WGU D320 TEST PAPER EXAM QUESTIONS AND
ANSWERS SURE A+
✔✔54: Implements Operations
Which type of testing is most important for validating the effectiveness of disaster
recovery procedures - ✔✔A. Penetration Testing
B. Tabletop Exercises
C. Functional Testing
D. Load Testing
Correct Answer: C. Functional Testing
Explanation: Functional Testing is crucial for validating that disaster recovery
procedures work as intended and can restore operations. Tabletop Exercises are useful
for planning, Penetration Testing assesses security, and Load Testing measures
system performance under stress.
✔✔55: Conducts Risk Management
Which risk assessment method involves analyzing the potential impact of various risk
scenarios on business operations - ✔✔A. Qualitative Risk Assessment
B. Quantitative Risk Assessment
C. Business Impact Analysis (BIA)
D. Threat Modeling
Correct Answer: C. Business Impact Analysis (BIA)
✔✔55: Conducts Risk Management
Which risk assessment method involves analyzing the potential impact of various risk
scenarios on business operations - ✔✔A. Qualitative Risk Assessment
B. Quantitative Risk Assessment
C. Business Impact Analysis (BIA)
D. Threat Modeling
Correct Answer: C. Business Impact Analysis (BIA)
Explanation: BIA focuses on identifying the impact of different risk scenarios on
business operations, helping prioritize recovery efforts. Qualitative and Quantitative Risk
, Assessments evaluate risks differently (subjectively vs. numerically), and Threat
Modeling identifies potential threats to systems.
✔✔56: Identifies Legal, Compliance, and Ethical Concerns
Which principle under GDPR emphasizes that personal data should not be kept longer
than necessary - ✔✔A. Data Minimization
B. Purpose Limitation
C. Storage Limitation
D. Integrity and Confidentiality
Correct Answer: C. Storage Limitation
Explanation: The Storage Limitation principle under GDPR requires that personal data
be retained only as long as necessary for the purposes for which it was processed. Data
Minimization focuses on limiting data collection, Purpose Limitation on the specific
purpose of data processing, and Integrity and Confidentiality on protecting data from
unauthorized access.
✔✔57: Implements Secure Solutions
Which of the following security controls is designed to prevent unauthorized physical
access to cloud data centers - ✔✔A. Biometric Access Controls
B. Multi-Factor Authentication (MFA)
C. Firewalls
D. Encryption
Correct Answer: A. Biometric Access Controls
Explanation: Biometric Access Controls, such as fingerprint or retina scanners, prevent
unauthorized physical access to data centers. MFA protects digital access, Firewalls
control network traffic, and Encryption secures data, but none of these address physical
access.
✔✔58: Implements Operations
Which of the following activities is part of incident response operations in a cloud
environment - ✔✔A. Threat Modeling
B. Data Encryption
C. Root Cause Analysis
D. Capacity Planning
Correct Answer: C. Root Cause Analysis
Explanation: Root Cause Analysis is performed during incident response to determine
the underlying cause of an incident. Threat Modeling is part of risk assessment, Data
Encryption is a security control, and Capacity Planning is related to resource
management, not incident response.
✔✔59: Conducts Risk Management
Which term describes the maximum period of time that a business can tolerate the
absence or unavailability of a particular business function - ✔✔A. Recovery Point
Objective (RPO)
B. Maximum Tolerable Downtime (MTD)
ANSWERS SURE A+
✔✔54: Implements Operations
Which type of testing is most important for validating the effectiveness of disaster
recovery procedures - ✔✔A. Penetration Testing
B. Tabletop Exercises
C. Functional Testing
D. Load Testing
Correct Answer: C. Functional Testing
Explanation: Functional Testing is crucial for validating that disaster recovery
procedures work as intended and can restore operations. Tabletop Exercises are useful
for planning, Penetration Testing assesses security, and Load Testing measures
system performance under stress.
✔✔55: Conducts Risk Management
Which risk assessment method involves analyzing the potential impact of various risk
scenarios on business operations - ✔✔A. Qualitative Risk Assessment
B. Quantitative Risk Assessment
C. Business Impact Analysis (BIA)
D. Threat Modeling
Correct Answer: C. Business Impact Analysis (BIA)
✔✔55: Conducts Risk Management
Which risk assessment method involves analyzing the potential impact of various risk
scenarios on business operations - ✔✔A. Qualitative Risk Assessment
B. Quantitative Risk Assessment
C. Business Impact Analysis (BIA)
D. Threat Modeling
Correct Answer: C. Business Impact Analysis (BIA)
Explanation: BIA focuses on identifying the impact of different risk scenarios on
business operations, helping prioritize recovery efforts. Qualitative and Quantitative Risk
, Assessments evaluate risks differently (subjectively vs. numerically), and Threat
Modeling identifies potential threats to systems.
✔✔56: Identifies Legal, Compliance, and Ethical Concerns
Which principle under GDPR emphasizes that personal data should not be kept longer
than necessary - ✔✔A. Data Minimization
B. Purpose Limitation
C. Storage Limitation
D. Integrity and Confidentiality
Correct Answer: C. Storage Limitation
Explanation: The Storage Limitation principle under GDPR requires that personal data
be retained only as long as necessary for the purposes for which it was processed. Data
Minimization focuses on limiting data collection, Purpose Limitation on the specific
purpose of data processing, and Integrity and Confidentiality on protecting data from
unauthorized access.
✔✔57: Implements Secure Solutions
Which of the following security controls is designed to prevent unauthorized physical
access to cloud data centers - ✔✔A. Biometric Access Controls
B. Multi-Factor Authentication (MFA)
C. Firewalls
D. Encryption
Correct Answer: A. Biometric Access Controls
Explanation: Biometric Access Controls, such as fingerprint or retina scanners, prevent
unauthorized physical access to data centers. MFA protects digital access, Firewalls
control network traffic, and Encryption secures data, but none of these address physical
access.
✔✔58: Implements Operations
Which of the following activities is part of incident response operations in a cloud
environment - ✔✔A. Threat Modeling
B. Data Encryption
C. Root Cause Analysis
D. Capacity Planning
Correct Answer: C. Root Cause Analysis
Explanation: Root Cause Analysis is performed during incident response to determine
the underlying cause of an incident. Threat Modeling is part of risk assessment, Data
Encryption is a security control, and Capacity Planning is related to resource
management, not incident response.
✔✔59: Conducts Risk Management
Which term describes the maximum period of time that a business can tolerate the
absence or unavailability of a particular business function - ✔✔A. Recovery Point
Objective (RPO)
B. Maximum Tolerable Downtime (MTD)
