WGU D320 – Managing Cloud Security (CCSP Aligned) | 2025 Edition | Complete Exam with Verified Questions and Correct Answers

ONLYSTUDENTS
WGU D320/CCSP j




1. The management plane is use to administer a cloud environment and per-
j j j j j j j j j j j




form administrative tasks across a variety of systems, but most specifically it's
j j j j j j j j j j j j




j used with the hypervisors.
j j j




What does the management plane typically leverage for this orchestration?
j j j j j j j j j




A. APIs
B. Scripts
C. TLS
D. XML: ThemanagementplaneusesAPIstoexecuteremotecallsacrossthecloud
j j j j j j j j j j j j




environment to various management systems, especially hypervisors.This allows a
j j j j j j j j j j




centralizedadministrativeinterface,oftenawebportal,toorchestratetasks through-out
j j j j j j j j j j j j




an enterprise.Scripts may be utilized to execute API calls, but they are not useddirectly to
j j j j j j j j j j j j j j j j j




j interact with systems. XML is used for data encoding and transmission, but not for
j j j j j j j j j j j j j




executing remote calls.TLS is used to encrypt communications and maybe used with API
j j j j j j j j j j j j j j j




j calls, but it is not the actual process for executing commands.
j j j j j j j j j j




2. When dealing with PII, which category pertains to those requirements that
j j j j j j j j j j




can carry legal sanctions or penalties for failure to adequately safeguard thedata
j j j j j j j j j j j j j




j and address compliance requirements?
j j j




A. Contractual
B. Jurisdictional
C. Regulated
D. Legal: Regulated PII pertains to data that is outlined in law and regulations.
j j j j j j j j j j j j




j Violations of the requirements for the protection of regulated PII can carry legal
j j j j j j j j j j j j




1 j/ j38

,ONLYSTUDENTS
WGU D320/CCSP j




j sanctions or penalties. Contractual PII involves required data protection that is
j j j j j j j j j j




j determined by the actual service contract between the cloud provider and cloud
j j j j j j j j j j j




j customer, rather than outlined by law. Violations of the provisions of contractual PII
j j j j j j j j j j j j




carry potential financial or contractual implications, but not legal sanctions. Legal and
j j j j j j j j j j j j




jurisdictional are similar terms to regulated, but neither is the official term used.
j j j j j j j j j j j j j




3. Although the united states does not have a single, comprehensive privacyand
j j j j j j j j j j j




j regulatory framework, a number of specific regulations pertain to types of data
j j j j j j j j j j j




j or populations.
j




Which of the following is NOT a regulatory system from the United Statesfederal
j j j j j j j j j j j j j




j government?


A. HIPAA
B. SOX




2 j/ j38

,ONLYSTUDENTS
WGU D320/CCSP j




C. FISMA
D. PCIDSS: ThePaymentCardIndustryDataSecurityStandard(PCIDSS)pertainsto
j j j j j j j j j j j j




j organizations that handle credit card transactions and is an industry-regulatory
j j j j j j j j j




j standard, not a governmental one.The Sarbanes-Oxley Act (SOX) was passed
j j j j j j j j j j




in 2002 and pertains to financial records and reporting, as well as transparency
j j j j j j j j j j j j




j requirements for shareholders and other stakeholders. The Health Insurance and
j j j j j j j j j




j PortabilityAct(HIPAA)waspassedin1996andpertainstodata privacyandsecurityfor
j j j j j j j j j j j j j j




medical records.FISMA refers to the Federal Information Security ManagementAct of
j j j j j j j j j j j j




2002 and pertains to the protection of all US federal government IT systems,with the
j j j j j j j j j j j j j j j




j exception of national security systems. j j j j




4. The president of your company has tsked you with implementing cloud
j j j j j j j j j j




services as the most efficient way of obtaining a robust disaster recovery
j j j j j j j j j j j j




configuration for your production services.
j j j j j




Which of the cloud deployment models would you MOST likely be exploring?
j j j j j j j j j j j




A. Hybrid
B. Private
C. Community
D. Public: A hybrid cloud model spans two more different hosting configurations or
j j j j j j j j j j j




j cloud providers. This would enable an organization to continue using its current
j j j j j j j j j j j




j hosting configuration, while adding additional cloud services to enable disaster
j j j j j j j j j




j recovery capabilities.The other cloud deployment models--public, private, and com-
j j j j j j j j j




munity--wouldnot be applicable for seeking a disaster recovery configurationwhere
j j j j j j j j j j j




cloud services are to be leveraged for that purpose rather than production service
j j j j j j j j j j j j j



3 j/ j38

, ONLYSTUDENTS
WGU D320/CCSP j




j hosting.
5. If you are running an application that has strict legal requirements that the
j j j j j j j j j j j j




data cannot reside on systems that contain other applications or systems, which
j j j j j j j j j j j j




j aspect of cloud computing would be prohibitive in this case?
j j j j j j j j j




A. Multitenancy
B. Broad network access j j




C. Portability
D. Elasticity: Multitenancy is the aspect of cloud computing that involves having
j j j j j j j j j j




j multiple customers and applications running within the same system and sharing the
j j j j j j j j j j j




j same resources. Although considerable mechanisms are in place to ensure isolation
j j j j j j j j j j




j and separation, the data and applications are ultimately using shared resources.Broad
j j j j j j j j j j j




j network access refers to the ability to access cloud services fromany location or client.
j j j j j j j j j j j j j j




jPortability refers to the ability to easily move cloud services
j j j j j j j j j




4 j/ j38