WGU E025 Cloud and Network Security Models OA Exam |
200 Practice Questions & Detailed Answers | Objective
Assessment Test Bank | A+ Guide
Question 1
Which security model operates on the principle that no entity, whether inside or outside the network
perimeter, should be automatically trusted?
A) The CastleandMoat Model
B) The Zero Trust Model
C) The Permissive Security Model
D) The Traditional Perimeter Model
Answer: B) The Zero Trust Model
Explanation: Zero Trust is built on the "never trust, always verify" principle, requiring identity
verification for every access attempt regardless of the user's network location.
Question 2
In the Shared Responsibility Model for Infrastructure as a Service (IaaS), which of the following is the
sole responsibility of the customer?
A) Physical security of the data center
B) Maintenance of the underlying virtualization layer
C) Security of the guest operating system and applications
D) Disposal of decommissioned hard drives
,Answer: C) Security of the guest operating system and applications
Explanation: In IaaS, the provider manages the physical infrastructure, while the customer is responsible
for everything from the OS upward, including guest OS security and applications.
Question 3
Which cloud security concept involves dividing a network into smaller, isolated segments to contain
potential breaches and limit lateral movement?
A) Data Encapsulation
B) Microsegmentation
C) Vertical Scaling
D) Load Balancing
Answer: B) Microsegmentation
Explanation: Microsegmentation allows granular security policies to be applied to individual workloads,
preventing an attacker from moving laterally across the network after an initial breach.
Question 4
A security administrator is implementing a "Defense in Depth" strategy. Which of the following best
describes this approach?
A) Relying on a single, highend enterprise firewall to protect all data
B) Using multiple layers of security controls to provide redundancy if one fails
C) Moving all sensitive data to a single offsite physical server
,D) Ensuring that only the IT Manager has access to the cloud console
Answer: B) Using multiple layers of security controls to provide redundancy if one fails
Explanation: Defense in Depth uses multiple, overlapping layers of security (physical, technical,
administrative) so that if one layer is breached, other layers remain in place to protect the asset.
Question 5
Which protocol is primarily used to secure data in transit between a web browser and a cloud based web
application?
A) FTP
B) SNMP
C) TLS (Transport Layer Security)
D) ICMP
Answer: C) TLS (Transport Layer Security)
Explanation: TLS provides encryption and integrity for data transmitted between a web browser and
web application, protecting against eavesdropping and tampering.
Question 6
In the CIA Triad, which element ensures that information is accessible only to those who are authorized
to have access?
A) Integrity
, B) Availability
C) Confidentiality
D) Authentication
Answer: C) Confidentiality
Explanation: Confidentiality ensures that data is accessible only to authorized subjects. Integrity assures
data has not been altered, while availability ensures timely, reliable access.
Question 7
Which cloud service model gives the customer the most control over the underlying infrastructure?
A) SaaS (Software as a Service)
B) PaaS (Platform as a Service)
C) IaaS (Infrastructure as a Service)
D) FaaS (Function as a Service)
Answer: C) IaaS (Infrastructure as a Service)
Explanation: IaaS provides the consumer with provisioning processing, storage, networks, and other
fundamental computing resources where the consumer can deploy and run arbitrary software, including
operating systems and applications.
Question 8
Under the Shared Responsibility Model for SaaS, what is the customer responsible for?
200 Practice Questions & Detailed Answers | Objective
Assessment Test Bank | A+ Guide
Question 1
Which security model operates on the principle that no entity, whether inside or outside the network
perimeter, should be automatically trusted?
A) The CastleandMoat Model
B) The Zero Trust Model
C) The Permissive Security Model
D) The Traditional Perimeter Model
Answer: B) The Zero Trust Model
Explanation: Zero Trust is built on the "never trust, always verify" principle, requiring identity
verification for every access attempt regardless of the user's network location.
Question 2
In the Shared Responsibility Model for Infrastructure as a Service (IaaS), which of the following is the
sole responsibility of the customer?
A) Physical security of the data center
B) Maintenance of the underlying virtualization layer
C) Security of the guest operating system and applications
D) Disposal of decommissioned hard drives
,Answer: C) Security of the guest operating system and applications
Explanation: In IaaS, the provider manages the physical infrastructure, while the customer is responsible
for everything from the OS upward, including guest OS security and applications.
Question 3
Which cloud security concept involves dividing a network into smaller, isolated segments to contain
potential breaches and limit lateral movement?
A) Data Encapsulation
B) Microsegmentation
C) Vertical Scaling
D) Load Balancing
Answer: B) Microsegmentation
Explanation: Microsegmentation allows granular security policies to be applied to individual workloads,
preventing an attacker from moving laterally across the network after an initial breach.
Question 4
A security administrator is implementing a "Defense in Depth" strategy. Which of the following best
describes this approach?
A) Relying on a single, highend enterprise firewall to protect all data
B) Using multiple layers of security controls to provide redundancy if one fails
C) Moving all sensitive data to a single offsite physical server
,D) Ensuring that only the IT Manager has access to the cloud console
Answer: B) Using multiple layers of security controls to provide redundancy if one fails
Explanation: Defense in Depth uses multiple, overlapping layers of security (physical, technical,
administrative) so that if one layer is breached, other layers remain in place to protect the asset.
Question 5
Which protocol is primarily used to secure data in transit between a web browser and a cloud based web
application?
A) FTP
B) SNMP
C) TLS (Transport Layer Security)
D) ICMP
Answer: C) TLS (Transport Layer Security)
Explanation: TLS provides encryption and integrity for data transmitted between a web browser and
web application, protecting against eavesdropping and tampering.
Question 6
In the CIA Triad, which element ensures that information is accessible only to those who are authorized
to have access?
A) Integrity
, B) Availability
C) Confidentiality
D) Authentication
Answer: C) Confidentiality
Explanation: Confidentiality ensures that data is accessible only to authorized subjects. Integrity assures
data has not been altered, while availability ensures timely, reliable access.
Question 7
Which cloud service model gives the customer the most control over the underlying infrastructure?
A) SaaS (Software as a Service)
B) PaaS (Platform as a Service)
C) IaaS (Infrastructure as a Service)
D) FaaS (Function as a Service)
Answer: C) IaaS (Infrastructure as a Service)
Explanation: IaaS provides the consumer with provisioning processing, storage, networks, and other
fundamental computing resources where the consumer can deploy and run arbitrary software, including
operating systems and applications.
Question 8
Under the Shared Responsibility Model for SaaS, what is the customer responsible for?
