WGU Managing Cloud Security - C838
Questions With All Correct & Verified
Answers
What are the 4 characteristics of cloud computing? Correct answer-Broad network access
On-demand services
Resource Pooling
Measured or "metered" service
What NIST publication number defines cloud computing? Correct answer-800-145
What ISO/IEC standard provides information on cloud computing? Correct answer-17788
What is another way of describing a functional business requirement? Correct answer-necessary
What is another way of describing a nonfunctional business requirement? Correct answer-not
necessary
What is the greatest driver pushing orgs to the cloud? Correct answer-Cost savings
What is cloud bursting? Correct answer-Ability to increase available cloud resources on demand
What are 3 characteristics of cloud computing? Correct answer-Elasticity
Simplicity
Scalability
What is a cloud customer? Correct answer-Anyone purchasing cloud services
What is a cloud user? Correct answer-Anyone using cloud services
What are the three cloud computing service models? Correct answer-SaaS(Software as a service)
PaaS(Platform as a service)
IaaS(Infrastructure as a service)
What is IaaS (Infrastructure as a Service)? Correct answer-Cloud provider provides all the physical
capability and administration, while the customer is responsible for logical resources.
What is PaaS (Platform as a Service)? Correct answer-A cloud computing service that provides the
hardware and the operating system and is responsible for updating and maintaining both.
What is SaaS (Software As A Service)? Correct answer-Cloud provider manages everything.
What are the four cloud deployment models? Correct answer-Public
Private
Community
Hybrid
What cloud model is owned by a single organization? Correct answer-Private
,What cloud model is an arrangement of two or more cloud servers? Correct answer-Hybrid
What cloud model is a shared setup between orgs? Correct answer-Community
What cloud model is open for free usage? Correct answer-Public
What is a cloud service provider? Correct answer-Cloud service provider manages and provides
entire hosting ability
What is a Cloud Access Security Broker? Correct answer-Third-party acting as an intermediary for
identity and access management
What do regulators do? Correct answer-Ensure organizations are in compliance with regulatory
framework.
What word in the CIA triad describes: What protects information from unauthorized
access/dissemination? Correct answer-Confidentiality
What word in the CIA triad describes: Ensuring that information is not subject to unauthorized
modification? Correct answer-Integrity
What word in the CIA triad describes: Ensuring that authorized users can access the information
when they are permitted to do so? Correct answer-Availability
What is a cloud architect? Correct answer-Expert in cloud computing
What is cloud os also known as? Correct answer-PaaS
NIST standard number that lists accredited and outmoded cryptosystems Correct answer-FIPS 140-
2
customer may be unable to leave, migrate, or transfer to an alternate provider due to technical or
non-technical constraints. Correct answer-vendor lock-m
What is cloud migration? Correct answer-Process of transitioning part of a company's data or
services from onsite premises to the cloud
What is cloud portability? Correct answer-Move applications and data between cloud providers
What offers a degree of assurance that nobody w/o authorization will be able to access other's data?
Correct answer-Encryption
If a cloud customer wants a secure, isolated sandbox in order to conduct software development and
testing, which cloud service model would probably be best? Correct answer-PaaS
What technology has NOT made cloud service viable? Correct answer-Smart hubs
What determines the critical paths, processes, and assets of an organization? Correct answer-BIA
Fully-operational environment with very little maintenance or administration necessary, which cloud
service model would probably be best? Correct answer-PaaS
, customer is unable to recover or access their own data due to the cloud provider going into
bankruptcy or otherwise leaving the market. Correct answer-Vendor lock-out
What are four examples of things to know to decide how to handle risks within an org? Correct
answer-Inventory of all assets
Valuation of each asset
Critical paths, processes, and assets
Clear understanding of risk appetite
T/F: Assets are only tangible items. Correct answer-False. Assets are everything owned or
controlled by an org.
The process of evaluating assets? Correct answer-Business Impact Analysis(BIA)
What is criticality? Correct answer-Something an org could not operate or exist without
What are 5 examples of criticality for an org Correct answer-Tangible assets
Intangible assets
Processes
Data paths
Personnel
In risk, what is the avoidance method? Correct answer-Avoiding high risk
In risk, what is the acceptance method? Correct answer-Acceptable level of risk
In risk, what is an example of the avoidance method? Correct answer-Insurance
In risk, what is the mitigation method? Correct answer-Controls or countermeasures
Assets can be what? Correct answer-Tangible
Intangible
Personnel
What does Business Impact Analysis do? Correct answer-Defines which of the assets provide the
intrinsic value of an organization.
What is risk appetite Correct answer-Level, Amount, or Type of risk that an org finds acceptable
What is the IaaS boundary? Correct answer-The provider is responsible for connectivity and power
and the customer is in charge for installation of software.
What is the PaaS boundary? Correct answer-The provider is responsible for updates and
administration of the OS and the customer monitors and reviews software events.
What is the SaaS boundary? Correct answer-The provider is responsible for system maintenance
and the customer supplies and processes data to and in the system.
