WGU E025
Cloud and Network Security
Models OA 2026
Objective Assessment
Questions & Answers
Updated
What You'll Get
WGU E025 OA questions & answers
Detailed answer rationales
Cloud & network security review
OA-style exam preparation
Instant PDF download
Updated for 2026 exam prep
,Question 1
A company is migrating its email system to Microsoft 365. The cloud provider is responsible for
maintaining the underlying physical infrastructure, while the customer is responsible for
managing user accounts and permissions.
Which cloud security concept is demonstrated?
A. Zero Trust Model
B. Shared Responsibility Model
C. Defense in Depth
D. Least Privilege
Correct Answer: B. Shared Responsibility Model
Rationale:
The Shared Responsibility Model defines which security responsibilities belong to the cloud
provider and which belong to the customer. The provider secures the cloud infrastructure, while
the customer secures identities, data, and configurations.
Question 2
A cloud service allows developers to deploy applications without managing operating systems or
virtual machines.
Which cloud service model is being used?
A. IaaS
B. SaaS
C. PaaS
D. On-Premises
Correct Answer: C. PaaS
Rationale:
Platform as a Service (PaaS) provides a managed environment for application development while
abstracting infrastructure management.
,Question 3
An organization wants every authentication request to be verified regardless of whether the user
is inside or outside the corporate network.
Which security model best supports this requirement?
A. Castle-and-Moat
B. Zero Trust
C. Bell-LaPadula
D. DAC
Correct Answer: B. Zero Trust
Rationale:
Zero Trust assumes no user or device is inherently trusted. Every access request requires
continuous verification based on identity, device health, and context.
Question 4
Which component of the CIA Triad ensures information cannot be modified without
authorization?
A. Availability
B. Confidentiality
C. Integrity
D. Authentication
Correct Answer: C. Integrity
Rationale:
Integrity ensures that data remains accurate, complete, and unaltered except by authorized users.
Question 5
, Which cloud deployment model provides infrastructure dedicated to a single organization?
A. Public Cloud
B. Community Cloud
C. Hybrid Cloud
D. Private Cloud
Correct Answer: D. Private Cloud
Rationale:
A private cloud is dedicated to one organization and offers greater control, customization, and
security.
Question 6
Which security principle grants users only the permissions necessary to perform their assigned
job functions?
A. Defense in Depth
B. Need to Know
C. Least Privilege
D. Separation of Duties
Correct Answer: C. Least Privilege
Rationale:
Least Privilege minimizes risk by restricting user permissions to only what is required for their
role.
Question 7
Which authentication method provides the strongest protection against phishing attacks?
A. Password only
B. PIN
Cloud and Network Security
Models OA 2026
Objective Assessment
Questions & Answers
Updated
What You'll Get
WGU E025 OA questions & answers
Detailed answer rationales
Cloud & network security review
OA-style exam preparation
Instant PDF download
Updated for 2026 exam prep
,Question 1
A company is migrating its email system to Microsoft 365. The cloud provider is responsible for
maintaining the underlying physical infrastructure, while the customer is responsible for
managing user accounts and permissions.
Which cloud security concept is demonstrated?
A. Zero Trust Model
B. Shared Responsibility Model
C. Defense in Depth
D. Least Privilege
Correct Answer: B. Shared Responsibility Model
Rationale:
The Shared Responsibility Model defines which security responsibilities belong to the cloud
provider and which belong to the customer. The provider secures the cloud infrastructure, while
the customer secures identities, data, and configurations.
Question 2
A cloud service allows developers to deploy applications without managing operating systems or
virtual machines.
Which cloud service model is being used?
A. IaaS
B. SaaS
C. PaaS
D. On-Premises
Correct Answer: C. PaaS
Rationale:
Platform as a Service (PaaS) provides a managed environment for application development while
abstracting infrastructure management.
,Question 3
An organization wants every authentication request to be verified regardless of whether the user
is inside or outside the corporate network.
Which security model best supports this requirement?
A. Castle-and-Moat
B. Zero Trust
C. Bell-LaPadula
D. DAC
Correct Answer: B. Zero Trust
Rationale:
Zero Trust assumes no user or device is inherently trusted. Every access request requires
continuous verification based on identity, device health, and context.
Question 4
Which component of the CIA Triad ensures information cannot be modified without
authorization?
A. Availability
B. Confidentiality
C. Integrity
D. Authentication
Correct Answer: C. Integrity
Rationale:
Integrity ensures that data remains accurate, complete, and unaltered except by authorized users.
Question 5
, Which cloud deployment model provides infrastructure dedicated to a single organization?
A. Public Cloud
B. Community Cloud
C. Hybrid Cloud
D. Private Cloud
Correct Answer: D. Private Cloud
Rationale:
A private cloud is dedicated to one organization and offers greater control, customization, and
security.
Question 6
Which security principle grants users only the permissions necessary to perform their assigned
job functions?
A. Defense in Depth
B. Need to Know
C. Least Privilege
D. Separation of Duties
Correct Answer: C. Least Privilege
Rationale:
Least Privilege minimizes risk by restricting user permissions to only what is required for their
role.
Question 7
Which authentication method provides the strongest protection against phishing attacks?
A. Password only
B. PIN
