TheCentral Processing Unit (CPU)is the primary component of a computer that performs most of the processing inside a computer.
Carrying out the instructions of a computer program: The CPU executes program instructions, which are the basic tasks that tell the computer what to do.
Containing an arithmetic logic unit (ALU): The ALU performs all arithmetic and logic operations, such as addition, subtraction, and comparison.
The CPU also manages data flow between the computer's other components.
It fetches instructions from memory, decodes them, and then executes them, which involves performing calculations and making decisions.
References:
"Computer Organization and Design: The Hardware/Software Interface" by David A. Patterson and John L.
Hennessy.
"Modern Processor Design: Fundamentals of Superscalar Processors" by John Paul Shen and Mikko H.
Lipasti.

The correct answer is D - Implementation of multifactor authentication for all user accounts.
According to WGU Cybersecurity Architecture and Engineering (KFO1 / D488), multifactor authentication (MFA) strengthens identity verification by requiring multiple forms of credentials, significantly reducing the risk of identity theft.
Firewalls (A) and USB port controls (B) improve system security but do not directly prevent identity theft.
Vulnerability scanning and patch management (C) address software weaknesses but not user authentication.
Reference Extract from Study Guide:
"Multifactor authentication (MFA) enhances user account security by requiring multiple verification factors, making it significantly harder for attackers to commit identity theft."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Identity and Access Management Best Practices

Abastion scanneris a tool or hardened system that inspects network traffic and identifies security vulnerabilities, particularly those visible from an external (internet-facing) viewpoint. It plays a key role inpost-development assessment.
OWASP Testing Guide v4.2:
"Use bastion hosts or hardened scanners to perform vulnerability assessments from an attacker's perspective." This option is preferable for final validation before system release, especially when looking for exposure from the public internet.
#WGU Course Alignment:
Domain:System Security Engineering
Topic:Evaluate hardened systems and scanning tools during release validation

The correct answer is D - Configuring third-party authentication with Security Assertion Markup Language (SAML).
According to the WGU KFO1 / D488 Study Guide, SAML enables Single Sign-On (SSO) and federated identity across different domains by securely exchanging authentication and authorization data between an identity provider (such as an organization's Active Directory Federation Services) and a service provider (such as Azure). This allows on-premises users to log into cloud services using their existing corporate credentials.
TLS (A) provides secure communication but does not manage identity federation. 2FA (B) strengthens authentication but is not about identity federation setup. LDAP (C) is a protocol for accessing directory services, not specifically designed for federation across cloud platforms.
Reference Extract from Study Guide:
"SAML is used to implement Single Sign-On (SSO) and federated identity management, allowing organizations to extend on-premises authentication capabilities to cloud services seamlessly."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Identity and Access Management Concepts

The correct answer is B - Mandatory vacation.
According to the WGU Cybersecurity Architecture and Engineering (KFO1 / D488) coursework, mandatory vacation policies require employees to take time off, during which their duties are either paused or performed by others. This break can reveal fraudulent activities, as the original employee cannot cover up their misconduct during their absence.
Separation of duties (A) prevents a single person from controlling critical processes but is not about temporarily removing an employee. Job rotation (C) moves employees between rolesregularly but doesn't enforce a break. Least privilege (D) restricts access but does not address uncovering hidden misconduct.
Reference Extract from Study Guide:
"Mandatory vacations help detect fraudulent activities, as employee absence can expose irregularities that would otherwise remain hidden through continuous control over processes."
- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Administrative Security Controls