The correct answer is C - Tampering.
WGU Cybersecurity Architecture and Engineering (KFO1 / D488) materials explain that tampering refers to unauthorized modifications of systems or data. In this case, the website being altered to redirect users to a malicious landing page indicates that an attacker has tampered with the legitimate website code or its DNS settings.
Exfiltration (A) refers to stealing data. Phishing (B) involves tricking users but not modifying a website.
Ransomware (D) encrypts systems for ransom, not cause redirection.
Reference Extract from Study Guide:
"Tampering involves the unauthorized modification of a system or its resources, often to redirect users to malicious destinations or to alter functionality in harmful ways."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Threat Categories and Impacts

The goal in this scenario is tosecure the application against malware and advanced persistent threats (APTs). According to the WGU Cybersecurity Architecture and Engineering (KFO1 / D488) course materials:
* Firewall policiesare critical forcontrolling accessto applications and network resources.
* By implementing astrict firewall policy, you limit access to only trusted and necessary sources, greatly reducing the attack surface available to malware or APT actors.
* While antivirus software (Option C) can help detect malware,APT actors often use sophisticated methodsthat bypass traditional antivirus tools.
* Encryption (Option A) protectsdata confidentialitybutdoes not preventmalware or APTs from attacking the application.
* Strong password policies (Option B) helpwith account securitybutdo not directly addressmalware or APT threats.
Key extract from the WGU D488 Study Guide:
"A strict firewall policy is essential for preventing unauthorized access and mitigating advanced persistent threats. Limiting exposure through segmentation, access control lists, and traffic filtering protects critical assets from external and internal threats." References:
WGU Cybersecurity Architecture and Engineering (KFO1 / D488) - Module: Risk Management Strategies Study Guide Section: "Access Control Mechanisms - Firewalls and Network Segmentation"
#100% WGU verified.#Strict format as you requested.#Precise explanation based on official study material.

The correct answer is A - User and entity behavior analytics (UEBA).
WGU Cybersecurity Architecture and Engineering (KFO1 / D488) explains that UEBA tools analyze patterns of user and entity behavior to detect anomalies that could indicate insider threats, compromised accounts, or advanced persistent threats (APTs). UEBA focuses on deviations from normal activity patterns to identify risks that traditional signature-based systems might miss.
HSMs (B) protect cryptographic keys but do not monitor behavior. Antivirus tools (C) detect known malware but do not perform behavioral analytics. Two-factor authentication (D) secures access but does not detect unusual behavior patterns.
Reference Extract from Study Guide:
"User and entity behavior analytics (UEBA) identifies potential security threats by analyzing deviations from typical user and system activity patterns."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Threat Detection Technologies

The correct answer is C - Integration testing.
According to WGU Cybersecurity Architecture and Engineering (KFO1 / D488), integration testing verifies that different modules or components of an application work together as intended.This type of testing is essential after deployment to ensure the overall system functions correctly across all tiers (e.g., web, application, and database layers).
Static code analysis (A) examines source code without execution. Dynamic code analysis (B) tests running code for vulnerabilities but not necessarily component interaction. Package scanning (D) reviews third-party libraries for vulnerabilities but does not test integration.
Reference Extract from Study Guide:
"Integration testing verifies that multiple components of an application function correctly when combined, ensuring end-to-end system reliability post-deployment."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Secure Software Development and Testing

The correct answer is A - Expiration.
According to WGU Cybersecurity Architecture and Engineering (KFO1 / D488), password expiration policies require users to change their passwords after a certain period, ensuring that long-term credential exposure risk is minimized.
Length (B) defines minimum password size. Recovery (C) relates to resetting forgotten passwords.
Complexity (D) enforces character requirements, not age.
Reference Extract from Study Guide:
"Password expiration policies require users to update passwords regularly, minimizing the risk of long-term credential exposure."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Password Security Best Practices