WGU MANAGING CLOUD SECURITY JY02 PRACTICE
EXAMINATION 100 QUESTIONS WITH CORRECT
ANSWERS AND RATIONALES PLUS 2026-2027 Q&A A+
GRADE GUARANTEED INSTANT DOWNLOAD PDF!!
Question 1
A security team needs to ensure that only authorized users can access a cloud-based
application, and all login attempts must be logged. Which security control is MOST appropriate?
A) Network ACL
B) Identity and Access Management (IAM) with MFA
C) Security Group rules
D) Load balancer configuration
Rationale: IAM controls access to cloud resources and, when combined with MFA, provides
strong authentication. IAM with MFA ensures only authorized users can access the application
and provides logging of authentication attempts.
Question 2
Which of the following BEST helps detect abnormal behavior or suspicious activities across
cloud resources?
A) Autoscaling
B) Cloud Monitoring and Log Analytics
C) Object Storage Lifecycle Policies
D) Snapshot Backups
Rationale: Cloud monitoring and log analytics enable real-time visibility into cloud
environments, detecting anomalies and suspicious behavior through log analysis and alerting.
Question 3
An organization needs to protect sensitive data stored in the cloud. Which method provides the
strongest layer of security?
,A) Encrypting data at rest and in transit
B) Keeping data only in private subnets
C) Restricting access using a firewall
D) Using default provider settings
Rationale: Encryption provides the strongest data protection by rendering data unreadable
without proper keys. Encrypting data both at rest and in transit ensures comprehensive
protection throughout the data lifecycle.
Question 4
The management plane is used to administer a cloud environment and perform administrative
tasks across a variety of systems, but most specifically it's used with the hypervisors. What does
the management plane typically leverage for this orchestration?
A) APIs
B) Scripts
C) TLS
D) XML
Rationale: The management plane uses APIs to execute remote calls across the cloud
environment to various management systems, especially hypervisors. This allows a centralized
administrative interface to orchestrate tasks throughout an enterprise.
Question 5
When dealing with PII, which category pertains to those requirements that can carry legal
sanctions or penalties for failure to adequately safeguard the data and address compliance
requirements?
A) Contractual
B) Jurisdictional
C) Regulated
D) Legal
Rationale: Regulated PII pertains to data outlined in law and regulations. Violations of
requirements for regulated PII can carry legal sanctions or penalties. Contractual PII involves
data protection determined by service contracts, not law.
Question 6
Although the United States does not have a single, comprehensive privacy and regulatory
framework, a number of specific regulations pertain to types of data or populations. Which of
the following is NOT a regulatory system from the United States federal government?
,A) HIPAA
B) SOX
C) FISMA
D) PCI DSS
Rationale: PCI DSS (Payment Card Industry Data Security Standard) pertains to organizations
handling credit card transactions and is an industry-regulatory standard, not a governmental
one. HIPAA, SOX, and FISMA are all federal government regulations.
Question 7
The president of your company has tasked you with implementing cloud services as the most
efficient way of obtaining a robust disaster recovery configuration for your production services.
Which of the cloud deployment models would you MOST likely be exploring?
A) Hybrid
B) Private
C) Community
D) Public
Rationale: A hybrid cloud model spans two or more different hosting configurations or cloud
providers. This enables an organization to continue using its current hosting configuration while
adding additional cloud services to enable disaster recovery capabilities.
Question 8
If you are running an application that has strict legal requirements that the data cannot reside
on systems that contain other applications or systems, which aspect of cloud computing would
be prohibitive in this case?
A) Multitenancy
B) Broad network access
C) Portability
D) Elasticity
Rationale: Multitenancy involves having multiple customers and their applications sharing the
same underlying infrastructure. This would violate the requirement that data cannot reside on
systems containing other applications.
Question 9
Which U.S. standard is used by federal government agencies to manage enterprise risk?
, A) ISO 37500
B) SSAE 18
C) COSO
D) NIST SP 800-37
Rationale: Federal agencies rely on NIST SP 800-37, the Risk Management Framework (RMF), to
manage enterprise risk. RMF provides a structured process for categorizing systems, selecting
controls, and continuous monitoring.
Question 10
An organization is considering a cloud provider that has multivendor pathway connectivity.
What does this feature provide?
A) Multiple electric providers
B) Multiple fuel vendors
C) Multiple HVAC contracts
D) Multiple internet service providers
Rationale: Multivendor pathway connectivity refers to a cloud provider's ability to maintain
connections with multiple internet service providers (ISPs). This ensures redundancy and reduces
the risk of outages due to a single ISP failure.
Question 11
Which role in cloud computing provides products or services that interact with the primary
offering of a cloud service provider?
A) Customer
B) Cloud service partner
C) Regulator
D) Developer
Rationale: A cloud service partner offers products or services that enhance or interact with the
primary cloud provider's offerings. Examples include managed service providers, value-added
resellers, or software vendors that integrate solutions with the core infrastructure.
Question 12
A customer requests that a cloud provider physically destroy any drives storing their personal
data. What must the provider do with the drives?
