WGU D320 CLOUD SECURITY OA EXAM
2024 -2025 ACTUAL EXAM 2 VERSIONS
(VERSION A AND B) COMPLETE 450
QUESTIONS WITH DETAILED VERIFIED
ANSWERS AND RATIONALES /ALREADY
GRADED A+
VERSION A
A project manager is working on a new software
project for a customer. The project manager works
closely with the customer to get input on the desired
features and ranks them based on how critical they
are for the project.Which phase of the software
development life cycle (SDLC) is the project
manager working on?
a. Planning
b. Requirements definition
c. Development
d. Ongoing operations
b. Requirements definition
,A small organization adopts a strategy to ensure
that the cryptographic keys it uses in its cloud
environment are securely stored and handled.Which
third-party service should the organization leverage
for key administration in the given scenario?
a. Hardware security module (HSM)
b. Cloud access security broker (CASB)
c. Identity provider (IdP)
d. Security information and event management
(SIEM)
a. Hardware security module (HSM)- it provides
dedicated hardware-based security for managing
keys in a cloud environment.
An organization started the transition to using a
public cloud service for a customer-facing
application. The organization's security team
has concerns about the application programming
interface (API) tokens being lost or exposed to
malicious actors.Which service do cloud providers
offer that the organization should leverage to
administer its API tokens?
a. Secrets management
b. Output encoding
c. Gateway
d. Sandbox
,a. Secrets management- ensuring that sensitive
information is protected from loss or exposure to
malicious actors.
Which tier of service is provided by a data center
that is designed to have independent and physically
isolated systems, multiple distribution paths, and
fault tolerance for components?
a. Tier 1
b. Tier 2
c. Tier 3
d. Tier 4
d. Tier 4
Which concept focuses on balancing virtual
machines across clusters to ensure reliable and
consistent performance?
a. Ephemeral computing
b. Distinct physical paths
c. Distributed resource scheduling
d. High availability
c. Distributed resource scheduling- by efficiently
managing and optimizing resource allocation.
After a severe storm, the local power grid used by
an organization's primary European data center was
damaged and could no longer provide the necessary
, power to keep the services running. Management
has established that this event does not meet the
definition of a disaster but is a business continuity
impacting event since a failover site can temporarily
bear theload.What should the organization leverage
to return operations to the data center?
a. Uninterruptible power supply (UPS)
b. Redundant array of independent disks (RAID)
c. Generators
d. Archives
c. Generators
Which legal requirement mandates companies in the
United States to provide federal officials with data
even if the data is not stored in the United States and
disclosure of the data is illegal under the laws
where it is stored?
a. The Sarbanes-Oxley (SOX) Act
b. The General Data Protection Regulation (GDPR)
c. The Gramm-Leach-Bliley Act (GLBA)
d. The Clarifying Lawful Overseas Use of Data
(CLOUD) Act
d. The Clarifying Lawful Overseas Use of Data
(CLOUD) Act
2024 -2025 ACTUAL EXAM 2 VERSIONS
(VERSION A AND B) COMPLETE 450
QUESTIONS WITH DETAILED VERIFIED
ANSWERS AND RATIONALES /ALREADY
GRADED A+
VERSION A
A project manager is working on a new software
project for a customer. The project manager works
closely with the customer to get input on the desired
features and ranks them based on how critical they
are for the project.Which phase of the software
development life cycle (SDLC) is the project
manager working on?
a. Planning
b. Requirements definition
c. Development
d. Ongoing operations
b. Requirements definition
,A small organization adopts a strategy to ensure
that the cryptographic keys it uses in its cloud
environment are securely stored and handled.Which
third-party service should the organization leverage
for key administration in the given scenario?
a. Hardware security module (HSM)
b. Cloud access security broker (CASB)
c. Identity provider (IdP)
d. Security information and event management
(SIEM)
a. Hardware security module (HSM)- it provides
dedicated hardware-based security for managing
keys in a cloud environment.
An organization started the transition to using a
public cloud service for a customer-facing
application. The organization's security team
has concerns about the application programming
interface (API) tokens being lost or exposed to
malicious actors.Which service do cloud providers
offer that the organization should leverage to
administer its API tokens?
a. Secrets management
b. Output encoding
c. Gateway
d. Sandbox
,a. Secrets management- ensuring that sensitive
information is protected from loss or exposure to
malicious actors.
Which tier of service is provided by a data center
that is designed to have independent and physically
isolated systems, multiple distribution paths, and
fault tolerance for components?
a. Tier 1
b. Tier 2
c. Tier 3
d. Tier 4
d. Tier 4
Which concept focuses on balancing virtual
machines across clusters to ensure reliable and
consistent performance?
a. Ephemeral computing
b. Distinct physical paths
c. Distributed resource scheduling
d. High availability
c. Distributed resource scheduling- by efficiently
managing and optimizing resource allocation.
After a severe storm, the local power grid used by
an organization's primary European data center was
damaged and could no longer provide the necessary
, power to keep the services running. Management
has established that this event does not meet the
definition of a disaster but is a business continuity
impacting event since a failover site can temporarily
bear theload.What should the organization leverage
to return operations to the data center?
a. Uninterruptible power supply (UPS)
b. Redundant array of independent disks (RAID)
c. Generators
d. Archives
c. Generators
Which legal requirement mandates companies in the
United States to provide federal officials with data
even if the data is not stored in the United States and
disclosure of the data is illegal under the laws
where it is stored?
a. The Sarbanes-Oxley (SOX) Act
b. The General Data Protection Regulation (GDPR)
c. The Gramm-Leach-Bliley Act (GLBA)
d. The Clarifying Lawful Overseas Use of Data
(CLOUD) Act
d. The Clarifying Lawful Overseas Use of Data
(CLOUD) Act
