WGU C838 CCSP Terms
vb vb vb
acceptablevbusevbpolicyvb(AUP)vb-vbcorrectvbanswer✔ ✔
Avbformalvbstatementvbofvbpolicyvbsignedvbbyvbmanagement,vbacknowledge
dvbbyvbthevbuservbwithvbtheirvbsignature,vbandvbtypicallyvbenforcedvbbyvbthevbHu
manvbResourcesvbdepartment.vbThevbpolicyvbshouldvbstatevbprohibitedvbusesvb
suchvbasvbthosevbrelatedvbtovbreligionvborvbtopicsvbofvbquestionablevbusevbandvbt
hatvbcomputingvbresourcesvbarevbforvbcompanyvbbusinessvbonly.vbThevbAUPvbs
houldvbalsovbstatevbthevbprohibitionvbofvbadministrativevbsystemvbutilitiesvband
vbrelatedvbsystemvbtoolsvbnotvbspecificallyvbauthorizedvbasvbcontraband.vbThisvb
eliminatesvbanyvbexcusesvborvbmisunderstandingvbandvbenforcesvbseparationvb
ofvbduties.
accessvbcontrolvblistsvb(ACLs)vb-vbcorrectvbanswer✔ ✔
specifiesvbwhichvbusersvborvbsystemvbprocessesvbhavevbaccessvbtovbavbspecifi
cvbobject,vbsuchvbasvbanvbapplicationvborvbprocess,vbinvbadditionvbtovbwhatvboper
ationsvbtheyvbcanvbperform.
AdvancedvbEncryptionvbStandardvb(AES)vb-vbcorrectvbanswer✔ ✔
avbsymmetricvbblockvbtypevbofvbciphervbusedvbtovbencryptvbinformation.vbItvbi
svbcurrentlyvbthevbstandardvbforvbthevbU.S.vbgovernmentvbinvbprotectingvbsensit
ivevbandvbsecretvbdocuments.vbItvbisvbthevbgoldvbstandardvbofvbencryptionvbwhe
nvbimplementedvbproperly.
,AmazonvbEC2vb-vbcorrectvbanswer✔ ✔
avbwebvbservicevbthatvbprovidesvbscalablevbcomputingvbcapacityvbinvbthevbclo
ud.vbItvbisvbanvbexamplevbofvbIaaS.
annualvblossvbexpectancyvb(ALE)vb-vbcorrectvbanswer✔ ✔
Thevbamountvbanvborganizationvbshouldvbexpectvbtovblosevbonvbanvbannualvbb
asisvbduevbtovbincidents.vbItvbisvbtypicallyvbcalculatedvbbyvbmultiplyingvbthevban
nualvbratevbofvboccurrencevb(ARO)vbbyvbthevbsinglevblossvbexpectancyvb(SLE).
annualvbratevbofvboccurrencevb(ARO)vb-vbcorrectvbanswer✔ ✔
Showsvbinvbanvbeventvborvbsecurityvbincidentvbhowvbmanyvbtimesvbyouvbcould
vbexpectvbthisvbeventvbtovboccurvbinvbanyvbgivenvb12-monthvbperiod.
anonymizationvb-vbcorrectvbanswer✔ ✔
thevbactvbofvbpermanentlyvbandvbcompletelyvbremovingvbpersonalvbidentifie
rsvbfromvbdata,vbsuchvbasvbconvertingvbpersonallyvbidentifiablevbinformationvb(
PII)vbintovbaggregatedvbdata.
Anything-as-a-Servicevb(AaaSvborvbXaaS)vb-vbcorrectvbanswer✔ ✔
refersvbtovbthevbgrowingvbdiversityvbofvbservicesvbavailablevbovervbthevbInter
netvbviavbcloudvbcomputingvbasvbopposedvbtovbresidingvblocallyvborvbonvbpremis
es.
ApachevbCloudStackvb-vbcorrectvbanswer✔ ✔
AnvbopenvbsourcevbcloudvbcomputingvbandvbInfrastructurevbasvbavbServicevb(
,IaaS)vbplatformvbdevelopedvbtovbhelpvbIaaSvbmakevbcreating,vbdeploying,vband
vb managingvbcloudvbservicesvbeasiervbbyvbprovidingvbavbcompletevbstackvbofvbfe
aturesvbandvbcomponentsvbforvbcloudvbenvironments.