A) Perform cryptographic erasure
B) Degauss the drives
EXAMINATION 100 QUESTIONS WITH CORRECT
ANSWERS AND RATIONALES PLUS 2026-2027 Q&A A+
GRADE GUARANTEED INSTANT DOWNLOAD PDF!!
Question 1
A security team needs to ensure that only authorized users can access a cloud-based
application, and all login attempts must be logged. Which security control is MOST appropriate?
A) Network ACL
B) Identity and Access Management (IAM) with MFA
C) Security Group rules
D) Load balancer configuration
Rationale: IAM controls access to cloud resources and, when combined with MFA, provides
strong authentication. IAM with MFA ensures only authorized users can access the application
and provides logging of authentication attempts.
Question 2
Which of the following BEST helps detect abnormal behavior or suspicious activities across
cloud resources?
A) Autoscaling
B) Cloud Monitoring and Log Analytics
C) Object Storage Lifecycle Policies
D) Snapshot Backups
Rationale: Cloud monitoring and log analytics enable real-time visibility into cloud
environments, detecting anomalies and suspicious behavior through log analysis and alerting.
Question 3
An organization needs to protect sensitive data stored in the cloud. Which method provides the
strongest layer of security?
,A) Encrypting data at rest and in transit
B) Keeping data only in private subnets
C) Restricting access using a firewall
D) Using default provider settings
Rationale: Encryption provides the strongest data protection by rendering data unreadable
without proper keys. Encrypting data both at rest and in transit ensures comprehensive
protection throughout the data lifecycle.
Question 4
The management plane is used to administer a cloud environment and perform administrative
tasks across a variety of systems, but most specifically it's used with the hypervisors. What does
the management plane typically leverage for this orchestration?
A) APIs
B) Scripts
C) TLS
D) XML
Rationale: The management plane uses APIs to execute remote calls across the cloud
environment to various management systems, especially hypervisors. This allows a centralized
administrative interface to orchestrate tasks throughout an enterprise.
Question 5
When dealing with PII, which category pertains to those requirements that can carry legal
sanctions or penalties for failure to adequately safeguard the data and address compliance
requirements?
A) Contractual
B) Jurisdictional
C) Regulated
D) Legal
Rationale: Regulated PII pertains to data outlined in law and regulations. Violations of
requirements for regulated PII can carry legal sanctions or penalties. Contractual PII involves
data protection determined by service contracts, not law.
Question 6
Although the United States does not have a single, comprehensive privacy and regulatory
framework, a number of specific regulations pertain to types of data or populations. Which of
the following is NOT a regulatory system from the United States federal government?
,A) HIPAA
B) SOX
C) FISMA
D) PCI DSS
Rationale: PCI DSS (Payment Card Industry Data Security Standard) pertains to organizations
handling credit card transactions and is an industry-regulatory standard, not a governmental
one. HIPAA, SOX, and FISMA are all federal government regulations.
Question 7
The president of your company has tasked you with implementing cloud services as the most
efficient way of obtaining a robust disaster recovery configuration for your production services.
Which of the cloud deployment models would you MOST likely be exploring?
A) Hybrid
B) Private
C) Community
D) Public
Rationale: A hybrid cloud model spans two or more different hosting configurations or cloud
providers. This enables an organization to continue using its current hosting configuration while
adding additional cloud services to enable disaster recovery capabilities.
Question 8
If you are running an application that has strict legal requirements that the data cannot reside
on systems that contain other applications or systems, which aspect of cloud computing would
be prohibitive in this case?
A) Multitenancy
B) Broad network access
C) Portability
D) Elasticity
Rationale: Multitenancy involves having multiple customers and their applications sharing the
same underlying infrastructure. This would violate the requirement that data cannot reside on
systems containing other applications.
Question 9
Which U.S. standard is used by federal government agencies to manage enterprise risk?
, A) ISO 37500
B) SSAE 18
C) COSO
D) NIST SP 800-37
Rationale: Federal agencies rely on NIST SP 800-37, the Risk Management Framework (RMF), to
manage enterprise risk. RMF provides a structured process for categorizing systems, selecting
controls, and continuous monitoring.
Question 10
An organization is considering a cloud provider that has multivendor pathway connectivity.
What does this feature provide?
A) Multiple electric providers
B) Multiple fuel vendors
C) Multiple HVAC contracts
D) Multiple internet service providers
Rationale: Multivendor pathway connectivity refers to a cloud provider's ability to maintain
connections with multiple internet service providers (ISPs). This ensures redundancy and reduces
the risk of outages due to a single ISP failure.
Question 11
Which role in cloud computing provides products or services that interact with the primary
offering of a cloud service provider?
A) Customer
B) Cloud service partner
C) Regulator
D) Developer
Rationale: A cloud service partner offers products or services that enhance or interact with the
primary cloud provider's offerings. Examples include managed service providers, value-added
resellers, or software vendors that integrate solutions with the core infrastructure.
Question 12
A customer requests that a cloud provider physically destroy any drives storing their personal
data. What must the provider do with the drives?
A) Perform cryptographic erasure
B) Degauss the drives
