- Guías de estudio, Notas de estudios & Resúmenes
¿Buscas las mejores guías de estudio, notas de estudio y resúmenes para ? En esta página encontrarás 68 documentos de estudio para .
68 resultados
Examen
Wgu C838 Managing Cloud Security Final Exams Testbank 1030+ Questions And Answers Latest |Agrade 2024-2025
Wgu C838 Managing Cloud Security Final Exams 
Testbank 1030+ Questions And Answers Latest |Agrade 

Examen
WGU C838 - Managing Cloud Security Exam Questions and Answers 2024
WGU C838 - Managing Cloud Security Exam Questions and Answers 2024
Examen
C838 - Managing Cloud Security Questions with 100% Correct Solutions | Rated A+
_____ drive security decisions. 
business requirements 
 
 
All of these are reasons because of which an organization may want to consider cloud migration, except: 
Elimination of risks 
 
 
The generally accepted definition of cloud computing includes all of the following characteristics except: 
negating the need for backups 
 
 
When a cloud customer uploads PII to a cloud provider, who becomes ultimately responsible for the security of that PII? 
cloud customer 
 
 
We use which of the follo...
Examen
C838 - Managing Cloud Security|2023/24 Update|Graded A+
International Traffic in Arms Regulation (ITAR) 
USA - state dept prohibitions on defense related exports. This can include cryptographic systems. 
 
 
 
Export Administration Regulations 
Department of Commerce 
 
Control: dual-use goods/software/technology predominately civilian in nature but may include military applications. 
 
Also: Anti-boycott provisions 
 
 
 
 
The Wassenaar Arrangement 
A group of 41 countries who have an agreement to let the others know when military shipments are mad...
Examen
Wgu - C838 - Managing Web Security - Frameworks, Agencies, Acts|2023/24 Update|Graded A+
NIST 800-53 
Security and Privacy Contols for Information Systems and Organizations 
 
 
 
NIST 500-292 
Cloud Computing Reference Architecture 
 
 
 
 
NIST 800-37 
Guide for Applying the Risk Management Framework to Federal Information Systems: A Security Life Cycle Approach 
 
 
 
NIST 800-57 
Recommendation for Key Management: Part 1 - General 
 
 
 
NIST 800-61 
Computer Security Incident Handling Guide 
 
 
 
NIST 800-64 
Security Considerations in the System Development Life Cycle 
 
 
 
...
Examen
Lesson 5 Security In The Cloud-C838|2023/24 Update|Graded A+
The risks and responsibilities will be shared between the cloud provider and customer. 
True 
 
 
 
The customer is concerned with data, whereas the provider is concerned with security and operation. 
True 
 
 
 
 
The customer wants to refute control, deny insight, and refrain from disclosing any information used for malicious purpose. 
. 
False 
 
 
 
The customer's ultimate legal liability for data it owns remains true even if the provider's failure was the result of negligence 
True 
 
 
 ...
Examen
Lesson 4 Cloud Data Security- C838|2023/24 Update|Graded A+
It is the phase for short-term storage when planning security controls for the data. 
False 
 
 
 
Archive phase activities in the cloud will largely be driven by whether a user is using the same cloud provider for backups and its production environment. 
True 
 
 
 
 
The physical security of the data in short-term storage is also important. 
False 
 
 
 
Cryptography will, as with most data-related controls, be an essential consideration. 
True 
 
 
 
Put the phases of the cloud data life cycl...
Examen
C838 Cloud Data Lifecycle|2023/24 Update|Graded A+
encrypted 
Data created by the user should do this before uploading to the cloud. 
 
 
Public Key Infrastructure 
Dealing with keys and managing them 
 
 
 
 
 
PKI 
Framework of programs, procedures, communication protocols, and public key cryptography that enables a diverse group of individuals to communicate securely. 
 
 
Store 
Phase takes place right after the Create phase 
 
 
Store phase 
Occurs almost concurrently with the Create phase. This will happen as data is created. 
 
 
Use phas...
Examen
D320 (C838) Laws, Regulations, And Organizations|2023/24 Update|Graded A+
(ISC)2 - International Information System Security Certification Consortium 
A security certification granting organization that has a long history of certifications that were difficult to get. This difficulty has made their certificates seen as having higher value in the industry. 
 
 
(ISC)2 Cloud Secure Data Life Cycle 
Based on CSA Guidance. 1. Create; 2. Store; 3. Use; 4. Share; 5. Archive; 6. Destroy. 
 
