WGU CLOUD SECURITY MODELS
EXAM PREP 2026: PRACTICE TEST
BANK : QUESTIONS AND
RATIONALES/GRADED A+
UPDATE 100% CORRECT
Section 1: Cloud Computing Fundamentals & NIST
Definitions
1. Which NIST publication number provides the official definition of cloud
computing?
• A. NIST SP 800-53
• B. NIST SP 800-145
• C. NIST SP 800-210
• D. NIST SP 800-171
Correct Answer: B. NIST SP 800-145
Rationale: NIST Special Publication 800-145 formally defines cloud computing with
its five essential characteristics: on-demand self-service, broad network access,
resource pooling, rapid elasticity, and measured service.
2. Which of the following is NOT one of the five essential characteristics of cloud
computing as defined by NIST?
• A. On-demand self-service
• B. Broad network access
, • C. Single-tenancy architecture
• D. Measured service
Correct Answer: C. Single-tenancy architecture
Rationale: The NIST definition specifies five essential characteristics: on-demand self-
service, broad network access, resource pooling, rapid elasticity, and measured
service. Single-tenancy is not a required characteristic—cloud computing typically
involves resource pooling across multiple tenants.
3. The ability for users to unilaterally provision computing capabilities automatically
without requiring human interaction with service providers is known as:
• A. Rapid elasticity
• B. Resource pooling
• C. On-demand self-service
• D. Measured service
Correct Answer: C. On-demand self-service
Rationale: On-demand self-service allows consumers to provision computing
resources automatically, eliminating the need for manual approval or human
intervention from the cloud provider.
4. Which characteristic of cloud computing allows resources to be released and
scaled both outward and inward rapidly based on demand?
• A. Resource pooling
• B. Broad network access
• C. Rapid elasticity
• D. Measured service
Correct Answer: C. Rapid elasticity
Rationale: Rapid elasticity enables computing resources to be elastically provisioned
and released—sometimes automatically—to scale rapidly outward and inward
commensurate with demand. This is distinct from simple scalability.
,5. What does the NIST term "resource pooling" refer to in cloud computing?
• A. Dedicated physical servers for each customer
• B. The provider's computing resources are pooled to serve multiple consumers
using a multi-tenant model
• C. Combining storage resources from multiple providers
• D. Sharing cryptographic keys between tenants
Correct Answer: B. The provider's computing resources are pooled to serve
multiple consumers using a multi-tenant model
Rationale: Resource pooling means the provider's computing resources are
aggregated to serve multiple consumers simultaneously using a multi-tenant model,
with different physical and virtual resources dynamically assigned and reassigned
according to consumer demand.
6. The ISO/IEC standard that provides general information and terminology for cloud
computing is:
• A. ISO/IEC 27001
• B. ISO/IEC 17788
• C. ISO/IEC 27017
• D. ISO/IEC 27018
Correct Answer: B. ISO/IEC 17788
Rationale: ISO/IEC 17788 provides an overview of cloud computing along with a set
of terms and definitions. It serves as the foundational vocabulary reference for cloud
computing standards.
7. Which cloud characteristic enables a pay-as-you-go billing model where resource
usage is optimized and monitored?
• A. Broad network access
• B. Resource pooling
• C. Rapid elasticity
• D. Measured service
Correct Answer: D. Measured service
, Rationale: Measured service refers to the metering capability of cloud systems that
automatically control and optimize resource use by leveraging a metering capability
at some level of abstraction appropriate to the type of service (e.g., storage,
processing, bandwidth).
8. The greatest driver pushing organizations to adopt cloud computing is typically:
• A. Enhanced security
• B. Cost savings
• C. Regulatory compliance
• D. Complete data ownership
Correct Answer: B. Cost savings
Rationale: While cloud computing offers many benefits, cost savings—including
reduction in capital expenditure (CapEx), personnel costs, and operational costs—
remains the primary driver for most organizations moving to the cloud.
Section 2: Cloud Service Models (IaaS, PaaS, SaaS)
9. In the Infrastructure as a Service (IaaS) model, which of the following is the SOLE
responsibility of the customer?
• A. Physical security of the data center
• B. Maintenance of the underlying virtualization layer
• C. Security of the guest operating system and applications
• D. Disposal of decommissioned hard drives
Correct Answer: C. Security of the guest operating system and applications
Rationale: In IaaS, the cloud provider manages the physical infrastructure, network,
and virtualization layer, while the customer is responsible for everything operating
system (OS) and above—including the guest OS, applications, data, access
management, and firewall configurations within their instances.
