WGU D320 - Managing Cloud Security Objective Assessment
(OA) Practice Exam| Complete Exam Questions with Verified
Correct Answers and Detailed Explanations – Latest Update
2026/2027 | Graded A+
Question 1
Which cloud service model gives the customer the greatest responsibility for
managing the operating system, middleware, and applications?
A. Software as a Service (SaaS)
B. Platform as a Service (PaaS)
C. Infrastructure as a Service (IaaS)
D. Function as a Service (FaaS)
Correct Answer: C. Infrastructure as a Service (IaaS)
Explanation: In IaaS, the cloud provider manages the physical infrastructure
while the customer is responsible for operating systems, applications,
middleware, and much of the security configuration. Understanding the
shared responsibility model is one of the core competencies of D320.
Question 2
Which cloud deployment model is designed exclusively for a single
organization?
A. Public cloud
B. Hybrid cloud
C. Community cloud
D. Private cloud
Correct Answer: D. Private cloud
Explanation: A private cloud provides dedicated infrastructure for one
organization, offering greater control, customization, and security than public
cloud environments.
1|Page
,Question 3
What is the primary purpose of data classification?
A. Increase internet speed
B. Identify the business value and protection requirements of information
C. Reduce storage costs only
D. Improve CPU utilization
Correct Answer: B. Identify the business value and protection
requirements of information
Explanation: Data classification determines how sensitive information is and
dictates the appropriate security controls throughout its lifecycle.
Question 4
Which security principle ensures that information is accessible only to
authorized individuals?
A. Integrity
B. Availability
C. Confidentiality
D. Accountability
Correct Answer: C. Confidentiality
Explanation: Confidentiality protects information from unauthorized
disclosure through encryption, access controls, and authentication.
Question 5
Encryption primarily supports which component of the CIA Triad?
A. Availability only
2|Page
,B. Confidentiality
C. Integrity only
D. Accountability
Correct Answer: B. Confidentiality
Explanation: Encryption converts readable information into ciphertext,
preventing unauthorized users from viewing sensitive data.
Question 6
Which cloud characteristic allows computing resources to expand
automatically when demand increases?
A. Resource pooling
B. Elasticity
C. Virtualization
D. Automation
Correct Answer: B. Elasticity
Explanation: Elasticity enables cloud environments to rapidly scale resources
up or down according to workload demands.
Question 7
What is virtualization?
A. Encrypting data before storage
B. Creating multiple virtual systems on a single physical host
C. Compressing files
3|Page
, D. Monitoring network traffic
Correct Answer: B. Creating multiple virtual systems on a single physical
host
Explanation: Virtualization allows multiple operating systems to share
physical hardware while remaining logically isolated.
Question 8
Which technology monitors cloud services while enforcing organizational
security policies?
A. CASB
B. IDS
C. Hub
D. Bridge
Correct Answer: A. CASB
Explanation: A Cloud Access Security Broker (CASB) provides visibility,
policy enforcement, threat protection, and compliance monitoring between
users and cloud providers.
Question 9
Which risk treatment strategy involves purchasing cyber insurance?
A. Avoidance
B. Mitigation
C. Transfer
D. Acceptance
4|Page
(OA) Practice Exam| Complete Exam Questions with Verified
Correct Answers and Detailed Explanations – Latest Update
2026/2027 | Graded A+
Question 1
Which cloud service model gives the customer the greatest responsibility for
managing the operating system, middleware, and applications?
A. Software as a Service (SaaS)
B. Platform as a Service (PaaS)
C. Infrastructure as a Service (IaaS)
D. Function as a Service (FaaS)
Correct Answer: C. Infrastructure as a Service (IaaS)
Explanation: In IaaS, the cloud provider manages the physical infrastructure
while the customer is responsible for operating systems, applications,
middleware, and much of the security configuration. Understanding the
shared responsibility model is one of the core competencies of D320.
Question 2
Which cloud deployment model is designed exclusively for a single
organization?
A. Public cloud
B. Hybrid cloud
C. Community cloud
D. Private cloud
Correct Answer: D. Private cloud
Explanation: A private cloud provides dedicated infrastructure for one
organization, offering greater control, customization, and security than public
cloud environments.
1|Page
,Question 3
What is the primary purpose of data classification?
A. Increase internet speed
B. Identify the business value and protection requirements of information
C. Reduce storage costs only
D. Improve CPU utilization
Correct Answer: B. Identify the business value and protection
requirements of information
Explanation: Data classification determines how sensitive information is and
dictates the appropriate security controls throughout its lifecycle.
Question 4
Which security principle ensures that information is accessible only to
authorized individuals?
A. Integrity
B. Availability
C. Confidentiality
D. Accountability
Correct Answer: C. Confidentiality
Explanation: Confidentiality protects information from unauthorized
disclosure through encryption, access controls, and authentication.
Question 5
Encryption primarily supports which component of the CIA Triad?
A. Availability only
2|Page
,B. Confidentiality
C. Integrity only
D. Accountability
Correct Answer: B. Confidentiality
Explanation: Encryption converts readable information into ciphertext,
preventing unauthorized users from viewing sensitive data.
Question 6
Which cloud characteristic allows computing resources to expand
automatically when demand increases?
A. Resource pooling
B. Elasticity
C. Virtualization
D. Automation
Correct Answer: B. Elasticity
Explanation: Elasticity enables cloud environments to rapidly scale resources
up or down according to workload demands.
Question 7
What is virtualization?
A. Encrypting data before storage
B. Creating multiple virtual systems on a single physical host
C. Compressing files
3|Page
, D. Monitoring network traffic
Correct Answer: B. Creating multiple virtual systems on a single physical
host
Explanation: Virtualization allows multiple operating systems to share
physical hardware while remaining logically isolated.
Question 8
Which technology monitors cloud services while enforcing organizational
security policies?
A. CASB
B. IDS
C. Hub
D. Bridge
Correct Answer: A. CASB
Explanation: A Cloud Access Security Broker (CASB) provides visibility,
policy enforcement, threat protection, and compliance monitoring between
users and cloud providers.
Question 9
Which risk treatment strategy involves purchasing cyber insurance?
A. Avoidance
B. Mitigation
C. Transfer
D. Acceptance
4|Page
