detection system

（B）Intrusion prevention system

（C）Device hardening

（D）Web application firewall

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

A cloud hosting provider is concerned about the potential risks associated with attacks that target the confidentiality and integrity of sensitive data stored on its servers' volatile memory. The provider has decided to implement hardening techniques and endpoint security controls to mitigate the risk.
Which hardening technique will meet the needs of this provider?

（A）Implementing a next-generation antivirus system to detect and prevent malware attacks

（B）Enforcing a strong password complexity policy for all user accounts

（C）Implementing secure encrypted enclaves and AMD Secure Memory Encryption

（D）Conducting regular security awareness training for all employees

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

Which task is the responsibility of a database administrator?

（A）Troubleshooting network security issues

（B）Installing and configuring databases

（C）Deciding on database applications for the company

（D）Compiling code into an executable file

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

A healthcare organization has experienced a ransomware attack that has resulted in the encryption of all patient medical records. The organization has backups, but restoring the data will take severaldays, and during that time, patient care will be significantly diminished.
What is the most important factor to consider when evaluating the severity of the ransomware attack?

（A）Likelihood

（B）Risk

（C）Impact

（D）Threat actors

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

A government agency is planning a hybrid cloud deployment. Strict controls must be in place that can label classified data. The solution must ensure that access rights will be granted based on the user's government security classification.
Which type of access control should be used?

（A）Role-based access control (RBAC)

（B）Attribute-based access control (ABAC)

（C）Discretionary access control (DAC)

（D）Mandatory access control (MAC)

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 9

A company is developing a new mobile application to support external customers and contractors. The application needs to allow users to sign in using third-party social identities.
What is the best protocol?

（A）Lightweight Directory Access Protocol (LDAP)

（B）Open Authorization (OAuth)

（C）Kerberos

（D）Security Assertion Markup Language (SAML)

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 10

A retail company wants to establish the frequency at which it needs to back up its critical data to ensure it can be restored in case of a disruption with the least amount of acceptable data loss.
What is the term used to describe this metric?

（A）Business Impact Analysis (BIA)

（B）Disaster Recovery (DR)

（C）Continuous Data Protection (CDP)

（D）Recovery Point Objective (RPO)

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 11

A financial institution conducted a cybersecurity assessment, which identified several vulnerabilities, including outdated software and weak password policies. The company also needs to implement a new core banking system that can handle a large number of transactions while ensuring the security of customer data.
Which risk mitigation process is the most effective approach to address these vulnerabilities, and what is the best topology for the new core banking system?

（A）Creating strong password policies and enforcing multifactor authentication and using public cloud topology

（B）Implementing security patches and updates on a regular basis and using hybrid cloud topology

（C）Conducting regular security audits and penetration testing and using private cloud topology

（D）Installing antivirus software on all endpoints and using on-premise topology

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 12

Which part of the Uniform Resource Locator (URL) identifies the server on which the web page can be found?

（A）Domain name

（B）IP address

（C）Protocol

（D）Resource path ID

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 13

Which protocol can be used to provide secure email communication and ensure the confidentiality, integrity, and authenticity of email messages?

（A）Pretty Good Privacy (PGP)

（B）Simple Mail Transfer Protocol (SMTP)

（C）Internet Protocol Security (IPsec)

（D）Secure/Multipurpose Internet Mail Extensions (S/MIME)

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

Cybersecurity-Architecture-and-Engineering 無料問題集「WGU Cybersecurity Architecture and Engineering (KFO1/D488)」

弊社を連絡する

関連リンク

トップ試験