WGU C838 OA Q & A's Spring 2022 with complete solution Which phase of the cloud data lifecycle allows both read and process functions to be performed? Answer- Create Which technique scrambles the content of data using a mathematical algorithm while keeping the structural arrangement of the data? Answer- Format-preserving encryption Which encryption technique connects the instance to the encryption instance that handles all crypto operations? Answer- Proxy Which type of control should be used to implement custom controls that safeguard data? Answer- Application level A cloud administrator recommends using tokenization as an alternative to protecting data without encryption. The administrator needs to make an authorized application request to access the data. Which step should occur immediately before this action is taken? Answer- The application stores the token A company has recently defined classification levels for its data. During which phase of the cloud data life cycle should this definition occur? Answer- Create How is the compliance of the cloud service provider's legal and regulatory requirements verified when securing personally identifiable information (PII) data in the cloud?Answer- Third party audits and attestations Which security strategy is associated with data rights management solutions? Answer- Continuous auditing What is a key capability of security information and event management? Answer- Centralized collection of big data A security analyst is investigating an incident of access to a resource from an unauthorized location. Which data source should the security analyst use to investigate the incident? Answer- Packet capture file Which message type is generated from software systems to troubleshoot and identify problems with running application codes? Answer- Debug 1 / 2
Which cloud computing tool is used to discover internal use of cloud services using various mechanisms such as network monitoring? Answer- Cloud access security broker (CASB) Which cloud model provides data location assurance? Answer- Private Which technology allows an organization to control access to sensitive documents stored in the cloud? Answer- Digital rights management How do immutable workloads effect security overhead? Answer- They reduce the management of the host Which design principle of secure cloud computing ensures that users can utilize data and applications from around the globe? Answer- Broad network access Which standard addresses practices related to acquisition of forensic artifacts and can be directly applied to a cloud environment? Answer- ISO/IEC 27050-1 Which technology allows an administrator to remotely manage a fleet of servers?Answer- Management plane What part of the logical infrastructure design is used to configure cloud resources, such as launching virtual machines or configuring virtual networks? Answer- Management plane Which action enhances cloud security application deployment through standards such as ISO/IEC 27034 for the development, acquisition, and configuration of software systems? Answer- Applying the steps of a cloud software development life cycle Which element is a cloud virtualization risk? Answer- Guest isolation The security administrator for a global cloud services provider (CSP) is required to globally standardize the approaches for using forensics methodologies in the organization. Which standard should be applied? Answer- ISO 27050-1 Which detection and analysis technique is performed to capture a point-in-time picture of the entire stack at the time of an incident? Answer- Create a snapshot using API calls A CSP operating in Australia experiences a security breach that results in disclosure of personal information that is likely to result in serious harm. Who is the CSP legally required to notify? Answer- Information commisioner A CSP provides services in European Union (EU) countries that are subject to the network information security (NIS) directive. The CSP experiences an incident that
- / 2