WGU C838 MANAGING CLOUD SECURITY | COMPLETE EXAM 2026/2027 |
QUESTIONS WITH VERIFIED SOLUTIONS - UPDATED VERSION
WGU C838 Managing Cloud Security
Q1. What is cloud computing? CORRECT ANSWER A model for enabling
ubiquitous, convenient, on-demand network access to a shared pool of
configurable computing resources.
Q2. What are the five essential characteristics of cloud computing per
NIST? CORRECT ANSWER On-demand self-service, broad network
access, resource pooling, rapid elasticity, and measured service.
Q3. What is multitenancy? CORRECT ANSWER The use of a single
instance of software or infrastructure to serve multiple customers
(tenants) simultaneously while keeping their data isolated.
Q4. What is the difference between a public cloud and a private cloud?
CORRECT ANSWER Public cloud is owned by a third-party provider and
shared among multiple organizations; private cloud is provisioned for
exclusive use by a single organization.
Q5. What is a community cloud? CORRECT ANSWER Infrastructure
shared by several organizations with common concerns (e.g., mission,
security, compliance).
Q6. What is a hybrid cloud? CORRECT ANSWER A composition of two
or more distinct cloud infrastructures (private, public, community)
bound by technology enabling data and application portability.
Q7. What is Infrastructure as a Service (IaaS)? CORRECT ANSWER A
cloud service model providing virtualized computing resources
(servers, storage, networking) over the internet.
,Q8. What is Platform as a Service (PaaS)? CORRECT ANSWER A cloud
service model providing a platform allowing customers to develop, run,
and manage applications without dealing with underlying infrastructure.
Q9. What is Software as a Service (SaaS)? CORRECT ANSWER A cloud
service model where applications are hosted by a vendor/provider and
made available to customers over the internet.
Q10. In the shared responsibility model, who is responsible for security
"of" the cloud? CORRECT ANSWER The cloud service provider (CSP) is
responsible for security of the cloud (physical, network, host
infrastructure).
Q11. In the shared responsibility model, who is responsible for security
"in" the cloud? CORRECT ANSWER The customer is responsible for
security in the cloud (data, IAM, OS, applications, network traffic
protection).
Q12. What is the cloud consumer's responsibility in an IaaS model?
CORRECT ANSWER The consumer manages the OS, middleware,
runtime, data, and applications; the CSP manages the hypervisor,
physical infrastructure, and network.
Q13. What is the cloud consumer's responsibility in a SaaS model?
CORRECT ANSWER The consumer is primarily responsible for data and
IAM; the CSP manages nearly everything else.
Q14. What is a hypervisor? CORRECT ANSWER Software, firmware, or
hardware that creates and runs virtual machines (VMs), also known as
a virtual machine monitor (VMM).
Q15. What is Type 1 hypervisor? CORRECT ANSWER A bare-metal
hypervisor that runs directly on the host hardware (e.g., VMware ESXi,
Microsoft Hyper-V, Xen).
Q16. What is Type 2 hypervisor? CORRECT ANSWER A hosted
hypervisor that runs on top of a conventional operating system (e.g.,
VMware Workstation, Oracle VirtualBox).
Q17. What is a virtual machine (VM)? CORRECT ANSWER An emulation
of a computer system that runs programs like a physical machine,
using virtualized hardware resources.
, Q18. What is a container? CORRECT ANSWER A lightweight,
standalone, executable package that includes everything needed to run
a piece of software, sharing the host OS kernel.
Q19. What is the difference between a VM and a container? CORRECT
ANSWER VMs virtualize hardware and include a full OS; containers
virtualize the OS and share the host kernel, making them more
lightweight.
Q20. What is serverless computing? CORRECT ANSWER A cloud
computing model where the CSP dynamically manages the allocation of
machine resources; customers write and deploy code without managing
servers (e.g., AWS Lambda).
Q21. What is virtualization sprawl? CORRECT ANSWER The
uncontrolled proliferation of virtual machines or instances in an
environment, leading to management and security challenges.
Q22. What is VM escape? CORRECT ANSWER An exploit where an
attacker breaks out of a virtual machine and interacts with the host OS
or other VMs.
Q23. What is a cloud access security broker (CASB)? CORRECT
ANSWER A security policy enforcement point placed between cloud
service consumers and providers to combine and interject enterprise
security policies.
Q24. What is a secure enclave or trusted execution environment (TEE)?
CORRECT ANSWER A secure area of a processor that ensures code
and data loaded inside are protected with respect to confidentiality and
integrity.
Q25. What is cloud bursting? CORRECT ANSWER A configuration where
an application runs in a private cloud and "bursts" into a public cloud
when demand exceeds capacity.
Q26. What is a cloud management plane? CORRECT ANSWER The
interface and APIs used to manage cloud resources, including
provisioning, configuration, and monitoring.
