Managing Cloud Security WGU D320 ACTUAL EXAM
2026/2027 TEST BANK PRACTICE QUESTIONS AND
STUDY GUIDE ACCURATE EXAM COMPLETE REAL
QUESTIONS AND CORRECT VERIFIED SOLUTIONS
WITH DETAILED RATIONALES (RELIABLE ANSWERS)
CURRENTLY UPDATED VERSION 2026 EDITION
Defense in Depth
Multiple layers of security controls so if one fails, others still
protect. No single point of failure in security posture.
Air Gap
Complete physical/logical isolation from other networks. Highest
security for classified or critical systems.
Hub and Spoke Network
Central hub (transit VPC or service provider) connects to multiple
spoke networks. Traffic flows through hub for centralized security
inspection.
,Egress Monitoring
Monitors outbound traffic for data exfiltration, C2 (Command and
Control) beaconing, and policy violations.
Authentication vs Authorization
Authentication = proving who you are. Authorization = what you are
allowed to do. These are separate and sequential steps.
MFA (Multi-Factor Authentication)
Requires two or more factors: something you know (password),
something you have (token), something you are (biometric).
SAML (Security Assertion Markup Language)
XML-based standard for exchanging authentication and
authorization data between an IdP (Identity Provider) and SP
(Service Provider). Common for enterprise SSO.
,OAuth 2.0
Authorization framework allowing third-party apps to access
resources on behalf of a user without exposing credentials. Issues
access tokens.
OpenID Connect (OIDC)
Identity layer built on OAuth 2.0. Adds authentication (who you are)
to OAuth's authorization (what you can access).
Federation (Identity)
Linking identity systems across organizations so users authenticate
once and access resources in multiple domains (cross-org SSO).
PAM (Privileged Access Management)
Controls and monitors access by privileged accounts (admins, root).
Includes JIT (Just-In-Time) access and session recording.
, RBAC (Role-Based Access Control)
Permissions assigned to roles, roles assigned to users. Most
common enterprise model.
ABAC (Attribute-Based Access Control)
Access decisions based on attributes of user, resource, and
environment. More granular than RBAC.
Principle of Least Privilege
Users and systems only get the minimum permissions needed to
perform their function. Reduces attack surface.
Symmetric Encryption
Same key encrypts and decrypts. Fast, used for bulk data. Examples:
AES-128, AES-256. Key distribution is the main challenge.
Asymmetric Encryption
Public key encrypts, private key decrypts (or vice versa for signing).
Solves key distribution. Examples: RSA, ECC.
TLS (Transport Layer Security)
Encrypts data in transit. Current standard is TLS 1.2/1.3. Used with
IPSec for cloud uploads.
2026/2027 TEST BANK PRACTICE QUESTIONS AND
STUDY GUIDE ACCURATE EXAM COMPLETE REAL
QUESTIONS AND CORRECT VERIFIED SOLUTIONS
WITH DETAILED RATIONALES (RELIABLE ANSWERS)
CURRENTLY UPDATED VERSION 2026 EDITION
Defense in Depth
Multiple layers of security controls so if one fails, others still
protect. No single point of failure in security posture.
Air Gap
Complete physical/logical isolation from other networks. Highest
security for classified or critical systems.
Hub and Spoke Network
Central hub (transit VPC or service provider) connects to multiple
spoke networks. Traffic flows through hub for centralized security
inspection.
,Egress Monitoring
Monitors outbound traffic for data exfiltration, C2 (Command and
Control) beaconing, and policy violations.
Authentication vs Authorization
Authentication = proving who you are. Authorization = what you are
allowed to do. These are separate and sequential steps.
MFA (Multi-Factor Authentication)
Requires two or more factors: something you know (password),
something you have (token), something you are (biometric).
SAML (Security Assertion Markup Language)
XML-based standard for exchanging authentication and
authorization data between an IdP (Identity Provider) and SP
(Service Provider). Common for enterprise SSO.
,OAuth 2.0
Authorization framework allowing third-party apps to access
resources on behalf of a user without exposing credentials. Issues
access tokens.
OpenID Connect (OIDC)
Identity layer built on OAuth 2.0. Adds authentication (who you are)
to OAuth's authorization (what you can access).
Federation (Identity)
Linking identity systems across organizations so users authenticate
once and access resources in multiple domains (cross-org SSO).
PAM (Privileged Access Management)
Controls and monitors access by privileged accounts (admins, root).
Includes JIT (Just-In-Time) access and session recording.
, RBAC (Role-Based Access Control)
Permissions assigned to roles, roles assigned to users. Most
common enterprise model.
ABAC (Attribute-Based Access Control)
Access decisions based on attributes of user, resource, and
environment. More granular than RBAC.
Principle of Least Privilege
Users and systems only get the minimum permissions needed to
perform their function. Reduces attack surface.
Symmetric Encryption
Same key encrypts and decrypts. Fast, used for bulk data. Examples:
AES-128, AES-256. Key distribution is the main challenge.
Asymmetric Encryption
Public key encrypts, private key decrypts (or vice versa for signing).
Solves key distribution. Examples: RSA, ECC.
TLS (Transport Layer Security)
Encrypts data in transit. Current standard is TLS 1.2/1.3. Used with
IPSec for cloud uploads.
