WGU D485 DGN2 Task 1: SWBTL LLC Cloud Security
Implementation Plan Actual Exam 2026/2027 – Complete
Exam-Style Questions with Detailed Rationales | 100%
Verified | Pass Guaranteed – A+ Graded
Section A: SWBTL LLC Business Context & Cloud Strategy
Q1: SWBTL LLC is migrating from leased data centers to Microsoft Azure Government.
Which factor is the PRIMARY driver for selecting Azure Government over standard Azure
commercial regions?
A. Lower cost per virtual machine hour
B. Compliance with U.S. government contractual requirements and enhanced security
controls for federal data [CORRECT]
C. Faster internet connectivity for public marketing websites
D. Elimination of all shared responsibility requirements
Correct Answer: B
Rationale: Azure Government is designed to meet U.S. government compliance
standards including FISMA and FedRAMP, which are required for SWBTL LLC's
government contracts. Option A is not the primary driver. Option C is unrelated to
government cloud selection. Option D is incorrect as shared responsibility still applies.
Q2: SWBTL LLC currently operates with over 2,000 professionals and faces escalating
costs and service interruptions from leased data centers. Migrating to Azure IaaS will
allow the company to:
A. Eliminate the need for any IT security staff
B. Scale resources up or down without capital expenditure while maintaining full control
over VMs and OS configurations [CORRECT]
C. Transfer all security responsibilities to Microsoft
D. Remove all encryption requirements for government contracts
Correct Answer: B
,Rationale: IaaS provides elasticity and scaling without capital expenditure while
allowing full control over VMs and configurations (NIST cloud definition). Option A is
false. Option C misrepresents the shared responsibility model. Option D violates
compliance requirements.
Q3: SWBTL LLC's current environment has no RBAC implementation, meaning all users
have the same access level. This condition MOST directly violates which security
principle?
A. Defense in depth
B. Principle of least privilege [CORRECT]
C. Security through obscurity
D. Zero trust architecture exclusively
Correct Answer: B
Rationale: Granting all users identical access levels violates the principle of least
privilege, which requires limiting access to only what is necessary for job functions.
Option A is broader. Option C is a discredited approach. Option D requires more than
just RBAC.
Q4: During the migration planning phase, SWBTL LLC identifies that vulnerability
scanning has not been performed for over two years. Which compliance framework
requirement is MOST directly implicated by this gap?
A. PCI DSS requirement for quarterly vulnerability scanning
B. FISMA/NIST SP 800-53 continuous monitoring and vulnerability management
requirements [CORRECT]
C. GDPR data portability requirements
D. ISO 9001 quality management standards
Correct Answer: B
Rationale: FISMA and NIST SP 800-53 require continuous monitoring and regular
vulnerability assessments. Option A also requires scanning but the question references
, government contracts (FISMA). Option C is European and not mentioned. Option D is a
quality standard, not a security scanning requirement.
Q5: SWBTL LLC plans to implement a Hub-and-Spoke network topology in Azure
Government. Which statement BEST describes the security benefit of this architecture?
A. It eliminates the need for firewalls entirely
B. It centralizes security controls and connectivity through a hub while isolating
departmental workloads in spokes [CORRECT]
C. It allows all departments to share a single network security group without restrictions
D. It removes the requirement for encryption in transit
Correct Answer: B
Rationale: Hub-and-Spoke topologies centralize security and connectivity while isolating
workloads, supporting departmental separation. Options A, C, and D describe insecure
or incorrect configurations.
Q6: SWBTL LLC's Accounting department handles payment card transactions, while IT
manages infrastructure and Marketing manages public websites. Which compliance
requirement necessitates strict departmental separation in the cloud environment?
A. FISMA only
B. PCI DSS only
C. Both FISMA and PCI DSS, which require access controls and separation of duties
[CORRECT]
D. Neither FISMA nor PCI DSS requires departmental separation
Correct Answer: C
Rationale: Both FISMA (via NIST SP 800-53 controls) and PCI DSS require access
restrictions and separation of duties to protect sensitive data. Options A and B are
incomplete. Option D is incorrect.
Q7: SWBTL LLC's current data centers experience frequent service interruptions. Which
NIST essential characteristic of cloud computing directly addresses this reliability
concern through resource pooling and rapid elasticity?
