WGU D419 – Cloud Security Final Prep
Exam (Latest Update 2026/2027) Questions
and Verified Answers | 100% Correct |
Grade A.
1. Which cloud security principle focuses on ensuring that only
authorized users and systems can access cloud resources?
A. Availability
B. Integrity
C. Confidentiality
D. Scalability
Rationale: Confidentiality ensures that information and resources are
accessible only to authorized individuals, preventing unauthorized
disclosure of sensitive cloud data. Availability focuses on uptime,
integrity protects against unauthorized modification, and scalability
concerns resource expansion.
2. A company moves its applications to a public cloud provider. Which
security model defines the division of security responsibilities
between the provider and customer?
A. Zero Trust Architecture
B. Defense-in-depth model
,C. Shared Responsibility Model
D. Security Information and Event Management (SIEM)
Rationale: The Shared Responsibility Model defines which security tasks
belong to the cloud provider and which remain the customer's
responsibility. Providers typically secure the underlying infrastructure,
while customers secure their data, configurations, identities, and
workloads.
3. Which cloud service model provides customers with the greatest
control over operating systems and applications?
A. Software as a Service (SaaS)
B. Platform as a Service (PaaS)
C. Infrastructure as a Service (IaaS)
D. Function as a Service (FaaS)
Rationale: IaaS provides virtualized computing resources such as
servers, storage, and networking. Customers maintain responsibility for
operating systems, applications, and configurations, giving them more
control than SaaS or PaaS.
4. Which security approach assumes that no user or device should
automatically be trusted, even inside the network?
A. Perimeter security
B. Zero Trust Architecture
C. Open access model
D. Implicit trust model
,Rationale: Zero Trust Architecture follows the principle of "never trust,
always verify." Every access request must be authenticated and
authorized regardless of location or network position.
5. Which cloud security control is primarily used to verify a user's
identity before granting access?
A. Encryption
B. Logging
C. Authentication
D. Data masking
Rationale: Authentication verifies who a user or system claims to be.
Authorization determines what permissions they have after
authentication is completed.
6. A cloud administrator grants users only the permissions required to
complete their assigned tasks. Which security principle is being
applied?
A. Separation of duties
B. Defense in depth
C. Least privilege
D. Fail-open security
Rationale: Least privilege reduces security risk by ensuring users receive
only the minimum permissions necessary. This limits damage from
compromised accounts or accidental misuse.
, 7. Which technology is commonly used to encrypt data stored in cloud
databases and storage services?
A. Load balancing
B. Encryption at rest
C. Network segmentation
D. Vulnerability scanning
Rationale: Encryption at rest protects stored data by converting it into
unreadable ciphertext. Even if storage media is compromised, attackers
cannot easily access the information without encryption keys.
8. Which cloud security practice protects data while it travels between
systems?
A. Data classification
B. Encryption at rest
C. Encryption in transit
D. Identity federation
Rationale: Encryption in transit protects information moving across
networks using protocols such as TLS. Encryption at rest protects stored
data rather than transmitted data.
9. Which component is responsible for creating, storing, and
controlling encryption keys in a cloud environment?
A. Virtual Private Cloud (VPC)
B. Security group
Exam (Latest Update 2026/2027) Questions
and Verified Answers | 100% Correct |
Grade A.
1. Which cloud security principle focuses on ensuring that only
authorized users and systems can access cloud resources?
A. Availability
B. Integrity
C. Confidentiality
D. Scalability
Rationale: Confidentiality ensures that information and resources are
accessible only to authorized individuals, preventing unauthorized
disclosure of sensitive cloud data. Availability focuses on uptime,
integrity protects against unauthorized modification, and scalability
concerns resource expansion.
2. A company moves its applications to a public cloud provider. Which
security model defines the division of security responsibilities
between the provider and customer?
A. Zero Trust Architecture
B. Defense-in-depth model
,C. Shared Responsibility Model
D. Security Information and Event Management (SIEM)
Rationale: The Shared Responsibility Model defines which security tasks
belong to the cloud provider and which remain the customer's
responsibility. Providers typically secure the underlying infrastructure,
while customers secure their data, configurations, identities, and
workloads.
3. Which cloud service model provides customers with the greatest
control over operating systems and applications?
A. Software as a Service (SaaS)
B. Platform as a Service (PaaS)
C. Infrastructure as a Service (IaaS)
D. Function as a Service (FaaS)
Rationale: IaaS provides virtualized computing resources such as
servers, storage, and networking. Customers maintain responsibility for
operating systems, applications, and configurations, giving them more
control than SaaS or PaaS.
4. Which security approach assumes that no user or device should
automatically be trusted, even inside the network?
A. Perimeter security
B. Zero Trust Architecture
C. Open access model
D. Implicit trust model
,Rationale: Zero Trust Architecture follows the principle of "never trust,
always verify." Every access request must be authenticated and
authorized regardless of location or network position.
5. Which cloud security control is primarily used to verify a user's
identity before granting access?
A. Encryption
B. Logging
C. Authentication
D. Data masking
Rationale: Authentication verifies who a user or system claims to be.
Authorization determines what permissions they have after
authentication is completed.
6. A cloud administrator grants users only the permissions required to
complete their assigned tasks. Which security principle is being
applied?
A. Separation of duties
B. Defense in depth
C. Least privilege
D. Fail-open security
Rationale: Least privilege reduces security risk by ensuring users receive
only the minimum permissions necessary. This limits damage from
compromised accounts or accidental misuse.
, 7. Which technology is commonly used to encrypt data stored in cloud
databases and storage services?
A. Load balancing
B. Encryption at rest
C. Network segmentation
D. Vulnerability scanning
Rationale: Encryption at rest protects stored data by converting it into
unreadable ciphertext. Even if storage media is compromised, attackers
cannot easily access the information without encryption keys.
8. Which cloud security practice protects data while it travels between
systems?
A. Data classification
B. Encryption at rest
C. Encryption in transit
D. Identity federation
Rationale: Encryption in transit protects information moving across
networks using protocols such as TLS. Encryption at rest protects stored
data rather than transmitted data.
9. Which component is responsible for creating, storing, and
controlling encryption keys in a cloud environment?
A. Virtual Private Cloud (VPC)
B. Security group
