Cloud X (owned by Cloud Provider X) provides Physical Server A which hosts Virtual Servers A and B. Virtual Server B hosts Ready-Made Environments A and B. Cloud Service Consumer A uses Virtual Server A as part of an IaaS leasing agreement in which Cloud Consumer A is charged a fixed monthly fee for unlimited access. Cloud Service Consumers B and C use Ready-Made Environments A and B respectively as part of a PaaS leasing agreement based on per-minute usage fees. In both cases, access is monitored via Pay-For-Use Monitor A, which keeps track of log-in and log-out times in order to calculate the usage charges that are billed to Cloud Consumers B and C.
Virtual Server A begins generating a series of exceptions. Soon thereafter, Virtual Server B becomes destabilized, resulting in further exceptions being raised in Ready-Made Environments A and B. Cloud Service Consumers B and C receive a series of error messages until both of their connections are dropped Finally, Physical Server A shuts down completely. A subsequent investigation reveals that Virtual Server A was the victim of a security attack performed by a malicious cloud service consumer, the attacker generated increased loads of external communication requests on Virtual Server A and the underlying network, causing Physical Server A (along with Virtual Server B) to eventually shut down.

Which of the following statements accurately identifies the type of security threat that corresponds to the described attack - and -provides a solution that can directly mitigate this type of security threat within Cloud X?

• A. Virtual Server A was subjected to an insufficient authorization attack that can be mitigated by implementing the digital signature and hardened virtual server image mechanisms.
• B. Virtual Server A was subjected to an insufficient authorization attack that can be mitigated by implementing the single sign-on mechanism.
• C. Virtual Server A was subjected to a denial of service attack that can be mitigated by implementing the encryption and digital signature mechanisms.
• D. Virtual Server A was subjected to a denial of service attack that can be mitigated by implementing the hardened virtual server image and identity and access management mechanisms.

Cloud Service Consumer A accesses Cloud Service A (1) that resides in Cloud X. a private cloud owned by the same organization acting as Cloud Consumer A. Cloud Service A processes the message from Cloud Service Consumer A and then sends back a response with the requested data (2). Next, Cloud Service Consumer A sends a message containing some of this data to Cloud Service B (3), which resides in public Cloud Y that is owned by Cloud Provider Y. After processing the message. Cloud Service B sends back a response with additional data to Cloud Service Consumer A (4). Finally, Cloud Service Consumer A writes the data it collected from Cloud Services A and B to Database A (5).
Recently, Cloud Service Consumer A has been required to access Cloud Services A and B at a significantly higher rate, sometimes over 1,000 times within a given workday. This increased usage has not affected Cloud Service B' s performance. Cloud Service A, however, has been generating runtime exceptions, and responses to Cloud Service Consumer A have become increasingly slow and unreliable. It is determined that this decline in performance is due to infrastructure limitations within private Cloud X' s environment. Instead of investing in new infrastructure for Cloud X, it is decided to explore the feasibility of moving Cloud Service A to Cloud Y instead.

Which of the following statements describe valid financial considerations that can be taken into account for assessing the feasibility of this move?

• A. Moving Cloud Service A to Cloud Y will result in the need for Cloud Service A to undergo integration testing to determine how well it can function within Cloud Y and what changes may need to be made to Cloud Service A in order for it to behave as expected. The integration testing and the subsequent changes required for Cloud Service A to function correctly within Cloud Y will incur integration costs that need to be budgeted for.
• B. Because, in this scenario, the cost of capital is comprised of the up-front costs added to the ongoing costs, the cost of capital required to move Cloud Service A to Cloud Y will be higher than upgrading Cloud X to accommodate Cloud Service A' s increased usage.
• C. If the existing infrastructure that currently resides in private Cloud X was purchased specifically in support of Cloud Service A, then there may be a financial loss resulting frommoving Cloud Service A out of Cloud X. This can be considered sunk costs that need to be evaluated.
• D. By moving Cloud Service A to Cloud Y, there may be a decrease in operational governance control over the Cloud Service A implementation. This can increase locked-in costs because Cloud Consumer A may be forced to form dependencies upon proprietary tools used to configure and maintain the Cloud Service A implementation.

A company is planning to build and launch a new SaaS product that will be available for use by the general public. It intends to build the service on-premise and then deploy it in a public cloud. The company has the following set of four requirements for the implementation of the new service:
1.The cloud service needs to exchange messages primarily by using HTTP methods and other features provided by HTTP.
2.The cloud service needs to store highly structured data with potentially complex relationships.
3.The cloud service needs to be deployed on a dedicated virtual server that can be administered with a high level of control by the cloud consumer's own cloud resource administrator.
4.The cloud service needs to be deployed with a minimal amount of integration testing.
For this project, the company has a very limited budget. The company is assessing the IT resources that are offered by Clouds X and Y within the constraints of its limited budget.
Cloud X can offer an IaaS environment with very few proprietary characteristics that includes a database that supports only no relational storage, as well as support for the deployment and usage of REST services.

Cloud Y can offer a PaaS environment with a pre-configured virtual server that includes native
support for WSDL and SOAP, as well as a database that supports only relational storage. The implementation of a new service within Cloud Y will require compliance to a high level of proprietary characteristics.
As previously listed, the company has identified four specific implementation requirements for its new cloud service. Which of the following statements correctly identifies how many of the four requirements Clouds X and Y can directly fulfill?

• A. Cloud X fulfills 2 out of4requirements. Cloud Y fulfills 2 out of4requirements.
• B. Cloud X fulfills 3 out of4requirements. Cloud Y fulfills 1 out of 4 requirements.
• C. Cloud X fulfills 1 out of4requirements. Cloud Y fulfills 3 out of4requirements.
• D. Cloud X fulfills 0 out of 4 requirements. Cloud Y fulfills 4 out of 4 requirements.