WGU University WGU-JY02 Online Practice Questions and Exam Preparation

WGU University WGU-JY02 Online Questions & Answers

• Question 221:

  Which device is used to create and manage encryption keys used for data transmission in a cloud-based environment?

  A. Hardware security module (HSM)
  B. Memory controller
  C. RAID controller
  D. Trusted platform module (TPM)
  A. Hardware security module (HSM)

• Question 222:

  Which data management activity is considered legal fair use of a copyrighted item?

  A. Reporting the work on the news
  B. Performing the work publicly
  C. Exporting the work
  D. Broadcasting the work
  A. Reporting the work on the news

• Question 223:

  Which requirement for cross-border data transfer is part of the General Data Protection Regulation (GDPR)?

  A. Acceptance of liability for protection by the transferring entity
  B. Acknowledgement of liability for protection by the entity receiving the data transfer
  C. Demonstration of adequate level of protection similar to GDPR
  D. Formal consent of the data owner
  C. Demonstration of adequate level of protection similar to GDPR

• Question 224:

  A developer stores an API key in source code for a serverless function. The repository is later shared with contractors.

  Which control would best prevent this exposure?

  A. Commit secrets only to private branches
  B. Store secrets in a managed secrets service
  C. Increase the function memory size
  D. Disable function logging
  B. Store secrets in a managed secrets service

• Question 225:

  Which countermeasure should be taken during the containment, eradication, and recovery phase of the incident response lifecycle?

  A. Validate alerts
  B. Identify training
  C. Build timeline of attack
  D. Take systems offline
  D. Take systems offline

• Question 226:

  A user creates new financial documents that will be stored in the cloud.

  Which action should the user take before uploading the documents to protect them against threats such as packet capture and on-path attacks?

  A. Hashing
  B. Encryption
  C. Change tracking
  D. Metadata labeling
  B. Encryption

• Question 227:

  When should a cloud service provider delete customer data?

  A. When the cloud provider oversubscribes its storage space
  B. When the data has not been accessed in the last 30 days
  C. After a scheduled data review
  D. After the specified retention period
  D. After the specified retention period

• Question 228:

  Which concept focuses on operating highly available workloads in the cloud?

  A. Resource hierarchy
  B. Security
  C. Operational excellence
  D. Reliability
  D. Reliability

• Question 229:

  Which cloud architecture model provides application development services?

  A. Security as a Service (SECaaS)
  B. Software as a Service (SaaS)
  C. Platform as a Service (PaaS)
  D. Infrastructure as a Service (IaaS)
  C. Platform as a Service (PaaS)

• Question 230:

  Which security device allows customers to redirect traffic?

  A. Security information and event management
  B. Intrusion detection and prevention systems
  C. Web application firewalls
  D. Cryptographic key management
  C. Web application firewalls