WGU D320 OBJECTIVE ASSESSMENT V1 & V2
NEWEST 2026/ 2027 TEST BANK| D320 MANAGING
CLOUD SECURITY OA EXAM WITH COMPLETE
REAL EXAM QUESTIONS AND CORRECT VERIFIED
ANSWERS/ ALREADY GRADED A+ (MOST RECENT!!)
D320 MANAGING CLOUD SECURITY OA V1.
Which of the following would not be an appropriate limitation to be
included as an audit restriction?
A) Types of invasive testing
B) Names of auditors
C) Length of audit report
D) Devices of auditors – Correct Answer - C
Which of the following is not a regulatory system from the United States
federal government?
A) HIPAA
B) FISMA
C) SOX
D) PCI DSS – Correct Answer - D
Which type of security testing could also be used to verify some aspects
of software licensing compliance?
A) SCA (Software Composition Analysis)
B) Abuse case testing
pg. 1
,C) RASP
D) DAST – Correct Answer - A
What type of host is exposed to the public Internet for a specific reason
and hardened to perform only that function for authorized users?
A) Honeypot
B) Bastion
C) Proxy
D) WAF – Correct Answer - B
Which of the following is considered an internal redundancy for a data
center?
A) Power distribution units
B) Power substations
C) Network circuits
D) Generators – Correct Answer - A
What type of network model combines the storage and IP-based traffic
into a single virtualized design?
A) Combined
B) Concurrent
C) Cooperative
D) Converged – Correct Answer - D
Which storage type of PaaS would be used for website files or
multimedia objects?
pg. 2
,A) Object
B) Unstructured
C) Volume
D) Structured – Correct Answer - B
Which format is the most commonly used standard for exchanging
information within a federated identity system?
A) XML
B) SAML
C) HTML
D) JSON – Correct Answer - B
With software-defined networking, what aspect of networking is
abstracted from the forwarding of traffic?
A) Routing
B) Session
C) Filtering
D) Firewalling – Correct Answer - C
Which of the following roles is responsible for the creation of cloud
components and the testing and validation of services?
A) Cloud service broker
B) Cloud auditor
C) Inter-cloud provider
D) Cloud service developer – Correct Answer - D
pg. 3
, Which of the cloud deployment models offers the easiest initial setup
and access for the cloud customer?
A) Public
B) Community
C) Hybrid
D) Private – Correct Answer - A
Which publication from the United States National Institute of Standards
and Technology pertains to defining cloud concepts and definitions for
the various core components of cloud computing?
A) SP 800-40
B) SP 800-53
C) SP 800-153
D) SP 800-145 – Correct Answer - D
Which of the following is not a type of artificial intelligence as it
pertains to cloud-computing?
A) Humanized
B) Regression-adaptive
C) Human-inspired
D) Analytical – Correct Answer - B
Within a federated identity system, to whom does the identity provider
send information after a successful authentication?
A) Service originator
B) Service relay
pg. 4
NEWEST 2026/ 2027 TEST BANK| D320 MANAGING
CLOUD SECURITY OA EXAM WITH COMPLETE
REAL EXAM QUESTIONS AND CORRECT VERIFIED
ANSWERS/ ALREADY GRADED A+ (MOST RECENT!!)
D320 MANAGING CLOUD SECURITY OA V1.
Which of the following would not be an appropriate limitation to be
included as an audit restriction?
A) Types of invasive testing
B) Names of auditors
C) Length of audit report
D) Devices of auditors – Correct Answer - C
Which of the following is not a regulatory system from the United States
federal government?
A) HIPAA
B) FISMA
C) SOX
D) PCI DSS – Correct Answer - D
Which type of security testing could also be used to verify some aspects
of software licensing compliance?
A) SCA (Software Composition Analysis)
B) Abuse case testing
pg. 1
,C) RASP
D) DAST – Correct Answer - A
What type of host is exposed to the public Internet for a specific reason
and hardened to perform only that function for authorized users?
A) Honeypot
B) Bastion
C) Proxy
D) WAF – Correct Answer - B
Which of the following is considered an internal redundancy for a data
center?
A) Power distribution units
B) Power substations
C) Network circuits
D) Generators – Correct Answer - A
What type of network model combines the storage and IP-based traffic
into a single virtualized design?
A) Combined
B) Concurrent
C) Cooperative
D) Converged – Correct Answer - D
Which storage type of PaaS would be used for website files or
multimedia objects?
pg. 2
,A) Object
B) Unstructured
C) Volume
D) Structured – Correct Answer - B
Which format is the most commonly used standard for exchanging
information within a federated identity system?
A) XML
B) SAML
C) HTML
D) JSON – Correct Answer - B
With software-defined networking, what aspect of networking is
abstracted from the forwarding of traffic?
A) Routing
B) Session
C) Filtering
D) Firewalling – Correct Answer - C
Which of the following roles is responsible for the creation of cloud
components and the testing and validation of services?
A) Cloud service broker
B) Cloud auditor
C) Inter-cloud provider
D) Cloud service developer – Correct Answer - D
pg. 3
, Which of the cloud deployment models offers the easiest initial setup
and access for the cloud customer?
A) Public
B) Community
C) Hybrid
D) Private – Correct Answer - A
Which publication from the United States National Institute of Standards
and Technology pertains to defining cloud concepts and definitions for
the various core components of cloud computing?
A) SP 800-40
B) SP 800-53
C) SP 800-153
D) SP 800-145 – Correct Answer - D
Which of the following is not a type of artificial intelligence as it
pertains to cloud-computing?
A) Humanized
B) Regression-adaptive
C) Human-inspired
D) Analytical – Correct Answer - B
Within a federated identity system, to whom does the identity provider
send information after a successful authentication?
A) Service originator
B) Service relay
pg. 4
