WGU COURSE C838 — MANAGING CLOUD SECURITY OBJECTIVE
ASSESSMENT (OA) TEST BANK 250 QUESTIONS AND CORRECT
ANSWERS WITH DETAILED RATIONALES (A+ GRADED |
VERIFIED | LATEST 2026/2027)
SECTION 1: CLOUD CONCEPTS, ARCHITECTURE & DESIGN (Questions 1–35)
Question 1
Which NIST essential characteristic of cloud computing enables a consumer to
unilaterally provision computing capabilities automatically without requiring
human interaction with each service provider?
A) Measured service
B) Rapid elasticity
C) On-demand self-service
D) Broad network access
Answer: C
Rationale: On-demand self-service allows consumers to provision resources
automatically without provider human interaction. NIST SP 800-145 defines this
as the capability for unilateral automatic provisioning. Rapid elasticity (B)
refers to the ability to scale resources outward and inward automatically, not
the provisioning mechanism itself.
Question 2
Which cloud deployment model is provisioned for exclusive use by a single
organization comprising multiple consumers?
A) Public cloud
B) Community cloud
C) Private cloud
D) Hybrid cloud
Answer: C
Rationale: A private cloud, per NIST SP 800-145, is provisioned for exclusive
use by a single organization comprising multiple consumers (e.g., business
units). It may be owned, managed, and operated by the organization, a third
party, or some combination. A community cloud (B) is provisioned for exclusive
use by a specific community of consumers from organizations that have shared
concerns.
1
,Question 3
A healthcare startup deploys a patient portal application using a cloud
provider's managed database and application runtime environment, while the
startup retains responsibility for patient data classification, application
code security, and user access management. Which cloud service model is being
described?
A) Infrastructure as a Service (IaaS)
B) Platform as a Service (PaaS)
C) Software as a Service (SaaS)
D) Function as a Service (FaaS)
Answer: B
Rationale: This scenario describes the classic PaaS shared responsibility split.
The CSP manages the runtime, middleware, OS, and infrastructure, while the
customer manages applications, data, and user access. IaaS (A) is incorrect
because in IaaS the customer also manages the OS, middleware, and runtime.
Question 4
Which cloud service model provides the highest level of customer control?
A) Software as a Service (SaaS)
B) Platform as a Service (PaaS)
C) Infrastructure as a Service (IaaS)
D) Function as a Service (FaaS)
Answer: C
Rationale: IaaS gives customers the most control, as they manage the operating
systems, middleware, data, and applications, while the provider manages the
underlying hardware and virtualization. PaaS offers less control (over the
platform), and SaaS offers the least control (only the data and user access).
Question 5
In the Shared Responsibility Model for IaaS, which of the following is the
cloud provider's responsibility?
A) Securing customer data stored in the cloud
B) Patching the guest operating system
C) Securing the physical data center and the underlying hypervisor
D) Managing user access and identity
2
,Answer: C
Rationale: In the IaaS model, the cloud provider is responsible for security "of"
the cloud, which includes physical security of data centers, network
infrastructure, and the virtualization layer (hypervisor). The customer is
responsible for security "in" the cloud, including data, applications, and
guest OS.
Question 6
Which NIST essential characteristic of cloud computing refers to the ability to
scale resources outward and inward automatically?
A) On-demand self-service
B) Broad network access
C) Rapid elasticity
D) Measured service
Answer: C
Rationale: Rapid elasticity is defined by NIST SP 800-145 as the capability to
elastically provision and release resources to scale outward and inward
commensurately with demand. On-demand self-service (A) refers to automatic
provisioning without human interaction.
Question 7
What is the primary benefit of implementing a Cloud Access Security Broker
(CASB)?
A) It provides encryption for all cloud data at rest
B) It acts as a bridge between users and multiple cloud services, providing
visibility and control
C) It replaces the need for identity and access management
D) It serves as a backup solution for cloud data
Answer: B
Rationale: A CASB sits between an organization's users and the cloud service
providers. Its primary benefit is to provide visibility into cloud application
usage and enforce security policies such as authentication, encryption, and
access control across multiple cloud services.
Question 8
3
, Which cloud deployment model is characterized by infrastructure provisioned for
exclusive use by a specific community of consumers from organizations that
have shared concerns?
A) Public cloud
B) Private cloud
C) Community cloud
D) Hybrid cloud
Answer: C
Rationale: NIST SP 800-145 defines a community cloud as infrastructure
provisioned for exclusive use by a specific community of consumers from
organizations that have shared concerns (e.g., mission, security requirements,
policy, and compliance considerations). It may be owned, managed, and operated
by one or more of the organizations in the community, a third party, or some
combination.
Question 9
What is a key risk associated with cloud computing?
A) The inability to scale resources on demand
B) Limited geographic reach
C) The shared, multi-tenant environment, which can lead to data leakage or
"noisy neighbor" issues
D) The mandatory use of outdated hardware
Answer: C
Rationale: One of the significant risks in cloud computing is the shared,
multi-tenant environment. Without proper isolation, there is a risk of one
tenant accessing another's data or a "noisy neighbor" affecting performance.
Scalability and geographic reach are benefits of the cloud.
Question 10
Which NIST essential characteristic of cloud computing refers to monitoring,
controlling, and reporting resource usage to provide transparency for both the
provider and consumer?
