Managing-Cloud-Security Exam Questions and Answers

QUESTION: 9

As part of an e-discovery process, an employee needs to identify all documents that contain a specific phrase.
Which type of discovery method should the employee use to identify these documents?

Location-based
Content-based
Label-based
Metadata-based

Answer(s): B

Explanation:

Content-based discovery involves searching within the actual text or binary content of documents to find matches for keywords, phrases, or patterns. In e-discovery, when the requirement is to locate documents containing a specific phrase, searching based on content is the most direct and reliable method.

Other approaches, such as metadata-based discovery, only examine properties like creation date or author, which do not reveal the presence of specific text. Label-based discovery relies on pre-applied classification labels, which may not always be accurate. Location-based discovery limits searches to folders or storage locations but does not guarantee relevance.

Content-based discovery provides completeness in legal and regulatory investigations. It ensures that no relevant documents are overlooked simply because of inconsistent labeling or metadata, thus supporting compliance and defensibility in court proceedings.

Reveal Solution Next Question

QUESTION: 10

An organization wants to track how often a file is accessed and by which users.
Which information rights management (IRM) solution should the organization implement?

Automatic expiration
Dynamic policy control
Persistent protection
Continuous auditing

Answer(s): D

Explanation:

Continuous auditing in the context of Information Rights Management (IRM) allows organizations to monitor access events in real time. It records who accessed a file, when, and how often. This enables organizations to enforce accountability and detect unusual access patterns, which are crucial for both security monitoring and compliance reporting.

Automatic expiration sets a time limit on file availability, while dynamic policy control adjusts permissions based on context (such as location or device). Persistent protection ensures files remain encrypted and controlled wherever they travel.
While each feature is valuable, only continuous auditing provides the tracking and visibility into usage required by the scenario.

This approach aligns with governance requirements, providing an audit trail that supports incident response and compliance with data protection regulations. Continuous auditing strengthens both operational security and accountability.

Reveal Solution Next Question

QUESTION: 11

After creating a backup set, an engineer stores the backups according to company policy.
Which action should the engineer take periodically to ensure the backed-up data is viable?

The engineer should test the backups according to company policy.
The engineer should delete backups according to company policy.
The engineer should compare the old backups with newer ones.
The engineer should replace the old backups with newer ones.

Answer(s): A

Explanation:

Backups are only valuable if they can be successfully restored when needed. Testing backups on a periodic basis is the only reliable way to validate their viability. Simply storing backups without testing may create a false sense of security, because corruption, misconfiguration, or incomplete backup sets can go unnoticed until a disaster occurs.

Industry best practices, such as those recommended by NIST and ISO 27031, emphasize regular backup testing as part of disaster recovery and business continuity planning. Testing involves restoring data to a test environment, verifying its integrity, and ensuring that applications can use the restored data as expected.

Deleting, comparing, or replacing backups might help in managing storage efficiency, but these actions do not confirm whether the backups are usable. Periodic testing ensures alignment with company policy, regulatory requirements, and internal risk management controls. It also provides confidence to management that recovery objectives, such as RTO (Recovery Time Objective) and RPO (Recovery Point Objective), can be met.

Reveal Solution Next Question

QUESTION: 12

An organization is reviewing a contract from a cloud service provider and wants to ensure that all aspects of the contract are adhered to by the cloud service provider.
Which control will allow the organization to verify that the cloud provider is meeting its obligations?

Continuous monitoring
Confidential computing
Regulatory oversight
Incident management

Answer(s): A

Explanation:

Continuous monitoring is the control that allows organizations to actively verify that a cloud provider is fulfilling contractual and compliance obligations. This involves automated collection and analysis of operational, security, and performance data. It enables organizations to ensure that service-level agreements (SLAs) are being honored and that compliance requirements are being met in real time.

While regulatory oversight is provided by external authorities and incident management is reactive in nature, continuous monitoring is a proactive approach. It allows customers to maintain visibility into provider operations. Confidential computing focuses on data protection but does not verify contract adherence.

By employing continuous monitoring, organizations establish transparency and accountability. It also supports audit processes by providing evidence that controls remain effective over time. This reduces risk associated with outsourcing critical functions to a cloud provider and ensures resilience against potential provider-side failures.

Reveal Solution Next Question

QUESTION: 13

A security analyst is tasked with compiling a report of all people who used a system between two dates. The thorough report must include information about how long and how often the system was used.
Which information should the analyst ensure is in the report?