EXAM PREP 2026: PRACTICE TEST
BANK : QUESTIONS AND
RATIONALES/GRADED A+
UPDATE 100% CORRECT
Section 1: Cloud Computing Fundamentals & NIST
Definitions
1. Which NIST publication number provides the official definition of cloud
computing?
• A. NIST SP 800-53
• B. NIST SP 800-145
• C. NIST SP 800-210
• D. NIST SP 800-171
Correct Answer: B. NIST SP 800-145
Rationale: NIST Special Publication 800-145 formally defines cloud computing with
its five essential characteristics: on-demand self-service, broad network access,
resource pooling, rapid elasticity, and measured service.
2. Which of the following is NOT one of the five essential characteristics of cloud
computing as defined by NIST?
• A. On-demand self-service
• B. Broad network access
, • C. Single-tenancy architecture
• D. Measured service
Correct Answer: C. Single-tenancy architecture
Rationale: The NIST definition specifies five essential characteristics: on-demand self-
service, broad network access, resource pooling, rapid elasticity, and measured
service. Single-tenancy is not a required characteristic—cloud computing typically
involves resource pooling across multiple tenants.
3. The ability for users to unilaterally provision computing capabilities automatically
without requiring human interaction with service providers is known as:
• A. Rapid elasticity
• B. Resource pooling
• C. On-demand self-service
• D. Measured service
Correct Answer: C. On-demand self-service
Rationale: On-demand self-service allows consumers to provision computing
resources automatically, eliminating the need for manual approval or human
intervention from the cloud provider.
4. Which characteristic of cloud computing allows resources to be released and
scaled both outward and inward rapidly based on demand?
• A. Resource pooling
• B. Broad network access
• C. Rapid elasticity
• D. Measured service
Correct Answer: C. Rapid elasticity
Rationale: Rapid elasticity enables computing resources to be elastically provisioned
and released—sometimes automatically—to scale rapidly outward and inward
commensurate with demand. This is distinct from simple scalability.
,5. What does the NIST term "resource pooling" refer to in cloud computing?
• A. Dedicated physical servers for each customer
• B. The provider's computing resources are pooled to serve multiple consumers
using a multi-tenant model
• C. Combining storage resources from multiple providers
• D. Sharing cryptographic keys between tenants
Correct Answer: B. The provider's computing resources are pooled to serve
multiple consumers using a multi-tenant model
Rationale: Resource pooling means the provider's computing resources are
aggregated to serve multiple consumers simultaneously using a multi-tenant model,
with different physical and virtual resources dynamically assigned and reassigned
according to consumer demand.
6. The ISO/IEC standard that provides general information and terminology for cloud
computing is:
• A. ISO/IEC 27001
• B. ISO/IEC 17788
• C. ISO/IEC 27017
• D. ISO/IEC 27018
Correct Answer: B. ISO/IEC 17788
Rationale: ISO/IEC 17788 provides an overview of cloud computing along with a set
of terms and definitions. It serves as the foundational vocabulary reference for cloud
computing standards.
7. Which cloud characteristic enables a pay-as-you-go billing model where resource
usage is optimized and monitored?
• A. Broad network access
• B. Resource pooling
• C. Rapid elasticity
• D. Measured service
Correct Answer: D. Measured service
, Rationale: Measured service refers to the metering capability of cloud systems that
automatically control and optimize resource use by leveraging a metering capability
at some level of abstraction appropriate to the type of service (e.g., storage,
processing, bandwidth).
8. The greatest driver pushing organizations to adopt cloud computing is typically:
• A. Enhanced security
• B. Cost savings
• C. Regulatory compliance
• D. Complete data ownership
Correct Answer: B. Cost savings
Rationale: While cloud computing offers many benefits, cost savings—including
reduction in capital expenditure (CapEx), personnel costs, and operational costs—
remains the primary driver for most organizations moving to the cloud.
Section 2: Cloud Service Models (IaaS, PaaS, SaaS)
9. In the Infrastructure as a Service (IaaS) model, which of the following is the SOLE
responsibility of the customer?
• A. Physical security of the data center
• B. Maintenance of the underlying virtualization layer
• C. Security of the guest operating system and applications
• D. Disposal of decommissioned hard drives
Correct Answer: C. Security of the guest operating system and applications
Rationale: In IaaS, the cloud provider manages the physical infrastructure, network,
and virtualization layer, while the customer is responsible for everything operating
system (OS) and above—including the guest OS, applications, data, access
management, and firewall configurations within their instances.
