SOA C90.03 actual dump : Cloud Technology Lab

Cloud Provider Y owns Cloud Y, which provides a set of cloud services, virtual servers, and
one physical server. Cloud Services A and B are hosted on Virtual Server A, which is
hosted by Physical Server A.
Physical Server A also hosts Virtual Server B, which hosts redundant implementations of Cloud Services A and B for load balancing purposes. Cloud
Service Consumer A is accessing Cloud Service A located on Virtual Server A.
Cloud Service Consumer B is accessing Cloud Service B located on Virtual Server B.
Cloud Service Consumers A and B are both owned by Cloud Consumer X.
Cloud Consumer X has recently complained that Cloud Service A is becoming increasingly
unreliable. Cloud Provider Y launches an investigation that reveals that Virtual Server A
has been crashing sporadically due to successful malicious intermediary attacks where
malicious service agents have been inserting harmful data into messages sent by Cloud
Service Consumer A to Cloud Service A.

Which of the following statements describes a solution that can mitigate the malicious
intermediary attacks that have been occurring on Virtual Server A - and - can further help
prevent the same types of attacks from occurring on Virtual Server B?

• A. Cloud Provider Y can implement the encryption and digital signatures mechanisms to
  protect the contents of messages from being augmented by malicious service agents.
• B. Cloud Provider Y can implement the identity and access management mechanism for
  Virtual Servers A and B by physically deploying this mechanism on Physical Server A and
  then further implementing the resource replication mechanism to propagate the identity and
  access management system across Virtual Servers A and B.
• C. Cloud Provider Y can implement the cloud-based security group mechanism that
  establishes a logical trust boundary that encompasses Virtual Servers A and B.
• D. Cloud Provider Y can implement the failover system mechanism by requiring that
  redundant copies of all service agents be deployed. This will reduce the chances of any
  one service agent performing malicious actions at runtime.

Cloud Service Consumer A accesses Cloud Service A (1) that resides in Cloud X.
a private cloud owned by the same organization acting as Cloud Consumer A.
Cloud Service A
processes the message from Cloud Service Consumer A and then sends back a response
with the requested data (2). Next, Cloud Service Consumer A sends a message containing
some of this data to Cloud Service B (3), which resides in public Cloud Y that is owned by
Cloud Provider Y.
After processing the message. Cloud Service B sends back a response
with additional data to Cloud Service Consumer A (4). Finally, Cloud Service Consumer A
writes the data it collected from Cloud Services A and B to Database A (5).
Recently, Cloud Service Consumer A has been required to access Cloud Services A and B
at a significantly higher rate, sometimes over 1,000 times within a given workday. This
increased usage has not affected Cloud Service B' s performance. Cloud Service A,
however, has been generating runtime exceptions, and responses to Cloud Service
Consumer A have become increasingly slow and unreliable. It is determined that this
decline in performance is due to infrastructure limitations within private Cloud X' s
environment. Instead of investing in new infrastructure for Cloud X, it is decided to explore
the feasibility of moving Cloud Service A to Cloud Y instead.

Which of the following statements describe valid financial considerations that can be taken
into account for assessing the feasibility of this move?

• A. By moving Cloud Service A to Cloud Y, there may be a decrease in operational
  governance control over the Cloud Service A implementation. This can increase locked-in
  costs because Cloud Consumer A may be forced to form dependencies upon proprietary
  tools used to configure and maintain the Cloud Service A implementation.
• B. Because, in this scenario, the cost of capital is comprised of the up-front costs added to
  the on-going costs, the cost of capital required to move Cloud Service A to Cloud Y will be
  higher than upgrading Cloud X to accommodate Cloud Service A' s increased usage.
• C. Moving Cloud Service A to Cloud Y will result in the need for Cloud Service A to
  undergo integration testing to determine how well it can function within Cloud Y and what
  changes may need to be made to Cloud Service A in order for it to behave as expected.
  The integration testing and the subsequent changes required for Cloud Service A to
  function correctly within Cloud Y will incur integration costs that need to be budgeted for.
• D. If the existing infrastructure that currently resides in private Cloud X was purchased
  specifically in support of Cloud Service A, then there may be a financial loss resulting from
  moving Cloud Service A out of Cloud X.
  This can be considered sunk costs that need to be
  evaluated.

A company is planning to build and launch a new SaaS product that will be available for
use by the general public. It intends to build the service on-premise and then deploy it in a
public cloud. The company has the following set of four requirements for the
implementation of the new service:
1. The cloud service needs to exchange messages primarily by using HTTP methods and
other features provided by HTTP.
2. The cloud service needs to store highly structured data with potentially complex
relationships.
3. The cloud service needs to be deployed on a dedicated virtual server that can be
administered with a high level of control by the cloud consumer's own cloud resource
administrator.
4. The cloud service needs to be deployed with a minimal amount of integration testing.
For this project, the company has a very limited budget. The company is assessing the IT
resources that are offered by Clouds X and Y within the constraints of its limited budget.
Cloud X can offer an IaaS environment with very few proprietary characteristics that
includes a database that supports only no relational storage, as well as support for the
deployment and usage of REST services.

Cloud Y can offer a PaaS environment with a pre-configured virtual server that includes
native support for WSDL and SOAP, as well as a database that supports only relational
storage. The implementation of a new service within Cloud Y will require compliance to a
high level of proprietary characteristics.
As previously listed, the company has identified four specific implementation requirements
for its new cloud service. Which of the following statements correctly identifies how many of
the four requirements Clouds X and Y can directly fulfill?

• A. Cloud X fulfills 2 out of 4 requirements. Cloud Y fulfills 2 out of 4 requirements.
• B. Cloud X fulfills 3 out of 4 requirements. Cloud Y fulfills 1 out of 4 requirements.
• C. Cloud X fulfills 1 out of 4 requirements. Cloud Y fulfills 3 out of 4 requirements.
• D. Cloud X fulfills 0 out of 4 requirements. Cloud Y fulfills 4 out of 4 requirements.