Informational logs and message of the day
Environmental errors and 802.1x logs
User identifications and access timestamps
User commands and error timestamps

Answer(s): C

Explanation:

To provide a comprehensive report of system usage, the most important elements are user identifications (IDs) and access timestamps. These data points record who accessed the system, at what time, and for how long. Together, they allow the analyst to determine frequency and duration of use, which is essential for both operational auditing and security oversight.

Other options, such as informational logs or error logs, may provide context but do not directly answer the requirement of identifying users and usage patterns. For instance, 802.1x logs are related to network authentication, while commands or error timestamps reveal activity details but not the overall access history.

Collecting and analyzing IDs and timestamps supports compliance with regulatory frameworks like ISO 27001 and SOC 2, which require clear audit trails. It also provides accountability and supports investigations in case of unauthorized access or misuse. By including these elements, the analyst ensures the report meets internal and external requirements for system monitoring.

Reveal Solution Next Question

QUESTION: 14

Which role in cloud computing provides products or services that interact with the primary offering of a cloud service provider?

Regulator
Cloud service partner
Customer
Cloud service developer

Answer(s): B

Explanation:

A cloud service partner plays a complementary role by offering products or services that enhance or interact with the primary cloud provider's offerings. Examples include managed service providers, value-added resellers, or software vendors that integrate their solutions with the core infrastructure or platform of a cloud service provider.

The customer is the end user of cloud services, regulators ensure compliance with laws, and developers create applications but do not represent an independent ecosystem role. Partners, on the other hand, extend the value of the primary offering by providing additional tools, support, or integrations that enhance customer experience.

This ecosystem role is recognized by major cloud frameworks, such as the Cloud Security Alliance, which notes the importance of partners in ensuring interoperability, extending services, and supporting shared responsibility. For customers, this means greater flexibility and choice in tailoring cloud solutions to business needs.

Reveal Solution Next Question

QUESTION: 15

Which type of storage includes categories such as relational, nonrelational, key-value, and document-oriented?

XML
Database
Object-based
Volume

Answer(s): B

Explanation:

The categories mentioned--relational, nonrelational, key-value, and document-oriented--refer to different types of databases. Relational databases (SQL) organize data into tables with rows and columns, nonrelational databases (NoSQL) provide flexibility for unstructured data, key-value stores map identifiers to values, and document-oriented databases manage data in formats such as JSON or BSON.

Object-based storage and volumes are alternative storage architectures but are not described by these categories. XML is a data format, not a storage type.

In the cloud, database services are offered as managed solutions, reducing the administrative burden on organizations. Properly managing database storage is critical for data governance, confidentiality, and compliance. Databases are also central to security strategies, where access control, encryption, and auditing are applied.

Thus, the correct answer is database storage, which encompasses multiple architectures that address different performance, scalability, and data management needs.

Reveal Solution Next Question

QUESTION: 16

Which characteristic of cloud computing refers to sharing physical assets among multiple customers?

Rapid scalability
On-demand self-service
Resource pooling
Measured service

Answer(s): C

Explanation:

Resource pooling is one of the core characteristics of cloud computing defined by NIST. It refers to the provider's ability to serve multiple customers by dynamically allocating and reallocating computing resources such as storage, processing, memory, and network bandwidth. These resources are abstracted using virtualization, ensuring that customers remain isolated from one another even though they share the same physical assets.

Rapid scalability describes elasticity, on-demand self-service allows users to provision resources without provider intervention, and measured service refers to metering usage. None of these concepts directly describe the multi-tenant model of shared resources.

Resource pooling improves efficiency, reduces costs, and provides flexibility, but it also introduces new security considerations such as data isolation and hypervisor security. Customers must ensure that providers implement strong controls to prevent data leakage or cross-tenant compromise.

Reveal Solution Next Question

WGU Managing-Cloud-Security Exam (page: 2) WGU Managing Cloud Security (JY02) Updated on: 07-Feb-2026

QUESTION: 9

Explanation:

QUESTION: 10

Explanation:

QUESTION: 11

Explanation:

QUESTION: 12

Explanation:

QUESTION: 13

Explanation:

QUESTION: 14

Explanation:

QUESTION: 15

Explanation:

QUESTION: 16

Explanation:

WGU Managing-Cloud-Security Exam (page: 2)
WGU Managing Cloud Security (JY02)
Updated on: 07-Feb-2026