Page 1 of 241
WGU C838 OA EXAM WITH 500 QUESTIONS
AND CORRECT ANSWERS JUST RELEASED THIS
YEAR
Question: Which security method should be included in a defense-in-depth, when examined
from the perspective of a content security policy?
A Technological controls
B Contractual enforcement of policies
C Training programs
D Strong access controls - CORRECT ANSWER✔✔A
Question: Which attack vector is associated with cloud infrastructure?
A Seizure and examination of a physical disk
B Licensing fees tied to the deployment of software based on a per-CPU licensing model
C Data storage locations in multiple jurisdictions
D Compromised API credentials - CORRECT ANSWER✔✔D
Question: Which risk is associated with malicious and accidental dangers to a cloud
infrastructure?
A Regulatory noncompliance
1
SUCCESS!
,Page 2 of 241
B Natural disasters
C Personnel threats
D External attacks - CORRECT ANSWER✔✔C
Question: Which cloud-specific risk must be considered when moving infrastructure operations
to the cloud?
A Natural disasters
B Lack of physical access
C Denial of service
D Regulatory violations - CORRECT ANSWER✔✔B
Question: Which risk is controlled by implementing a private cloud?
A Eavesdropping
B Unauthorized access
C Denial-of-service (DoS)
D Physical security - CORRECT ANSWER✔✔D
Question: Which countermeasure enhances redundancy for physical facilities hosting cloud
equipment during the threat of a power outage?
A Tier 2 network access providers
B Radio frequency interference (RFI) blocking devices
C Multiple and independent power circuits to all racks
D Automated license plate readers (ALPR) at entry points - CORRECT ANSWER✔✔C
2
SUCCESS!
,Page 3 of 241
Question;Which phase of the cloud data life cycle allows both read and process functions to be
performed?
A Create
B Archive
C Store
D Share - CORRECT ANSWER✔✔A
Question: Which phase of the cloud data security life cycle typically occurs simultaneously with
creation?
A Share
B Store
C Use
D Destroy - CORRECT ANSWER✔✔B
Question: Which phase of the cloud data life cycle uses content delivery networks?
A Destroy
B Archive
C Share
D Create - CORRECT ANSWER✔✔C
Question: Which phase of the cloud data life cycle is associated with crypto-shredding?
A Share
B Use
C Destroy
3
SUCCESS!
, Page 4 of 241
D Store - CORRECT ANSWER✔✔C
Question: Which cloud data storage architecture allows sensitive data to be replaced with
unique identification symbols that retain all the essential information about the data without
compromising its security?
A Randomization
B Obfuscation
C Anonymization
D Tokenization - CORRECT ANSWER✔✔D
Question: Which methodology could cloud data storage utilize to encrypt all data associated in
an infrastructure as a service (IaaS) deployment model?
A Sandbox encryption
B Polymorphic encryption
C Client-side encryption
D Whole-instance encryption - CORRECT ANSWER✔✔D
Question: There is a threat to a banking cloud platform service. The developer needs to provide
inclusion in a relational database that is seamless and readily searchable by search engine
algorithms.
Which platform as a service (PaaS) data type should be used?
A Short-term storage
B Structured
C Unstructured
D Long-term storage - CORRECT ANSWER✔✔B
4
SUCCESS!
WGU C838 OA EXAM WITH 500 QUESTIONS
AND CORRECT ANSWERS JUST RELEASED THIS
YEAR
Question: Which security method should be included in a defense-in-depth, when examined
from the perspective of a content security policy?
A Technological controls
B Contractual enforcement of policies
C Training programs
D Strong access controls - CORRECT ANSWER✔✔A
Question: Which attack vector is associated with cloud infrastructure?
A Seizure and examination of a physical disk
B Licensing fees tied to the deployment of software based on a per-CPU licensing model
C Data storage locations in multiple jurisdictions
D Compromised API credentials - CORRECT ANSWER✔✔D
Question: Which risk is associated with malicious and accidental dangers to a cloud
infrastructure?
A Regulatory noncompliance
1
SUCCESS!
,Page 2 of 241
B Natural disasters
C Personnel threats
D External attacks - CORRECT ANSWER✔✔C
Question: Which cloud-specific risk must be considered when moving infrastructure operations
to the cloud?
A Natural disasters
B Lack of physical access
C Denial of service
D Regulatory violations - CORRECT ANSWER✔✔B
Question: Which risk is controlled by implementing a private cloud?
A Eavesdropping
B Unauthorized access
C Denial-of-service (DoS)
D Physical security - CORRECT ANSWER✔✔D
Question: Which countermeasure enhances redundancy for physical facilities hosting cloud
equipment during the threat of a power outage?
A Tier 2 network access providers
B Radio frequency interference (RFI) blocking devices
C Multiple and independent power circuits to all racks
D Automated license plate readers (ALPR) at entry points - CORRECT ANSWER✔✔C
2
SUCCESS!
,Page 3 of 241
Question;Which phase of the cloud data life cycle allows both read and process functions to be
performed?
A Create
B Archive
C Store
D Share - CORRECT ANSWER✔✔A
Question: Which phase of the cloud data security life cycle typically occurs simultaneously with
creation?
A Share
B Store
C Use
D Destroy - CORRECT ANSWER✔✔B
Question: Which phase of the cloud data life cycle uses content delivery networks?
A Destroy
B Archive
C Share
D Create - CORRECT ANSWER✔✔C
Question: Which phase of the cloud data life cycle is associated with crypto-shredding?
A Share
B Use
C Destroy
3
SUCCESS!
, Page 4 of 241
D Store - CORRECT ANSWER✔✔C
Question: Which cloud data storage architecture allows sensitive data to be replaced with
unique identification symbols that retain all the essential information about the data without
compromising its security?
A Randomization
B Obfuscation
C Anonymization
D Tokenization - CORRECT ANSWER✔✔D
Question: Which methodology could cloud data storage utilize to encrypt all data associated in
an infrastructure as a service (IaaS) deployment model?
A Sandbox encryption
B Polymorphic encryption
C Client-side encryption
D Whole-instance encryption - CORRECT ANSWER✔✔D
Question: There is a threat to a banking cloud platform service. The developer needs to provide
inclusion in a relational database that is seamless and readily searchable by search engine
algorithms.
Which platform as a service (PaaS) data type should be used?
A Short-term storage
B Structured
C Unstructured
D Long-term storage - CORRECT ANSWER✔✔B
4
SUCCESS!