TESTBANK | WGU C838 MANAGING CLOUD SECURITY FINAL EXAM QUESTIONS AND ANSWERS LATEST 2024|2025

TESTBANK | WGU C838 MANAGING CLOUD SECURITY FINAL EXAM QUESTIONS AND ANSWERS LATEST 2024|2025 _______ drive security decisions. A Public opinion B Business requirements C Surveys D Customer service responses Correct Answer: B ________ reports review controls relevant to security, availability, processing integrity, confidentiality, or privacy. This is the report of most use to cloud customers (to determine the suitability of cloud providers) and IT security practitioners. Correct Answer: SOC 2 __________ usually concerns modifications to a known set of parameters regarding each element of the network, including what settings each has, how the controls are implemented, and so forth. Correct Answer: Configuration management ___________ abstracts the running of code (including operating systems) from the underlying hardware and most commonly refers to virtual machines. Correct Answer: Compute virtualization ___________ are the logs, documentation, and other materials needed for audits and compliance; they are the evidence to support compliance activities. Correct Answer: Artifacts ____________ are applied to existing systems and components, whereas upgrades are the replacement of older elements for new ones. Correct Answer: Updates ____________ refers to the process of identifying and obtaining electronic evidence for either prosecutorial or litigation purposes. Determining which data in a set is pertinent can be difficult. Regardless of whether it is databases, records, email, or just simple files. Correct Answer: Electronic discovery (eDiscovery) ____________ specifies a management system that is intended to bring information security under management control and gives specific requirements. Organizations that meet the requirements may be certified by an accredited certification body following successful completion of an audit. Correct Answer: ISO/IEC 27001 _____________ usually deals with modifications to the network, such as the acquisition and deployment of new systems and components and the disposal of those taken out of service. Correct Answer: Change management ______________ efforts are concerned with maintaining critical operations during any interruption in service, whereas disaster recovery efforts are focused on the resumption of operations after an interruption due to disaster. Correct Answer: Business continuity ______________ is an advisory organization for matters related to IT service. Correct Answer: Uptime Institute ______________ talks about personally identifiable information (PII) as a name, date of birth, and Social Security number. HIPAA calls this type of data "electronic protected