WGU E025 • Cloud and Network Security Models • 2026 Practice Exam
WGU E025 — Cloud and Network Security
Models
2026 PRACTICE EXAM — 50 ORIGINAL QUESTIONS
Study guide document • Correct answers + rationales
Important: This is an original practice exam for study and review. It is not an official WGU exam
and does not reproduce proprietary WGU assessment questions.
Instructions
Choose the single best answer for each question.
Attempt the questions before checking the answer key.
Use the rationales to understand the security concept behind each answer.
Suggested practice benchmark: 80% or higher.
Original study material — not an official WGU assessment
, WGU E025 • Cloud and Network Security Models • 2026 Practice Exam
Part I — Practice Questions
1. Which security principle gives a user only the permissions required to perform
assigned duties?
A. Defense in depth
B. Least privilege
C. Separation of duties
D. Fail-open
2. Which cloud service model gives customers the greatest control over the operating
system and virtual network configuration?
A. SaaS
B. PaaS
C. IaaS
D. SECaaS
3. Which deployment model combines private infrastructure with resources from a
public cloud?
A. Community cloud
B. Hybrid cloud
C. Private cloud
D. Multitenant-only cloud
4. What is the primary purpose of network segmentation?
A. Increase bandwidth automatically
B. Eliminate authentication
C. Limit lateral movement and isolate systems
D. Replace encryption
5. Which protocol is normally used to provide encrypted web traffic?
A. HTTP
B. FTP
C. HTTPS
D. Telnet
Original study material — not an official WGU assessment
, WGU E025 • Cloud and Network Security Models • 2026 Practice Exam
6. Which control best protects data at rest in a cloud storage service?
A. Encryption at rest
B. DNS caching
C. Load balancing
D. Port mirroring
7. What is the main security purpose of multifactor authentication?
A. Eliminate the need for usernames
B. Require multiple independent authentication factors
C. Encrypt every database
D. Increase network bandwidth
8. Which example represents something you have?
A. Password
B. Fingerprint
C. Hardware security token
D. PIN
9. What does a firewall primarily do?
A. Detect every type of malware
B. Enforce traffic-control rules between network boundaries
C. Back up databases
D. Manage user salaries
10. Which device or service is designed to detect and potentially block malicious
network activity based on inspected traffic?
A. IDS/IPS
B. DHCP server
C. NTP server
D. Print server
11. What is the primary function of DNS?
A. Translate domain names into network addresses
B. Encrypt files
Original study material — not an official WGU assessment
WGU E025 — Cloud and Network Security
Models
2026 PRACTICE EXAM — 50 ORIGINAL QUESTIONS
Study guide document • Correct answers + rationales
Important: This is an original practice exam for study and review. It is not an official WGU exam
and does not reproduce proprietary WGU assessment questions.
Instructions
Choose the single best answer for each question.
Attempt the questions before checking the answer key.
Use the rationales to understand the security concept behind each answer.
Suggested practice benchmark: 80% or higher.
Original study material — not an official WGU assessment
, WGU E025 • Cloud and Network Security Models • 2026 Practice Exam
Part I — Practice Questions
1. Which security principle gives a user only the permissions required to perform
assigned duties?
A. Defense in depth
B. Least privilege
C. Separation of duties
D. Fail-open
2. Which cloud service model gives customers the greatest control over the operating
system and virtual network configuration?
A. SaaS
B. PaaS
C. IaaS
D. SECaaS
3. Which deployment model combines private infrastructure with resources from a
public cloud?
A. Community cloud
B. Hybrid cloud
C. Private cloud
D. Multitenant-only cloud
4. What is the primary purpose of network segmentation?
A. Increase bandwidth automatically
B. Eliminate authentication
C. Limit lateral movement and isolate systems
D. Replace encryption
5. Which protocol is normally used to provide encrypted web traffic?
A. HTTP
B. FTP
C. HTTPS
D. Telnet
Original study material — not an official WGU assessment
, WGU E025 • Cloud and Network Security Models • 2026 Practice Exam
6. Which control best protects data at rest in a cloud storage service?
A. Encryption at rest
B. DNS caching
C. Load balancing
D. Port mirroring
7. What is the main security purpose of multifactor authentication?
A. Eliminate the need for usernames
B. Require multiple independent authentication factors
C. Encrypt every database
D. Increase network bandwidth
8. Which example represents something you have?
A. Password
B. Fingerprint
C. Hardware security token
D. PIN
9. What does a firewall primarily do?
A. Detect every type of malware
B. Enforce traffic-control rules between network boundaries
C. Back up databases
D. Manage user salaries
10. Which device or service is designed to detect and potentially block malicious
network activity based on inspected traffic?
A. IDS/IPS
B. DHCP server
C. NTP server
D. Print server
11. What is the primary function of DNS?
A. Translate domain names into network addresses
B. Encrypt files
Original study material — not an official WGU assessment