WGU C795 Cybersecurity Management II Tactical SOBs
Questions and Answers (2022/2023) (Verified Answers)
____________ subjects are granted only the privileges necessary to perform assigned
work tasks and no more. Keep in mind that privilege in this context includes both
permissions to data and rights to perform tasks on systems.
The principle of least privilege states that
____________ ensures that no single person has total control over a critical function or
system. This is necessary to ensure that no single person can compromise the system
or its security.
Separation of duties and responsibilities
___________is similar in concept to separation of duties and responsibilities. A
separation-of-privilege policy requires the use of granular rights and permissions.
Separation of privilege
____________ is known as management of changes made to the system's hardware,
software, or firmware throughout its operational life cycle.
Configuration management
____________ ............ they run as guest operating systems on physical servers. The
physical servers include extra processing power, memory, and disk storage to handle
the VM requirements.
1. Virtual Machines (VMs):
__________ is sometimes called a virtual desktop environment (VDE), hosts a user's
desktop as a VM on a server. Users can connect to the server to access their desktop
from almost any system, including from mobile devices. Persistent virtual desktops
retain a custom desktop for the user. Nonpersistent virtual desktops are identical for all
users. If a user makes changes, the desktop reverts to a known state after the user logs
off.
1. Virtual Desktop Infrastructure (VDI):
_____________.....they decouple the control plane from the data plane (or forwarding
plane). The control plane uses protocols to decide where to send traffic, and the data
plane includes rules that decide whether traffic will be forwarded. Instead of traditional
networking equipment such as routers and switches, an SDN controller handles traffic
routing using simpler network devices that accept instructions from the controller. This
eliminates some of the complexity related to traditional networking protocols.
1. Software-Defined Networks (SDNs):
_____________A SAN is a dedicated high-speed network that hosts multiple storage
devices. They are often used with servers that need high-speed access to data. These
have historically been expensive due to the complex hardware requirements of the
SAN. VSANs bypass these complexities with virtualization.
1. Virtual Storage Area Networks (VSANs):
________________ models provide fully functional applications typically accessible via
a web browser. For example, Google's Gmail is a SaaS application. The CSP (Google
in this example) is responsible for all maintenance of the SaaS services. Consumers do
not manage or control any of the cloud-based assets.
, 1. Software as a service (SaaS): Software as a service (SaaS)
________________ models provide consumers with a computing platform, including
hardware, an operating system, and applications. In some cases, consumers install the
applications from a list of choices provided by the CSP. Consumers manage their
applications and possibly some configuration settings on the host. However, the CSP is
responsible for maintenance of the host and the underlying cloud infrastructure.
1. Platform as a service (PaaS): Platform as a service (PaaS)
______________ models provide basic computing resources to consumers. This
includes servers, storage, and in some cases, networking resources. Consumers install
operating systems and applications and perform all required maintenance on the
operating systems and applications. The CSP maintains the cloud-based infrastructure,
ensuring that consumers have access to leased systems. The distinction between IaaS
and PaaS models isn't always clear when evaluating public services. However, when
leasing cloud-based services, the label the CSP uses isn't as important as clearly
understanding who is responsible for performing different maintenance and security
actions.
1. Infrastructure as a service (IaaS): Infrastructure as a service (IaaS)
___________ includes assets available for any consumers to rent or lease and is
hosted by an external CSP. Service-level agreements can be effective at ensuring that
the CSP provides the cloud-based services at a level acceptable to the organization.
1. A public cloud model
______________ is used for cloud-based assets for a single organization.
Organizations can create and host private clouds using their own on-premises
resources. If so, the organization is responsible for all maintenance. However, an
organization can also rent resources from a third party for exclusive use of the
organization. Maintenance requirements are typically split based on the service model
(SaaS, PaaS, or IaaS).
1. The private cloud deployment model
_______________provides cloud-based assets to two or more organizations. Assets
can be owned and managed by one or more of the organizations. Maintenance
responsibilities are shared based on who is hosting the assets and the service models.
1. A community cloud deployment model
_____________ includes a combination of two or more clouds. Similar to a community
cloud model, maintenance responsibilities are shared based on who is hosting the
assets and the service models in use
1. A hybrid cloud model
Organizations apply ______________ to ensure that resources are securely
provisioned and managed. As an example, desktop computers are often deployed using
imaging techniques to ensure that they start in a known secure state
various resource protection techniques
_______________ ensure that the systems are kept up-to-date with required changes.
The techniques vary depending on the resource and are described in the following
sections.
