WGU C838 Study Guide Exam Questions with complete and Accurate Marking Scheme 2024/2025
9 views 0 purchase
Course
WGU C838
Institution
WGU C838
WGU C838 Study Guide Exam Questions with complete and Accurate Marking Scheme 2024/2025
In risk, what is the avoidance method? - correct answer Avoiding high risk
In risk, what is the acceptance method? - correct answer Acceptable level of risk
In risk, what is an example of the avoidanc...
WGU C838 Study Guide Exam
Questions with complete and
Accurate Marking Scheme 2024/2025
In risk, what is the avoidance method? - correct answer
Avoiding high risk
In risk, what is the acceptance method? - correct answer
Acceptable level of risk
In risk, what is an example of the avoidance method? - correct
answer Insurance
In risk, what is the mitigation method? - correct answer
Controls or countermeasures
Assets can be what? - correct answer Tangible
Intangible
Personnel
What does Business Impact Analysis do? - correct answer
Defines which of the assets provide the intrinsic value of an
organization.
What is risk appetite - correct answer Level, Amount, or Type
of risk that an org finds acceptable
,What is the IaaS boundary? - correct answer The provider is
responsible for connectivity and power and the customer is in
charge for installation of software.
What is the PaaS boundary? - correct answer The provider is
responsible for updates and administration of the OS and the
customer monitors and reviews software events.
What is the SaaS boundary? - correct answer The provider is
responsible for system maintenance and the customer supplies
and processes data to and in the system.
What should encryption be used for in a cloud datacenter? -
correct answer Long-term storage/archiving
Protecting near-term stored files, such as snapshots of
virtualized instances
Preventing unauthorized access to specific datasets by
authorized personnel
What should encryption be used for in communications between
cloud providers and users? - correct answer Creating secure
sessions
Ensuring the integrity and confidentiality of data in transit
What are 4 controls/mechanisms a cloud provider should play a
role in in layered defense? - correct answer Strong personnel
controls
Technological controls
Physical controls
Governance mechanisms
,In cloud layered defense what are examples of personnel
controls? - correct answer background checks
continual monitoring
In cloud layered defense what are examples of technological
controls? - correct answer encryption
event logging
access control enforcement
In cloud layered defense what is an examples of physical
controls? - correct answer access to overall campus
In cloud layered defense what is an example of governance
mechanisms? - correct answer auditing
What are ways for securing devices in a datacenter? - correct
answer Guess accounts removed
no default passwords
systems are patched, maintained and updated
unused ports are closed
limited physical access
What is layered defense? - correct answer The practice of
having multiple overlapping means of securing the environment
with a variety of methods
Who determines risk appetite? - correct answer senior
management
, Experimental technology of processing encrypted data w/o
decrypting it first? - correct answer Homomorphic
T/F: Data owners remain legally responsible for all data they own
- correct answer True
What are four ways an org might categorize data? - correct
answer Regulatory compliance
business function
function unit
by project
What are three examples of classification? - correct answer
sensitivity
jurisdiction
criticality
What is a data owner? - correct answer Collects or creates the
data, and possesses the rights and responsibilities of the data
What is a data custodian? - correct answer Manipulates,
stores, or moves the data, and serves as a cloud provider
What is datamining? - correct answer Data mining tries to
automatically find interesting patterns in data using plethora of
technologies
What method would an org creates categories based on which
rules apply to a specific dataset? - correct answer regulatory
compliance
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller KieranKent55. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $13.99. You're not tied to anything after your purchase.
