Organization A has been expanding and, as a result, is outgrowing the processing capacity of its on-premise Service A implementation. It is determined that this is due to usage thresholds of Service A and complex data processing limitations in Database A. The diagram depicts Organization A's current on-premise environment, where Service Consumers A. B and C attempt to access Service A at the same time. Service Consumer A successfully accesses Service A, which then successfully retrieves the requested data (1). Service Consumer B successfully accesses Service A, but due to the complex data structure, the request for the data times out and fails (2). Finally, Service Consumer C attempts to access Service A, but is rejected because Service A is unable to accept more concurrent requests.

Organization A is required to continue using its on-premise Service A implementation, with the exception of Database A, which does not need to remain on-premise. Database A is dedicated to Service A and is comprised of relational data.
Which of the following statements provides a solution that uses cloud-based IT resources to solve the performance limitations of Service A and Database A?

• A. The virtual server and resource replication mechanisms can be implemented to replicate Service A and Database A across both on-premise and cloud environments. This enables on-demand usage in that requests sent by Service Consumers A, B and C will automatically be redirected to the replicated service and/or database. As a result, Service A' s usage thresholds will no longer result in rejected requests and Database A' s processing limitations will no longer result in failed data access attempts.
• B. Automated scaling listener mechanisms can be implemented in both the on-premise and cloud environments. Using built-in resiliency features, these service agents can be configured to coordinate the routing of messages between the on-premise Service A implementation and a redundant Cloud Service A implementation. This dynamic functionality can avoid service usage thresholds in both Service A and Cloud Service A.
• C. None of the above.
• D. A cloud balancing solution can be implemented within the public cloud, whereby a redundant Cloud Service A implementation is established. Cloud Service A becomes the first point of contact for Service Consumers A, B and C (thereby turning them into Cloud Service ConsumersA. B and C). Upon reaching its usage threshold (which will be higher than the on-premise Service A), Cloud Service A automatically routes usage requests to Service A. The resource replication mechanism is implemented within the cloud to establish a replicated Database A that can further be used to load balance data access requests from Cloud Service A or Service A.

Cloud Provider X (which owns Cloud X) deploys two physical servers (Physical Servers A and B) and two databases (Databases A and B). Virtual Servers A and B are hosted by Physical Server A and Ready-Made Environments A and B are hosted by Virtual Server B. Virtual Servers C and D are hosted by Physical Server B. Cloud Service Consumer A regularly accesses Virtual Server D in order to test and deploy a new cloud service that was developed on-premise by the cloud consumer organization operating Cloud Service Consumer A. Cloud Service Consumer B (operated by a different cloud consumer organization) has been regularly accessing Ready-Made Environment A in order to develop and deploy a different new cloud service.

Cloud X is a private cloud that, to-date, has been set up within the cloud provider company to provision IT resources free of charge to internal cloud consumers, via PaaS and IaaS delivery models. The cloud consumers that have been operating Cloud Service Consumers A and B represent different IT departments within the company that have been working separately on the development of new cloud services. Cloud Service Consumer A has been accessing Virtual Server D to make necessary configurations and administration settings for the upcoming deployment of a new cloud service that was previously developed outside of Cloud X. Cloud Service Consumer B has been accessing Ready-Made Environment A to develop and now deploy a different new cloud service.
Cloud Provider X (which is represented by a separate IT department dedicated to governing and administering Cloud X) determines that it will need to introduce three specific enhancements to Cloud X in order to accommodate both upcoming cloud services. First, it needs to add a way to charge cloud consumers for the usage of cloud services. Secondly, it needs to add a way for new cloud services to be automatically scaled. Finally, it needs to add a way for a cloud consumer to be automatically notified when a cloud service encounters runtime loads that exceed its allocated usage threshold.
Which of the following statements accurately describes a solution that fulfills all three identified requirements?

• A. The pay-for-use monitor mechanism can be installed to address the requirement for cloud service usage to be tracked andrecorded. The automated scaling listener mechanism can be implemented to address both the requirement for cloud services to be automatically scaled and for notifications to be issued when cloud service loads exceed thresholds.
• B. The pay-for-use monitor mechanism can be installed to address the requirement for cloud service usage charges to be tracked and recorded. The automated scaling listener mechanism can be implemented to address the requirement for cloud services to be automatically scaled. The multi-device broker mechanism can be implemented to address the requirement for notifications to be issued when cloud service loads exceed thresholds.
• C. The state management database mechanism together with the virtual server mechanism and the automated scaling listener mechanism can be implemented to address the requirement for cloud service usage charges to be tracked and recorded, for cloud services to be automatically scaled, and for notifications to be issued when cloud service loads exceed thresholds.
• D. The pay-for-use monitor mechanism can be implemented to address the requirement for cloud service usage charges to betracked and recorded, for cloud services to be automatically scaled, and for notifications to be issued when cloud service loads exceed thresholds.

Cloud X (owned by Cloud Provider X) provides Physical Server A which hosts Virtual Servers A and B. Virtual Server B hosts Ready-Made Environments A and B. Cloud Service Consumer A uses Virtual Server A as part of an IaaS leasing agreement in which Cloud Consumer A is charged a fixed monthly fee for unlimited access. Cloud Service Consumers B and C use Ready-Made Environments A and B respectively as part of a PaaS leasing agreement based on per-minute usage fees. In both cases, access is monitored via Pay-For-Use Monitor A, which keeps track of log-in and log-out times in order to calculate the usage charges that are billed to Cloud Consumers B and C.
Virtual Server A begins generating a series of exceptions. Soon thereafter, Virtual Server B becomes destabilized, resulting in further exceptions being raised in Ready-Made Environments A and B. Cloud Service Consumers B and C receive a series of error messages until both of their connections are dropped Finally, Physical Server A shuts down completely. A subsequent investigation reveals that Virtual Server A was the victim of a security attack performed by a malicious cloud service consumer, the attacker generated increased loads of external communication requests on Virtual Server A and the underlying network, causing Physical Server A (along with Virtual Server B) to eventually shut down.

Which of the following statements accurately identifies the type of security threat that corresponds to the described attack - and -provides a solution that can directly mitigate this type of security threat within Cloud X?

• A. Virtual Server A was subjected to an insufficient authorization attack that can be mitigated by implementing the single sign-on mechanism.
• B. Virtual Server A was subjected to a denial of service attack that can be mitigated by implementing the hardened virtual server image and identity and access management mechanisms.
• C. Virtual Server A was subjected to an insufficient authorization attack that can be mitigated by implementing the digital signature and hardened virtual server image mechanisms.
• D. Virtual Server A was subjected to a denial of service attack that can be mitigated by implementing the encryption and digital signature mechanisms.