A) On-demand self-service
B) Rapid elasticity
C) Measured service
D) Broad network access
4
ASSESSMENT (OA) TEST BANK 250 QUESTIONS AND CORRECT
ANSWERS WITH DETAILED RATIONALES (A+ GRADED |
VERIFIED | LATEST 2026/2027)
SECTION 1: CLOUD CONCEPTS, ARCHITECTURE & DESIGN (Questions 1–35)
Question 1
Which NIST essential characteristic of cloud computing enables a consumer to
unilaterally provision computing capabilities automatically without requiring
human interaction with each service provider?
A) Measured service
B) Rapid elasticity
C) On-demand self-service
D) Broad network access
Answer: C
Rationale: On-demand self-service allows consumers to provision resources
automatically without provider human interaction. NIST SP 800-145 defines this
as the capability for unilateral automatic provisioning. Rapid elasticity (B)
refers to the ability to scale resources outward and inward automatically, not
the provisioning mechanism itself.
Question 2
Which cloud deployment model is provisioned for exclusive use by a single
organization comprising multiple consumers?
A) Public cloud
B) Community cloud
C) Private cloud
D) Hybrid cloud
Answer: C
Rationale: A private cloud, per NIST SP 800-145, is provisioned for exclusive
use by a single organization comprising multiple consumers (e.g., business
units). It may be owned, managed, and operated by the organization, a third
party, or some combination. A community cloud (B) is provisioned for exclusive
use by a specific community of consumers from organizations that have shared
concerns.
1
,Question 3
A healthcare startup deploys a patient portal application using a cloud
provider's managed database and application runtime environment, while the
startup retains responsibility for patient data classification, application
code security, and user access management. Which cloud service model is being
described?
A) Infrastructure as a Service (IaaS)
B) Platform as a Service (PaaS)
C) Software as a Service (SaaS)
D) Function as a Service (FaaS)
Answer: B
Rationale: This scenario describes the classic PaaS shared responsibility split.
The CSP manages the runtime, middleware, OS, and infrastructure, while the
customer manages applications, data, and user access. IaaS (A) is incorrect
because in IaaS the customer also manages the OS, middleware, and runtime.
Question 4
Which cloud service model provides the highest level of customer control?
A) Software as a Service (SaaS)
B) Platform as a Service (PaaS)
C) Infrastructure as a Service (IaaS)
D) Function as a Service (FaaS)
Answer: C
Rationale: IaaS gives customers the most control, as they manage the operating
systems, middleware, data, and applications, while the provider manages the
underlying hardware and virtualization. PaaS offers less control (over the
platform), and SaaS offers the least control (only the data and user access).
Question 5
In the Shared Responsibility Model for IaaS, which of the following is the
cloud provider's responsibility?
A) Securing customer data stored in the cloud
B) Patching the guest operating system
C) Securing the physical data center and the underlying hypervisor
D) Managing user access and identity
2
,Answer: C
Rationale: In the IaaS model, the cloud provider is responsible for security "of"
the cloud, which includes physical security of data centers, network
infrastructure, and the virtualization layer (hypervisor). The customer is
responsible for security "in" the cloud, including data, applications, and
guest OS.
Question 6
Which NIST essential characteristic of cloud computing refers to the ability to
scale resources outward and inward automatically?
A) On-demand self-service
B) Broad network access
C) Rapid elasticity
D) Measured service
Answer: C
Rationale: Rapid elasticity is defined by NIST SP 800-145 as the capability to
elastically provision and release resources to scale outward and inward
commensurately with demand. On-demand self-service (A) refers to automatic
provisioning without human interaction.
Question 7
What is the primary benefit of implementing a Cloud Access Security Broker
(CASB)?
A) It provides encryption for all cloud data at rest
B) It acts as a bridge between users and multiple cloud services, providing
visibility and control
C) It replaces the need for identity and access management
D) It serves as a backup solution for cloud data
Answer: B
Rationale: A CASB sits between an organization's users and the cloud service
providers. Its primary benefit is to provide visibility into cloud application
usage and enforce security policies such as authentication, encryption, and
access control across multiple cloud services.
Question 8
3
, Which cloud deployment model is characterized by infrastructure provisioned for
exclusive use by a specific community of consumers from organizations that
have shared concerns?
A) Public cloud
B) Private cloud
C) Community cloud
D) Hybrid cloud
Answer: C
Rationale: NIST SP 800-145 defines a community cloud as infrastructure
provisioned for exclusive use by a specific community of consumers from
organizations that have shared concerns (e.g., mission, security requirements,
policy, and compliance considerations). It may be owned, managed, and operated
by one or more of the organizations in the community, a third party, or some
combination.
Question 9
What is a key risk associated with cloud computing?
A) The inability to scale resources on demand
B) Limited geographic reach
C) The shared, multi-tenant environment, which can lead to data leakage or
"noisy neighbor" issues
D) The mandatory use of outdated hardware
Answer: C
Rationale: One of the significant risks in cloud computing is the shared,
multi-tenant environment. Without proper isolation, there is a risk of one
tenant accessing another's data or a "noisy neighbor" affecting performance.
Scalability and geographic reach are benefits of the cloud.
Question 10
Which NIST essential characteristic of cloud computing refers to monitoring,
controlling, and reporting resource usage to provide transparency for both the
provider and consumer?
A) On-demand self-service
B) Rapid elasticity
C) Measured service
D) Broad network access
4
