WGU Managing Cloud Security (JY02) - Managing-Cloud-Security Exam Practice Test

Question 1

An organization is evaluating which cloud computing service model it should implement. It is considering either platform as a service (PaaS) or software as a service (SaaS). Which risk associated with SaaS can the organization avoid by choosing PaaS?

A. Vendor lock-in

B. Vendor lock-out

C. Personnel threat

D. Natural disaster

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 2

Which threat modeling process would a security analyst use to test a new application from a malicious actor's perspective?

A. Architecture, Threats, Attack Surfaces, and Mitigation (ATASM)

B. Damage, Reproducibility, Exploitability, Affected Users, and Discoverability (DREAD)

C. Process for Attack Simulation and Threat Analysis (PASTA)

D. Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privileges (STRIDE)

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 3

Which tool should a developer use to describe the requirements they have gathered for a code improvement they are tasked with making as part of a current release?

A. Stories

B. Cookies

C. Notes

D. Cases

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 4

Which regulation restricts the government from forcing a cloud service provider to disclose customer data?

A. ECPA

B. SOX

C. GLBA

D. SCA

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 5

Which process is implemented during the hardening of an operating system (OS) and its workloads?

A. Security management

B. Patch management

C. Change management

D. Incident management

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 6

An organization negotiates a new contract with a cloud provider and wants to ensure that its critical business data is protected if the cloud provider goes out of business. For this reason, the organization wants the cloud provider to store a copy of the organization's data with a neutral third party, which would release the data in case the provider is unable to meet its obligations. Which type of provision should be included in the contract to ensure this?

A. Encryption

B. Offboarding

C. Indemnification

D. Escrow

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 7

Which action should be taken to preserve forensic evidence for collection?

A. Enabling threat modeling

B. Implementing serverless architectures

C. Enforcing mutable servers

D. Pausing the virtual machine

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 8

Which process involves identification and valuation of assets in order to determine their potential effect on cloud operations?

A. Business impact analysis

B. Vulnerability assessment

C. Risk transfer

D. Out-of-band validation

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 9

Which means of access management is used to determine whether someone is a legitimate user?

A. Authorization

B. Authentication

C. Federation

D. Policy management

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 10

A warning system identifies an impending disaster. When should failover occur to ensure continuity of operations?

A. Prior to the crisis event

B. Prior to the resumption of normal activities

C. During the crisis event

D. During the resumption of normal activities

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

WGU Managing Cloud Security (JY02) - Managing-Cloud-Security Exam Practice Test

Latest Update

Useful Links

Contact Us