WGU D320/CCSP
1. The management plane is use to The management plane uses APIs to execute remote
administer a cloud environment calls across the cloud environment to various man-
and perform administrative tasks agement systems, especially hypervisors. This allows a
across a variety of systems, but centralized administrative interface, often a web portal,
most specifically it's used with theto orchestrate tasks throughout an enterprise. Scripts
hypervisors. may be utilized to execute API calls, but they are not
used directly to interact with systems. XML is used for
What does the management plane data encoding and transmission, but not for executing
typically leverage for this orches- remote calls. TLS is used to encrypt communications
tration? and may be used with API calls, but it is not the actual
process for executing commands.
A. APIs
B. Scripts
C. TLS
D. XML
2. When dealing with PII, which cat- Regulated PII pertains to data that is outlined in law
egory pertains to those require- and regulations. Violations of the requirements for the
ments that can carry legal sanc- protection of regulated PII can carry legal sanctions or
tions or penalties for failure to ade- penalties. Contractual PII involves required data pro-
quately safeguard the data and ad- tection that is determined by the actual service contract
dress compliance requirements? between the cloud provider and cloud customer, rather
than outlined by law. Violations of the provisions of
A. Contractual contractual PII carry potential financial or contractual
B. Jurisdictional implications, but not legal sanctions. Legal and juris-
C. Regulated dictional are similar terms to regulated, but neither is
D. Legal the official term used.
3. Although the united states does The Payment Card Industry Data Security Standard (PCI
not have a single, comprehensive DSS) pertains to organizations that handle credit card
privacy and regulatory framework, transactions and is an industry-regulatory standard,
a number of specific regulations not a governmental one. The Sarbanes-Oxley Act (SOX)
, WGU D320/CCSP
pertain to types of data or popula- was passed in 2002 and pertains to financial records
tions. and reporting, as well as transparency requirements
for shareholders and other stakeholders. The Health
Which of the following is NOT a Insurance and Portability Act (HIPAA) was passed in
regulatory system from the United 1996 and pertains to data privacy and security for med-
States federal government? ical records. FISMA refers to the Federal Information
Security Management Act of 2002 and pertains to the
A. HIPAA
protection of all US federal government IT systems, with
B. SOX
the exception of national security systems.
C. FISMA
D. PCI DSS
4. The president of your company has
A hybrid cloud model spans two more different hosting
tsked you with implementing cloud
configurations or cloud providers. This would enable
services as the most efficient way
an organization to continue using its current hosting
of obtaining a robust disaster re-
configuration, while adding additional cloud services to
covery configuration for your pro-
enable disaster recovery capabilities. The other cloud
duction services. deployment models--public, private, and communi-
ty--would not be applicable for seeking a disaster re-
Which of the cloud deployment covery configuration where cloud services are to be
models would you MOST likely be leveraged for that purpose rather than production ser-
exploring? vice hosting.
A. Hybrid
B. Private
C. Community
D. Public
5. If you are running an application Multitenancy is the aspect of cloud computing that
that has strict legal requirements involves having multiple customers and applications
that the data cannot reside on sys- running within the same system and sharing the same
tems that contain other applica- resources. Although considerable mechanisms are in
tions or systems, which aspect of place to ensure isolation and separation, the data
, WGU D320/CCSP
cloud computing would be prohib- and applications are ultimately using shared resources.
itive in this case? Broad network access refers to the ability to access
cloud services from any location or client. Portabili-
A. Multitenancy ty refers to the ability to easily move cloud services
B. Broad network access between different cloud providers, whereas elasticity
C. Portability refers to the capabilities of a cloud environment to
D. Elasticity add or remove services, as needed, to meet current
demand.
6. The REST API is a widely Representational State Transfer (REST) is a software ar-
used standard for communications chitectural scheme that applies the components, con-
of web-based services between nectors, and data conduits for many web applications
clients and the servers hosting used on the Internet. It uses and relies on the HTTP
them. protocol and supports a variety of data formats. Ex-
tensible Markup Language (XML) and Security Asser-
Which protocol does the REST API tion Markup Language (SAML) are both standards for
depend on? exchanging encoded data between two parties, with
A. HTTP XML being for more general use and SAML focused
B. SSH on authentication and authorization data. Secure Shell
C. SAML client (SSH) is a secure method for allowing remote
D. XML login to systems over a network.
7. Which of the following actions will Modifying the metadata does not change the actual
NOT make data part of the create data. Although this initial phase is called "create", it
phase of the cloud data lifecycle? can also refer to modification. In essence, any time
data is considered "new", it is in the create phase. This
A. Modify data can come from data that is newly created, data that is
B. Modify metadata imported into a system and is new to that system, or
C. New data data that is already present and is modified into a new
D. Import data form or value.
8.