APIvbgatewayvb-vbcorrectvbanswer✔ ✔
AvbdevicevbthatvbfiltersvbAPIvbtraffic.vbItvbcanvbbevbeithervbavbproxyvborvbavbspe
cificvbpartvbofvbyourvbapplicationvbstackvbthatvbcomesvbintovbplayvbbeforevbdatav
bisvbprocessed.vbAdditionally,vbitvbcanvbimplement vbaccessvbcontrols,vbratevbli
miting,vblogging,vbmetrics,vbandvbsecurityvbfiltering.
ApplicationvbNormativevbFrameworkvb(ANF)vb-vbcorrectvbanswer✔ ✔
Avbsubsetvbofvbanvborganizationalvbnormativevbframeworkvb(ONF)vbthatvbco
ntainsvbonlyvbthevbinformationvbrequiredvbforvbavbspecificvbbusinessvbapplicati
onvbtovbreachvbthevbtargetedvblevelvbofvbtrust.vbTherevbisvbavbmany-to-
onevbrelationshipvbbetweenvbANFsvbandvbONFs.
applicationvbprogrammingvbinterfacesvb(APIs)vb-vbcorrectvbanswer✔ ✔
setsvbofvbroutines,vbstandards,vbprotocols,vbandvbtoolsvbforvbbuildingvbsoftwa
revbapplicationsvbtovbaccessvbavbweb-
basedvbsoftwarevbapplicationvborvbwebvbtool.vbThevbtwovbmostvbwidelyvbusedvb
APIvbformatsvbincludevbRESTvbandvbSOAP.
applicationvbsecurityvbmanagementvbprocessvb(ASMP)vb-vbcorrectvbanswer✔
✔
usedvbtovbmanagevbandvbmaintainvbANFsvbcreatedvbinvbfivevbsteps:vb■vbSpeci
fyingvbthevbapplicationvbrequirementsvbandvbenvironmentvb■vbAssessingvbapp
, licationvbsecurityvbrisksvb■vbCreatingvbandvbmaintainingvbthevbANFvb■vbProvis
ioningvbandvboperatingvbthevbapplicationvb■vbAuditingvbthevbsecurityvbofvbthevb
application
applicationvbvirtualizationvb-vbcorrectvbanswer✔ ✔
avbsoftwarevbtechnologyvbthatvballowsvbforvbencapsulationvbofvbapplicationvb
softwarevbexecutionvbonvbanvbunderlyingvboperatingvbsystem.
auditabilityvb-vbcorrectvbanswer✔ ✔
refersvbtovbsomethingvbbeingvbinvbthevbstatevbofvbreadinessvbforvbauditing.vbInv
bthevbcontextvbofvbcloudvbcomputing,vbitvbrefersvbtovbthevbabilityvbofvbanvborgani
zationvbtovbobtainvbspecificvbinformationvbregardingvbreportingvbandvbactions,
vbcontrols,vbandvbprocesses.
AustralianvbPrivacyvbActvbofvb1988vb-vbcorrectvbanswer✔ ✔
enactedvbinvb1988,vbisvbanvbAustralianvbregulationvbdetailingvbindividualvbpr
ivacyvbsafeguards.vbItvbincludesvblawsvbandvbrulesvbgoverningvbthevbcollection
,vbuse,vbstorage,vbandvbdisclosurevbofvbpersonalvbinformation,vbasvbwellvbasvbacc
essvbtovbandvbcorrectionvbofvbthatvbinformation.
authenticationvb-vbcorrectvbanswer✔ ✔
Thevbactvbofvbidentifyingvborvbverifyingvbthevbeligibilityvbofvbavbstation,vborigi
nator,vborvbindividualvbtovbaccessvbspecificvbcategoriesvbofvbinformation.vbTyp
ically,vbitvbisvbavbmeasurevbdesignedvbtovbprotectvbagainstvbfraudulentvbtransmi
ssionsvbbyvbestablishingvbthevbvalidityvbofvbavbtransmission,vbmessage,vbstatio
n,vborvboriginator.
