WGU C838 OA EXAM 2025 QUESTIONS
AND ANSWERS
Which phase of the cloud data lifecycle allows both read and process functions to be
performed? - ANS Create
Which technique scrambles the content of data using a mathematical algorithm while keeping
the structural arrangement of the data? - ANS Format-preserving encryption
Which encryption technique connects the instance to the encryption instance that handles all
crypto operations? - ANS Proxy
Which type of control should be used to implement custom controls that safeguard data? -
ANS Application level
A cloud administrator recommends using tokenization as an alternative to protecting data
without encryption. The administrator needs to make an authorized application request to
access the data. Which step should occur immediately before this action is taken? - ANS The
application stores the token
A company has recently defined classification levels for its data. During which phase of the
cloud data life cycle should this definition occur? - ANS Create
1|P a g e C o p y r i g h t © 2 0 2 5 T H E B R I G H T A L L R I G H T S R E S E R V E D
, How is the compliance of the cloud service provider's legal and regulatory requirements
verified when securing personally identifiable information (PII) data in the cloud? - ANS Third
party audits and attestations
Which security strategy is associated with data rights management solutions? -
ANS Continuous auditing
What is a key capability of security information and event management? - ANS Centralized
collection of big data
A security analyst is investigating an incident of access to a resource from an unauthorized
location. Which data source should the security analyst use to investigate the incident? -
ANS Packet capture file
Which message type is generated from software systems to troubleshoot and identify problems
with running application codes? - ANS Debug
Which cloud computing tool is used to discover internal use of cloud services using various
mechanisms such as network monitoring? - ANS Cloud access security broker (CASB)
Which cloud model provides data location assurance? - ANS Private
Which technology allows an organization to control access to sensitive documents stored in the
cloud? - ANS Digital rights management
How do immutable workloads effect security overhead? - ANS They reduce the management
of the host
Which design principle of secure cloud computing ensures that users can utilize data and
applications from around the globe? - ANS Broad network access
2|P a g e C o p y r i g h t © 2 0 2 5 T H E B R I G H T A L L R I G H T S R E S E R V E D
AND ANSWERS
Which phase of the cloud data lifecycle allows both read and process functions to be
performed? - ANS Create
Which technique scrambles the content of data using a mathematical algorithm while keeping
the structural arrangement of the data? - ANS Format-preserving encryption
Which encryption technique connects the instance to the encryption instance that handles all
crypto operations? - ANS Proxy
Which type of control should be used to implement custom controls that safeguard data? -
ANS Application level
A cloud administrator recommends using tokenization as an alternative to protecting data
without encryption. The administrator needs to make an authorized application request to
access the data. Which step should occur immediately before this action is taken? - ANS The
application stores the token
A company has recently defined classification levels for its data. During which phase of the
cloud data life cycle should this definition occur? - ANS Create
1|P a g e C o p y r i g h t © 2 0 2 5 T H E B R I G H T A L L R I G H T S R E S E R V E D
, How is the compliance of the cloud service provider's legal and regulatory requirements
verified when securing personally identifiable information (PII) data in the cloud? - ANS Third
party audits and attestations
Which security strategy is associated with data rights management solutions? -
ANS Continuous auditing
What is a key capability of security information and event management? - ANS Centralized
collection of big data
A security analyst is investigating an incident of access to a resource from an unauthorized
location. Which data source should the security analyst use to investigate the incident? -
ANS Packet capture file
Which message type is generated from software systems to troubleshoot and identify problems
with running application codes? - ANS Debug
Which cloud computing tool is used to discover internal use of cloud services using various
mechanisms such as network monitoring? - ANS Cloud access security broker (CASB)
Which cloud model provides data location assurance? - ANS Private
Which technology allows an organization to control access to sensitive documents stored in the
cloud? - ANS Digital rights management
How do immutable workloads effect security overhead? - ANS They reduce the management
of the host
Which design principle of secure cloud computing ensures that users can utilize data and
applications from around the globe? - ANS Broad network access
2|P a g e C o p y r i g h t © 2 0 2 5 T H E B R I G H T A L L R I G H T S R E S E R V E D
