WGU C838 FINAL EXAM WITH VERIFIED
QUESTIONS AND ANSWERS|| ALREADY
GRADED A+ || GUARANTEED PASS || LATEST
VERSION 2025
"Which technology typically provides security isolation in infrastructure as a
service (IaaS) cloud?
(A) Computing?
(B) Virtual machines
(C) Operating systems
(D) Application instance" - ANSWER-B. Virtual machines
"Which technology can an administrator us to remotely manage a fleet of
servers?
(A) Bastion host
(B) Management plane
(C) VPN concentrator
(D) KVM switch" - ANSWER-(B) Management plane
"What part of the logical infrastructure design is used to configure cloud
resources, such as launching virtual machines or configuring virtual networks?
(A) Management plane
(B) Database management
(C) Identity access management
(D) Management orchestration software" - ANSWER-A. Management plane
,"Which action enhances cloud security application deployment through
standards such as ISO/IEC 27034 for the development, acquisition, and
configuration of software systems?
(A) Applying the steps of a cloud software development lifecycle
(B) Providing developer access to supporting components and services
(C) Outsourcing the infrastructure and integration platform management
(D) Verifying the application has an appropriate level of confidentiality and
integrity" - ANSWER-A. Applying the steps of a cloud software development
lifecycle
"Which type of agreement aims to negotiate policies with various parties in
accordance with the agreed- upon targets?
(A) User license (ULA)
(B) Service-level (SLA)
(C) Privacy-level (PLA)
(D) Operation-level (OLA)" - ANSWER-B. Service-level (SLA)
"Which regulation requires a CSP to comply with copyright law for hosted
content?
(A) SOX
(B) SCA
(C) GLBA
(D) DMCA" - ANSWER-D. DMCA
Digital Millennium Copyright Act
"Which element is a cloud virtualization risk?
(A) Licensing
(B) Jurisdiction
,(C) Guest isolation
(D) Electronic discovery" - ANSWER-C. Guest isolation
Which aspect of the plan will provide this guarantee?
(A) Ensuring data backups
(B) Managing plane controls
(C) Handling provider outages
(D) Evaluating portability alternatives" - ANSWER-C. Handling provider
outages
"Which aspect of business continuity planning considers the alternatives to be
used when there is a complete loss of the provider?
(A) Ensuring resiliency
(B) Managing plane controls
(C) Considering portability options
(D) Managing cloud provider outages" - ANSWER-C. Considering portability
options
"What is a key method associated with a risk-based approach to business
continuity planning?
(A) Using existing network technology
(B) Leveraging software-defined networking
(C) Applying internal authentication and credential passing
(D) Considering the degree of continuity required for assets" - ANSWER-D.
Considering the degree of continuity required for assets
"Which testing method must be performed to demonstrate the effectiveness of a
business continuity plan and procedures?
(A) SAST
, (B) DAST
(C) Failover
(D) Penetration" - ANSWER-C. Failover
"Which process involves the use of electronic data as evidence in a civil or
criminal legal case?
(A) Due diligence
(B) Cloud governance
(C) Auditing in the cloud
(D) eDiscovery investigations" - ANSWER-D. eDiscovery investigations
"Which standard addresses the privacy aspects of cloud computing for
consumers?
(A) ISO 19011:2011
(B) ISO 27001:2013
(C) ISO 27018:2014
(D) ISO 27017:2015" - ANSWER-C. ISO 27018:2014
"Which risk is related to interception of data in transit?
(A) Virtualization
(B) Traffic blocking
(C) Man-in-the-middle
(D) Software vulnerabilities" - ANSWER-C. Man-in-the-middle
"Which method is being used when a company evaluates the acceptable loss
exposure associated with a cloud solution for a given set of objectives and
resources?
(A) Risk appetite
(B) Risk management
QUESTIONS AND ANSWERS|| ALREADY
GRADED A+ || GUARANTEED PASS || LATEST
VERSION 2025
"Which technology typically provides security isolation in infrastructure as a
service (IaaS) cloud?
(A) Computing?
(B) Virtual machines
(C) Operating systems
(D) Application instance" - ANSWER-B. Virtual machines
"Which technology can an administrator us to remotely manage a fleet of
servers?
(A) Bastion host
(B) Management plane
(C) VPN concentrator
(D) KVM switch" - ANSWER-(B) Management plane
"What part of the logical infrastructure design is used to configure cloud
resources, such as launching virtual machines or configuring virtual networks?
(A) Management plane
(B) Database management
(C) Identity access management
(D) Management orchestration software" - ANSWER-A. Management plane
,"Which action enhances cloud security application deployment through
standards such as ISO/IEC 27034 for the development, acquisition, and
configuration of software systems?
(A) Applying the steps of a cloud software development lifecycle
(B) Providing developer access to supporting components and services
(C) Outsourcing the infrastructure and integration platform management
(D) Verifying the application has an appropriate level of confidentiality and
integrity" - ANSWER-A. Applying the steps of a cloud software development
lifecycle
"Which type of agreement aims to negotiate policies with various parties in
accordance with the agreed- upon targets?
(A) User license (ULA)
(B) Service-level (SLA)
(C) Privacy-level (PLA)
(D) Operation-level (OLA)" - ANSWER-B. Service-level (SLA)
"Which regulation requires a CSP to comply with copyright law for hosted
content?
(A) SOX
(B) SCA
(C) GLBA
(D) DMCA" - ANSWER-D. DMCA
Digital Millennium Copyright Act
"Which element is a cloud virtualization risk?
(A) Licensing
(B) Jurisdiction
,(C) Guest isolation
(D) Electronic discovery" - ANSWER-C. Guest isolation
Which aspect of the plan will provide this guarantee?
(A) Ensuring data backups
(B) Managing plane controls
(C) Handling provider outages
(D) Evaluating portability alternatives" - ANSWER-C. Handling provider
outages
"Which aspect of business continuity planning considers the alternatives to be
used when there is a complete loss of the provider?
(A) Ensuring resiliency
(B) Managing plane controls
(C) Considering portability options
(D) Managing cloud provider outages" - ANSWER-C. Considering portability
options
"What is a key method associated with a risk-based approach to business
continuity planning?
(A) Using existing network technology
(B) Leveraging software-defined networking
(C) Applying internal authentication and credential passing
(D) Considering the degree of continuity required for assets" - ANSWER-D.
Considering the degree of continuity required for assets
"Which testing method must be performed to demonstrate the effectiveness of a
business continuity plan and procedures?
(A) SAST
, (B) DAST
(C) Failover
(D) Penetration" - ANSWER-C. Failover
"Which process involves the use of electronic data as evidence in a civil or
criminal legal case?
(A) Due diligence
(B) Cloud governance
(C) Auditing in the cloud
(D) eDiscovery investigations" - ANSWER-D. eDiscovery investigations
"Which standard addresses the privacy aspects of cloud computing for
consumers?
(A) ISO 19011:2011
(B) ISO 27001:2013
(C) ISO 27018:2014
(D) ISO 27017:2015" - ANSWER-C. ISO 27018:2014
"Which risk is related to interception of data in transit?
(A) Virtualization
(B) Traffic blocking
(C) Man-in-the-middle
(D) Software vulnerabilities" - ANSWER-C. Man-in-the-middle
"Which method is being used when a company evaluates the acceptable loss
exposure associated with a cloud solution for a given set of objectives and
resources?
(A) Risk appetite
(B) Risk management