vb vb vb
acceptablevbusevbpolicyvb(AUP)vb-vbcorrectvbanswer✔ ✔
Avbformalvbstatementvbofvbpolicyvbsignedvbbyvbmanagement,vbacknowledge
dvbbyvbthevbuservbwithvbtheirvbsignature,vbandvbtypicallyvbenforcedvbbyvbthevbHu
manvbResourcesvbdepartment.vbThevbpolicyvbshouldvbstatevbprohibitedvbusesvb
suchvbasvbthosevbrelatedvbtovbreligionvborvbtopicsvbofvbquestionablevbusevbandvbt
hatvbcomputingvbresourcesvbarevbforvbcompanyvbbusinessvbonly.vbThevbAUPvbs
houldvbalsovbstatevbthevbprohibitionvbofvbadministrativevbsystemvbutilitiesvband
vbrelatedvbsystemvbtoolsvbnotvbspecificallyvbauthorizedvbasvbcontraband.vbThisvb
eliminatesvbanyvbexcusesvborvbmisunderstandingvbandvbenforcesvbseparationvb
ofvbduties.
accessvbcontrolvblistsvb(ACLs)vb-vbcorrectvbanswer✔ ✔
specifiesvbwhichvbusersvborvbsystemvbprocessesvbhavevbaccessvbtovbavbspecifi
cvbobject,vbsuchvbasvbanvbapplicationvborvbprocess,vbinvbadditionvbtovbwhatvboper
ationsvbtheyvbcanvbperform.
AdvancedvbEncryptionvbStandardvb(AES)vb-vbcorrectvbanswer✔ ✔
avbsymmetricvbblockvbtypevbofvbciphervbusedvbtovbencryptvbinformation.vbItvbi
svbcurrentlyvbthevbstandardvbforvbthevbU.S.vbgovernmentvbinvbprotectingvbsensit
ivevbandvbsecretvbdocuments.vbItvbisvbthevbgoldvbstandardvbofvbencryptionvbwhe
nvbimplementedvbproperly.
,AmazonvbEC2vb-vbcorrectvbanswer✔ ✔
avbwebvbservicevbthatvbprovidesvbscalablevbcomputingvbcapacityvbinvbthevbclo
ud.vbItvbisvbanvbexamplevbofvbIaaS.
annualvblossvbexpectancyvb(ALE)vb-vbcorrectvbanswer✔ ✔
Thevbamountvbanvborganizationvbshouldvbexpectvbtovblosevbonvbanvbannualvbb
asisvbduevbtovbincidents.vbItvbisvbtypicallyvbcalculatedvbbyvbmultiplyingvbthevban
nualvbratevbofvboccurrencevb(ARO)vbbyvbthevbsinglevblossvbexpectancyvb(SLE).
annualvbratevbofvboccurrencevb(ARO)vb-vbcorrectvbanswer✔ ✔
Showsvbinvbanvbeventvborvbsecurityvbincidentvbhowvbmanyvbtimesvbyouvbcould
vbexpectvbthisvbeventvbtovboccurvbinvbanyvbgivenvb12-monthvbperiod.
anonymizationvb-vbcorrectvbanswer✔ ✔
thevbactvbofvbpermanentlyvbandvbcompletelyvbremovingvbpersonalvbidentifie
rsvbfromvbdata,vbsuchvbasvbconvertingvbpersonallyvbidentifiablevbinformationvb(
PII)vbintovbaggregatedvbdata.
Anything-as-a-Servicevb(AaaSvborvbXaaS)vb-vbcorrectvbanswer✔ ✔
refersvbtovbthevbgrowingvbdiversityvbofvbservicesvbavailablevbovervbthevbInter
netvbviavbcloudvbcomputingvbasvbopposedvbtovbresidingvblocallyvborvbonvbpremis
es.
ApachevbCloudStackvb-vbcorrectvbanswer✔ ✔
AnvbopenvbsourcevbcloudvbcomputingvbandvbInfrastructurevbasvbavbServicevb(
,IaaS)vbplatformvbdevelopedvbtovbhelpvbIaaSvbmakevbcreating,vbdeploying,vband
vb managingvbcloudvbservicesvbeasiervbbyvbprovidingvbavbcompletevbstackvbofvbfe
aturesvbandvbcomponentsvbforvbcloudvbenvironments.