Change management and patch management techniques
____________ helps verify that systems are not vulnerable to known threats.
vulnerability management
Questions and Answers (2022/2023) (Verified Answers)
____________ subjects are granted only the privileges necessary to perform assigned
work tasks and no more. Keep in mind that privilege in this context includes both
permissions to data and rights to perform tasks on systems.
The principle of least privilege states that
____________ ensures that no single person has total control over a critical function or
system. This is necessary to ensure that no single person can compromise the system
or its security.
Separation of duties and responsibilities
___________is similar in concept to separation of duties and responsibilities. A
separation-of-privilege policy requires the use of granular rights and permissions.
Separation of privilege
____________ is known as management of changes made to the system's hardware,
software, or firmware throughout its operational life cycle.
Configuration management
____________ ............ they run as guest operating systems on physical servers. The
physical servers include extra processing power, memory, and disk storage to handle
the VM requirements.
1. Virtual Machines (VMs):
__________ is sometimes called a virtual desktop environment (VDE), hosts a user's
desktop as a VM on a server. Users can connect to the server to access their desktop
from almost any system, including from mobile devices. Persistent virtual desktops
retain a custom desktop for the user. Nonpersistent virtual desktops are identical for all
users. If a user makes changes, the desktop reverts to a known state after the user logs
off.
1. Virtual Desktop Infrastructure (VDI):
_____________.....they decouple the control plane from the data plane (or forwarding
plane). The control plane uses protocols to decide where to send traffic, and the data
plane includes rules that decide whether traffic will be forwarded. Instead of traditional
networking equipment such as routers and switches, an SDN controller handles traffic
routing using simpler network devices that accept instructions from the controller. This
eliminates some of the complexity related to traditional networking protocols.
1. Software-Defined Networks (SDNs):
_____________A SAN is a dedicated high-speed network that hosts multiple storage
devices. They are often used with servers that need high-speed access to data. These
have historically been expensive due to the complex hardware requirements of the
SAN. VSANs bypass these complexities with virtualization.
1. Virtual Storage Area Networks (VSANs):
________________ models provide fully functional applications typically accessible via
a web browser. For example, Google's Gmail is a SaaS application. The CSP (Google
in this example) is responsible for all maintenance of the SaaS services. Consumers do
not manage or control any of the cloud-based assets.
, 1. Software as a service (SaaS): Software as a service (SaaS)
________________ models provide consumers with a computing platform, including
hardware, an operating system, and applications. In some cases, consumers install the
applications from a list of choices provided by the CSP. Consumers manage their
applications and possibly some configuration settings on the host. However, the CSP is
responsible for maintenance of the host and the underlying cloud infrastructure.
1. Platform as a service (PaaS): Platform as a service (PaaS)
______________ models provide basic computing resources to consumers. This
includes servers, storage, and in some cases, networking resources. Consumers install
operating systems and applications and perform all required maintenance on the
operating systems and applications. The CSP maintains the cloud-based infrastructure,
ensuring that consumers have access to leased systems. The distinction between IaaS
and PaaS models isn't always clear when evaluating public services. However, when
leasing cloud-based services, the label the CSP uses isn't as important as clearly
understanding who is responsible for performing different maintenance and security
actions.
1. Infrastructure as a service (IaaS): Infrastructure as a service (IaaS)
___________ includes assets available for any consumers to rent or lease and is
hosted by an external CSP. Service-level agreements can be effective at ensuring that
the CSP provides the cloud-based services at a level acceptable to the organization.
1. A public cloud model
______________ is used for cloud-based assets for a single organization.
Organizations can create and host private clouds using their own on-premises
resources. If so, the organization is responsible for all maintenance. However, an
organization can also rent resources from a third party for exclusive use of the
organization. Maintenance requirements are typically split based on the service model
(SaaS, PaaS, or IaaS).
1. The private cloud deployment model
_______________provides cloud-based assets to two or more organizations. Assets
can be owned and managed by one or more of the organizations. Maintenance
responsibilities are shared based on who is hosting the assets and the service models.
1. A community cloud deployment model
_____________ includes a combination of two or more clouds. Similar to a community
cloud model, maintenance responsibilities are shared based on who is hosting the
assets and the service models in use
1. A hybrid cloud model
Organizations apply ______________ to ensure that resources are securely
provisioned and managed. As an example, desktop computers are often deployed using
imaging techniques to ensure that they start in a known secure state
various resource protection techniques
_______________ ensure that the systems are kept up-to-date with required changes.
The techniques vary depending on the resource and are described in the following
sections.
Change management and patch management techniques
____________ helps verify that systems are not vulnerable to known threats.
vulnerability management
