A small company has been using a public cloud IaaS provider for several months. During this time the company has seen significant growth in revenue. This growth has triggered a surge in hiring, which has forced the company to repeatedly purchase additional services at premium cost from their CSP.
The company has leased a data center and started designing a cloud infrastructure to deploy a private cloud environment. The underlying hypervisor technology they chose is different than that of the CSP. Once the initial infrastructure has been implemented, they will transition to a hybrid cloud model. New services will only be deployed in the private cloud.
A new CIO has just been hired, but has little experience with cloud computing. You are a Cloud Architect who has been asked to consult on several areas of concern.
The first service must be deployed in the private cloud within the next month. The CIO does not want to rely solely on the existing single sign-on solution hosted in the public cloud, because network disruption between the clouds would impact user access.
What is the best option for an interim single sign-on solution that can be replaced once the private cloud is fully implemented?

• A. Identity Provider
• B. Public Key Infrastructure
• C. SAML
• D. OAuth

What is a key design consideration for a service provider to ensure that they can effectively process the termination of a service instance?

• A. Automate the de-provisioning process to release resources
• B. Archive the associated service data regardless of the user requirements
• C. Incorporate a service grace period to prevent the actual deletion of the instance
• D. Incorporate a retention period for private user data and user PCI data

An enterprise decided to place some sensitive data - intellectual property - in the public cloud and implemented security mechanisms to protect this data.
Recently the public cloud provider's systems had a security breach. The enterprise was not concerned because they felt their data had been completely protected. All of the services housing the data are protected by an IPS application and no alerts were generated by the system.
How did the enterprise protect its data?

• A. The data was not encrypted but the enterprise maintained a backup of the data in a secure off-
  site location.
  The cloud provider's logs showed that the enterprise's services were not copied.
• B. All data in the public cloud environment was encrypted in-transit only. The encryption keys were
  under complete control of the enterprise and were not available to the public provider.
  The cloud provider's logs showed that the enterprise's services were neither accessed nor copied.
• C. All data in the public cloud environment was encrypted at-rest and in-transit. Copies of the
  encryption keys were secured by the public cloud provider using 1024-bit encryption.
  The cloud provider's logs showed that the enterprise's services were neither accessed nor copied.
• D. All data in the public cloud environment was encrypted at-rest and in-transit. The encryption
  keys were under complete control of the enterprise and were not available to the public provider.
  The cloud provider's logs showed that the enterprise's services were copied.

Refer to Scenario 4.
A construction firm with a substantially virtualized IT infrastructure wishes to consider cloud
enablement next, as part of its logical progression to ITaaS.
As a first step, the firm plans to transition one relatively low-risk service -- daily backup -- to a public CSP. The existing backup strategy involves array-based cloning, followed by backup of the clones with dedicated servers. The system is functional; however, since the backup target device is due for a technology refresh, the firm is open to alternatives.
In evaluating alternatives, the key consideration is the ability to meet backup windows for daily incremental backups during the work week.
As advisor to this firm, you have conducted a quick assessment of the candidate applications and storage involved in daily backups. Relevant details are presented in the exhibit.
Another evaluation point is the completion time for weekly full backups to the cloud service provider. Which would have the most favorable impact on full backup speed?

• A. Low IOPS per GB for volumes
• B. Target-based deduplication
• C. Source-based deduplication
• D. Low growth rate for volumes

Refer to Scenario 3.
A US company has deployed web services within a private cloud. They wish to provide additional web services elastically and distribute them around the globe using a public cloud provider.
The web services have a dependency on a database resource in the private cloud. The web services are deployed through a service catalog as a standardized service offering, which includes an intrusion prevention system that periodically polls a central management server for security updates. The IPS management server is located within the private cloud.
The web services collect highly regulated personal health information about consumers who are located around the world.
Once the web services were deployed into the public cloud, users started complaining about poor performance. Which solution would most likely improve performance of the web services?

• A. Select a new internet service provider with a better peering relationship for end users.
• B. Allocate additional virtual network interface cards to each web service to increase bandwidth.
• C. Re-architect the web service to be loosely coupled.
• D. Implement a global load balancing service as a front-end for the web services.