WGU V1 ON MANAGING CLOUD SECURITY
MANAGEMENT 2024-2025 UPDATED
newest EXAM QUESTIONS WITH CORRECT
SOLUTIONS ALREADY GRADED A+|
What is a key method associated with a risk-based approach to
business continuity planning?
Using existing network technology
Leveraging software-defined networking
Applying internal authentication and credential passing
Considering the degree of continuity required for assets-
ANSWERConsidering the degree of continuity required for assets
Which testing method must be performed to demonstrate the
effectiveness of a business continuity plan and procedures?
SAST
DAST
Failover
Penetration-ANSWER-Failover
,Which process involves the use of electronic data as evidence in a
civil or criminal legal case? Due diligence
Cloud governance
Auditing in the cloud
eDiscovery investigations-ANSWER-eDiscovery investigations
Which standard addresses the privacy aspects of cloud computing for
consumers?
ISO 19011:2011
ISO 27001:2013
ISO 27018:2014
ISO 27017:2015-ANSWER-ISO 27018:2014
Which international standard guide provides procedures for incident
investigation principles and processes?
ISO/IEC 27034-1:2011
ISO/IEC 27037:2012
ISO/IEC 27001:2013
ISO/IEC 27043:2015-ANSWER-ISO/IEC 27043:2015
Which group is legally bound by the general data protection
regulation (GDPR)?
Only corporations headquartered in the EU
,Only corporations that processes the data of EU citizens
Only corporations that have operations in more than one EU nation
Only corporations located in countries that have adopted the GDPR
standard-ANSWER-Only corporations that processes the data of EU
citizens
Which action is required for breaches of data under the general data
protection regulation (GDPR) within 72 hours of becoming aware of
the event?
Notifying the affected persons
Reporting to the supervisory authority
Suspending the processing operations
Informing consumer credit reporting services-ANSWER-Reporting to
the supervisory authority
Which penalty is imposed for privacy violations under the general
data protection regulation (GDPR)? Penalty up to 10 million Euros
Penalty up to 20 million Euros
Penalty up to 2% of gross income
Penalty up to 5% of gross income-ANSWER-Penalty up to 20 million
Euros
Why is eDiscovery difficult in the cloud?
, The process is time consuming.
The cloud service provider may lack sufficient resources.
The client may lack the credentials to access the required data.
The customer is responsible for their data on a multitenant
system.ANSWER-The client may lack the credentials to access the
required data.
Which artifact may be required as a data source for a compliance
audit in a cloud environment?
Customer SLAs
Change management details
Quarterly revenue projections
Annual actual-to-budgeted expense reports-ANSWER-Change
management details
Which artifact may be required as a data source for a regulatory
compliance audit (i.e., HIPAA, PCI-DSS) in a cloud environment?
System configuration details
Quarterly revenue projections
System performance benchmarks
Annual actual-to-budgeted expenses-ANSWER-System configuration
details
MANAGEMENT 2024-2025 UPDATED
newest EXAM QUESTIONS WITH CORRECT
SOLUTIONS ALREADY GRADED A+|
What is a key method associated with a risk-based approach to
business continuity planning?
Using existing network technology
Leveraging software-defined networking
Applying internal authentication and credential passing
Considering the degree of continuity required for assets-
ANSWERConsidering the degree of continuity required for assets
Which testing method must be performed to demonstrate the
effectiveness of a business continuity plan and procedures?
SAST
DAST
Failover
Penetration-ANSWER-Failover
,Which process involves the use of electronic data as evidence in a
civil or criminal legal case? Due diligence
Cloud governance
Auditing in the cloud
eDiscovery investigations-ANSWER-eDiscovery investigations
Which standard addresses the privacy aspects of cloud computing for
consumers?
ISO 19011:2011
ISO 27001:2013
ISO 27018:2014
ISO 27017:2015-ANSWER-ISO 27018:2014
Which international standard guide provides procedures for incident
investigation principles and processes?
ISO/IEC 27034-1:2011
ISO/IEC 27037:2012
ISO/IEC 27001:2013
ISO/IEC 27043:2015-ANSWER-ISO/IEC 27043:2015
Which group is legally bound by the general data protection
regulation (GDPR)?
Only corporations headquartered in the EU
,Only corporations that processes the data of EU citizens
Only corporations that have operations in more than one EU nation
Only corporations located in countries that have adopted the GDPR
standard-ANSWER-Only corporations that processes the data of EU
citizens
Which action is required for breaches of data under the general data
protection regulation (GDPR) within 72 hours of becoming aware of
the event?
Notifying the affected persons
Reporting to the supervisory authority
Suspending the processing operations
Informing consumer credit reporting services-ANSWER-Reporting to
the supervisory authority
Which penalty is imposed for privacy violations under the general
data protection regulation (GDPR)? Penalty up to 10 million Euros
Penalty up to 20 million Euros
Penalty up to 2% of gross income
Penalty up to 5% of gross income-ANSWER-Penalty up to 20 million
Euros
Why is eDiscovery difficult in the cloud?
, The process is time consuming.
The cloud service provider may lack sufficient resources.
The client may lack the credentials to access the required data.
The customer is responsible for their data on a multitenant
system.ANSWER-The client may lack the credentials to access the
required data.
Which artifact may be required as a data source for a compliance
audit in a cloud environment?
Customer SLAs
Change management details
Quarterly revenue projections
Annual actual-to-budgeted expense reports-ANSWER-Change
management details
Which artifact may be required as a data source for a regulatory
compliance audit (i.e., HIPAA, PCI-DSS) in a cloud environment?
System configuration details
Quarterly revenue projections
System performance benchmarks
Annual actual-to-budgeted expenses-ANSWER-System configuration
details
