Prepare with SOA Certified Professional : C90-03A exam braindumps as your best preparation materials

Cloud X (owned by Cloud Provider X) provides Physical Server A which hosts Virtual Servers A and B. Virtual Server B hosts Ready-Made Environments A and B. Cloud Service Consumer A uses Virtual Server A as part of an IaaS leasing agreement in which Cloud Consumer A is charged a fixed monthly fee for unlimited access. Cloud Service Consumers B and C use Ready-Made Environments A and B respectively as part of a PaaS leasing agreement based on per-minute usage fees. In both cases, access is monitored via Pay-For-Use Monitor A, which keeps track of log-in and log-out times in order to calculate the usage charges that are billed to Cloud Consumers B and C.
Virtual Server A begins generating a series of exceptions. Soon thereafter, Virtual Server B becomes destabilized, resulting in further exceptions being raised in Ready-Made Environments A and B. Cloud Service Consumers B and C receive a series of error messages until both of their connections are dropped Finally, Physical Server A shuts down completely. A subsequent investigation reveals that Virtual Server A was the victim of a security attack performed by a malicious cloud service consumer, the attacker generated increased loads of external communication requests on Virtual Server A and the underlying network, causing Physical Server A (along with Virtual Server B) to eventually shut down.

Which of the following statements accurately identifies the type of security threat that corresponds to the described attack - and -provides a solution that can directly mitigate this type of security threat within Cloud X?

• A. Virtual Server A was subjected to an insufficient authorization attack that can be mitigated by implementing the single sign-on mechanism.
• B. Virtual Server A was subjected to an insufficient authorization attack that can be mitigated by implementing the digital signature and hardened virtual server image mechanisms.
• C. Virtual Server A was subjected to a denial of service attack that can be mitigated by implementing the encryption and digital signature mechanisms.
• D. Virtual Server A was subjected to a denial of service attack that can be mitigated by implementing the hardened virtual server image and identity and access management mechanisms.

Cloud Service Consumer A invokes Cloud Service A from Cloud X (owned by Cloud Provider X) (1). To fulfill the request from Cloud Service Consumer A, Cloud Service A needs to invoke Cloud Service B that resides on Cloud Y (owned by Cloud Provider Y) (2). After completing its processing, Cloud Service B sends a response to Cloud Service A (3). Cloud Service A verifies the response and then finally sends its response to Cloud Service Consumer A (4).

The guaranteed availability of the Cloud Service A implementation is 95% and the guaranteed availability of the Cloud Service B implementation is 95%. Which of the following statements accurately describes the actual availability that Cloud Service Consumer A can receive based on the described scenario?

• A. Because Cloud Service Consumer A's response message is processed by two separate cloud
  services, the combined availability increases as follows:
  1 - (1 - 0.95) X (1 - 0.95) = 0.9975 or 99.75%
• B. As a result of the dependency formed by Cloud Service Aon Cloud Service B,the combined availability decreases significantly as follows:
  (0.95 X 0.95) - 0.1 = 0.8025 or 80.25%
• C. Cloud Service Consumer A benefits from redundant cloud service implementations, thereby
  increasing the guaranteed availability as follows:
  1 - (1 - (0.95 - 0.1))X (1 - (0.95 - 0.1)) = 0.9775 or 97.75%
• D. Because Cloud Service A acts as both a cloud service and cloud service consumer in order to
  process Cloud Service Consumer B's request message, Cloud Service A forms a dependency on
  Cloud Service B. As a result, the combined availability decreases, as follows:
  0.95 X 0.95 = 0.9025 or 90.25%

The cloud service owner of Cloud Service A is evaluating Clouds X, Y and Z to determine which cloud environment can offer the greatest level of reliability. All three clouds are geographically dispersed across three separate time zones. As a result, each cloud experiences usage peaks at different times. Based on the metrics provided, the greater the usage of a cloud, the lower its reliability. When the cloud service owner complains to Cloud Provider A (the owner of all three clouds) that none of the clouds provide an adequate level of reliability, Cloud Provider A suggests a solution that increases resiliency.

Which of the following statements accurately describe how a cloud balancing solution can be implemented to fulfill the resiliency requirements of Cloud Service A?

• A. Cloud Service A is redundantly deployed in advance within Clouds X. Y and Z and is further supplemented with failover system mechanisms and specialized types of automated scaling listener mechanisms.
• B. Clouds X, Y and Z are equipped with failover system mechanisms and specialized types of automated scaling listener mechanisms in order to establish cross-cloud resiliency. Cloud Service A is configured so that Clouds X, Y and Z can dynamically generate redundant instances on-demand.
• C. Using a PaaS environment, the cloud service owner can configure a primary Cloud Service A implementation on Cloud X so that when failure conditions occur, message requests from cloud service consumers are automatically routed to a redundant on-premise implementation of Cloud Service A. This requires the implementation of the failover system and resource replication mechanisms.
• D. A type of automated scaling listener that can also be considered a cloud monitor is implemented in Clouds X, Y and Z toestablish a system whereby each cloud can assume controlof cloud service consumer message exchanges. This results in resilient cloud balancing, as opposed to on-demand cloud balancing.