Page | 1
WGU C838 OA Questions with Detailed
Verified Answers
Which phase of the cloud data lifecycle allows both read and process
functions to be performed? Ans: Create
Which technique scrambles the content of data using a mathematical
algorithm while keeping the structural arrangement of the data? Ans:
Format-preserving encryption
Which encryption technique connects the instance to the encryption
instance that handles all crypto operations? Ans: Proxy
Which type of control should be used to implement custom controls that
safeguard data? Ans: Application level
A cloud administrator recommends using tokenization as an alternative to
protecting data without encryption. The administrator needs to make an
authorized application request to access the data. Which step should
occur immediately before this action is taken? Ans: The application
stores the token
A company has recently defined classification levels for its data. During
which phase of the cloud data life cycle should this definition occur?
Ans: Create
How is the compliance of the cloud service provider's legal and regulatory
requirements verified when securing personally identifiable information
(PII) data in the cloud? Ans: Third party audits and attestations
, Page | 2
Which security strategy is associated with data rights management
solutions? Ans: Continuous auditing
What is a key capability of security information and event management?
Ans: Centralized collection of big data
A security analyst is investigating an incident of access to a resource
from an unauthorized location. Which data source should the security
analyst use to investigate the incident? Ans: Packet capture file
Which message type is generated from software systems to troubleshoot
and identify problems with running application codes? Ans: Debug
Which cloud computing tool is used to discover internal use of cloud
services using various mechanisms such as network monitoring? Ans:
Cloud access security broker (CASB)
Which cloud model provides data location assurance? Ans: Private
Which technology allows an organization to control access to sensitive
documents stored in the cloud? Ans: Digital rights management
How do immutable workloads effect security overhead? Ans: They
reduce the management of the host
Which design principle of secure cloud computing ensures that users can
utilize data and applications from around the globe? Ans: Broad
network access
Which standard addresses practices related to acquisition of forensic
artifacts and can be directly applied to a cloud environment? Ans:
ISO/IEC 27050-1
Which technology allows an administrator to remotely manage a fleet of
servers? Ans: Management plane
WGU C838 OA Questions with Detailed
Verified Answers
Which phase of the cloud data lifecycle allows both read and process
functions to be performed? Ans: Create
Which technique scrambles the content of data using a mathematical
algorithm while keeping the structural arrangement of the data? Ans:
Format-preserving encryption
Which encryption technique connects the instance to the encryption
instance that handles all crypto operations? Ans: Proxy
Which type of control should be used to implement custom controls that
safeguard data? Ans: Application level
A cloud administrator recommends using tokenization as an alternative to
protecting data without encryption. The administrator needs to make an
authorized application request to access the data. Which step should
occur immediately before this action is taken? Ans: The application
stores the token
A company has recently defined classification levels for its data. During
which phase of the cloud data life cycle should this definition occur?
Ans: Create
How is the compliance of the cloud service provider's legal and regulatory
requirements verified when securing personally identifiable information
(PII) data in the cloud? Ans: Third party audits and attestations
, Page | 2
Which security strategy is associated with data rights management
solutions? Ans: Continuous auditing
What is a key capability of security information and event management?
Ans: Centralized collection of big data
A security analyst is investigating an incident of access to a resource
from an unauthorized location. Which data source should the security
analyst use to investigate the incident? Ans: Packet capture file
Which message type is generated from software systems to troubleshoot
and identify problems with running application codes? Ans: Debug
Which cloud computing tool is used to discover internal use of cloud
services using various mechanisms such as network monitoring? Ans:
Cloud access security broker (CASB)
Which cloud model provides data location assurance? Ans: Private
Which technology allows an organization to control access to sensitive
documents stored in the cloud? Ans: Digital rights management
How do immutable workloads effect security overhead? Ans: They
reduce the management of the host
Which design principle of secure cloud computing ensures that users can
utilize data and applications from around the globe? Ans: Broad
network access
Which standard addresses practices related to acquisition of forensic
artifacts and can be directly applied to a cloud environment? Ans:
ISO/IEC 27050-1
Which technology allows an administrator to remotely manage a fleet of
servers? Ans: Management plane
