WGU D320 COMPREHENSIVE EXAM
QUESTIONS AND CORRECT ANSWERS
STUDY GUIDE
●● CSA CCM
Answer: Cloud security control framework produced by the Cloud
Security Alliance.
●● CSA STAR
Answer: Cloud provider assurance program built on CCM and ISO
27001.
●● STRIDE Framework
Answer: Threat modeling framework: Spoofing, Tampering,
Repudiation, Information Disclosure, DoS, Elevation of Privilege.
●● Spoofing
Answer: Impersonating a user or system.
●● Tampering
Answer: Unauthorized modification of data or code.
, ●● Repudiation
Answer: Denying an action due to a lack of audit trail.
●● Information Disclosure
Answer: Unauthorized exposure of information to untrusted parties.
●● Denial of Service (DoS)
Answer: Making a service or system unavailable to users.
●● Elevation of Privilege
Answer: Gaining permissions beyond explicit authorization.
●● Tier 1 Data Center
Answer: Basic infrastructure; single path for power/cooling; no
redundancy.
●● Tier 2 Data Center
Answer: Redundant components with a single distribution path.
●● Tier 3 Data Center
Answer: Concurrently maintainable; allows maintenance without
downtime.
QUESTIONS AND CORRECT ANSWERS
STUDY GUIDE
●● CSA CCM
Answer: Cloud security control framework produced by the Cloud
Security Alliance.
●● CSA STAR
Answer: Cloud provider assurance program built on CCM and ISO
27001.
●● STRIDE Framework
Answer: Threat modeling framework: Spoofing, Tampering,
Repudiation, Information Disclosure, DoS, Elevation of Privilege.
●● Spoofing
Answer: Impersonating a user or system.
●● Tampering
Answer: Unauthorized modification of data or code.
, ●● Repudiation
Answer: Denying an action due to a lack of audit trail.
●● Information Disclosure
Answer: Unauthorized exposure of information to untrusted parties.
●● Denial of Service (DoS)
Answer: Making a service or system unavailable to users.
●● Elevation of Privilege
Answer: Gaining permissions beyond explicit authorization.
●● Tier 1 Data Center
Answer: Basic infrastructure; single path for power/cooling; no
redundancy.
●● Tier 2 Data Center
Answer: Redundant components with a single distribution path.
●● Tier 3 Data Center
Answer: Concurrently maintainable; allows maintenance without
downtime.
