Cloud Service Consumer A accesses Cloud Service A (1) that resides in Cloud X.
a private cloud owned by the same organization acting as Cloud Consumer A.
Cloud Service A
processes the message from Cloud Service Consumer A and then sends back a response
with the requested data (2). Next, Cloud Service Consumer A sends a message containing
some of this data to Cloud Service B (3), which resides in public Cloud Y that is owned by
Cloud Provider Y.
After processing the message. Cloud Service B sends back a response
with additional data to Cloud Service Consumer A (4). Finally, Cloud Service Consumer A
writes the data it collected from Cloud Services A and B to Database A (5).
Recently, Cloud Service Consumer A has been required to access Cloud Services A and B
at a significantly higher rate, sometimes over 1,000 times within a given workday. This
increased usage has not affected Cloud Service B' s performance. Cloud Service A,
however, has been generating runtime exceptions, and responses to Cloud Service
Consumer A have become increasingly slow and unreliable. It is determined that this
decline in performance is due to infrastructure limitations within private Cloud X' s
environment. Instead of investing in new infrastructure for Cloud X, it is decided to explore
the feasibility of moving Cloud Service A to Cloud Y instead.

Which of the following statements describe valid financial considerations that can be taken
into account for assessing the feasibility of this move?

• A. Moving Cloud Service A to Cloud Y will result in the need for Cloud Service A to
  undergo integration testing to determine how well it can function within Cloud Y and what
  changes may need to be made to Cloud Service A in order for it to behave as expected.
  The integration testing and the subsequent changes required for Cloud Service A to
  function correctly within Cloud Y will incur integration costs that need to be budgeted for.
• B. Because, in this scenario, the cost of capital is comprised of the up-front costs added to
  the on-going costs, the cost of capital required to move Cloud Service A to Cloud Y will be
  higher than upgrading Cloud X to accommodate Cloud Service A' s increased usage.
• C. If the existing infrastructure that currently resides in private Cloud X was purchased
  specifically in support of Cloud Service A, then there may be a financial loss resulting from
  moving Cloud Service A out of Cloud X.
  This can be considered sunk costs that need to be
  evaluated.
• D. By moving Cloud Service A to Cloud Y, there may be a decrease in operational
  governance control over the Cloud Service A implementation. This can increase locked-in
  costs because Cloud Consumer A may be forced to form dependencies upon proprietary
  tools used to configure and maintain the Cloud Service A implementation.

Cloud Provider X (which owns Cloud X) deploys two physical servers (Physical Servers A
and B) and two databases (Databases A and B). Virtual Servers A and B are hosted by
Physical Server A and Ready-Made Environments A and B are hosted by Virtual Server B.
Virtual Servers C and D are hosted by Physical Server B.
Cloud Service Consumer A regularly accesses Virtual Server D in order to test and deploy a new cloud service that
was developed on-premise by the cloud consumer organization operating Cloud Service
Consumer A.
Cloud Service Consumer B (operated by a different cloud consumer organization) has been regularly accessing Ready-Made Environment A in order to develop
and deploy a different new cloud service.
The cloud consumer organizations that own and operate Cloud Service Consumers A and
B will soon be ready to launch their respective cloud services for use by their customers.
Both cloud consumer organizations are concerned that Cloud X does not provide sufficient
security and they demand that Cloud Provider X take the necessary steps to mitigate the
denial of service, insufficient authorization and overlapping trust boundaries security
threats.

Which of the following statements accurately describes the cloud delivery models used now
by the cloud service consumers and in the future by their customers - and - further
describes a solution that fulfills the identified security requirements by implementing a
single cloud security mechanism?

• A. Cloud Service Consumer A is using the IaaS delivery model. Cloud Service Consumer B
  is using the SaaS delivery model. Customers of the cloud services will be using the PaaS
  delivery model. The encryption mechanism can be implemented to mitigate the denial of
  service, insufficient authorization and overlapping trust boundaries security threats.
• B. Cloud Service Consumer A is using the IaaS delivery model. Cloud Service Consumer B
  is using the PaaS delivery model. Customers of the cloud services will be using the SaaS
  delivery model. An identity and access management mechanism can be implemented to
  mitigate the denial of service, insufficient authorization and overlapping trust boundaries
  security challenges.
• C. Cloud Service Consumer A is using the IaaS delivery model. Cloud Service Consumer B
  is using the PaaS delivery model. Customers of the cloud services will be using the SaaS
  delivery model. The digital signatures mechanism can be implemented to mitigate the
  denial of service, insufficient authorization and overlapping trust boundaries security
  challenges.
• D. Cloud Provider X is providing a hybrid delivery model comprised of a combination of the
  IaaS and PaaS delivery models, which means that Cloud Service Consumers A and B are
  using both the IaaS and PaaS delivery models. Customers of the cloud services will be
  using the PaaS delivery model. The single sign-on mechanism can be implemented to
  mitigate the denial of service and insufficient authorization security threats. The encryption
  mechanisms can be implemented to mitigate the overlapping trust boundaries security
  challenges.

Cloud Service A is being made available on public Cloud X by Cloud Provider X via the
SaaS delivery model. Cloud Service A is hosted by Physical Server A that also hosts cloud
services being used by different cloud service consumers (and owned by different cloud
service owners).
Cloud Provider X needs to make Cloud Service A available to a new group of cloud service
consumers, but must do so without the increase in usage volume affecting Cloud Service
Consumers A and B.

Which of the following statements does not accurately describe a solution (or a set of
solutions) that addresses this requirement?

• A. Cloud Provider X can upgrade its infrastructure to increase the cloud's ubiquitous
  access characteristic. This will enable the cloud to provide distributed failover for IT
  resources across multiple devices in order to increase its ubiquitous resiliency. To achieve
  this, Cloud Provider X will further need to implement the failover system, state
  management database and resource replication mechanisms.
• B. Cloud Provider X can upgrade its infrastructure by increasing its ability to horizontally
  scale IT resources that are used by Cloud Service A.
  Cloud Provider X can upgrade its infrastructure in order to vertically scale IT resources that are used by Cloud Service A.
• C. Cloud Provider X can scale out Cloud Service A by implementing new cloud computing
  mechanisms, such as the virtual server and resource replication mechanisms, which can
  enhance the cloud's elasticity characteristic.
• D. Cloud Provider X can scale up Cloud Service A by upgrading the Physical Server A
  hardware to increase the server's processing power. Cloud Provider X can scale out Cloud
  Service A by adding redundant implementations of the service and by using the automated
  scaling listener mechanism.