WGU D485 DGN2 Task 1 Cloud Security Implementation Plan
Actual Exam 2026/2027 – Complete Solution Guide with
Detailed Rationales | 100% Verified | Pass Guaranteed – A+
Graded
Section A: Cloud Architecture & Service Models (10 Questions)
Q1: SWBTL LLC, a national logistics company, is migrating to Azure. The company
requires full control over the operating system, network configuration, and security
settings while leveraging Azure's physical infrastructure. Which cloud service model
best meets these requirements?
A. SaaS (Software as a Service)
B. PaaS (Platform as a Service)
C. IaaS (Infrastructure as a Service) [CORRECT]
D. FaaS (Function as a Service)
Correct Answer: C
Rationale: IaaS provides the highest level of customer control over OS, network, and
security configurations while the cloud provider manages the physical infrastructure.
SaaS (Option A) offers least control. PaaS (Option B) abstracts the OS layer. FaaS
(Option D) is serverless with minimal configuration control.
,Q2: SWBTL LLC processes payment card transactions and holds government contracts
requiring FISMA compliance. Which Azure deployment model is most appropriate for
these stringent regulatory requirements?
A. Azure Public Cloud
B. Azure Government [CORRECT]
C. Azure Government [CORRECT]
D. Azure Community Cloud
Correct Answer: C
Rationale: Azure Government is specifically designed for US government agencies and
contractors, offering FedRAMP authorization, DISA approval, and DoD IL5 compliance
required for FISMA. Azure Public (Option A) lacks these government-specific
certifications. Option D serves specific industry communities.
Q3: In the shared responsibility model for IaaS, which security component is the
customer's responsibility?
A. Physical security of data centers
B. Hypervisor maintenance
C. Operating system patching and firewall configuration [CORRECT]
D. Operating system patching and firewall configuration [CORRECT]
Correct Answer: C
,Rationale: In IaaS, the customer is responsible for "security IN the cloud" including OS,
applications, data, network controls, and identity management. The provider secures
"security OF the cloud" including physical facilities, host infrastructure, and hypervisor
(Options A and B).
Q4: SWBTL LLC is considering containerization for its logistics application to improve
deployment efficiency. Which statement correctly describes a key difference between
containers and virtual machines?
A. Containers require a full guest OS for each instance
B. Containers share the host OS kernel, making them more lightweight than VMs
[CORRECT]
C. Containers share the host OS kernel, making them more lightweight than VMs
[CORRECT]
D. VMs are always more portable across cloud providers than containers
Correct Answer: C
Rationale: Containers share the host OS kernel, eliminating the need for multiple guest
OS instances and reducing overhead compared to VMs. Option A describes VMs.
Option D is incorrect—containers are highly portable via Docker images.
Q5: Which NIST SP 800-145 essential characteristic allows cloud consumers to
provision computing capabilities automatically without requiring human interaction with
service providers?
A. Broad network access
, B. On-demand self-service [CORRECT]
C. On-demand self-service [CORRECT]
D. Resource pooling
Correct Answer: C
Rationale: On-demand self-service enables consumers to automatically provision and
manage resources (servers, storage, networks) through self-service portals without
provider intervention. Option A refers to network availability. Option D refers to
multi-tenant resource sharing.
Q6: SWBTL LLC's microservices architecture consists of small, loosely coupled services
communicating via APIs. Which benefit does this architecture provide for security?
A. Increased attack surface due to multiple entry points
B. Independent deployment and isolation of security vulnerabilities per service
[CORRECT]
C. Independent deployment and isolation of security vulnerabilities per service
[CORRECT]
D. Requirement for monolithic security controls
Correct Answer: C
Rationale: Microservices enable independent security updates, containment of breaches
to individual services, and granular access controls. Option A is a risk, not a benefit.
Option D contradicts microservices principles.
Actual Exam 2026/2027 – Complete Solution Guide with
Detailed Rationales | 100% Verified | Pass Guaranteed – A+
Graded
Section A: Cloud Architecture & Service Models (10 Questions)
Q1: SWBTL LLC, a national logistics company, is migrating to Azure. The company
requires full control over the operating system, network configuration, and security
settings while leveraging Azure's physical infrastructure. Which cloud service model
best meets these requirements?
A. SaaS (Software as a Service)
B. PaaS (Platform as a Service)
C. IaaS (Infrastructure as a Service) [CORRECT]
D. FaaS (Function as a Service)
Correct Answer: C
Rationale: IaaS provides the highest level of customer control over OS, network, and
security configurations while the cloud provider manages the physical infrastructure.
SaaS (Option A) offers least control. PaaS (Option B) abstracts the OS layer. FaaS
(Option D) is serverless with minimal configuration control.
,Q2: SWBTL LLC processes payment card transactions and holds government contracts
requiring FISMA compliance. Which Azure deployment model is most appropriate for
these stringent regulatory requirements?
A. Azure Public Cloud
B. Azure Government [CORRECT]
C. Azure Government [CORRECT]
D. Azure Community Cloud
Correct Answer: C
Rationale: Azure Government is specifically designed for US government agencies and
contractors, offering FedRAMP authorization, DISA approval, and DoD IL5 compliance
required for FISMA. Azure Public (Option A) lacks these government-specific
certifications. Option D serves specific industry communities.
Q3: In the shared responsibility model for IaaS, which security component is the
customer's responsibility?
A. Physical security of data centers
B. Hypervisor maintenance
C. Operating system patching and firewall configuration [CORRECT]
D. Operating system patching and firewall configuration [CORRECT]
Correct Answer: C
,Rationale: In IaaS, the customer is responsible for "security IN the cloud" including OS,
applications, data, network controls, and identity management. The provider secures
"security OF the cloud" including physical facilities, host infrastructure, and hypervisor
(Options A and B).
Q4: SWBTL LLC is considering containerization for its logistics application to improve
deployment efficiency. Which statement correctly describes a key difference between
containers and virtual machines?
A. Containers require a full guest OS for each instance
B. Containers share the host OS kernel, making them more lightweight than VMs
[CORRECT]
C. Containers share the host OS kernel, making them more lightweight than VMs
[CORRECT]
D. VMs are always more portable across cloud providers than containers
Correct Answer: C
Rationale: Containers share the host OS kernel, eliminating the need for multiple guest
OS instances and reducing overhead compared to VMs. Option A describes VMs.
Option D is incorrect—containers are highly portable via Docker images.
Q5: Which NIST SP 800-145 essential characteristic allows cloud consumers to
provision computing capabilities automatically without requiring human interaction with
service providers?
A. Broad network access
, B. On-demand self-service [CORRECT]
C. On-demand self-service [CORRECT]
D. Resource pooling
Correct Answer: C
Rationale: On-demand self-service enables consumers to automatically provision and
manage resources (servers, storage, networks) through self-service portals without
provider intervention. Option A refers to network availability. Option D refers to
multi-tenant resource sharing.
Q6: SWBTL LLC's microservices architecture consists of small, loosely coupled services
communicating via APIs. Which benefit does this architecture provide for security?
A. Increased attack surface due to multiple entry points
B. Independent deployment and isolation of security vulnerabilities per service
[CORRECT]
C. Independent deployment and isolation of security vulnerabilities per service
[CORRECT]
D. Requirement for monolithic security controls
Correct Answer: C
Rationale: Microservices enable independent security updates, containment of breaches
to individual services, and granular access controls. Option A is a risk, not a benefit.
Option D contradicts microservices principles.
