1 | Page
C838 - MANAGING CLOUD SECURITY
FINAL OA 2025 UPDATED ACTUAL EXAM
WITH CORRECT SOLUTIONS.
_____ drive security decisions. - correct answer- business
requirements
All of these are reasons because of which an organization may
want to consider cloud migration, except: - correct answer-
Elimination of risks
The generally accepted definition of cloud computing includes
all of the following characteristics except: - correct answer-
negating the need for backups
When a cloud customer uploads PII to a cloud provider, who
becomes ultimately responsible for the security of that PII? -
correct answer- cloud customer
We use which of the following to determine the critical paths,
processes, and assets of an organization? - correct answer-
BIA
,2 | Page
If a service or solution does not meet all of the specified key
characteristics listed below, it is said to be not true cloud
computing. Please select the valid cloud computing
characteristics out of the terms identified below.
Each correct answer represents a complete solution. Choose
all that apply. - correct answer- On-demand self-service
Broad network access
Resource pooling
measured service
All of these technologies have made cloud service viable
except: - correct answer- smart hubs
The cloud deployment model that features organizational
ownership of the hardware and infrastructure, and usage only
by members of that organization, is known as: - correct answer-
private
The cloud deployment model that features ownership by a
cloud provider, with services offered to anyone who wants to
subscribe, is known as: - correct answer- Public
,3 | Page
The cloud deployment model that features joint ownership of
assets among an affinity group is known as: - correct answer-
Community
If a cloud customer wants a secure, isolated sandbox in order
to conduct software development and testing, which cloud
service model would probably be best? - correct answer- PaaS
If a cloud customer wants a fully-operational environment with
very little maintenance or administration necessary, which cloud
service model would probably be best? - correct answer- SaaS
If a cloud customer wants a bare-bones environment in which
to replicate their own enterprise for BC/DR purposes, which
cloud service model would probably be best? - correct answer-
IaaS
Which of the following is not a common cloud service model? -
correct answer- Programming as a Service
Cloud Access Security Brokers (CASBs) might offer all the
following services EXCEPT: - correct answer- BC / DR / COOP
, 4 | Page
If a cloud customer cannot get access to the cloud provider, this
affects what portion of the CIA triad? - correct answer-
Availability
All of the following can result in vendor lock-in except: - correct
answer- Statutory compliance
The risk that a cloud provider might go out of business and the
cloud customer might not be able to recover data is known as: -
correct answer- vendor lock-out
All of these are features of cloud computing except: - correct
answer- Reversed charging configuration
Cloud vendors are held to contractual obligations with specified
metrics by: - correct answer- SLAs
Gathering business requirements can aid the organization in
determining all of this information about organizational assets,
except: - correct answer- Usefulness
C838 - MANAGING CLOUD SECURITY
FINAL OA 2025 UPDATED ACTUAL EXAM
WITH CORRECT SOLUTIONS.
_____ drive security decisions. - correct answer- business
requirements
All of these are reasons because of which an organization may
want to consider cloud migration, except: - correct answer-
Elimination of risks
The generally accepted definition of cloud computing includes
all of the following characteristics except: - correct answer-
negating the need for backups
When a cloud customer uploads PII to a cloud provider, who
becomes ultimately responsible for the security of that PII? -
correct answer- cloud customer
We use which of the following to determine the critical paths,
processes, and assets of an organization? - correct answer-
BIA
,2 | Page
If a service or solution does not meet all of the specified key
characteristics listed below, it is said to be not true cloud
computing. Please select the valid cloud computing
characteristics out of the terms identified below.
Each correct answer represents a complete solution. Choose
all that apply. - correct answer- On-demand self-service
Broad network access
Resource pooling
measured service
All of these technologies have made cloud service viable
except: - correct answer- smart hubs
The cloud deployment model that features organizational
ownership of the hardware and infrastructure, and usage only
by members of that organization, is known as: - correct answer-
private
The cloud deployment model that features ownership by a
cloud provider, with services offered to anyone who wants to
subscribe, is known as: - correct answer- Public
,3 | Page
The cloud deployment model that features joint ownership of
assets among an affinity group is known as: - correct answer-
Community
If a cloud customer wants a secure, isolated sandbox in order
to conduct software development and testing, which cloud
service model would probably be best? - correct answer- PaaS
If a cloud customer wants a fully-operational environment with
very little maintenance or administration necessary, which cloud
service model would probably be best? - correct answer- SaaS
If a cloud customer wants a bare-bones environment in which
to replicate their own enterprise for BC/DR purposes, which
cloud service model would probably be best? - correct answer-
IaaS
Which of the following is not a common cloud service model? -
correct answer- Programming as a Service
Cloud Access Security Brokers (CASBs) might offer all the
following services EXCEPT: - correct answer- BC / DR / COOP
, 4 | Page
If a cloud customer cannot get access to the cloud provider, this
affects what portion of the CIA triad? - correct answer-
Availability
All of the following can result in vendor lock-in except: - correct
answer- Statutory compliance
The risk that a cloud provider might go out of business and the
cloud customer might not be able to recover data is known as: -
correct answer- vendor lock-out
All of these are features of cloud computing except: - correct
answer- Reversed charging configuration
Cloud vendors are held to contractual obligations with specified
metrics by: - correct answer- SLAs
Gathering business requirements can aid the organization in
determining all of this information about organizational assets,
except: - correct answer- Usefulness
