The correct answer is A - Virtual private network (VPN).
According to WGU Cybersecurity Architecture and Engineering (KFO1 / D488), a VPN creates an encrypted tunnel over public or private networks, ensuring confidentiality, integrity, and authentication of data transmitted between geographically dispersed offices.
SIEM (B) manages security events, not secure communications. PPTP (C) is an outdated and insecure VPN protocol. NAC (D) enforces endpoint security but does not establish secure tunnels.
Reference Extract from Study Guide:
"A virtual private network (VPN) provides a secure, encrypted tunnel between geographically separated networks, enabling confidential communication over untrusted networks."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Secure Remote Access Technologies

The correct answer is D - Containerization.
WGU Cybersecurity Architecture and Engineering (KFO1 / D488) material states that containerization provides isolated environments (containers) where applications can be developed, tested, and deployed securely. This isolation minimizes the risk of vulnerabilities affecting the host system or other applications, improving the overall security of the development process.
DLP (A) prevents data leakage but does not isolate applications. VPNs (B) secure network traffic but do not create isolated development environments. Firewalls (C) control network traffic but do not manage application-level isolation.
Reference Extract from Study Guide:
"Containerization secures application development and deployment by isolating applications in lightweight, standalone environments, reducing risk and improving manageability."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Application Security Concepts

Logging and monitoringendpoint activity enables early detection of unauthorized access, suspicious file changes, or user behavior anomalies that may indicate an insider threat or external breach.
NIST SP 800-137 (Information Security Continuous Monitoring):
"Endpoint logging and behavior monitoring are essential for detecting unauthorized access to sensitive information, especially in healthcare environments governed by HIPAA." This control supportsreal-time alerting,incident response, andcompliance auditingfor patient data (ePHI).
#WGU Course Alignment:
Domain:System Security Engineering
Topic:Implement endpoint monitoring and logging for healthcare compliance (e.g., HIPAA)

The correct answer is D - Open Authorization (OAuth).
According to the WGU Cybersecurity Architecture and Engineering (KFO1 / D488) Study Guide, OAuth is the standard protocol used for authorizing access to third-party applications without revealing user credentials.
It allows users to log in using social identity providers like Google, Facebook, or LinkedIn, which is perfect for external customers and contractors accessing a mobile application. OAuth is designed for modern applications requiring delegated access.
SAML (A) is generally used for enterprise single sign-on (SSO) solutions, primarily for internal enterprise authentication, not social login. Kerberos (B) is used within controlled internal network environments for authentication. LDAP (C) is a directory access protocol, not an authorization protocol for third-party sign-in.
Reference Extract from Study Guide:
"OAuth enables users to grant a third-party application limited access to their resources withoutexposing their credentials, making it ideal for mobile and web applications involving external users."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Authentication and Authorization Concepts

* Packet sniffing is a technique used to capture and analyze network traffic, which can include intercepting passwords while they are in transit.
* When data packets are transmitted over a network, a packet sniffer can capture these packets, and if they are not encrypted, it can read sensitive information like passwords.
* The other options:
* Buffer overflow is a type of attack that exploits a program's memory handling.
* Phishing is a social engineering attack to deceive users into providing sensitive information.
* Black hat refers to a hacker with malicious intent, not a specific technique.
* Therefore, packet sniffing is the correct technique for obtaining passwords in transit.
References:
* "Network Security Essentials: Applications and Standards" by William Stallings, which explains packet sniffing and network security threats.
* "Computer Security: Principles and Practice" by William Stallings and Lawrie Brown, which covers network attack techniques including packet sniffing.