WGU C838 - Managing Cloud Security: Exam Questions With 100% Correct Answers LatestVerified 2023/2024 | Graded

The process of evaluating assets? - correct answers Business Impact Analysis(BIA) What is criticality? - correct answers Something an org could not operate or exist without What are 5 examples of criticality for an org - correct answers Tangible assets Intangible assets Processes Data paths Personnel In risk, what is the avoidance method? - correct answers Avoiding high risk WGU C838 - Managing Cloud Security – Exam Questions and Answers (Latest Update 2023) In risk, what is the acceptance method? - correct answers Acceptable level of risk In risk, what is an example of the avoidance method? - correct answers Insurance In risk, what is the mitigation method? - correct answers Controls or countermeasures Assets can be what? - correct answers Tangible Intangible Personnel What does Business Impact Analysis do? - correct answers Defines which of the assets provide the intrinsic value of an organization. What is risk appetite - correct answers Level, Amount, or Type of risk that an org finds acceptable WGU C838 - Managing Cloud Security – Exam Questions and Answers (Latest Update 2023) What is the IaaS boundary? - correct answers The provider is responsible for connectivity and power and the customer is in charge for installation of software. What is the PaaS boundary? - correct answers The provider is responsible for updates and administration of the OS and the customer monitors and reviews software events. What is the SaaS boundary? - correct answers The provider is responsible for system maintenance and the customer supplies and processes data to and in the system. What should encryption be used for in a cloud datacenter? - correct answers Long-term storage/archiving Protecting near-term stored files, such as snapshots of virtualized instances Preventing unauthorized access to specific datasets by authorized personnel What should encryption be used for in communications between cloud providers and users? - correct answers Creating secure sessions WGU C838 - Managing Cloud Security – Exam Questions and Answers (Latest Update 2023) Ensuring the integrity and confidentiality of data in transit What are 4 controls/mechanisms a cloud provider should play a role in in layered defense? - correct answers Strong personnel controls Technological controls Physical controls Governance mechanisms In cloud layered defense what are examples of personnel controls? - correct answers background checks continual monitoring In cloud layered defense what are examples of technological controls? - correct answers encryption event logging access control enforcement In cloud layered defense what is an examples of physical controls? - correct answers access to overall campus WGU C838 - Managing Cloud Security – Exam Questions and Answers (Latest Update 2023) In cloud layered defense what is an example of governance mechanisms? - correct answers auditing What are ways for securing devices in a datacenter? - correct answers Guess accounts removed no default passwords systems are patched, maintained and updated unused ports are closed limited physical access What is layered defense? - correct answers The practice of having multiple overlapping means of securing the environment with a variety of methods Who determines risk appetite? - correct answers senior management Experimental technology of processing encrypted data w/o decrypting it first? - correct answers Homomorphic WGU C838 - Managing Cloud Security – Exam Questions and Answers (Latest Update 2023) T/F: Data owners remain legally responsible for all data they own - correct answers True What are four ways an org might categorize data? - correct answers Regulatory compliance business function function unit by project What are three examples of classification? - correct answers sensitivity jurisdiction criticality What is a data owner? - correct answers Collects or creates the data, and possesses the rights and responsibilities of the data WGU C838 - Managing Cloud Security – Exam Questions and Answers (Latest Update 2023) What is a data custodian? - correct answers Manipulates, stores, or moves the data, and serves as a cloud provider What is datamining? - correct answers Data mining tries to automatically find interesting patterns in data using plethora of technologies What method would an org creates categories based on which rules apply to a specific dataset? - correct answers regulatory compliance What method would an org have specific categories for different uses of data? - correct answers business function What would a department or office be called that has its own category and keeps all the data it controls? - correct answers functional unit what dataset is defined by projects? - correct answers by project