EMC IT-as-a-Service Expert Exam for Cloud Architects : E20-918

Which describes the process for instantiating an IaaS offering?

• A. The consumer, via a web based catalog, deploys a template that communicates with the hypervisor layer. This triggers a creation of service, allocating CPU, RAM, networking and storage.
• B. The consumer interacts with an orchestration engine that communicates directly with the hypervisor layer. This triggers a creation of service, allocating resources.
• C. The consumer, via a web based catalog, selects an orchestration engine that communicates with the hypervisor layer. This triggers a creation of service, allocating CPU, RAM, networking and storage.
• D. The consumer, via a web based catalog, selects a service which utilizes an orchestration engine that communicates with the hypervisor layer. This triggers a creation of service through the allocation of resources.

Refer to the exhibit.

You are discussing a network design that a cloud service provider has proposed for a tenant. The tenant states that one more firewall is required, and you agree.
Where should the firewall be placed?

• A. Between VM2 and VM4
• B. Between the Service A and Service B
• C. Between VM2 and the tenant network
• D. Between the tenant network and the external network

An enterprise has decided to implement a new service that will process credit card information. They will deploy this service within their private cloud. They have a relationship with a public cloud provider that claims to be PCI compliant.
The enterprise wishes to implement a service that is PCI compliant with the least amount of effort. The service is protected by a policy-based intrusion detection system. Cardholder data is securely transmitted to the web interface.
Which additional design elements would best be suited for this implementation?

• A. The card number is masked as it is typed and is immediately encrypted, stored, and securely sent directly to the credit card processing system. Credit card information is stored within the public cloud provider using AES 128 encryption.
• B. The card number is masked as it is typed and is immediately encrypted and securely sent directly to the credit card processing system. No credit card information is stored within the application.
• C. The card number is masked as it is typed and is immediately encrypted and securely sent directly to the credit card processing system. Credit card information is backed up to the private cloud system and stored using AES 128 encryption.
• D. The card number is masked as it is typed and is immediately encrypted and securely sent to both the credit card processing system and to private cloud for historical tracking and reporting only.

An enterprise decided to place some sensitive data in the public cloud and implemented security mechanisms to protect this data.
Recently the public cloud provider's systems had a security breach. The enterprise was not concerned because they felt their data had been completely protected. All of the services housing the data are protected by an IPS application and no alerts were generated by the system.
How did the enterprise protect its data?

• A. All data in the public cloud environment was encrypted at-rest only. The encryption keys were
  under complete control of the enterprise and were not available to the public provider.
  The cloud provider's logs showed that the enterprise's services were copied.
• B. All data in the public cloud environment was encrypted at-rest and in-transit. Copies of the
  encryption keys were secured by the public cloud provider in case they were lost.
  The cloud provider's logs showed that the enterprise's services were neither accessed nor copied.
• C. All data in the public cloud environment was encrypted at-rest and in-transit. The encryption
  keys were under complete control of the enterprise and were not available to the public provider.
  The cloud provider's logs showed that the enterprise's services were copied.
• D. All data in the public cloud environment was encrypted in-transit only. The encryption keys were
  under complete control of the enterprise and were not available to the public provider.
  The cloud provider's logs showed that the enterprise's services were copied.

Refer to Scenario 3.
"A US company has deployed web services within a private cloud. They wish to provide additional web services elastically and distribute them around the globe using a public cloud provider.
The web services have a dependency on a database resource in the private cloud. The web services are deployed through a service catalog as a standardized service offering, which includes an intrusion prevention system that periodically polls a central management server for security updates. The IPS management server is located within the private cloud.
The web services collect highly regulated personal health information about consumers who are located around the world."
In your analysis, you find that a different hypervisor is being used by the public cloud provider.
As the enterprise elastically provisions resources, what is a possible solution if the hypervisors are different?

• A. Recalibrate the current service template and deploy it in the public cloud.
• B. Shut down services before migrating to the public cloud.
• C. Create a different service template to deploy in the public cloud.
• D. Use a second service catalog to deploy the current service template in the public cloud.