APIvbgatewayvb-vbcorrectvbanswer✔ ✔
AvbdevicevbthatvbfiltersvbAPIvbtraffic.vbItvbcanvbbevbeithervbavbproxyvborvbavbspe
cificvbpartvbofvbyourvbapplicationvbstackvbthatvbcomesvbintovbplayvbbeforevbdatav
bisvbprocessed.vbAdditionally,vbitvbcanvbimplement vbaccessvbcontrols,vbratevbli
miting,vblogging,vbmetrics,vbandvbsecurityvbfiltering.
ApplicationvbNormativevbFrameworkvb(ANF)vb-vbcorrectvbanswer✔ ✔
Avbsubsetvbofvbanvborganizationalvbnormativevbframeworkvb(ONF)vbthatvbco
ntainsvbonlyvbthevbinformationvbrequiredvbforvbavbspecificvbbusinessvbapplicati
onvbtovbreachvbthevbtargetedvblevelvbofvbtrust.vbTherevbisvbavbmany-to-
onevbrelationshipvbbetweenvbANFsvbandvbONFs.
applicationvbprogrammingvbinterfacesvb(APIs)vb-vbcorrectvbanswer✔ ✔
setsvbofvbroutines,vbstandards,vbprotocols,vbandvbtoolsvbforvbbuildingvbsoftwa
revbapplicationsvbtovbaccessvbavbweb-
basedvbsoftwarevbapplicationvborvbwebvbtool.vbThevbtwovbmostvbwidelyvbusedvb
APIvbformatsvbincludevbRESTvbandvbSOAP.
applicationvbsecurityvbmanagementvbprocessvb(ASMP)vb-vbcorrectvbanswer✔
✔
usedvbtovbmanagevbandvbmaintainvbANFsvbcreatedvbinvbfivevbsteps:vb■vbSpeci
fyingvbthevbapplicationvbrequirementsvbandvbenvironmentvb■vbAssessingvbapp
, licationvbsecurityvbrisksvb■vbCreatingvbandvbmaintainingvbthevbANFvb■vbProvis
ioningvbandvboperatingvbthevbapplicationvb■vbAuditingvbthevbsecurityvbofvbthevb
application
applicationvbvirtualizationvb-vbcorrectvbanswer✔ ✔
avbsoftwarevbtechnologyvbthatvballowsvbforvbencapsulationvbofvbapplicationvb
softwarevbexecutionvbonvbanvbunderlyingvboperatingvbsystem.
auditabilityvb-vbcorrectvbanswer✔ ✔
refersvbtovbsomethingvbbeingvbinvbthevbstatevbofvbreadinessvbforvbauditing.vbInv
bthevbcontextvbofvbcloudvbcomputing,vbitvbrefersvbtovbthevbabilityvbofvbanvborgani
zationvbtovbobtainvbspecificvbinformationvbregardingvbreportingvbandvbactions,
vbcontrols,vbandvbprocesses.
AustralianvbPrivacyvbActvbofvb1988vb-vbcorrectvbanswer✔ ✔
enactedvbinvb1988,vbisvbanvbAustralianvbregulationvbdetailingvbindividualvbpr
ivacyvbsafeguards.vbItvbincludesvblawsvbandvbrulesvbgoverningvbthevbcollection
,vbuse,vbstorage,vbandvbdisclosurevbofvbpersonalvbinformation,vbasvbwellvbasvbacc
essvbtovbandvbcorrectionvbofvbthatvbinformation.
authenticationvb-vbcorrectvbanswer✔ ✔
Thevbactvbofvbidentifyingvborvbverifyingvbthevbeligibilityvbofvbavbstation,vborigi
nator,vborvbindividualvbtovbaccessvbspecificvbcategoriesvbofvbinformation.vbTyp
ically,vbitvbisvbavbmeasurevbdesignedvbtovbprotectvbagainstvbfraudulentvbtransmi
ssionsvbbyvbestablishingvbthevbvalidityvbofvbavbtransmission,vbmessage,vbstatio
n,vborvboriginator.
