A government department has converted their internal software development environment into a cloud services offering. The department is actively marketing the capability to other agencies. The other agencies are interested, but identity compliance is a serious concern.
How can the department improve trust within their service offering?

• A. Identify the confidentiality, integrity and availability requirements for agency data. Use rights management software to restrict access to the agency's own data.
• B. Provide a self-service portal that describes how the department's security policy is implemented. Require users to accept the policy each time it is amended.
• C. Establish a single sign-on capability in the cloud and federate with each subscribing agency using strong authentication policies and end-point access control.
• D. Harden the cloud service infrastructure stack. Use geographic location to ensure agencies can only access servers that host their development environment.

A university is building a private cloud. They plan to offer services to students, faculty, and staff. Each group has access to different levels of sensitive data with different performance characteristics. In addition, the university must comply with FERPA and HIPAA regulations for a small number of services.
What should a cloud architect recommend to the university during the cloud design phase?

• A. Implement multi-tenancy trust zones through the service catalog for students, faculty, and staff.
  Implement service orchestration to support the performance requirements.
  Create resource pools to restrict access to regulated data.
• B. Implement multi-tenancy trust zones through the service catalog for regulated data. Implement
  RBAC through the service catalog to protect student, faculty and staff data. Create resource pools to support the performance characteristics.
• C. Implement multi-tenancy trust zones through the service catalog for students, faculty, and staff.
  Implement IT security mechanisms to protect regulated data.
  Create resource pools to support the performance characteristics.
• D. Implement multi-tenancy trust zones through the service catalog for students, faculty, and staff.
  Implement RBAC through the service catalog to protect regulated data.
  Create resource pools to support the performance characteristics.

Refer to the exhibit.

You have been hired to assist with a migration to an ITaaS environment. The company has offices
in Atlanta, Dubai, and London, with 5000, 2000, and 3000 employees, respectively. A data center exists in each location, and most services have been virtualized. Messaging services are provided locally to the user.
You have just performed an assessment of the environment. The results are shown in the exhibit.
The CIO is interested in closing one of the data centers and migrating some or all of the services to a public cloud service provider (CSP). Any services that do not get migrated to the CSP will be hosted at one of the other two data centers. Network latency averages 8 milliseconds between the Atlanta and London offices, and 10 milliseconds between the London and Dubai offices. Traffic between Atlanta and Dubai is routed through London.
The eCommerce application is external facing and is hosted at all three data centers. Atlanta services 50% of the users in North and South America. London services 40% of the users in Europe and Asia. Dubai services 10% of the users in Africa and Australia.
You have tentatively chosen a CSP that is housed in Frankfurt, and would have access to 3 Gb/s of network bandwidth to the facility. The CSP's service levels are as follows:
-RPO: 4 hours -RTO: 1 hour -Availability: 99.995%
Your recommendation is to close the Dubai data center over a one-year time horizon.
What migration strategy would you recommend for the services that are currently hosted in the Dubai data center, and why?

• A. Messaging to the public cloud; split eCommerce between London and Atlanta; CSP cannot support the availability for eCommerce
• B. eCommerce to the public cloud; Messaging to Atlanta; CSP cannot support the bandwidth requirements for Messaging, and latency will be less from Atlanta
• C. Messaging and eCommerce to the public cloud; CSP can support availability and bandwidth requirements for both applications
• D. eCommerce to the public cloud; Messaging to London; CSP cannot support the bandwidth requirements for Messaging, and latency will be less from London

An enterprise decided to place some sensitive data - intellectual property - in the public cloud and implemented security mechanisms to protect this data.
Recently the public cloud provider's systems had a security breach. The enterprise was not concerned because they felt their data had been completely protected. All of the services housing the data are protected by an IPS application and no alerts were generated by the system.
How did the enterprise protect its data?

• A. All data in the public cloud environment was encrypted in-transit only. The encryption keys were
  under complete control of the enterprise and were not available to the public provider.
  The cloud provider's logs showed that the enterprise's services were neither accessed nor copied.
• B. The data was not encrypted but the enterprise maintained a backup of the data in a secure off-
  site location.
  The cloud provider's logs showed that the enterprise's services were not copied.
• C. All data in the public cloud environment was encrypted at-rest and in-transit. The encryption
  keys were under complete control of the enterprise and were not available to the public provider.
  The cloud provider's logs showed that the enterprise's services were copied.
• D. All data in the public cloud environment was encrypted at-rest and in-transit. Copies of the
  encryption keys were secured by the public cloud provider using 1024-bit encryption.
  The cloud provider's logs showed that the enterprise's services were neither accessed nor copied.

The IT department and lines of business at a pharmaceutical company are determining what the best resource allocation and chargeback models would be to fund their development efforts.
The primary drivers are:
-Guaranteed resources are always available -Applications should be able to burst quickly on-demand -SLAs are negotiable
Which best meets the requirements?

• A. A variable resource allocation model. Each LOB is billed one rate for the resources used within the guaranteed pool and a different rate for the resources used within the shared pool.
• B. A variable resource allocation model. Each LOB is billed one rate for both the resources used within the guaranteed pool and shared pool.
• C. A guaranteed allocation model. Each LOB is billed one rate for the resources used within the guaranteed pool and a different rate for the resources used within the shared pool.
• D. A guaranteed allocation model. Each LOB is billed one rate for both the resources used within the guaranteed pool and the shared pool.