WGU University WGU-JY02 Online Practice Questions and Exam Preparation

WGU University WGU-JY02 Online Questions & Answers

• Question 91:

  A cloud customer wants assurance that data deleted from a multi-tenant storage service cannot be recovered by another tenant after the storage is reallocated.

  Which provider control is most relevant?

  A. Residual data sanitization
  B. User interface branding
  C. Annual budget approval
  D. Keyboard encryption
  A. Residual data sanitization

• Question 92:

  Which security issue can be found only through dynamic application security testing (DAST)?

  A. Code quality
  B. Null pointer dereference
  C. Insecure cryptographic function
  D. Runtime privileges
  D. Runtime privileges

• Question 93:

  An internal developer deploys a new customer information system at a company. The system has an updated graphical interface with new fields.

  Which type of functional testing ensures that the graphical interface used by employees to input customer data behaves as the employees need it to?

  A. Load testing
  B. Regression testing
  C. Security testing
  D. Acceptance testing
  D. Acceptance testing

• Question 94:

  In which service model would the cloud service provider bear the greatest responsibility for security?

  A. Database as a Service (DBaaS)
  B. Software as a Service (SaaS)
  C. Platform as a Service (PaaS)
  D. Infrastructure as a Service (IaaS)
  B. Software as a Service (SaaS)

• Question 95:

  What is the definition of transportable as it relates to cloud contract design requirements?

  A. Available to be accessed by mobile devices
  B. Able to be moved to another vendor
  C. Available in a proprietary format
  D. Able to be archived quickly
  B. Able to be moved to another vendor

• Question 96:

  Which guide remedies the challenge of the international nature of cloud forensics and is known for becoming the premier standard for eDiscovery?

  A. ISO/IEC 27042:2015
  B. ISO/IEC 27041:2015
  C. ISO/IEC 27050-1:2016
  D. ISO/IEC 27037:2012
  C. ISO/IEC 27050-1:2016

• Question 97:

  In which cloud service model is the cloud consumer responsible for installation and maintenance of the operating system?

  A. Network as a Service (NaaS)
  B. Platform as a Service (PaaS)
  C. Infrastructure as a Service (IaaS)
  D. Software as a Service (SaaS)
  C. Infrastructure as a Service (IaaS)

• Question 98:

  An organization is planning for an upcoming Payment Card Industry Data Security Standard (PCI DSS) audit and wants to ensure that only relevant files are included in the audit materials.

  Which process should the organization use to ensure that the relevant files are identified?

  A. Normalization
  B. Tokenization
  C. Categorization
  D. Anonymization
  C. Categorization

• Question 99:

  Which action should be taken to preserve forensic evidence for collection?

  A. Implementing serverless architectures
  B. Enabling threat modeling
  C. Pausing the virtual machine
  D. Enforcing mutable servers
  C. Pausing the virtual machine

• Question 100:

  A cloud application team uses infrastructure templates to build environments. A recent update caused a production outage, and the team needs a way to return to the last known good template version.

  Which safeguard should be used?

  A. Version control rollback
  B. Manual password reuse
  C. Public subnet expansion
  D. Data remanence
  A. Version control rollback