1|Page
WGU D320 MANAGING CLOUD SECURITY EXAMS NEWEST
2026 PACKAGE DEAL| DIFFERENT VERSIONS WITH COMPLETE
REAL EXAM QUESTIONS AND CORRECT DETAILED ANSWERS
(VERIFIED ANSWERS) ALREADY GRADED A | WGU D320 EXAM
PREP (MOST RECENT!!)
1. A multinational organization is migrating its customer relationship
management (CRM) application from an on-premises data center to a
public cloud environment. Before migration, the security architect
reminds the project team that security responsibilities will be shared
between the cloud provider and the customer. Which statement best
describes the cloud shared responsibility model?
A. The cloud provider is responsible for securing the cloud
infrastructure, while the customer is responsible for securing its data,
identities, applications, and configurations based on the cloud service
model.
B. The cloud provider is responsible for every aspect of security,
including customer passwords and application configurations.
C. The customer is responsible for securing all physical servers,
networking hardware, and cloud facilities.
D. Security responsibilities are identical for Infrastructure as a Service
(IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS).
Answer: A
Rationale: Under the shared responsibility model, cloud providers
secure the underlying infrastructure while customers remain
responsible for protecting their workloads, identities, configurations,
and data.
,2|Page
2. A company deploys several virtual machines within a cloud
environment. The system administrator must configure operating
system patches, install security updates, manage firewalls inside the
virtual machines, and secure application software. Which cloud service
model is the company most likely using?
A. Software as a Service (SaaS)
B. Platform as a Service (PaaS)
C. Infrastructure as a Service (IaaS)
D. Function as a Service (FaaS)
Answer: C
Rationale: In IaaS, customers manage the operating systems,
applications, and security configurations while the provider manages
the physical infrastructure.
3. A cloud security engineer wants to ensure that employees can access
only the cloud resources required to perform their assigned job
responsibilities and nothing more. Which security principle should be
implemented?
A. Principle of Least Privilege
B. Open Access
C. Mandatory Public Access
D. Shared Administrative Rights
Answer: A
,3|Page
Rationale: The Principle of Least Privilege limits user permissions to
only what is necessary, reducing the risk of unauthorized access.
4. An organization stores confidential customer information in cloud
storage. Management wants to ensure that the information cannot be
read by unauthorized individuals whether it is stored on cloud disks or
transmitted across the Internet. Which security controls should be
implemented?
A. Encryption of data at rest and data in transit
B. File compression only
C. Data deduplication only
D. Network load balancing
Answer: A
Rationale: Encrypting data both at rest and in transit protects
confidentiality against unauthorized access.
5. A security administrator requires every employee accessing cloud
resources to provide both a password and a temporary verification code
generated on a mobile authentication application. Which security
mechanism is being implemented?
A. Single Sign-On (SSO)
B. Multifactor Authentication (MFA)
C. Federated Identity Only
D. Password Synchronization
Answer: B
, 4|Page
Rationale: MFA strengthens authentication by requiring two or more
independent forms of verification.
6. A cloud administrator discovers that a storage bucket containing
confidential financial documents has accidentally been configured for
unrestricted public access. Which cloud security concept was violated?
A. Confidentiality
B. Availability
C. Scalability
D. Elasticity
Answer: A
Rationale: Public access to confidential information compromises
confidentiality by exposing sensitive data to unauthorized users.
7. A cloud security analyst reviews system activity logs and notices
repeated failed login attempts from multiple countries against
privileged administrator accounts. Which security capability is most
useful for identifying and investigating this suspicious activity?
A. Log monitoring and Security Information and Event Management
(SIEM)
B. Data compression
C. Load balancing
D. Resource auto-scaling
Answer: A
WGU D320 MANAGING CLOUD SECURITY EXAMS NEWEST
2026 PACKAGE DEAL| DIFFERENT VERSIONS WITH COMPLETE
REAL EXAM QUESTIONS AND CORRECT DETAILED ANSWERS
(VERIFIED ANSWERS) ALREADY GRADED A | WGU D320 EXAM
PREP (MOST RECENT!!)
1. A multinational organization is migrating its customer relationship
management (CRM) application from an on-premises data center to a
public cloud environment. Before migration, the security architect
reminds the project team that security responsibilities will be shared
between the cloud provider and the customer. Which statement best
describes the cloud shared responsibility model?
A. The cloud provider is responsible for securing the cloud
infrastructure, while the customer is responsible for securing its data,
identities, applications, and configurations based on the cloud service
model.
B. The cloud provider is responsible for every aspect of security,
including customer passwords and application configurations.
C. The customer is responsible for securing all physical servers,
networking hardware, and cloud facilities.
D. Security responsibilities are identical for Infrastructure as a Service
(IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS).
Answer: A
Rationale: Under the shared responsibility model, cloud providers
secure the underlying infrastructure while customers remain
responsible for protecting their workloads, identities, configurations,
and data.
,2|Page
2. A company deploys several virtual machines within a cloud
environment. The system administrator must configure operating
system patches, install security updates, manage firewalls inside the
virtual machines, and secure application software. Which cloud service
model is the company most likely using?
A. Software as a Service (SaaS)
B. Platform as a Service (PaaS)
C. Infrastructure as a Service (IaaS)
D. Function as a Service (FaaS)
Answer: C
Rationale: In IaaS, customers manage the operating systems,
applications, and security configurations while the provider manages
the physical infrastructure.
3. A cloud security engineer wants to ensure that employees can access
only the cloud resources required to perform their assigned job
responsibilities and nothing more. Which security principle should be
implemented?
A. Principle of Least Privilege
B. Open Access
C. Mandatory Public Access
D. Shared Administrative Rights
Answer: A
,3|Page
Rationale: The Principle of Least Privilege limits user permissions to
only what is necessary, reducing the risk of unauthorized access.
4. An organization stores confidential customer information in cloud
storage. Management wants to ensure that the information cannot be
read by unauthorized individuals whether it is stored on cloud disks or
transmitted across the Internet. Which security controls should be
implemented?
A. Encryption of data at rest and data in transit
B. File compression only
C. Data deduplication only
D. Network load balancing
Answer: A
Rationale: Encrypting data both at rest and in transit protects
confidentiality against unauthorized access.
5. A security administrator requires every employee accessing cloud
resources to provide both a password and a temporary verification code
generated on a mobile authentication application. Which security
mechanism is being implemented?
A. Single Sign-On (SSO)
B. Multifactor Authentication (MFA)
C. Federated Identity Only
D. Password Synchronization
Answer: B
, 4|Page
Rationale: MFA strengthens authentication by requiring two or more
independent forms of verification.
6. A cloud administrator discovers that a storage bucket containing
confidential financial documents has accidentally been configured for
unrestricted public access. Which cloud security concept was violated?
A. Confidentiality
B. Availability
C. Scalability
D. Elasticity
Answer: A
Rationale: Public access to confidential information compromises
confidentiality by exposing sensitive data to unauthorized users.
7. A cloud security analyst reviews system activity logs and notices
repeated failed login attempts from multiple countries against
privileged administrator accounts. Which security capability is most
useful for identifying and investigating this suspicious activity?
A. Log monitoring and Security Information and Event Management
(SIEM)
B. Data compression
C. Load balancing
D. Resource auto-scaling
Answer: A