What should encryption be used for in a cloud datacenter? Correct answer-Long-term
storage/archiving
Questions With All Correct & Verified
Answers
What are the 4 characteristics of cloud computing? Correct answer-Broad network access
On-demand services
Resource Pooling
Measured or "metered" service
What NIST publication number defines cloud computing? Correct answer-800-145
What ISO/IEC standard provides information on cloud computing? Correct answer-17788
What is another way of describing a functional business requirement? Correct answer-necessary
What is another way of describing a nonfunctional business requirement? Correct answer-not
necessary
What is the greatest driver pushing orgs to the cloud? Correct answer-Cost savings
What is cloud bursting? Correct answer-Ability to increase available cloud resources on demand
What are 3 characteristics of cloud computing? Correct answer-Elasticity
Simplicity
Scalability
What is a cloud customer? Correct answer-Anyone purchasing cloud services
What is a cloud user? Correct answer-Anyone using cloud services
What are the three cloud computing service models? Correct answer-SaaS(Software as a service)
PaaS(Platform as a service)
IaaS(Infrastructure as a service)
What is IaaS (Infrastructure as a Service)? Correct answer-Cloud provider provides all the physical
capability and administration, while the customer is responsible for logical resources.
What is PaaS (Platform as a Service)? Correct answer-A cloud computing service that provides the
hardware and the operating system and is responsible for updating and maintaining both.
What is SaaS (Software As A Service)? Correct answer-Cloud provider manages everything.
What are the four cloud deployment models? Correct answer-Public
Private
Community
Hybrid
What cloud model is owned by a single organization? Correct answer-Private
,What cloud model is an arrangement of two or more cloud servers? Correct answer-Hybrid
What cloud model is a shared setup between orgs? Correct answer-Community
What cloud model is open for free usage? Correct answer-Public
What is a cloud service provider? Correct answer-Cloud service provider manages and provides
entire hosting ability
What is a Cloud Access Security Broker? Correct answer-Third-party acting as an intermediary for
identity and access management
What do regulators do? Correct answer-Ensure organizations are in compliance with regulatory
framework.
What word in the CIA triad describes: What protects information from unauthorized
access/dissemination? Correct answer-Confidentiality
What word in the CIA triad describes: Ensuring that information is not subject to unauthorized
modification? Correct answer-Integrity
What word in the CIA triad describes: Ensuring that authorized users can access the information
when they are permitted to do so? Correct answer-Availability
What is a cloud architect? Correct answer-Expert in cloud computing
What is cloud os also known as? Correct answer-PaaS
NIST standard number that lists accredited and outmoded cryptosystems Correct answer-FIPS 140-
2
customer may be unable to leave, migrate, or transfer to an alternate provider due to technical or
non-technical constraints. Correct answer-vendor lock-m
What is cloud migration? Correct answer-Process of transitioning part of a company's data or
services from onsite premises to the cloud
What is cloud portability? Correct answer-Move applications and data between cloud providers
What offers a degree of assurance that nobody w/o authorization will be able to access other's data?
Correct answer-Encryption
If a cloud customer wants a secure, isolated sandbox in order to conduct software development and
testing, which cloud service model would probably be best? Correct answer-PaaS
What technology has NOT made cloud service viable? Correct answer-Smart hubs
What determines the critical paths, processes, and assets of an organization? Correct answer-BIA
Fully-operational environment with very little maintenance or administration necessary, which cloud
service model would probably be best? Correct answer-PaaS
, customer is unable to recover or access their own data due to the cloud provider going into
bankruptcy or otherwise leaving the market. Correct answer-Vendor lock-out
What are four examples of things to know to decide how to handle risks within an org? Correct
answer-Inventory of all assets
Valuation of each asset
Critical paths, processes, and assets
Clear understanding of risk appetite
T/F: Assets are only tangible items. Correct answer-False. Assets are everything owned or
controlled by an org.
The process of evaluating assets? Correct answer-Business Impact Analysis(BIA)
What is criticality? Correct answer-Something an org could not operate or exist without
What are 5 examples of criticality for an org Correct answer-Tangible assets
Intangible assets
Processes
Data paths
Personnel
In risk, what is the avoidance method? Correct answer-Avoiding high risk
In risk, what is the acceptance method? Correct answer-Acceptable level of risk
In risk, what is an example of the avoidance method? Correct answer-Insurance
In risk, what is the mitigation method? Correct answer-Controls or countermeasures
Assets can be what? Correct answer-Tangible
Intangible
Personnel
What does Business Impact Analysis do? Correct answer-Defines which of the assets provide the
intrinsic value of an organization.
What is risk appetite Correct answer-Level, Amount, or Type of risk that an org finds acceptable
What is the IaaS boundary? Correct answer-The provider is responsible for connectivity and power
and the customer is in charge for installation of software.
What is the PaaS boundary? Correct answer-The provider is responsible for updates and
administration of the OS and the customer monitors and reviews software events.
What is the SaaS boundary? Correct answer-The provider is responsible for system maintenance
and the customer supplies and processes data to and in the system.
What should encryption be used for in a cloud datacenter? Correct answer-Long-term
storage/archiving
