WGU C838 Problem Solving Exam Questions with Approved Marking Scheme 2024/2025
6 views 0 purchase
Course
WGU C838
Institution
WGU C838
WGU C838 Problem Solving Exam Questions with Approved Marking Scheme 2024/2025
Which regulation in the United States defines the requirements for a CSP to implement and report on internal accounting controls?
A HIPAA
B SOX
C FERPA
D GDPR - correct answer B
Which legislation must a tr...
WGU C838 Problem Solving Exam
Questions with Approved Marking
Scheme 2024/2025
Which regulation in the United States defines the requirements
for a CSP to implement and report on internal accounting
controls?
A HIPAA
B SOX
C FERPA
D GDPR - correct answer B
Which legislation must a trusted cloud service adhere to when
utilizing the data of EU citizens?
A GDPR
B EMTALA
C APPI
D SOX - correct answer A
Which logical design decision can be attributed to required
regulation?
A Database writes/second
B Retention periods
C Retention formats
D Database reads/second - correct answer B
Which service model influences the logical design by using
additional measures in the application to enhance security?
A Hybrid cloud
B Public cloud
C Software as a service (SaaS)
D Platform as a service (PaaS) - correct answer C
,Which environmental consideration should be addressed when
planning the design of a data center?
A Heating and ventilation
B Utility power availability
C Expansion possibilities and growth
D Telecommunications connections - correct answer A
Which result is achieved by removing all nonessential services
and software of devices for secure configuration of hardware?
A Hardening
B Maintenance
C Patching
D Lockdown - correct answer A
What is a component of device hardening?
A Patching
B Unit testing
C Versioning
D Configuring VPN access - correct answer A
Which technology typically provides security isolation in
infrastructure as a service (IaaS) cloud computing?
A Application instance
B System image repository
C Virtual machines
D Operating systems - correct answer C
Which technology an administrator to remotely manage a fleet of
servers?
A KVM switch
B VPN concentrator
C Bastion host
D Management plane - correct answer D
,What part of the logical infrastructure design is used to
configure cloud resources, such as launching virtual machines or
configuring virtual networks?
A Management orchestration software
B Management plane
C Identity access management
D Database management - correct answer B
Which action enhances cloud security application deployment
through standards such as ISO/IEC 27034 for the development,
acquisition, and configuration of software systems?
A Applying the steps of a cloud software development life cycle
B Providing developer access to supporting components and
services
C Outsourcing the infrastructure and integration platform
management
D Verifying the application has an appropriate level of
confidentiality and integrity - correct answer A
Which type of agreement aims to negotiate policies with various
parties in accordance with the agreed-upon targets?
A Privacy-level (PLA)
B Service-level (SLA)
C User license (ULA)
D Operation-level (OLA) - correct answer B
Which regulation requires a CSP to comply with copyright law
for hosted content?
A SCA
B DMCA
C SOX
D GLBA - correct answer B
, Which element is a cloud virtualization risk?
A Guest isolation
B Electronic discovery
C Licensing
D Jurisdiction - correct answer A
Which risk is related to interception of data in transit?
A Virtualization
B Man-in-the-middle
C Software vulnerabilities
D Traffic blocking - correct answer B
Which method is being used when a company evaluates the
acceptable loss exposure associated with a cloud solution for a
given set of objectives and resources?
A Business impact analysis
B Business continuity planning
C Risk appetite
D Risk management - correct answer C
The security administrator for a global cloud services provider
(CSP) is required to globally standardize the approaches for
using forensics methodologies in the organization.
Which standard should be applied?
A International organization for standardization (ISO) 27050-1
B Sarbanes-Oxley Act (SOX)
C Cloud controls matrix (CCM)
D International electrotechnical commission (IEC) 27037 -
correct answer A
Which detection and analysis technique is performed to capture
a point-in-time picture of the entire stack at the time of an
incident?
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller KieranKent55. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $14.49. You're not tied to anything after your purchase.