1. The management plane is use to The management plane uses APIs to execute remote
administer a cloud environment calls across the cloud environment to various man-
and perform administrative tasks agement systems, especially hypervisors. This allows a
across a variety of systems, but centralized administrative interface, often a web portal,
most specifically it's used with theto orchestrate tasks throughout an enterprise. Scripts
hypervisors. may be utilized to execute API calls, but they are not
used directly to interact with systems. XML is used for
What does the management plane data encoding and transmission, but not for executing
typically leverage for this orches- remote calls. TLS is used to encrypt communications
tration? and may be used with API calls, but it is not the actual
process for executing commands.
A. APIs
B. Scripts
C. TLS
D. XML
2. When dealing with PII, which cat- Regulated PII pertains to data that is outlined in law
egory pertains to those require- and regulations. Violations of the requirements for the
ments that can carry legal sanc- protection of regulated PII can carry legal sanctions or
tions or penalties for failure to ade- penalties. Contractual PII involves required data pro-
quately safeguard the data and ad- tection that is determined by the actual service contract
dress compliance requirements? between the cloud provider and cloud customer, rather
than outlined by law. Violations of the provisions of
A. Contractual contractual PII carry potential financial or contractual
B. Jurisdictional implications, but not legal sanctions. Legal and juris-
C. Regulated dictional are similar terms to regulated, but neither is
D. Legal the official term used.
3. Although the united states does The Payment Card Industry Data Security Standard (PCI
not have a single, comprehensive DSS) pertains to organizations that handle credit card
privacy and regulatory framework, transactions and is an industry-regulatory standard,
a number of specific regulations not a governmental one. The Sarbanes-Oxley Act (SOX)
, WGU D320/CCSP
pertain to types of data or popula- was passed in 2002 and pertains to financial records
tions. and reporting, as well as transparency requirements
for shareholders and other stakeholders. The Health
Which of the following is NOT a Insurance and Portability Act (HIPAA) was passed in
regulatory system from the United 1996 and pertains to data privacy and security for med-
States federal government? ical records. FISMA refers to the Federal Information
Security Management Act of 2002 and pertains to the
A. HIPAA
protection of all US federal government IT systems, with
B. SOX
the exception of national security systems.
C. FISMA
D. PCI DSS
4. The president of your company has
A hybrid cloud model spans two more different hosting
tsked you with implementing cloud
configurations or cloud providers. This would enable
services as the most efficient way
an organization to continue using its current hosting
of obtaining a robust disaster re-
configuration, while adding additional cloud services to
covery configuration for your pro-
enable disaster recovery capabilities. The other cloud
duction services. deployment models--public, private, and communi-
ty--would not be applicable for seeking a disaster re-
Which of the cloud deployment covery configuration where cloud services are to be
models would you MOST likely be leveraged for that purpose rather than production ser-
exploring? vice hosting.
A. Hybrid
B. Private
C. Community
D. Public
5. If you are running an application Multitenancy is the aspect of cloud computing that
that has strict legal requirements involves having multiple customers and applications
that the data cannot reside on sys- running within the same system and sharing the same
tems that contain other applica- resources. Although considerable mechanisms are in
tions or systems, which aspect of place to ensure isolation and separation, the data
, WGU D320/CCSP
cloud computing would be prohib- and applications are ultimately using shared resources.
itive in this case? Broad network access refers to the ability to access
cloud services from any location or client. Portabili-
A. Multitenancy ty refers to the ability to easily move cloud services
B. Broad network access between different cloud providers, whereas elasticity
C. Portability refers to the capabilities of a cloud environment to
D. Elasticity add or remove services, as needed, to meet current
demand.
6. The REST API is a widely Representational State Transfer (REST) is a software ar-
used standard for communications chitectural scheme that applies the components, con-
of web-based services between nectors, and data conduits for many web applications
clients and the servers hosting used on the Internet. It uses and relies on the HTTP
them. protocol and supports a variety of data formats. Ex-
tensible Markup Language (XML) and Security Asser-
Which protocol does the REST API tion Markup Language (SAML) are both standards for
depend on? exchanging encoded data between two parties, with
A. HTTP XML being for more general use and SAML focused
B. SSH on authentication and authorization data. Secure Shell
C. SAML client (SSH) is a secure method for allowing remote
D. XML login to systems over a network.
7. Which of the following actions will Modifying the metadata does not change the actual
NOT make data part of the create data. Although this initial phase is called "create", it
phase of the cloud data lifecycle? can also refer to modification. In essence, any time
data is considered "new", it is in the create phase. This
A. Modify data can come from data that is newly created, data that is
B. Modify metadata imported into a system and is new to that system, or
C. New data data that is already present and is modified into a new
D. Import data form or value.
8.
