WGU Managing Cloud Security (JY02) Exam - Topic 2 Question 4 Discussion

Actual exam question for WGU's WGU Managing Cloud Security (JY02) exam

Question #: 4
Topic #: 2

[All WGU Managing Cloud Security (JY02) Questions]

When should a cloud service provider delete customer data?

AWhen the cloud provider oversubscribes its storage space

BWhen the data has not been accessed in the last 30 days

CAfter a scheduled data review

DAfter the specified retention period

Show Suggested Answer

Suggested Answer: D

The correct time for data deletion is after the specified retention period defined by contractual agreements, regulatory frameworks, or internal policies. Retention policies ensure that data is kept for as long as necessary for business, legal, or compliance reasons but not longer than required.

Oversubscription, inactivity, or review cycles are not valid triggers because they may conflict with compliance mandates such as GDPR, HIPAA, or PCI DSS. Deleting data prematurely could result in legal penalties or business risks, while keeping it longer than necessary could increase exposure.

By deleting data only after the retention period, providers demonstrate adherence to data governance principles and protect customer rights while minimizing storage costs and liability.

by Lon at Nov 22, 2025, 03:28 PM

Limited Time Offer

25%

Off

Get Premium WGU Managing Cloud Security (JY02) Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tandra

2 months ago

D is clear. It aligns with compliance and regulations.

upvoted 0 times

...

Pearlie

2 months ago

B feels too short. 30 days isn't enough for some data types.

upvoted 0 times

...

Shanda

2 months ago

C is reasonable too. Regular reviews help manage data better.

upvoted 0 times

...

Lavelle

2 months ago

A is risky! Oversubscribing could lead to data loss.

upvoted 0 times

...

Dana

2 months ago

I agree, D makes sense. Customers expect their data to be safe.

upvoted 0 times

...

Lucille

2 months ago

I think D is the best option. Retention periods are important.

upvoted 0 times

...

Dacia

3 months ago

I agree, retention periods should be respected!

upvoted 0 times

...

Myra

3 months ago

Oversubscribing storage is a bad excuse to delete customer data.

upvoted 0 times

...

Serita

3 months ago

Surprised they’d delete data just because it wasn’t accessed in 30 days!

upvoted 0 times

...

Eleni

4 months ago

I think a scheduled data review makes more sense.

upvoted 0 times

...

Horace

4 months ago

Definitely after the specified retention period!

upvoted 0 times

...

Colene

4 months ago

D is the only sensible choice. Unless, of course, you want your customers to come after you with pitchforks and torches.

upvoted 0 times

...

Anglea

4 months ago

I'd go with D, but I'm also partial to a good data review. Keeps things tidy, you know?

upvoted 0 times

...

Carmen

4 months ago

Agreed, D is the way to go. Gotta respect that retention period, folks!

upvoted 0 times

...

Latricia

4 months ago

Option D is the correct answer. Deleting customer data should only be done after the specified retention period, not based on storage space or access frequency.

upvoted 0 times

...

Louisa

5 months ago

I vaguely recall something about scheduled reviews being important, but I think they’re more about assessing data rather than deleting it. So, I’m not sure if C is the right choice.

upvoted 0 times

...

Socorro

5 months ago

I’m a bit confused. What if the data hasn’t been accessed for a while? Does that mean it should be deleted? I feel like B could be a trap answer.

upvoted 0 times

...

Belen

5 months ago

I remember a practice question about data retention policies, and it emphasized that data should only be deleted after the retention period. So, I’m leaning towards D as well.

upvoted 0 times

...

Sherita

5 months ago

I think the answer might be D, but I'm not entirely sure. Retention periods are usually specified in contracts, right?

upvoted 0 times

...

Shawn

5 months ago

Okay, let me break this down. The key is understanding when the cloud provider should delete the data, not just when they can. I think D makes the most sense - following the agreed-upon retention period.

upvoted 0 times

...

Roy

6 months ago

D all the way! Deleting data willy-nilly? That's a recipe for a lawsuit, if you ask me.

upvoted 0 times

...

Eulah

6 months ago

Definitely not A - that would be a terrible policy, deleting customer data just because the provider oversubscribes. I'm leaning towards D, but I'll double-check the details.

upvoted 0 times

...

Bettina

6 months ago

Hmm, I'm not sure about this one. I'll have to think it through carefully. Maybe B or C could work, but I'm not confident.

upvoted 0 times

...

Stevie

6 months ago

I think the answer is D - after the specified retention period. That seems like the most logical and responsible approach for a cloud provider to handle customer data.

upvoted 0 times