C838 MANAGING CLOUD SECURITY FINAL
OA CERTIFICATION TEST PAPER 2026
COMPLETE SOLUTIONS GRADED A PLUS
◉ What NIST publication number defines cloud computing?
Answer: 800-145
◉ What ISO/IEC standard provides information on cloud
computing?
Answer: 17788
◉ What is another way of describing a functional business
requirement?
Answer: necessary
◉ What is another way of describing a nonfunctional business
requirement?
Answer: not necessary
◉ What is the greatest driver pushing orgs to the cloud?
Answer: Cost savings
,◉ What is cloud bursting?
Answer: Ability to increase available cloud resources on demand
◉ What are 3 characteristics of cloud computing?
Answer: Elasticity
Simplicity
Scalability
◉ What is a cloud customer?
Answer: Anyone purchasing cloud services
◉ What is a cloud user?
Answer: Anyone using cloud services
◉ What are the three cloud computing service models?
Answer: SaaS(Software as a service)
PaaS(Platform as a service)
IaaS(Infrastructure as a service)
◉ What is IaaS (Infrastructure as a Service)?
,Answer: Cloud provider provides all the physical capability and
administration, while the customer is responsible for logical
resources.
◉ What is PaaS (Platform as a Service)?
Answer: A cloud computing service that provides the hardware and
the operating system and is responsible for updating and
maintaining both.
◉ What is SaaS (Software As A Service)?
Answer: Cloud provider manages everything.
◉ What are the four cloud deployment models?
Answer: Public
Private
Community
Hybrid
◉ What cloud model is owned by a single organization?
Answer: Private
◉ What cloud model is an arrangement of two or more cloud
servers?
, Answer: Hybrid
◉ What cloud model is a shared setup between orgs?
Answer: Community
◉ What cloud model is open for free usage?
Answer: Public
◉ What is a cloud service provider?
Answer: Cloud service provider manages and provides entire
hosting ability
◉ What is a Cloud Access Security Broker?
Answer: Third-party acting as an intermediary for identity and
access management
◉ What do regulators do?
Answer: Ensure organizations are in compliance with regulatory
framework.
◉ What word in the CIA triad describes: What protects information
from unauthorized access/dissemination?
Answer: Confidentiality
OA CERTIFICATION TEST PAPER 2026
COMPLETE SOLUTIONS GRADED A PLUS
◉ What NIST publication number defines cloud computing?
Answer: 800-145
◉ What ISO/IEC standard provides information on cloud
computing?
Answer: 17788
◉ What is another way of describing a functional business
requirement?
Answer: necessary
◉ What is another way of describing a nonfunctional business
requirement?
Answer: not necessary
◉ What is the greatest driver pushing orgs to the cloud?
Answer: Cost savings
,◉ What is cloud bursting?
Answer: Ability to increase available cloud resources on demand
◉ What are 3 characteristics of cloud computing?
Answer: Elasticity
Simplicity
Scalability
◉ What is a cloud customer?
Answer: Anyone purchasing cloud services
◉ What is a cloud user?
Answer: Anyone using cloud services
◉ What are the three cloud computing service models?
Answer: SaaS(Software as a service)
PaaS(Platform as a service)
IaaS(Infrastructure as a service)
◉ What is IaaS (Infrastructure as a Service)?
,Answer: Cloud provider provides all the physical capability and
administration, while the customer is responsible for logical
resources.
◉ What is PaaS (Platform as a Service)?
Answer: A cloud computing service that provides the hardware and
the operating system and is responsible for updating and
maintaining both.
◉ What is SaaS (Software As A Service)?
Answer: Cloud provider manages everything.
◉ What are the four cloud deployment models?
Answer: Public
Private
Community
Hybrid
◉ What cloud model is owned by a single organization?
Answer: Private
◉ What cloud model is an arrangement of two or more cloud
servers?
, Answer: Hybrid
◉ What cloud model is a shared setup between orgs?
Answer: Community
◉ What cloud model is open for free usage?
Answer: Public
◉ What is a cloud service provider?
Answer: Cloud service provider manages and provides entire
hosting ability
◉ What is a Cloud Access Security Broker?
Answer: Third-party acting as an intermediary for identity and
access management
◉ What do regulators do?
Answer: Ensure organizations are in compliance with regulatory
framework.
◉ What word in the CIA triad describes: What protects information
from unauthorized access/dissemination?
Answer: Confidentiality
