WGU C838 COMPREHENSIVE ASSESSMENT
FULL QUESTIONS AND ANSWERS
●● Which technique scrambles the content of data using a mathematical
algorithm while keeping the structural arrangement of the data?
Answer: Format-preserving encryption
●● Which encryption technique connects the instance to the encryption
instance that handles all crypto operations?
Answer: Proxy
●● Which type of control should be used to implement custom controls
that safeguard data?
Answer: Application level
●● A cloud administrator recommends using tokenization as an
alternative to protecting data without encryption. The administrator
needs to make an authorized application request to access the data.
Which step should occur immediately before this action is taken?
Answer: The application stores the token
, ●● A company has recently defined classification levels for its data.
During which phase of the cloud data life cycle should this definition
occur?
Answer: Create
●● How is the compliance of the cloud service provider's legal and
regulatory requirements verified when securing personally identifiable
information (PII) data in the cloud?
Answer: Third party audits and attestations
●● Which security strategy is associated with data rights management
solutions?
Answer: Continuous auditing
●● What is a key capability of security information and event
management?
Answer: Centralized collection of big data
●● A security analyst is investigating an incident of access to a resource
from an unauthorized location. Which data source should the security
analyst use to investigate the incident?
Answer: Packet capture file
FULL QUESTIONS AND ANSWERS
●● Which technique scrambles the content of data using a mathematical
algorithm while keeping the structural arrangement of the data?
Answer: Format-preserving encryption
●● Which encryption technique connects the instance to the encryption
instance that handles all crypto operations?
Answer: Proxy
●● Which type of control should be used to implement custom controls
that safeguard data?
Answer: Application level
●● A cloud administrator recommends using tokenization as an
alternative to protecting data without encryption. The administrator
needs to make an authorized application request to access the data.
Which step should occur immediately before this action is taken?
Answer: The application stores the token
, ●● A company has recently defined classification levels for its data.
During which phase of the cloud data life cycle should this definition
occur?
Answer: Create
●● How is the compliance of the cloud service provider's legal and
regulatory requirements verified when securing personally identifiable
information (PII) data in the cloud?
Answer: Third party audits and attestations
●● Which security strategy is associated with data rights management
solutions?
Answer: Continuous auditing
●● What is a key capability of security information and event
management?
Answer: Centralized collection of big data
●● A security analyst is investigating an incident of access to a resource
from an unauthorized location. Which data source should the security
analyst use to investigate the incident?
Answer: Packet capture file
