WGU C838 OA QUESTIONS WITH ACCURATE ANSWERS
Which phase of the cloud data lifecycle allows both read and process functions to be performed? -
Accurate answers Create
Which technique scrambles the content of data using a mathematical algorithm while keeping the
structural arrangement of the data? - Accurate answers Format-preserving encryption
Which encryption technique connects the instance to the encryption instance that handles all crypto
operations? - Accurate answers Proxy
Which type of control should be used to implement custom controls that safeguard data? - Accurate
answers Application level
A cloud administrator recommends using tokenization as an alternative to protecting data without
encryption. The administrator needs to make an authorized application request to access the data.
Which step should occur immediately before this action is taken? - Accurate answers The
application stores the token
A company has recently defined classification levels for its data. During which phase of the cloud data
life cycle should this definition occur? - Accurate answers Create
How is the compliance of the cloud service provider's legal and regulatory requirements verified when
securing personally identifiable information (PII) data in the cloud? - Accurate answers Third party
audits and attestations
Which security strategy is associated with data rights management solutions? - Accurate answers
Continuous auditing
What is a key capability of security information and event management? - Accurate answers
Centralized collection of big data
A security analyst is investigating an incident of access to a resource from an unauthorized location.
Which data source should the security analyst use to investigate the incident? - Accurate answers
Packet capture file
Which message type is generated from software systems to troubleshoot and identify problems with
running application codes? - Accurate answers Debug
Which cloud computing tool is used to discover internal use of cloud services using various mechanisms
such as network monitoring? - Accurate answers Cloud access security broker (CASB)
Which cloud model provides data location assurance? - Accurate answers Private
Which technology allows an organization to control access to sensitive documents stored in the cloud? -
Accurate answers Digital rights management
, How do immutable workloads effect security overhead? - Accurate answers They reduce the
management of the host
Which design principle of secure cloud computing ensures that users can utilize data and applications
from around the globe? - Accurate answers Broad network access
Which standard addresses practices related to acquisition of forensic artifacts and can be directly
applied to a cloud environment? - Accurate answers ISO/IEC 27050-1
Which technology allows an administrator to remotely manage a fleet of servers? - Accurate answers
Management plane
What part of the logical infrastructure design is used to configure cloud resources, such as launching
virtual machines or configuring virtual networks? - Accurate answers Management plane
Which action enhances cloud security application deployment through standards such as ISO/IEC 27034
for the development, acquisition, and configuration of software systems? - Accurate answers
Applying the steps of a cloud software development life cycle
Which element is a cloud virtualization risk? - Accurate answers Guest isolation
The security administrator for a global cloud services provider (CSP) is required to globally standardize
the approaches for using forensics methodologies in the organization. Which standard should be
applied? - Accurate answers ISO 27050-1
Which detection and analysis technique is performed to capture a point-in-time picture of the entire
stack at the time of an incident? - Accurate answers Create a snapshot using API calls
A CSP operating in Australia experiences a security breach that results in disclosure of personal
information that is likely to result in serious harm. Who is the CSP legally required to notify? - Accurate
answers Information commisioner
A CSP provides services in European Union (EU) countries that are subject to the network information
security (NIS) directive. The CSP experiences an incident that significantly affects the continuity of the
essential services being provided. Who is the CSP required to notify under the NIS directive? - Accurate
answers Competent authorities
A cloud customer is setting up communication paths with the cloud service provider that will be used in
the event of an incident. Which action facilitates this type of communication? - Accurate answers
Using existing open standards
Which issue can be detected with static application security testing (SAST)? - Accurate answers
Threading
Which problem is known as a common supply chain risk? - Accurate answers Data breaches
Which phase of the cloud data lifecycle allows both read and process functions to be performed? -
Accurate answers Create
Which technique scrambles the content of data using a mathematical algorithm while keeping the
structural arrangement of the data? - Accurate answers Format-preserving encryption
Which encryption technique connects the instance to the encryption instance that handles all crypto
operations? - Accurate answers Proxy
Which type of control should be used to implement custom controls that safeguard data? - Accurate
answers Application level
A cloud administrator recommends using tokenization as an alternative to protecting data without
encryption. The administrator needs to make an authorized application request to access the data.
Which step should occur immediately before this action is taken? - Accurate answers The
application stores the token
A company has recently defined classification levels for its data. During which phase of the cloud data
life cycle should this definition occur? - Accurate answers Create
How is the compliance of the cloud service provider's legal and regulatory requirements verified when
securing personally identifiable information (PII) data in the cloud? - Accurate answers Third party
audits and attestations
Which security strategy is associated with data rights management solutions? - Accurate answers
Continuous auditing
What is a key capability of security information and event management? - Accurate answers
Centralized collection of big data
A security analyst is investigating an incident of access to a resource from an unauthorized location.
Which data source should the security analyst use to investigate the incident? - Accurate answers
Packet capture file
Which message type is generated from software systems to troubleshoot and identify problems with
running application codes? - Accurate answers Debug
Which cloud computing tool is used to discover internal use of cloud services using various mechanisms
such as network monitoring? - Accurate answers Cloud access security broker (CASB)
Which cloud model provides data location assurance? - Accurate answers Private
Which technology allows an organization to control access to sensitive documents stored in the cloud? -
Accurate answers Digital rights management
, How do immutable workloads effect security overhead? - Accurate answers They reduce the
management of the host
Which design principle of secure cloud computing ensures that users can utilize data and applications
from around the globe? - Accurate answers Broad network access
Which standard addresses practices related to acquisition of forensic artifacts and can be directly
applied to a cloud environment? - Accurate answers ISO/IEC 27050-1
Which technology allows an administrator to remotely manage a fleet of servers? - Accurate answers
Management plane
What part of the logical infrastructure design is used to configure cloud resources, such as launching
virtual machines or configuring virtual networks? - Accurate answers Management plane
Which action enhances cloud security application deployment through standards such as ISO/IEC 27034
for the development, acquisition, and configuration of software systems? - Accurate answers
Applying the steps of a cloud software development life cycle
Which element is a cloud virtualization risk? - Accurate answers Guest isolation
The security administrator for a global cloud services provider (CSP) is required to globally standardize
the approaches for using forensics methodologies in the organization. Which standard should be
applied? - Accurate answers ISO 27050-1
Which detection and analysis technique is performed to capture a point-in-time picture of the entire
stack at the time of an incident? - Accurate answers Create a snapshot using API calls
A CSP operating in Australia experiences a security breach that results in disclosure of personal
information that is likely to result in serious harm. Who is the CSP legally required to notify? - Accurate
answers Information commisioner
A CSP provides services in European Union (EU) countries that are subject to the network information
security (NIS) directive. The CSP experiences an incident that significantly affects the continuity of the
essential services being provided. Who is the CSP required to notify under the NIS directive? - Accurate
answers Competent authorities
A cloud customer is setting up communication paths with the cloud service provider that will be used in
the event of an incident. Which action facilitates this type of communication? - Accurate answers
Using existing open standards
Which issue can be detected with static application security testing (SAST)? - Accurate answers
Threading
Which problem is known as a common supply chain risk? - Accurate answers Data breaches
