WGU University WGU-JY02 - Questions & Answers

Which business continuity and disaster recovery consideration should be part of a cloud application architecture?

An organization wants to track how often a file is accessed and by which users.

Which information rights management (IRM) solution should the organization implement?

When should a cloud service provider delete customer data?

Which risk relates to the removal of a person's information within the public cloud by legal authorities?

Which security concept requires continuous identity and authorization checks to allow access to data?

A cloud provider that processes third-party credit card payments is unable to encrypt its customers' cardholder data because of constraints on a legacy payment processing system.

What should it implement to maintain Payment Card Industry Data Security Standard (PCI DSS) compliance?

A security analyst reviews a proposed cloud application and identifies possible spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege threats.

Which model is the analyst using?

Which security control is a countermeasure against vendor lock-in and lock-out?

Which requirement in the Gramm-Leach-Bliley Act (GLBA) is included to protect private data?

A company uses a cloud access security broker to discover unsanctioned cloud applications and enforce policies on uploads of sensitive files.

Which risk is the company addressing?