WGU Managing Cloud Security (JY02) Exam Questions

Page: 1 / 14
Total 205 questions
Question 1

Which cloud computing characteristic allows consumers to expand or contract required resources automatically?



Answer : D

Rapid elasticity is the cloud computing characteristic that allows consumers to automatically expand or contract resources based on demand. Managing Cloud documentation explains that rapid elasticity enables scaling of computing resources in near real time.

This capability allows organizations to handle variable workloads efficiently without manual intervention. Resources can be provisioned when demand increases and released when demand decreases, optimizing performance and cost.

Measured service focuses on usage tracking, resource pooling shares infrastructure, and on-demand self-service enables user provisioning. Therefore, rapid elasticity is the correct answer.


Question 2

As part of training to help the data center engineers understand different attack vectors that affect the infrastructure, they work on a set of information about access and availability attacks that was presented. Part of the labs requires the engineers to identify different threat vectors and their names. Which threat prohibits the use of data by preventing access to it?



Answer : D

The described threat is a Denial of Service (DoS) attack. In security contexts, a DoS attack aims to make a system, application, or data unavailable to legitimate users by overwhelming resources. Unlike brute force or rainbow table attacks, which target authentication mechanisms, or encryption, which is a defensive control, DoS focuses on disrupting availability---the ''A'' in the Confidentiality, Integrity, Availability (CIA) triad.

DoS can be executed in many ways: flooding a network with traffic, exhausting server memory, or overwhelming application processes. When scaled by multiple coordinated systems, it becomes a Distributed Denial of Service (DDoS) attack. In either case, the effect is the same---authorized users cannot access critical data or services.

For cloud environments, where service uptime is crucial, DoS protections such as rate limiting, auto-scaling, and upstream filtering are essential. Training data center engineers to recognize DoS helps them understand the importance of resilience strategies and ensures continuity planning includes availability safeguards.


Question 3

Which device is used to create and manage encryption keys used for data transmission in a cloud-based environment?



Answer : A

A Hardware Security Module (HSM) is a dedicated, tamper-resistant device designed for creating, managing, and storing encryption keys. In cloud environments, HSMs are essential for securing cryptographic operations, such as SSL/TLS key management, digital signatures, and secure data transmission.

TPMs are hardware chips used to secure local devices, such as laptops. Memory controllers and RAID controllers manage system performance and storage but are not cryptographic devices.

HSMs provide strong protection against key theft or misuse by isolating cryptographic functions from general-purpose computing resources. They are often certified under standards like FIPS 140-2, ensuring compliance with stringent security requirements. In cloud services, customers can use provider-managed HSMs or deploy dedicated virtual HSM instances for secure key management.


Question 4

A breach caused by lack of security management resulted in a civil lawsuit. The organization must communicate with the entity that is responsible for performing adequate oversight. Who should be contacted?



Answer : D

In the event of a civil lawsuit resulting from inadequate security management, the organization must communicate with the board of directors. Managing Cloud guidance explains that the board of directors holds ultimate responsibility for governance, oversight, and risk management within an organization.

The board ensures that appropriate policies, controls, and management structures are in place to protect organizational assets and comply with legal obligations. In legal matters, the board must be informed to oversee response strategies, legal counsel engagement, and corrective actions.

The IT department manages technical controls but does not provide organizational oversight. High-level government agencies are regulators, not internal oversight bodies. Therefore, board members are the correct entity to contact.


Question 5

Which phase of the software development life cycle includes creating user stories?



Answer : D

The Planning phase of the software development life cycle (SDLC) includes creating user stories. Managing Cloud principles explain that user stories capture functional requirements from the end user's perspective and help define application behavior and priorities.

During planning, stakeholders collaborate to identify business needs, define scope, and establish development goals. User stories are used to guide development tasks and ensure alignment with customer expectations.

Designing focuses on architecture, developing involves coding, and defining establishes high-level objectives. Therefore, planning is the correct SDLC phase for creating user stories.


Question 6

Which phase of the cloud data life cycle involves the process of crypto-shredding?



Answer : A

The Destroy phase of the cloud data life cycle is where information is permanently removed from systems. A common technique in cloud environments for this phase is crypto-shredding (or cryptographic erasure). Rather than physically destroying the media, crypto-shredding involves deleting or revoking encryption keys used to protect the data. Once those keys are destroyed, the encrypted data becomes mathematically unrecoverable, even if the underlying storage media remains intact.

This method is particularly useful in cloud environments where storage is virtualized and hardware cannot easily be physically destroyed. Crypto-shredding provides compliance-friendly assurance that sensitive data such as personally identifiable information (PII), financial data, or healthcare records cannot be accessed after retention periods expire or contractual obligations end.

By incorporating crypto-shredding into the Destroy phase, organizations align with standards for secure data sanitization. This ensures legal defensibility during audits and e-discovery and demonstrates proper lifecycle governance. The emphasis is on making data inaccessible while still maintaining operational efficiency and environmental responsibility.


Question 7

Which process involves identification and valuation of assets in order to determine their potential effect on cloud operations?



Answer : C

Business Impact Analysis (BIA) is the process that involves identifying and valuing assets to determine their potential effect on cloud operations. Managing Cloud documentation explains that BIA assesses how disruptions to systems, applications, or data impact business functions.

The process evaluates asset criticality, financial loss, operational downtime, and reputational damage. This information helps prioritize recovery strategies, define recovery time objectives, and guide risk management decisions in cloud environments.

Risk transfer shifts risk to third parties, vulnerability assessment identifies weaknesses, and out-of-band validation verifies controls independently. Therefore, business impact analysis is the correct answer.


Page:    1 / 14   
Total 205 questions