Which action should be taken to ensure that unencrypted network traffic is protected?
Answer(s): D
The most effective way to protect network traffic from interception is Transport Layer Security (TLS). TLS provides confidentiality, integrity, and authentication by encrypting data as it travels between client and server. Unlike older protocols like SSL, which is now deprecated due to vulnerabilities, TLS is the industry-standard protocol endorsed by modern security frameworks.Compression and password protection through GZ is not a reliable method, as it does not offer strong encryption or resistance against sophisticated interception attacks. GRE is a tunneling protocol and does not inherently provide encryption.By implementing TLS, organizations ensure protection against on-path attacks, replay attacks, and packet sniffing. TLS also supports features such as forward secrecy and certificate-based authentication, ensuring both secure data transmission and mutual trust between endpoints. In compliance-driven industries like healthcare and finance, TLS is explicitly mandated for protecting sensitive information in transit.
Which setting ensures that an attacker cannot read the information stored temporarily for use by another virtual machine (VM)?
Dedicated memory allocation ensures isolation between virtual machines in a shared environment. Without memory isolation, remnants of one VM's operations might remain in physical memory and be accessible to another VM, leading to cross-tenant data leakage. Assigning dedicated memory prevents attackers from exploiting memory-sharing vulnerabilities.Encrypted network protocols protect data in transit, not memory. Encrypted file systems safeguard storage, not volatile memory. A dedicated processor helps with performance and isolation of compute tasks but does not secure temporary memory contents.Cloud environments are multi-tenant, which makes memory isolation a critical safeguard. By dedicating memory or enforcing strict hypervisor-level isolation, providers prevent data exposure between customers. This aligns with best practices for virtualization security and the "resource pooling" characteristic of cloud computing, ensuring that shared infrastructure does not compromise confidentiality.
An organization needs to provide space where security administrators can centrally monitor network traffic and events and respond to threats or outages. What should the organization create?
Answer(s): B
A Security Operations Center (SOC) is a centralized facility that allows administrators to monitor, detect, investigate, and respond to cybersecurity events in real time. SOC teams leverage tools such as SIEM (Security Information and Event Management), threat intelligence, and incident response playbooks.ERTs and DRTs are teams focused on emergencies and disaster recovery, respectively, but they do not provide continuous monitoring. A NOC focuses on performance and availability of IT infrastructure but not on security threats.By establishing a SOC, organizations ensure 24/7 visibility into security events, coordinated incident handling, and compliance with standards such as ISO 27001 and SOC 2. SOCs are essential in cloud environments where threats evolve rapidly, and centralized expertise is needed to minimize impact.
An organization experienced an unplanned event. As a result, the customers using the web application face a loss of service. What does the incident generated in this situation seek to resolve?
Answer(s): C
The unplanned event described is a disruption of service. In IT service management frameworks like ITIL, disruptions occur when an incident prevents normal service delivery. The goal of incident management is to restore service quickly and minimize impact on customers.A bug refers to a software defect, which may cause disruptions but is not synonymous with the event itself. An error represents a fault, while change refers to deliberate modifications. Only disruption captures the unplanned nature of service unavailability.Recognizing incidents as disruptions helps organizations apply structured processes such as escalation, root-cause analysis, and communication. It ensures resilience in cloud-based environments where uptime is a key performance indicator and customer trust is closely tied to availability.
An engineer needs to create segmentation using the built-in tools provided by the company's cloud provider. The InfoSec team has given the engineer directions to limit traffic using a security group between two cloud deployments in the organization. Which mechanisms should the engineer use to create this segmentation?
Cloud security groups typically filter traffic based on ports and protocols. By allowing or denying specific port/protocol combinations, engineers can control communication between deployments. For example, permitting HTTPS (TCP port 443) while blocking other ports enforces segmentation.MAC addresses are not used in cloud-level segmentation because they apply to physical networks. Unique identifiers and definitions are not practical mechanisms for traffic filtering.Using ports and protocols aligns with the principle of least privilege by ensuring that only necessary communication pathways exist. In multi-deployment or hybrid cloud setups, this reduces the attack surface and prevents lateral movement by malicious actors. Security groups thereby provide logical network segmentation without requiring physical infrastructure changes.
Post your Comments and Discuss WGU Managing-Cloud-Security exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the Managing-Cloud-Security content, but please register or login to continue.