Q27. Why is the management plane a critical security target? CORRECT
ANSWER Because compromising it gives an attacker control over all
cloud resources, configurations, and dat CORRECT ANSWER
QUESTIONS WITH VERIFIED SOLUTIONS - UPDATED VERSION
WGU C838 Managing Cloud Security
Q1. What is cloud computing? CORRECT ANSWER A model for enabling
ubiquitous, convenient, on-demand network access to a shared pool of
configurable computing resources.
Q2. What are the five essential characteristics of cloud computing per
NIST? CORRECT ANSWER On-demand self-service, broad network
access, resource pooling, rapid elasticity, and measured service.
Q3. What is multitenancy? CORRECT ANSWER The use of a single
instance of software or infrastructure to serve multiple customers
(tenants) simultaneously while keeping their data isolated.
Q4. What is the difference between a public cloud and a private cloud?
CORRECT ANSWER Public cloud is owned by a third-party provider and
shared among multiple organizations; private cloud is provisioned for
exclusive use by a single organization.
Q5. What is a community cloud? CORRECT ANSWER Infrastructure
shared by several organizations with common concerns (e.g., mission,
security, compliance).
Q6. What is a hybrid cloud? CORRECT ANSWER A composition of two
or more distinct cloud infrastructures (private, public, community)
bound by technology enabling data and application portability.
Q7. What is Infrastructure as a Service (IaaS)? CORRECT ANSWER A
cloud service model providing virtualized computing resources
(servers, storage, networking) over the internet.
,Q8. What is Platform as a Service (PaaS)? CORRECT ANSWER A cloud
service model providing a platform allowing customers to develop, run,
and manage applications without dealing with underlying infrastructure.
Q9. What is Software as a Service (SaaS)? CORRECT ANSWER A cloud
service model where applications are hosted by a vendor/provider and
made available to customers over the internet.
Q10. In the shared responsibility model, who is responsible for security
"of" the cloud? CORRECT ANSWER The cloud service provider (CSP) is
responsible for security of the cloud (physical, network, host
infrastructure).
Q11. In the shared responsibility model, who is responsible for security
"in" the cloud? CORRECT ANSWER The customer is responsible for
security in the cloud (data, IAM, OS, applications, network traffic
protection).
Q12. What is the cloud consumer's responsibility in an IaaS model?
CORRECT ANSWER The consumer manages the OS, middleware,
runtime, data, and applications; the CSP manages the hypervisor,
physical infrastructure, and network.
Q13. What is the cloud consumer's responsibility in a SaaS model?
CORRECT ANSWER The consumer is primarily responsible for data and
IAM; the CSP manages nearly everything else.
Q14. What is a hypervisor? CORRECT ANSWER Software, firmware, or
hardware that creates and runs virtual machines (VMs), also known as
a virtual machine monitor (VMM).
Q15. What is Type 1 hypervisor? CORRECT ANSWER A bare-metal
hypervisor that runs directly on the host hardware (e.g., VMware ESXi,
Microsoft Hyper-V, Xen).
Q16. What is Type 2 hypervisor? CORRECT ANSWER A hosted
hypervisor that runs on top of a conventional operating system (e.g.,
VMware Workstation, Oracle VirtualBox).
Q17. What is a virtual machine (VM)? CORRECT ANSWER An emulation
of a computer system that runs programs like a physical machine,
using virtualized hardware resources.
, Q18. What is a container? CORRECT ANSWER A lightweight,
standalone, executable package that includes everything needed to run
a piece of software, sharing the host OS kernel.
Q19. What is the difference between a VM and a container? CORRECT
ANSWER VMs virtualize hardware and include a full OS; containers
virtualize the OS and share the host kernel, making them more
lightweight.
Q20. What is serverless computing? CORRECT ANSWER A cloud
computing model where the CSP dynamically manages the allocation of
machine resources; customers write and deploy code without managing
servers (e.g., AWS Lambda).
Q21. What is virtualization sprawl? CORRECT ANSWER The
uncontrolled proliferation of virtual machines or instances in an
environment, leading to management and security challenges.
Q22. What is VM escape? CORRECT ANSWER An exploit where an
attacker breaks out of a virtual machine and interacts with the host OS
or other VMs.
Q23. What is a cloud access security broker (CASB)? CORRECT
ANSWER A security policy enforcement point placed between cloud
service consumers and providers to combine and interject enterprise
security policies.
Q24. What is a secure enclave or trusted execution environment (TEE)?
CORRECT ANSWER A secure area of a processor that ensures code
and data loaded inside are protected with respect to confidentiality and
integrity.
Q25. What is cloud bursting? CORRECT ANSWER A configuration where
an application runs in a private cloud and "bursts" into a public cloud
when demand exceeds capacity.
Q26. What is a cloud management plane? CORRECT ANSWER The
interface and APIs used to manage cloud resources, including
provisioning, configuration, and monitoring.
Q27. Why is the management plane a critical security target? CORRECT
ANSWER Because compromising it gives an attacker control over all
cloud resources, configurations, and dat CORRECT ANSWER
