Free WGU-JY02 Exam Dumps Preview

An organization is concerned that it will be unable to recover or access data if the cloud provider goes into bankruptcy and leaves the market.

How is this concern addressed in a business continuity and disaster recovery plan?

The designers of a proposed data center are evaluating the requirements to use virtualization for the services it provides.

Which type of design consideration is being addressed?

Which cloud infrastructure risk is the responsibility of the cloud provider?

Which key management option typically needs to be on-premises and delivers the keys to the cloud over a dedicated connection?

A company deploys virtual machines in an infrastructure as a service environment. The cloud provider secures the data center and hypervisor.

Which task remains the customer's responsibility?

Which factor should be the basis of a business continuity plan?

What is a risk in using the community cloud over the private cloud?

A company needs to monitor cloud logs for unusual sign-in locations, impossible travel, and repeated failed administrator logins.

Which capability should it use?

Which term refers to taking an accurate account of a system's desired standard state so changes can be quickly detected for approval or remediation?

A group of DevOps engineers adopted the network-as-code methodology to manage network infrastructure. During a code release, the engineers find a bug that is causing issues on a production site.

Which safeguard will allow the engineers to restore functionality to the production site?

A cloud operations team detects active credential misuse against a production workload. The team needs documented steps for isolating affected accounts, collecting logs, notifying stakeholders, and restoring service.

Which document should guide these actions?

Which security control could be implemented as part of a layered physical defense at a cloud hosting site?

An organization wants employees to use their corporate credentials to access several cloud applications without creating separate passwords for each application.

Which capability should be implemented?

Which cloud storage architecture enhances the opportunity for data policy enforcement such as data loss prevention (DLP)?

An auditor asks an organization to prove that its software as a service provider operates effective security controls. The organization cannot inspect the provider's data center directly.

Which evidence should the organization request?

As part of training to help the data center engineers understand different attack vectors that affect the infrastructure, they work on a set of information about access and availability attacks that was presented.
Part of the labs requires the engineers to identify different threat vectors and their names.

Which threat prohibits the use of data by preventing access to it?

Which release management term describes the process from code implementation to code review and approval to automated testing and then to production deployment?

As part of an e-discovery process, an employee needs to identify all documents that contain a specific phrase.

Which type of discovery method should the employee use to identify these documents?

Which element should a company implement when looking to provide the most secure foundation and smallest attack footprint for virtual servers?

Developers need to be aware of a common application programming interface (API) threat that occurs when attackers send malicious code through a form input to a web application so that it may then be executed.

Which type of attack represents this API threat?

An organization is informed by its cloud provider that a storage device containing some of the organization's data has been seized as possible evidence in a court case, but the organization itself is not involved in any ongoing court cases.

Which characteristic of a cloud environment architecture makes such a scenario possible?

A business continuity team determines that its customer portal can lose no more than 15 minutes of transaction data during a cloud outage.

Which metric has the team defined?

Which action should be taken to preserve forensic evidence for collection?

Which cloud model is owned and operated by a vendor and then sold, leased, or rented to someone else?

Which design pillar encompasses the ability to support development and run workloads effectively, gain insights into operations, and continuously improve supporting processes to deliver business value?

A cloud team encrypts archived records and wants to ensure the records can be recovered years later without storing the decryption keys beside the encrypted data.

Which approach should the team use?

Which type of data sanitization should be used to destroy data on a USB thumb drive while keeping the drive intact?

Which data management activity is considered legal fair use of a copyrighted item?

A company uses a cloud access security broker to discover unsanctioned cloud applications and enforce policies on uploads of sensitive files.

Which risk is the company addressing?

Which business continuity and disaster recovery consideration should be part of a cloud application architecture?

A security analyst is tasked with compiling a report of all people who used a system between two dates.
The thorough report must include information about how long and how often the system was used.

Which information should the analyst ensure is in the report?

A warning system identifies an impending disaster.

When should failover occur to ensure continuity of operations?

A company wants cloud-hosted virtual machines to access a managed database without sending traffic across the public internet.

Which design should the company implement?

Which U.S.
law requires all publicly traded corporations in the United States to provide information about their financial status and implements controls to ensure the accuracy of the disclosed information?

Which technique is used to count source and destination internet protocol (IP) addresses in incoming log flow across all log sources?

Which countermeasure should be taken during the preparation phase of the incident response lifecycle?