 
 
 
 
(SAS) 70 
_____ was a recognized standard of the American Institute of Certifi...
Examen
C838 Test|2023/24 Update|Graded A+
You are the security subject matter expert (SME) for an organization considering a transition from the legacy environment into a hosted cloud provider 's data center. One of the challenges you 're facing is whether the cloud provider will be able to comply with the existing legislative and contractual frameworks your organization is required to follow. This is a _________ issue. 
 
a. Resiliency 
b. Privacy 
c. Performance 
d. Regulatory 
D 
 
 
 
76. You are the security subject matter expert...
Examen
Managing Cloud Security - C838 Test|2023/24 Update|Graded A+
Eucalyptus 
Open source cloud computing and IaaS platform for enabling private clouds 
 
 
 
Apache Cloud Stack 
Open source cloud computing and IaaS platform developed to help make creating, deploying, and managing cloud services easier by providing a complete "stack" of features and components for cloud environments 
 
 
 
 
 
 
FIPS 140-2 
NIST document that lists accredited and outmoded cryptosystems 
 
 
 
NIST 800-53 
Guidance document with the primary goal of ensuring that appropriate s...
Examen
C838 - Cloud Computing - Nist Iso Fips|2023/24 Update|Graded A+
NIST 500-292 
Cloud Computing Security Reference Architecture 
 
 
 
NIST 500-299 
Security Reference Architecture 
 
 
 
 
NIST 800-037 
Risk Management Frameworks 
 
 
 
NIST 800-053 
Privacy Control 
 
 
 
NIST 800-057 
Encryption 
 
 
 
NIST 800-061 
Incident Handling Guide 
 
 
 
NIST 800-064 
Secure Software Development Lifecycle 
 
 
 
NIST 800-122 
PII 
 
 
 
NIST 800-145 
Definition of Cloud Computing 
 
 
 
ISO/IEC 17788 
Information Technology - Cloud Computing overview and Vocabulary...
Examen
C838 Legal And Compliance|2023/24 Update|Graded A+
Tort Law 
refers to the body of rights, obligations, and remedies that set out reliefs for persons who have been harmed as a result of wrongful acts by others. Civil case. 
 
 
 
Doctrine of the Proper law 
is a term used to deceive the processes associated with determining what legal jurisdiction will hear a dispute when one occurs. 
 
 
 
 
Restatement (second) Conflict of Law 
refers to a collation of developments in common law that helps the courts stay up with changes. 
 
 
 
common law 
is...
Examen
C838 Iso Nist Standards|2023/24 Update|Graded A+
ISO/IEC 27037:2012 
Guide for collecting, identifying, and preserving electronic evidence. 
 
 
 
ISO/IEC 27041:2015 
Guide for incident investigations 
 
 
 
 
 
 
ISO/IEC 27042:2015 
Guide for digital evidence analysis 
 
 
 
ISO/IEC 27043:2015 
Incident investigation principles and processes 
 
 
 
ISO/IEC 27050-1:2016 
Overview and principles for eDiscovery 
 
 
 
NIST SP 800-37 
Guide for implementing the Risk Management Framework 
 
 
 
ENISA 
Identifies 35 types of risks for cloud computi...
Examen
Managing Cloud Security - C838 Lesson 3|2023/24 Update|Graded A+
In the cloud motif, the data owner is usually: 
 
A The cloud provider 
B The cloud customer 
C In another jurisdiction 
D The cloud access security broker 
The cloud customer 
 
 
 
What is the intellectual property protection for the logo of a new video game? 
 
A Copyright 
B Trade secret 
C Trademark 
D Patent 
Trademark 
 
 
 
 
In the cloud motif, the data processor is usually: 
 
A The cloud access security broker 
B The cloud provider 
C The cloud customer 
D The party that assigns acces...
Examen
Managing Cloud Security - C838|2023/24 Update|Graded A+
Broad network access 
There should never be network bandwidth bottlenecks. 
 
 
 
On-demand services 
Refers to the model that allows customers to scale their compute and/or storage needs with little or no intervention from or prior communication with the provider. 
 
 
 
 
Resource pooling 
Characteristic that allows the cloud provider to meet various demands from customers while remaining financially viable. 
 
 
 
measured/metered service 
The customer is charged for only what they use and no...
Examen
C838 - Managing Cloud Security|2023/24 Update|Graded A+
_____ drive security decisions. 
business requirements 
 
 
All of these are reasons because of which an organization may want to consider cloud migration, except: 
Elimination of risks 
 
 
 
 
 
The generally accepted definition of cloud computing includes all of the following characteristics except: 
negating the need for backups 
 
 
When a cloud customer uploads PII to a cloud provider, who becomes ultimately responsible for the security of that PII? 
cloud customer 
 
 
We use which of the...
Examen
C838 Managing Cloud Security|2023/24 Update|Graded A+
Cloud Bursting 
When a company uses its own computing infrastructure for normal usage and accesses the cloud when it needs to scale for high/peak load requirements, ensuring a sudden spike in usage does not result in poor performance or system crashes. 
 
 
 
No; under current laws, liability and risk for safeguarding PII and meeting regulations reside with the organization, even if they have contracted with a cloud provider. 
Can an organization transfer risk and liability for safeguarding PII ...
Examen
C838 - Managing Cloud Security Q& As LATEST UPDATE 2023 GRADED A+
C838 - Managing Cloud Security Q& As LATEST UPDATE 2023 GRADED A+
Examen
C838 - Managing Cloud Security Q& As LATEST UPDATE 2023 GRADED A+
C838 - Managing Cloud Security Q& As LATEST UPDATE 2023 GRADED A+