The correct answer is A - Risk appetite.
As per the WGU Cybersecurity Architecture and Engineering (KFO1 / D488) coursework, risk appetite defines the amount and type of risk an organization is willing to accept in pursuit of its objectives. It is a strategic-level metric used by executive leadership and boards to determine if the current level of risk exceeds what the organization is comfortable handling.
Risk evaluation plans (B) outline how risks are assessed, treatment plans (C) describe mitigation actions, and risk tolerance (D) is more operational, defining acceptable variation from the appetite but not the overall strategic limit.
Reference Extract from Study Guide:
"Risk appetite represents the amount of risk an organization is willing to pursue or retain and is established by senior leadership as part of governance activities."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Risk Management Concepts

* Packet sniffing is a technique used to capture and analyze network traffic, which can include intercepting passwords while they are in transit.
* When data packets are transmitted over a network, a packet sniffer can capture these packets, and if they are not encrypted, it can read sensitive information like passwords.
* The other options:
* Buffer overflow is a type of attack that exploits a program's memory handling.
* Phishing is a social engineering attack to deceive users into providing sensitive information.
* Black hat refers to a hacker with malicious intent, not a specific technique.
* Therefore, packet sniffing is the correct technique for obtaining passwords in transit.
References:
* "Network Security Essentials: Applications and Standards" by William Stallings, which explains packet sniffing and network security threats.
* "Computer Security: Principles and Practice" by William Stallings and Lawrie Brown, which covers network attack techniques including packet sniffing.

The correct answer is D - Mission essential functions (MEFs).
WGU Cybersecurity Architecture and Engineering (KFO1 / D488) specifies that mission essential functions (MEFs) are those activities that must be maintained or resumed quickly during or after a disruption to ensure continuity of critical operations, particularly for government agencies.
BCP (A) is the plan itself. DR (B) focuses on IT and system recovery. RPO (C) measures acceptable data loss but does not define critical services.
Reference Extract from Study Guide:
"Mission essential functions (MEFs) are critical activities that must be performed continuously or resumed quickly after disruption to support business or agency operations."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Continuity of Operations Planning

* The SQL statement provided is:
SELECT*FROMCustomersWHEREState='Arizona';
* SELECT *indicates that all columns from the table should be selected.
* FROM Customersspecifies the table from which to retrieve the data.
* WHERE State = 'Arizona'filters the results to include only those records where the State column has the value 'Arizona'.
* Therefore, the statement returns all records from the Customers table that are located in Arizona.
References:
* SQL SELECT statement documentation: SQL SELECT
* SQL WHERE clause documentation: SQL WHERE

A system requirement that involves preventing unauthorized access to data is aSecurityrequirement. Security requirements ensure that the system:
* Protects data integrity: Ensuring data is accurate and unchanged by unauthorized users.
* Maintains confidentiality: Preventing unauthorized access to sensitive information.
* Ensures availability: Making sure that data and resources are available to authorized users when needed.
Security requirements are critical for safeguarding the system against threats and vulnerabilities.
References
* Dieter Gollmann, "Computer Security," Wiley.
* Ross Anderson, "Security Engineering: A Guide to Building Dependable Distributed Systems," Wiley.