Real WGU Managing-Cloud-Security Exam Questions Study Guide [Q82-Q102]

NO.82 Which risk is unable to be highlighted from the outset in a cloud services contract?

NO.83 Which option should a cloud architect recommend to an organization looking to simplify development and management of applications?

NO.84 Which cloud model is owned and operated by a vendor and then sold, leased, or rented to someone else?

NO.85 An organization that primarily uses a remote work model is reviewing the documentation of various insurance providers to become eligible for cybersecurity insurance. Competitive insurance providers require the organization to implement security controls to ensure only authorized personnel can access the network, data, emails, and other administrative information. Which commonly required control should the organization implement before applying for cybersecurity insurance from these competitive insurance providers?

NO.86 Which element should a company implement when looking to provide the most secure foundation and smallest attack footprint for virtual servers?

NO.87 Which description characterizes the application programming interface (API) format known as Simple Object Access Protocol (SOAP)?

NO.88 Which of the following is an iterative software development methodology that focuses on achieving customer satisfaction by delivering the software early in the process and welcoming changing requirements from the customer, even late in the process?

NO.89 An organization wants to secure the boundary between a lower-security zone and a higher-security zone.
Which security measure should it use?

NO.90 Which design pillar encompasses the ability to support development and run workloads effectively, gain insights into operations, and continuously improve supporting processes to deliver business value?

NO.91 What is an appropriate countermeasure given the threat of a power outage of a cloud service provider?

NO.92 Which regulation provides a guide for implementing the risk management framework?

NO.93 An organization is planning for an upcoming Payment Card Industry Data Security Standard (PCI DSS) audit and wants to ensure that only relevant files are included in the audit materials. Which process should the organization use to ensure that the relevant files are identified?

NO.94 Which logical design model includes the foundations of a secure computing system, such as computing, networking, and storage?

NO.95 Which security issue can be found only through dynamic application security testing (DAST)?

NO.96 Which security device allows customers to redirect traffic?

NO.97 How does a cloud-based distributed denial-of-service (DDoS) protection strategy help in the event of an attack?

NO.98 An organization needs to provide space where security administrators can centrally monitor network traffic and events and respond to threats or outages. What should the organization create?

NO.99 Which risk is unique to the public cloud?

NO.100 Which approach helps prepare for common application vulnerabilities that developers are likely to encounter when working with cloud applications?

NO.101 Which security measure controls virtualization in the cloud?

NO.102 Which logical consideration should be addressed when planning the design of a data center?