WGU D320/CCSP
PRACTICE EXAM QUESTIONS
WITH CORRECT DETAILED
ANSWERS | ALREADY GRADED
A+<RECENT VERSION>
1) Which phase of the cloud data life cycle requires adherence to export and import
restrictions, including Export Administration Regulations (EAR) and the Wassenaar
Arrangement?
Create
Share
Use
Destroy - ANSWER Share
2) Why is the striping method of storing data used in most redundant array of
independent disks (RAID) configurations?
It prevents outages and attacks from occurring in a cloud environment.
It prevents data from being recovered once it is destroyed using crypto-shredding.
It allows data to be safely distributed and stored in a common centralized location.
It allows efficient data recovery as even if one drive fails, other drives fill in the
missing data. - ANSWER It allows efficient data recovery as even if one drive
fails, other drives fill in the missing data.
3) What is the purpose of egress monitoring tools?
They are used to convert a given set of data or information into a different value.
They are used to prevent data from going outside the control of an organization.
They are used to create data during the Create phase of the cloud data life cycle.
, They are used to remove data during the Destroy phase of the cloud data life cycle. -
ANSWER They are used to prevent data from going outside the control of an
organization.
4) A company is looking at different types of cloud storage options. One of the threats to
cloud storage that the company foresees is the possibility of losing forensic artifacts in
the event of an incident response investigation.
Which type of cloud storage has the highest risk of losing forensic artifacts in the
event of an incident response investigation?
File-based
Long-term
Block
Ephemeral - ANSWER Ephemeral
5) A manager is made aware of a customer complaint about how an application
developed by the company collects personal and environmental information from the
devices it is installed on.
Which document should the manager refer to in order to determine if the company has
properly disclosed information about what data it collects from this application's
users?
Retention policy
Breach notification
Privacy notice
Denial of service - ANSWER Privacy notice
6) An organization needs to store passwords in a database securely. The data should not
be available to system administrators.
Which technique should the organization use?
Encryption
Hashing
Encoding
Masking - ANSWER Hashing
,7) What is disaster recovery planning (DRP)? - ANSWER Planning for restoration of
IT systems after an outage.
8) What is recovery time objective (RTO)? - ANSWER The maximum acceptable
downtime after a failure.
9) What is recovery point objective (RPO)? - ANSWER The maximum acceptable
amount of data loss measured in time.
10) What is failover? - ANSWER Automatic switching to a redundant system upon
failure.
11) What is backup rotation? - ANSWER Strategy for maintaining multiple versions
of data backups.
12) What is hot site? - ANSWER A fully operational backup site ready to take over
immediately.
13) What is warm site? - ANSWER A backup site with partial resources, requiring
setup before use.
14) What is cold site? - ANSWER A backup site with infrastructure but no equipment
or data.
15) What is tabletop exercise? - ANSWER A discussion-based simulation of incident
response procedures.
16) What is full-scale exercise? - ANSWER A real-world simulation of incident
response with actual systems.
17) What is monitoring in operations? - ANSWER Continuous observation of systems
and networks for anomalies.
, 18) What is alert fatigue? - ANSWER Desensitization to alerts due to excessive false
positives.
19) What is root cause analysis (RCA)? - ANSWER Process to identify the
fundamental cause of an incident.
20) What is log retention policy? - ANSWER Defines how long logs are stored for
compliance and analysis.
21) What is patch management? - ANSWER Regular updates to fix vulnerabilities and
bugs.
22) What is vulnerability management? - ANSWER Ongoing process of identifying,
classifying, and mitigating vulnerabilities.
23) What is change management? - ANSWER Formal process to ensure controlled
modifications to IT systems.
24) What is configuration management? - ANSWER Maintaining consistent settings
and baselines across systems.
25) What is continuous improvement in operations? - ANSWER Iterative
enhancements to strengthen security and efficiency.
26) What is IT service management (ITSM)? - ANSWER Framework for delivering
and managing IT services to meet business needs.
27) What is ITIL? - ANSWER A widely adopted framework for IT service
management best practices.
28) What is a service catalog? - ANSWER A list of services offered by IT with details
and SLAs.
