Cybersecurity-Architecture-and-Engineering Exam Dumps : WGU Cybersecurity Architecture and Engineering (KFO1/D488)

The correct answer is B — Elliptic Curve Diffie-Hellman (ECDH).

WGU Cybersecurity Architecture and Engineering (KFO1 / D488) material highlights that ECDH is an enhanced, more efficient form of the traditional Diffie-Hellman key exchange, using elliptic curve cryptography (ECC). It provides similar security with much smaller key sizes, improving performance and efficiency.

DH (A) is the traditional method but is less efficient. RSA (C) is primarily used for encryption and digital signatures. DSA (D) is used for digital signatures, not for key exchange.

Reference Extract from Study Guide:

"Elliptic Curve Diffie-Hellman (ECDH) enhances traditional key exchange by utilizing elliptic curve cryptography, offering higher security with smaller key sizes and improved efficiency."

— WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Cryptographic Key Management

The correct answer is C — Implementing local drive encryption on employee laptops.

WGU Cybersecurity Architecture and Engineering (KFO1 / D488) explains that encryption protects sensitive data at rest, ensuring that if a laptop is lost or stolen, the data remains unreadable without the decryption key. This control directly addresses the protection of sensitive customer data.

Restricting software installation (A) is a good security practice but does not specifically protect stored sensitive data. Biometric authentication (B) strengthens authentication but does not encrypt data. Awareness training (D) helps users behave securely but does not technically protect the data itself.

Reference Extract from Study Guide:

"Local drive encryption protects sensitive data stored on mobile devices such as laptops, ensuring confidentiality even if the device is lost or stolen."

— WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Endpoint Security and Device Hardening

=============================================

The correct answer is C — HTTP interceptor.

According to WGU Cybersecurity Architecture and Engineering (KFO1 / D488), an HTTP interceptor is a tool or method used to capture, inspect, and manipulate HTTP/S traffic between aclient and server. It allows testers to identify security vulnerabilities such as improper input validation, session management flaws, and exposure of sensitive data.

A Bastion scanner (A) is not a standard tool for traffic inspection. Port scanners (B) check for open ports but do not inspect HTTP traffic content. Domain interceptors (D) are not a recognized testing tool in this context.

Reference Extract from Study Guide:

"HTTP interceptors allow for the inspection and manipulation of web traffic, helping to identify application vulnerabilities prior to deployment."

— WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Web Application Security Testing

=============================================