WGU C838 (Managing Cloud Security) Exam Questions With Correct Answers | Latest Update 2023/2024 | 100% Verified

What is another way of describing a nonfunctional business requirement? - correct answers not necessary What is the greatest driver pushing orgs to the cloud? - correct answers Cost savings What is cloud bursting? - correct answers Ability to increase available cloud resources on demand What are 3 characteristics of cloud computing? - correct answers Elasticity Simplicity Scalability What is a cloud customer? - correct answers Anyone purchasing cloud services What is a cloud user? - correct answers Anyone using cloud services What are the three cloud computing service models? - correct answers SaaS(Software as a service) PaaS(Platform as a service) IaaS(Infrastructure as a service) What is IaaS (Infrastructure as a Service)? - correct answers Cloud provider provides all the physical capability and administration, while the customer is responsible for logical resources. What is PaaS (Platform as a Service)? - correct answers A cloud computing service that provides the hardware and the operating system and is responsible for updating and maintaining both. What is SaaS (Software As A Service)? - correct answers Cloud provider manages everything. What are the four cloud deployment models? - correct answers Public Private Community Hybrid WGU C838 - Managing Cloud Security – Exam Questions and Answers (Latest Update 2023) What cloud model is owned by a single organization? - correct answers Private What cloud model is an arrangement of two or more cloud servers? - correct answers Hybrid What cloud model is a shared setup between orgs? - correct answers Community What cloud model is open for free usage? - correct answers Public What is a cloud service provider? - correct answers Cloud service provider manages and provides entire hosting ability What is a Cloud Access Security Broker? - correct answers Third-party acting as an intermediary for identity and access management What do regulators do? - correct answers Ensure organizations are in compliance with regulatory framework. WGU C838 - Managing Cloud Security – Exam Questions and Answers (Latest Update 2023) What word in the CIA triad describes: What protects information from unauthorized access/dissemination? - correct answers Confidentiality What word in the CIA triad describes: Ensuring that information is not subject to unauthorized modification? - correct answers Integrity What word in the CIA triad describes: Ensuring that authorized users can access the information when they are permitted to do so? - correct answers Availability What is a cloud architect? - correct answers Expert in cloud computing What is cloud os also known as? - correct answers PaaS NIST standard number that lists accredited and outmoded cryptosystems - correct answers FIPS 140-2 WGU C838 - Managing Cloud Security – Exam Questions and Answers (Latest Update 2023) customer may be unable to leave, migrate, or transfer to an alternate provider due to technical or non-technical constraints. - correct answers vendor lock-m What is cloud migration? - correct answers Process of transitioning part of a company's data or services from onsite premises to the cloud What is cloud portability? - correct answers Move applications and data between cloud providers What offers a degree of assurance that nobody w/o authorization will be able to access other's data? - correct answers Encryption If a cloud customer wants a secure, isolated sandbox in order to conduct software development and testing, which cloud service model would probably be best? - correct answers PaaS What technology has NOT made cloud service viable? - correct answers Smart hubs WGU C838 - Managing Cloud Security – Exam Questions and Answers (Latest Update 2023) What determines the critical paths, processes, and assets of an organization? - correct answers BIA Fully-operational environment with very little maintenance or administration necessary, which cloud service model would probably be best? - correct answers PaaS customer is unable to recover or access their own data due to the cloud provider going into bankruptcy or otherwise leaving the market. - correct answers Vendor lock-out What are four examples of things to know to decide how to handle risks within an org? - correct answers Inventory of all assets Valuation of each asset Critical paths, processes, and assets Clear understanding of risk appetite WGU C838 - Managing Cloud Security – Exam Questions and Answers (Latest Update 2023) T/F: Assets are only tangible items. - correct answers False. Assets are everything owned or controlled by an org. The process of evaluating assets? - correct answers Business Impact Analysis(BIA) What is criticality? - correct answers Something an org could not operate or exist without What are 5 examples of criticality for an org - correct answers Tangible assets Intangible assets Processes Data paths Personnel In risk, what is the avoidance method? - correct answers Avoiding high risk WGU C838 - Managing Cloud Security – Exam Questions and Answers (Latest Update 2023) In risk, what is the acceptance method? - correct answers Acceptable level of risk In risk, what is an example of the avoidance method? - correct answers Insurance In risk, what is the mitigation method? - correct answers Controls or countermeasures Assets can be what? - correct answers Tangible Intangible Personnel What does Business Impact Analysis do? - correct answers Defines which of the assets provide the intrinsic value of an organization. What is risk appetite - correct answers Level, Amount, or Type of risk that an org finds acceptable WGU C838 - Managing Cloud Security – Exam Questions and Answers (Latest Update 2023) What is the IaaS boundary? - correct answers The provider is responsible for connectivity and power and the customer is in charge for installation of software. What is the PaaS boundary? - correct answers The provider is responsible for updates and administration of the OS and the customer monitors and reviews software events. What is the SaaS boundary? - correct answers The provider is responsible for system maintenance and the customer supplies and processes data to and in the system. What should encryption be used for in a cloud datacenter? - correct answers Long-term storage/archiving Protecting near-term stored files, such as snapshots of virtualized instances Preventing unauthorized access to specific datasets by authorized personnel What should encryption be used for in communications between cloud providers and users? - correct answers Creating secure sessions WGU C838 - Managing Cloud Security – Exam Questions and Answers (Latest Update 2023) Ensuring the integrity and confidentiality of data in transit What are 4 controls/mechanisms a cloud provider should play a role in in layered defense? - correct answers Strong personnel controls Technological controls Physical controls Governance mechanisms In cloud layered defense what are examples of personnel controls? - correct answers background checks continual monitoring In cloud layered defense what are examples of technological controls? - correct answers encryption event logging access control enforcement In cloud layered defense what is an examples of physical controls? - correct answers access to overall campus WGU C838 - Managing Cloud Security – Exam Questions and Answers (Latest Update 2023) In cloud layered defense what is an example of governance mechanisms? - correct answers auditing What are ways for securing devices in a datacenter? - correct answers Guess accounts removed no default passwords systems are patched, maintained and updated