Online Access Free C90.03 Practice Test

Cloud Provider Y owns Cloud Y, which provides a set of cloud services, virtual servers, and
one physical server. Cloud Services A and B are hosted on Virtual Server A, which is
hosted by Physical Server A.
Physical Server A also hosts Virtual Server B, which hosts redundant implementations of Cloud Services A and B for load balancing purposes. Cloud
Service Consumer A is accessing Cloud Service A located on Virtual Server A.
Cloud Service Consumer B is accessing Cloud Service B located on Virtual Server B.
Cloud Service Consumers A and B are both owned by Cloud Consumer X.
Cloud Consumer X has recently complained that Cloud Service A is becoming increasingly
unreliable. Cloud Provider Y launches an investigation that reveals that Virtual Server A
has been crashing sporadically due to successful malicious intermediary attacks where
malicious service agents have been inserting harmful data into messages sent by Cloud
Service Consumer A to Cloud Service A.

Which of the following statements describes a solution that can mitigate the malicious
intermediary attacks that have been occurring on Virtual Server A - and - can further help
prevent the same types of attacks from occurring on Virtual Server B?

• A.Cloud Provider Y can implement the cloud-based security group mechanism that
  establishes a logical trust boundary that encompasses Virtual Servers A and B.
• B.Cloud Provider Y can implement the identity and access management mechanism for
  Virtual Servers A and B by physically deploying this mechanism on Physical Server A and
  then further implementing the resource replication mechanism to propagate the identity and
  access management system across Virtual Servers A and B.
• C.Cloud Provider Y can implement the encryption and digital signatures mechanisms to
  protect the contents of messages from being augmented by malicious service agents.
• D.Cloud Provider Y can implement the failover system mechanism by requiring that
  redundant copies of all service agents be deployed. This will reduce the chances of any
  one service agent performing malicious actions at runtime.

Cloud Provider X has deployed a virtualization environment in Cloud X comprised of
Physical Server A hosting Virtual Servers A and B.
Cloud Provider X implements Cloud
Service A on Virtual Server A and makes it available to Cloud Service Consumer A, which
interacts with Cloud Service A by sending and receiving messages (1, 2).
Cloud Provider Y has deployed a virtualization environment comprised of Physical Server B
hosting Virtual Servers C and D.
Virtual Server C is made available to Cloud Service
Consumer B, which interacts with Virtual Server C (3,4) in order to prepare for the
deployment of a new cloud service that will be used internally by Cloud Provider Y to
process data obtained from Cloud Service A.

Cloud X is administered by a group of organizations and makes Cloud Service A available
only to cloud service consumers from that group. Cloud Consumer Z belongs to one of the
organizations within this group. Cloud Y and Cloud Consumer Z are owned by the same
organization. Which of the following statements provides a valid scenario that accurately
describes the involvement of cloud deployment models, cloud delivery models, roles and/or
boundaries? (Note that the correct answer represents one of multiple valid scenarios that
can exist.)

• A.Cloud X is based on the community cloud deployment model. Cloud Service A is based
  on the SaaS delivery model. Cloud Y is based on the private cloud deployment model.
  Virtual Server C is being offered as part of the IaaS delivery model. A cloud resource
  administrator working for Cloud Consumer Z uses Cloud Service Consumer B to access
  Virtual Server C.
  Cloud Consumer Z is the cloud service owner of Cloud Service A.
  Cloud Consumer T's organizational boundary encompasses Cloud Service Consumers A and B.
  Cloud Consumer Z's trust boundary encompasses Cloud Service A and Virtual Server C.
• B.Cloud X is based on the community cloud deployment model. Cloud Service A is based
  on the SaaS delivery model. Cloud Y is based on the private cloud deployment model.
  Virtual Server C is being offered as part of the IaaS delivery model. A cloud resource
  administrator working for Cloud Consumer Z uses Cloud Service Consumer B to access
  Virtual Server C.
  Cloud Consumer Z' s trust boundary encompasses Cloud Service
  Consumers A and B, as well as Cloud Service A and Virtual Server C.
  The organization
  that owns Cloud Consumer Z will be the cloud service owner of the new cloud service that
  will be deployed on Virtual Server C.
• C.Cloud X is based on the hybrid cloud deployment model. Cloud Service A is based on
  the SaaS delivery model. Cloud Y is based on the community cloud deployment model.
  Virtual Server C is being offered as part of the IaaS delivery model. A cloud resource
  administrator working for Cloud Consumer Z uses Cloud Service Consumer A to access
  Cloud Service A.
  Cloud Consumer Z's organizational and trust boundaries encompass
  Cloud Service Consumers A and B, Cloud Service A and Virtual Server C.
• D.Clouds X and Y are based on the community cloud deployment model. Cloud Service A
  is based on the SaaS delivery model. Virtual Server C is being offered as part of the PaaS
  delivery model. A cloud resource administrator working for Cloud Provider X uses Virtual
  Server A to access the Cloud Service A implementation Cloud Consumer T s trust
  boundary encompasses Cloud Service Consumers A and B, Cloud Service A and Virtual
  Server C.
  The organization that owns Cloud Consumer Z is the cloud service owner of
  Cloud Service A.

Cloud Service Consumer A accesses Cloud Service A (1) that resides in Cloud X.
a private cloud owned by the same organization acting as Cloud Consumer A.
Cloud Service A
processes the message from Cloud Service Consumer A and then sends back a response
with the requested data (2). Next, Cloud Service Consumer A sends a message containing
some of this data to Cloud Service B (3), which resides in public Cloud Y that is owned by
Cloud Provider Y.
After processing the message. Cloud Service B sends back a response
with additional data to Cloud Service Consumer A (4). Finally, Cloud Service Consumer A
writes the data it collected from Cloud Services A and B to Database A (5).
Recently, Cloud Service Consumer A has been required to access Cloud Services A and B
at a significantly higher rate, sometimes over 1,000 times within a given workday. This
increased usage has not affected Cloud Service B' s performance. Cloud Service A,
however, has been generating runtime exceptions, and responses to Cloud Service
Consumer A have become increasingly slow and unreliable. It is determined that this
decline in performance is due to infrastructure limitations within private Cloud X' s
environment. Instead of investing in new infrastructure for Cloud X, it is decided to explore
the feasibility of moving Cloud Service A to Cloud Y instead.

Which of the following statements describe valid financial considerations that can be taken
into account for assessing the feasibility of this move?

• A.By moving Cloud Service A to Cloud Y, there may be a decrease in operational
  governance control over the Cloud Service A implementation. This can increase locked-in
  costs because Cloud Consumer A may be forced to form dependencies upon proprietary
  tools used to configure and maintain the Cloud Service A implementation.
• B.Moving Cloud Service A to Cloud Y will result in the need for Cloud Service A to
  undergo integration testing to determine how well it can function within Cloud Y and what
  changes may need to be made to Cloud Service A in order for it to behave as expected.
  The integration testing and the subsequent changes required for Cloud Service A to
  function correctly within Cloud Y will incur integration costs that need to be budgeted for.
• C.If the existing infrastructure that currently resides in private Cloud X was purchased
  specifically in support of Cloud Service A, then there may be a financial loss resulting from
  moving Cloud Service A out of Cloud X.
  This can be considered sunk costs that need to be
  evaluated.
• D.Because, in this scenario, the cost of capital is comprised of the up-front costs added to
  the on-going costs, the cost of capital required to move Cloud Service A to Cloud Y will be
  higher than upgrading Cloud X to accommodate Cloud Service A' s increased usage.