最好的最新Managing-Cloud-Security題庫資訊，令人稱贊的考試指南幫助妳輕松通過Managing-Cloud-Security考試為什麼我們領先於行業上的其他網站？ 因為我們提供的資料覆蓋面更廣，品質更高，準確性也更高。所以PDFExamDumps是你參加WGU Managing-Cloud-Security 認證考試的最好的選擇，也是你成功的最好的保障。 最新的 Courses and Certificates Managing-Cloud-Security 免費考試真題 (Q45-Q50):問題 #45
Which level of compliance is required by a cloud service provider to protect customer data at banks and insurance companies?
A. GLBA
B. FERPA
C. DMCA
D. IDEA
答案：A
解題說明：
The Gramm-Leach-Bliley Act (GLBA) requires cloud service providers to protect customer data for banks and insurance companies. Managing Cloud principles explain that GLBA applies to financial institutions and mandates safeguards to protect consumers' nonpublic personal information.
Cloud service providers supporting financial organizations must implement security controls that align with GLBA requirements, including data protection, risk management, and access controls. This ensures confidentiality and integrity of financial data stored or processed in the cloud.
IDEA governs education services, DMCA addresses digital copyright, and FERPA protects student education records. Therefore, GLBA is the correct compliance requirement.
問題 #46
Under which jurisdiction do General Data Protection Regulation (GDPR) guidelines apply?
A. Australia
B. China
C. United States of America
D. European Union
答案：D
解題說明：
The General Data Protection Regulation (GDPR) applies under the jurisdiction of the European Union.
Managing Cloud documentation explains that GDPR governs the collection, processing, storage, and transfer of personal data belonging to individuals within EU member states.
GDPR applies not only to organizations physically located in the European Union but also to organizations outside the EU that process or control EU residents' personal data. This broad scope makes GDPR one of the most influential data protection regulations affecting cloud services globally.
The regulation mandates strict requirements related to consent, data minimization, breach notification, and data subject rights. Organizations using cloud services must ensure that their providers support GDPR compliance requirements.
The other jurisdictions listed have their own privacy regulations but are not governed by GDPR. Therefore, the correct jurisdiction is the European Union.
問題 #47
Which phase of the software development life cycle includes creating user stories?
A. Designing
B. Developing
C. Planning
D. Defining
答案：C
解題說明：
The Planning phase of the software development life cycle (SDLC) includes creating user stories. Managing Cloud principles explain that user stories capture functional requirements from the end user's perspective and help define application behavior and priorities.
During planning, stakeholders collaborate to identify business needs, define scope, and establish development goals. User stories are used to guide development tasks and ensure alignment with customer expectations.
Designing focuses on architecture, developing involves coding, and defining establishes high-level objectives.
Therefore, planning is the correct SDLC phase for creating user stories.
問題 #48
Which country lacks a national law assuring individual personal privacy?
A. New Zealand
B. Canada
C. United States
D. Israel
答案：C
解題說明：
The United States lacks a single, comprehensive national law assuring individual personal privacy. Managing Cloud principles explain that U.S. privacy protections are governed by a sector-specific approach, with different laws covering healthcare, finance, education, and children's data.
Unlike countries with unified privacy legislation, the U.S. relies on a combination of federal, state, and industry-specific regulations. This fragmented framework contrasts with national privacy laws in countries such as Canada, New Zealand, and Israel.
As a result, organizations operating in the U.S. must navigate multiple regulatory requirements depending on data type and jurisdiction. Therefore, the United States is the correct answer.
問題 #49
Which term describes data elements that, when combined with other information, are used to single out an individual?
A. Direct identifiers
B. Indirect identifiers
C. Personal details
D. Data subjects
答案：B
解題說明：
Indirect identifiersare pieces of information that may not identify an individual on their own but, when combined with other data, can uniquely identify someone. Examples include birthdate, ZIP code, or gender.
Together, these can re-identify a person, even when names or direct identifiers are removed.
Direct identifiers (such as Social Security numbers) uniquely identify an individual alone. Data subjects are the individuals to whom the data refers, while personal details is too broad and not a formal term.
Understanding indirect identifiers is essential in privacy regulations like GDPR and HIPAA, where pseudonymization or anonymization must account for potential re-identification risks. Safeguarding indirect identifiers reduces the chance of privacy violations and unauthorized profiling.