The marketing line of business of an enterprise has deployed web services within a private cloud. They wish to provide additional web services elastically and distribute them around the globe using a public cloud provider.
The web services have a loosely coupled design and have no content dependencies on any resources in the private cloud. They are created from a standard PaaS template, which includes an intrusion prevention system that periodically polls a central management server for security updates. The IPS management server is located within the private cloud. No layer 2 connectivity exists between the private and public clouds. The consumers of these web services are distributed across the globe.
Which solution would you recommend to best support the web service elasticity and to minimize service network latency for the consumer?

• A. Increase bandwidth between the private cloud and the Internet.
• B. Implement a global load balancing service as a front-end for the web services.
• C. Implement an encrypted VPN tunnel between the private and public clouds.
• D. Deploy a central database server to consolidate web service content.

An enterprise has decided to implement a new service that will process credit card information.
They will deploy this service within a hybrid cloud.
Their public cloud provider claims to be PCI DSS compliant. The enterprise wishes to implement a service that is PCI compliant with the least amount of effort. The service is protected by a policy based intrusion detection system. Cardholder data is securely transmitted to the web interface.
Which additional design elements would best be suited for this implementation?

• A. The card number is masked as it is typed and is immediately encrypted and securely sent to both the credit card processing system and to the private cloud for historical tracking and reporting only.
• B. The card number is masked as it is typed and is immediately encrypted and securely sent directly to the credit card processing system. No credit card information is stored within the application.
• C. The card number is masked as it is typed and is immediately encrypted and securely sent directly to the credit card processing system. Credit card information is only stored in the public cloud provider's systems using AES 128 encryption.
• D. The card number is masked as it is typed and is immediately encrypted and securely sent directly to the credit card processing system. Credit card information is stored using AES 128 encryption within the public cloud provider or within the private cloud, depending on the location of the service.

What is a key design consideration for a service provider to ensure that they can effectively process the termination of a service instance?

• A. Incorporate a retention period for private user data and user PCI data
• B. Provide a chargeback bill or showback report
• C. Archive the associated service data regardless of the user requirements
• D. Incorporate a service grace period to prevent the actual deletion of the instance

A regional accounting and analytics firm headquartered in Seattle, WA has built a profitable business selling a portfolio of financial services to several large local enterprises. The company's flagship applications process large volumes of enterprise-internal financial data within IT operations.
Recently, the firm has established small remote offices in Hong Kong, Seoul, and Beijing to grow in the Far East.
The business is critically dependent on its data processing capabilities, and recognizes the need for ITaaS transformation. They are seeking guidance on a suitable IT governance model.
What type of model should you recommend, and why?

• A. Distributed by geography, to address different regional regulations
• B. Centralized at headquarters, to maximize security and minimize compliance risk
• C. Federated by application, to ensure creation of customized services for each application
• D. Hybrid by location and application, to eliminate silos and promote growth

A start-up cloud provider is evaluating potential resource allocation models to use for reserving client resources. Their service offering targets software development and testing.
Which model would be most suitable?

• A. Guaranteed
• B. Fixed
• C. Pay-as-you-go
• D. Reserved