PRACTICE EXAM QUESTIONS
WITH CORRECT DETAILED
ANSWERS | ALREADY GRADED
A+<RECENT VERSION>
1) Which phase of the cloud data life cycle requires adherence to export and import
restrictions, including Export Administration Regulations (EAR) and the Wassenaar
Arrangement?
Create
Share
Use
Destroy - ANSWER Share
2) Why is the striping method of storing data used in most redundant array of
independent disks (RAID) configurations?
It prevents outages and attacks from occurring in a cloud environment.
It prevents data from being recovered once it is destroyed using crypto-shredding.
It allows data to be safely distributed and stored in a common centralized location.
It allows efficient data recovery as even if one drive fails, other drives fill in the
missing data. - ANSWER It allows efficient data recovery as even if one drive
fails, other drives fill in the missing data.
3) What is the purpose of egress monitoring tools?
They are used to convert a given set of data or information into a different value.
They are used to prevent data from going outside the control of an organization.
They are used to create data during the Create phase of the cloud data life cycle.
, They are used to remove data during the Destroy phase of the cloud data life cycle. -
ANSWER They are used to prevent data from going outside the control of an
organization.
4) A company is looking at different types of cloud storage options. One of the threats to
cloud storage that the company foresees is the possibility of losing forensic artifacts in
the event of an incident response investigation.
Which type of cloud storage has the highest risk of losing forensic artifacts in the
event of an incident response investigation?
File-based
Long-term
Block
Ephemeral - ANSWER Ephemeral
5) A manager is made aware of a customer complaint about how an application
developed by the company collects personal and environmental information from the
devices it is installed on.
Which document should the manager refer to in order to determine if the company has
properly disclosed information about what data it collects from this application's
users?
Retention policy
Breach notification
Privacy notice
Denial of service - ANSWER Privacy notice
6) An organization needs to store passwords in a database securely. The data should not
be available to system administrators.
Which technique should the organization use?
Encryption
Hashing
Encoding
Masking - ANSWER Hashing
,7) What is disaster recovery planning (DRP)? - ANSWER Planning for restoration of
IT systems after an outage.
8) What is recovery time objective (RTO)? - ANSWER The maximum acceptable
downtime after a failure.
9) What is recovery point objective (RPO)? - ANSWER The maximum acceptable
amount of data loss measured in time.
10) What is failover? - ANSWER Automatic switching to a redundant system upon
failure.
11) What is backup rotation? - ANSWER Strategy for maintaining multiple versions
of data backups.
12) What is hot site? - ANSWER A fully operational backup site ready to take over
immediately.
13) What is warm site? - ANSWER A backup site with partial resources, requiring
setup before use.
14) What is cold site? - ANSWER A backup site with infrastructure but no equipment
or data.
15) What is tabletop exercise? - ANSWER A discussion-based simulation of incident
response procedures.
16) What is full-scale exercise? - ANSWER A real-world simulation of incident
response with actual systems.
17) What is monitoring in operations? - ANSWER Continuous observation of systems
and networks for anomalies.
, 18) What is alert fatigue? - ANSWER Desensitization to alerts due to excessive false
positives.
19) What is root cause analysis (RCA)? - ANSWER Process to identify the
fundamental cause of an incident.
20) What is log retention policy? - ANSWER Defines how long logs are stored for
compliance and analysis.
21) What is patch management? - ANSWER Regular updates to fix vulnerabilities and
bugs.
22) What is vulnerability management? - ANSWER Ongoing process of identifying,
classifying, and mitigating vulnerabilities.
23) What is change management? - ANSWER Formal process to ensure controlled
modifications to IT systems.
24) What is configuration management? - ANSWER Maintaining consistent settings
and baselines across systems.
25) What is continuous improvement in operations? - ANSWER Iterative
enhancements to strengthen security and efficiency.
26) What is IT service management (ITSM)? - ANSWER Framework for delivering
and managing IT services to meet business needs.
27) What is ITIL? - ANSWER A widely adopted framework for IT service
management best practices.
28) What is a service catalog? - ANSWER A list of services offered by IT with details
and SLAs.
