WGU C838 Managing Cloud Security - | Questions
And Answers Updated 2025
Data Lifecycle - ✔✔Create, Store, Use, Share, Archive and Destroy
SDLC - ✔✔Define, Design, Develop, Test, Secure Operations and Disposal
FIPS 140-2 - ✔✔NIST Document, describes process for accrediting cryptosystems for US
Federal use.
NIST 800-53 - ✔✔Assures appropriate security requirements for US GOV information
management systems.
TCI - ✔✔Trusted Cloud Initiative reference model, Guide for CSP's to create holistic
architecture of DC. Cloud customers can use.
Copyright - ✔✔Legal protections for expressions of ideas. Movie, song, etc.
-Expires 70 years from authors death or 120 years after first publication of work.
Trademarks - ✔✔Representations of an organization. Ex: Nike.
-Must register w/ jurisdiction
-R symbol represents registration w/ USPTO
-TM symbol represents registration w/ State Office
-Valid as long as organization uses it
Patents - ✔✔USPTO, intellectual property (inventions, processes),
-Patents last 20 years from publication
, WIPO - ✔✔World Intellectual Property Organization,
-152 countries
ITAR - ✔✔International Traffic in Arms Regulations,
-US State Department
-Prohibitions on defense exports including cryptosystems
EAR - ✔✔Export Administration Regulations,
-US Department of Commerce
-Prohibits export of dual use products (civilian/Military)
Wassenaar Agreement - ✔✔-Not a binding legal contract
-41 countries
-Let each other know about arms shipments to nonmember nations
SOC 1 - ✔✔Financial, non IT related SOC report
SOC 2 - ✔✔SOC 2 TYPE 1: Design of controls in point of time
-Useless
SOC 2 - ✔✔SOC 2 Type 2: USEFUL IT Security related, How security controls are designed
over a range of time
SOC 3 - ✔✔Public document meant to be shared as an attestation of a CSP's DC by a 3rd
party
ISO 27034-1 - ✔✔Standards for Secure Application Development
And Answers Updated 2025
Data Lifecycle - ✔✔Create, Store, Use, Share, Archive and Destroy
SDLC - ✔✔Define, Design, Develop, Test, Secure Operations and Disposal
FIPS 140-2 - ✔✔NIST Document, describes process for accrediting cryptosystems for US
Federal use.
NIST 800-53 - ✔✔Assures appropriate security requirements for US GOV information
management systems.
TCI - ✔✔Trusted Cloud Initiative reference model, Guide for CSP's to create holistic
architecture of DC. Cloud customers can use.
Copyright - ✔✔Legal protections for expressions of ideas. Movie, song, etc.
-Expires 70 years from authors death or 120 years after first publication of work.
Trademarks - ✔✔Representations of an organization. Ex: Nike.
-Must register w/ jurisdiction
-R symbol represents registration w/ USPTO
-TM symbol represents registration w/ State Office
-Valid as long as organization uses it
Patents - ✔✔USPTO, intellectual property (inventions, processes),
-Patents last 20 years from publication
, WIPO - ✔✔World Intellectual Property Organization,
-152 countries
ITAR - ✔✔International Traffic in Arms Regulations,
-US State Department
-Prohibitions on defense exports including cryptosystems
EAR - ✔✔Export Administration Regulations,
-US Department of Commerce
-Prohibits export of dual use products (civilian/Military)
Wassenaar Agreement - ✔✔-Not a binding legal contract
-41 countries
-Let each other know about arms shipments to nonmember nations
SOC 1 - ✔✔Financial, non IT related SOC report
SOC 2 - ✔✔SOC 2 TYPE 1: Design of controls in point of time
-Useless
SOC 2 - ✔✔SOC 2 Type 2: USEFUL IT Security related, How security controls are designed
over a range of time
SOC 3 - ✔✔Public document meant to be shared as an attestation of a CSP's DC by a 3rd
party
ISO 27034-1 - ✔✔Standards for Secure Application Development
