WGU D320 Managing Cloud Security – Questions With
Solutions
At which OSI layer does IPSec operate?
A) Presentation
B) Network
C) Application
D) Transport Right Ans - B
Over time, what is a primary concern for data archiving?
A) Recoverability
B) Format of archives
C) Regulatory changes
D) Size of archives Right Ans - A
Which of the following roles is responsible for obtaining new customers and
securing contracts and agreements?
A) Cloud service broker
B) Cloud auditor
C) Cloud service developer
D) Inter-cloud provider Right Ans - A
When is a virtual machine susceptible to attacks but a physical server in the
same state would not be?
A) When it is powered off
B) When it is behind a WAF
C) When it is not patched
D) When it is behind an IPS Right Ans - A
Which of the following is the optimal temperature for a data center, per the
guidelines established by the America Society of Heating, Refrigeration, and
Air Conditioning Engineers (ASHRAE)?
A) 44.6 - 60.8°F (7 - 16°C)
,B) 69.8 - 86.0°F (21 - 30°C)
C) 64.4 - 80.6°F (18 - 27°C)
D) 51.8 - 66.2°F (11 - 19°C) Right Ans - C
Which of the following does not relate to the hiding of sensitive data from data
sets?
A) Obfuscation
B) Federation
C) Masking
D) Anonymization Right Ans – B
What is the purpose of egress monitoring tools?
A) They are used to convert a given set of data or information into a different
value.
B) They are used to prevent data from going outside the control of an
organization.
C) They are used to create data during the Create phase of the cloud data life
cycle.
D) They are used to remove data during the Destroy phase of the cloud data
life cycle. Right Ans - B
A company is looking at different types of cloud storage options. One of the
threats to cloud storage that the company foresees is the possibility of losing
forensic artifacts in the event of an incident response investigation.
Which type of cloud storage has the highest risk of losing forensic artifacts in
the event of an incident response investigation?
A) File-based
B) Long-term
C) Block
D) Ephemeral Right Ans - D
A manager is made aware of a customer complaint about how an application
developed by the company collects personal and environmental information
from the devices it is installed on.
,Which document should the manager refer to in order to determine if the
company has properly disclosed information about what data it collects from
this application's users?
A) Retention policy
B) Breach notification
C) Privacy notice
D) Denial of service Right Ans - C
An organization needs to store passwords in a database securely. The data
should not be available to system administrators.
Which technique should the organization use?
A) Encryption
B) Hashing
C) Encoding
D) Masking Right Ans - B
A company is looking to ensure that the names of individuals in its data in the
cloud are not revealed in the event of a data breach, as the data is sensitive
and classified.
Which data masking technique should the company use to prevent attackers
from identifying individuals in the event of a data breach?
A) Crypto-shredding
B) Degaussing
C) Anonymization
D) Randomization Right Ans - C
An organization needs to quickly identify the document owner in a shared
network folder.
Which technique should the organization use to meet this goal?
A) Labeling
B) Classification
C) Mapping
D) Categorization Right Ans - A
, An organization plans to introduce a new data standard and wants to ensure
that system inventory data will be efficiently discovered and processed.
Which type of data should the organization use to meet this goal?
A) Structured
B) Semi-structured
C) Annotated
D) Mapped Right Ans - A
An organization implemented an information rights management (IRM)
solution to prevent critical data from being copied without permission and a
cloud backup solution to ensure that the critical data is protected from storage
failures.
Which IRM challenge will the organization need to address?
A) Jurisdictional conflicts
B) Agent conflicts
C) Replication restrictions
D) Execution restrictions Right Ans - C
A data center engineer is tasked with the destruction of data on solid-state
drives (SSDs). The engineer must ensure that the data is not able to be
retrieved.
Which data destruction action should the engineer take to meet this goal?
A) Overwriting
B) Crypto-shredding
C) Wiping
D) Degaussing Right Ans - B
An organization wants to gather and interpret logs from its cloud
environment.
Which system should the organization use for this task?
