WGU D485 CLOUD SECURITY EXAM
SCRIPT COMPLETE QUESTIONS AND
CORRECT ANSWERS GRADED A+
◉ What is the SOC 3 report used for?
Answer: What report type is designed to be shared with the public
and offers a seal of approval?
It does not contain any actual data about the security controls of
the audit target.
◉ What is the Secure Logical Framework a part of?
Answer: What is a part of the Operating Requirements?
◉ What should be done to Data when it is at rest?
Answer: What should be encrypted when at rest?
◉ What method was created by Microsoft to describe threats by
their attributes?
Answer: What is the STRIDE Method?
S. Spoofing
T. Tampering
,R. Repudiation
I. Information Disclosure
D. Denial of Service
E. Elevation of Privilege
◉ What is the Industry Standard for uptime?
Answer: What is the 5 9's 99.9999%?
◉ Tiers according to the Uptime Institue (UI)?
Answer: What does these items form?
1. Tier 1
2. Tier 2
3. Tier 3
4. Tier 4
◉ What is required by UI Tier 1?
Answer: What requires these items?
1. UPS
2. Sufficient Cooling
3. Power Generator w. minimum 12 hrs of fuel
* WILL CAUSE DOWNTIME
, ◉ What is required by UI Tier 2?
Answer: What requires these conditions?
1. Critical operations do not have to be interrupted for scheduled
replacement or downtime.
* MAY CAUSE DOWNTIME.
◉ What is required by UI Tier 3?
Answer: What requires these items?
1. Dual Power Supplies for ALL IT systems.
* Can continue with a single component or power element.
◉ What is required by UI Tier 4?
Answer: What requires redundancy of both IT and electrical
systems?
◉ What category is Initial Training in?
Answer: What is a part of the Security Training delivery category?
◉ What is the Electronic Communications Privacy Act (ECPA)?
SCRIPT COMPLETE QUESTIONS AND
CORRECT ANSWERS GRADED A+
◉ What is the SOC 3 report used for?
Answer: What report type is designed to be shared with the public
and offers a seal of approval?
It does not contain any actual data about the security controls of
the audit target.
◉ What is the Secure Logical Framework a part of?
Answer: What is a part of the Operating Requirements?
◉ What should be done to Data when it is at rest?
Answer: What should be encrypted when at rest?
◉ What method was created by Microsoft to describe threats by
their attributes?
Answer: What is the STRIDE Method?
S. Spoofing
T. Tampering
,R. Repudiation
I. Information Disclosure
D. Denial of Service
E. Elevation of Privilege
◉ What is the Industry Standard for uptime?
Answer: What is the 5 9's 99.9999%?
◉ Tiers according to the Uptime Institue (UI)?
Answer: What does these items form?
1. Tier 1
2. Tier 2
3. Tier 3
4. Tier 4
◉ What is required by UI Tier 1?
Answer: What requires these items?
1. UPS
2. Sufficient Cooling
3. Power Generator w. minimum 12 hrs of fuel
* WILL CAUSE DOWNTIME
, ◉ What is required by UI Tier 2?
Answer: What requires these conditions?
1. Critical operations do not have to be interrupted for scheduled
replacement or downtime.
* MAY CAUSE DOWNTIME.
◉ What is required by UI Tier 3?
Answer: What requires these items?
1. Dual Power Supplies for ALL IT systems.
* Can continue with a single component or power element.
◉ What is required by UI Tier 4?
Answer: What requires redundancy of both IT and electrical
systems?
◉ What category is Initial Training in?
Answer: What is a part of the Security Training delivery category?
◉ What is the Electronic Communications Privacy Act (ECPA)?
