Cybersecurity Architecture and Engineering Exam Preparation Material | WGU Cybersecurity Architecture and Engineering (D488)

Explanation:
Access rights are critical components of access control mechanisms in information security. They specify what actions users or systems can perform on specific resources, limiting them to only permitted items.
Definition: Access rights, also known as permissions, are rules that define the allowed actions on a resource (e.g., read, write, execute).
Implementation: Access rights are typically implemented using Access Control Lists (ACLs), Role-Based Access Control (RBAC), or other access control models.
Purpose: The main goal is to enforce the principle of least privilege, ensuring that users can only access the resources necessary for their role.
Reference
NIST Special Publication 800-53
ISO/IEC 27001: 2013
"Computer Security: Principles and Practice" by William Stallings

Explanation:
The correct answer is C ― Implementation of encryption for all data stored in the system.
WGU Cybersecurity Architecture and Engineering (KFO1 / D488) emphasizes that encrypting data at rest ensures that even if storage systems are compromised, the data remains confidential and secure.
Password changes (A) help secure user accounts but not stored data. Firewall policies (B) and VPNs (D) protect data in transit and access control but not the storage layer itself. Reference Extract from Study Guide:
"Encrypting data at rest ensures that stored data remains confidential and protected from unauthorized access, even if storage devices are compromised."
― WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Data Protection Strategies

Explanation:
Preventing unauthorized access and impersonation during exams or coursework is critical in e-learning platforms. Strong user authentication(e.g., MFA, CAPTCHA, secure login mechanisms) ensures that only authorized users access exams and coursework.
NIST SP 800-63B (Digital Identity Guidelines C Authentication):
“Secure user authentication ensures the identity of individuals accessing sensitive applications, reducing the risk of impersonation and credential misuse.”
Firewall rules and patching are important, but they don't directly address user-level fraud prevention.
WGU Course Alignment:
Domain: Access Control and Identity Management Topic: Secure authentication mechanisms for web platforms

Explanation:
The correct answer is A ― Electronic codebook (ECB).
According to WGU Cybersecurity Architecture and Engineering (KFO1 / D488), ECB mode is the simplest and most basic mode of operation for block ciphers. It encrypts each block of plaintext independently with the same key, but identical plaintext blocks produce identical ciphertext blocks, providing no additional confidentiality beyond the block cipher itself and making patterns visible. CBC (B), CTR (C), and OFB (D) are more secure and avoid patterns.
Reference Extract from Study Guide:
"Electronic Codebook (ECB) mode encrypts each block independently and is simple but reveals patterns when identical plaintext blocks occur, thus offering minimal confidentiality beyond the underlying cipher."
― WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Block Cipher Modes of Operation

Explanation:
DMCA (Digital Millennium Copyright Act)
Purpose: The DMCA makes it illegal to violate copyrights by disseminating digitized material.
The DMCA was enacted in 1998 to address the issues of digital rights management and copyright infringement in the digital age. It provides legal protection to copyright holders against unauthorized copying, sharing, and distribution of their digital works. The legislation criminalizes the production and dissemination of technology, devices, or services intended to circumvent measures that control access to copyrighted works (commonly known as DRM―Digital Rights Management).
DMCA Overview - U.S. Copyright Office
HIPAA (Health Insurance Portability and Accountability Act)
Purpose: Prohibits agencies from distributing an individual's health information without the individual's consent.
HIPAA, enacted in 1996, is designed to protect individuals' medical records and other personal health information. The Privacy Rule under HIPAA sets standards for the protection of health information by health plans, healthcare clearinghouses, and healthcare providers that conduct certain healthcare transactions electronically. It mandates the protection and confidential handling of protected health information (PHI).
Reference: HIPAA Privacy Rule - U.S. Department of Health & Human Services FERPA (Family Educational Rights and Privacy Act)
Purpose: Gives students the right to access their own educational records and prevents schools from distributing student records without permission.
FERPA is a federal law enacted in 1974 that protects the privacy of student education records. It grants parents certain rights with respect to their children's education records, which transfer to the student when they reach 18 years of age or attend a school beyond the high school level. FERPA requires that schools must have written permission from the student or parent to release any information from a student's education record.
Reference: FERPA Regulations - U.S. Department of Education