A) Simple Network Management Protocol (SNMP)
B) Security Information and Event Management (SIEM)
Solutions
At which OSI layer does IPSec operate?
A) Presentation
B) Network
C) Application
D) Transport Right Ans - B
Over time, what is a primary concern for data archiving?
A) Recoverability
B) Format of archives
C) Regulatory changes
D) Size of archives Right Ans - A
Which of the following roles is responsible for obtaining new customers and
securing contracts and agreements?
A) Cloud service broker
B) Cloud auditor
C) Cloud service developer
D) Inter-cloud provider Right Ans - A
When is a virtual machine susceptible to attacks but a physical server in the
same state would not be?
A) When it is powered off
B) When it is behind a WAF
C) When it is not patched
D) When it is behind an IPS Right Ans - A
Which of the following is the optimal temperature for a data center, per the
guidelines established by the America Society of Heating, Refrigeration, and
Air Conditioning Engineers (ASHRAE)?
A) 44.6 - 60.8°F (7 - 16°C)
,B) 69.8 - 86.0°F (21 - 30°C)
C) 64.4 - 80.6°F (18 - 27°C)
D) 51.8 - 66.2°F (11 - 19°C) Right Ans - C
Which of the following does not relate to the hiding of sensitive data from data
sets?
A) Obfuscation
B) Federation
C) Masking
D) Anonymization Right Ans – B
What is the purpose of egress monitoring tools?
A) They are used to convert a given set of data or information into a different
value.
B) They are used to prevent data from going outside the control of an
organization.
C) They are used to create data during the Create phase of the cloud data life
cycle.
D) They are used to remove data during the Destroy phase of the cloud data
life cycle. Right Ans - B
A company is looking at different types of cloud storage options. One of the
threats to cloud storage that the company foresees is the possibility of losing
forensic artifacts in the event of an incident response investigation.
Which type of cloud storage has the highest risk of losing forensic artifacts in
the event of an incident response investigation?
A) File-based
B) Long-term
C) Block
D) Ephemeral Right Ans - D
A manager is made aware of a customer complaint about how an application
developed by the company collects personal and environmental information
from the devices it is installed on.
,Which document should the manager refer to in order to determine if the
company has properly disclosed information about what data it collects from
this application's users?
A) Retention policy
B) Breach notification
C) Privacy notice
D) Denial of service Right Ans - C
An organization needs to store passwords in a database securely. The data
should not be available to system administrators.
Which technique should the organization use?
A) Encryption
B) Hashing
C) Encoding
D) Masking Right Ans - B
A company is looking to ensure that the names of individuals in its data in the
cloud are not revealed in the event of a data breach, as the data is sensitive
and classified.
Which data masking technique should the company use to prevent attackers
from identifying individuals in the event of a data breach?
A) Crypto-shredding
B) Degaussing
C) Anonymization
D) Randomization Right Ans - C
An organization needs to quickly identify the document owner in a shared
network folder.
Which technique should the organization use to meet this goal?
A) Labeling
B) Classification
C) Mapping
D) Categorization Right Ans - A
, An organization plans to introduce a new data standard and wants to ensure
that system inventory data will be efficiently discovered and processed.
Which type of data should the organization use to meet this goal?
A) Structured
B) Semi-structured
C) Annotated
D) Mapped Right Ans - A
An organization implemented an information rights management (IRM)
solution to prevent critical data from being copied without permission and a
cloud backup solution to ensure that the critical data is protected from storage
failures.
Which IRM challenge will the organization need to address?
A) Jurisdictional conflicts
B) Agent conflicts
C) Replication restrictions
D) Execution restrictions Right Ans - C
A data center engineer is tasked with the destruction of data on solid-state
drives (SSDs). The engineer must ensure that the data is not able to be
retrieved.
Which data destruction action should the engineer take to meet this goal?
A) Overwriting
B) Crypto-shredding
C) Wiping
D) Degaussing Right Ans - B
An organization wants to gather and interpret logs from its cloud
environment.
Which system should the organization use for this task?
A) Simple Network Management Protocol (SNMP)
B) Security Information and Event Management (SIEM)