Implementation Plan Actual Exam 2026/2027 – Complete
Exam-Style Questions with Detailed Rationales | 100%
Verified | Pass Guaranteed – A+ Graded
Section A: SWBTL LLC Business Context & Cloud Strategy
Q1: SWBTL LLC is migrating from leased data centers to Microsoft Azure Government.
Which factor is the PRIMARY driver for selecting Azure Government over standard Azure
commercial regions?
A. Lower cost per virtual machine hour
B. Compliance with U.S. government contractual requirements and enhanced security
controls for federal data [CORRECT]
C. Faster internet connectivity for public marketing websites
D. Elimination of all shared responsibility requirements
Correct Answer: B
Rationale: Azure Government is designed to meet U.S. government compliance
standards including FISMA and FedRAMP, which are required for SWBTL LLC's
government contracts. Option A is not the primary driver. Option C is unrelated to
government cloud selection. Option D is incorrect as shared responsibility still applies.
Q2: SWBTL LLC currently operates with over 2,000 professionals and faces escalating
costs and service interruptions from leased data centers. Migrating to Azure IaaS will
allow the company to:
A. Eliminate the need for any IT security staff
B. Scale resources up or down without capital expenditure while maintaining full control
over VMs and OS configurations [CORRECT]
C. Transfer all security responsibilities to Microsoft
D. Remove all encryption requirements for government contracts
Correct Answer: B
,Rationale: IaaS provides elasticity and scaling without capital expenditure while
allowing full control over VMs and configurations (NIST cloud definition). Option A is
false. Option C misrepresents the shared responsibility model. Option D violates
compliance requirements.
Q3: SWBTL LLC's current environment has no RBAC implementation, meaning all users
have the same access level. This condition MOST directly violates which security
principle?
A. Defense in depth
B. Principle of least privilege [CORRECT]
C. Security through obscurity
D. Zero trust architecture exclusively
Correct Answer: B
Rationale: Granting all users identical access levels violates the principle of least
privilege, which requires limiting access to only what is necessary for job functions.
Option A is broader. Option C is a discredited approach. Option D requires more than
just RBAC.
Q4: During the migration planning phase, SWBTL LLC identifies that vulnerability
scanning has not been performed for over two years. Which compliance framework
requirement is MOST directly implicated by this gap?
A. PCI DSS requirement for quarterly vulnerability scanning
B. FISMA/NIST SP 800-53 continuous monitoring and vulnerability management
requirements [CORRECT]
C. GDPR data portability requirements
D. ISO 9001 quality management standards
Correct Answer: B
Rationale: FISMA and NIST SP 800-53 require continuous monitoring and regular
vulnerability assessments. Option A also requires scanning but the question references
, government contracts (FISMA). Option C is European and not mentioned. Option D is a
quality standard, not a security scanning requirement.
Q5: SWBTL LLC plans to implement a Hub-and-Spoke network topology in Azure
Government. Which statement BEST describes the security benefit of this architecture?
A. It eliminates the need for firewalls entirely
B. It centralizes security controls and connectivity through a hub while isolating
departmental workloads in spokes [CORRECT]
C. It allows all departments to share a single network security group without restrictions
D. It removes the requirement for encryption in transit
Correct Answer: B
Rationale: Hub-and-Spoke topologies centralize security and connectivity while isolating
workloads, supporting departmental separation. Options A, C, and D describe insecure
or incorrect configurations.
Q6: SWBTL LLC's Accounting department handles payment card transactions, while IT
manages infrastructure and Marketing manages public websites. Which compliance
requirement necessitates strict departmental separation in the cloud environment?
A. FISMA only
B. PCI DSS only
C. Both FISMA and PCI DSS, which require access controls and separation of duties
[CORRECT]
D. Neither FISMA nor PCI DSS requires departmental separation
Correct Answer: C
Rationale: Both FISMA (via NIST SP 800-53 controls) and PCI DSS require access
restrictions and separation of duties to protect sensitive data. Options A and B are
incomplete. Option D is incorrect.
Q7: SWBTL LLC's current data centers experience frequent service interruptions. Which
NIST essential characteristic of cloud computing directly addresses this reliability
concern through resource pooling and rapid elasticity?
