E20-918 試験問題を無料オンラインアクセス

Refer to the exhibit.

A cloud architect has presented you with the exhibit for peer review. You immediately realize that a firewall is missing. Where is the missing firewall?

• A.Between VM2 and VM4
• B.Between VM2 and the tenant network
• C.Between the Service A and Service B
• D.Between the external network and the internet

An enterprise is beginning its journey to IT-as-a-Service (ITaaS), and has retained a Cloud Architect to assist them. An assessment of their current environment is complete and a list of final requirements is being generated.
What should the Cloud Architect recommend as the next step?

• A.A Gap Analysis to compare the current state to the enterprise goals and IT strategic goals
• B.Right-Sourced Workloads to look at applications and where to put them
• C.A Controls Matrix to evaluate GRC vulnerabilities
• D.A Balanced Scorecard to identify risks from the current state

An enterprise has decided to implement a new service that will process credit card information.
They will deploy this service within a hybrid cloud.
Their public cloud provider claims to be PCI DSS compliant. The enterprise wishes to implement a service that is PCI compliant with the least amount of effort. The service is protected by a policy based intrusion detection system. Cardholder data is securely transmitted to the web interface.
Which additional design elements would best be suited for this implementation?

• A.The card number is masked as it is typed and is immediately encrypted and securely sent to both the credit card processing system and to the private cloud for historical tracking and reporting only.
• B.The card number is masked as it is typed and is immediately encrypted and securely sent directly to the credit card processing system. No credit card information is stored within the application.
• C.The card number is masked as it is typed and is immediately encrypted and securely sent directly to the credit card processing system. Credit card information is only stored in the public cloud provider's systems using AES 128 encryption.
• D.The card number is masked as it is typed and is immediately encrypted and securely sent directly to the credit card processing system. Credit card information is stored using AES 128 encryption within the public cloud provider or within the private cloud, depending on the location of the service.

Refer to Scenario 3.
A US company has deployed web services within a private cloud. They wish to provide additional web services elastically and distribute them around the globe using a public cloud provider.
The web services have a dependency on a database resource in the private cloud. The web services are deployed through a service catalog as a standardized service offering, which includes an intrusion prevention system that periodically polls a central management server for security updates. The IPS management server is located within the private cloud.
The web services collect highly regulated personal health information about consumers who are
located around the world.
Which solution would you recommend to best support the web service high availability and minimize service network latency for the consumer?

• A.Implement a QoS policy that provides a higher priority to http traffic.
• B.Use a content delivery network to distribute static web content.
• C.Implement a global load balancing service as a front-end for the web services.
• D.Implement a Layer 7 firewall within the public cloud to filter out unnecessary traffic.

An IT organization is currently 80% virtualized and the CIO is planning for the transition to ITaaS. Senior executives are concerned that IT supports too many services and that many of the services are neither efficient nor necessary.
What argument can the CIO make to address the executives' concerns and convince them that ITaaS is the correct strategic decision?

• A.ITaaS offers an opportunity to evaluate whether certain IT services should be sourced with a public cloud service provider.
• B.ITaaS promotes the concept of on-demand self-service, allowing consumers to use only the services from which they can derive business value.
• C.A CMDB can be utilized during the instantiation of the services to improve service levels for the consumers of IT services.
• D.ITaaS promotes the rationalization of services currently being offered by IT and offers the services that provide business value through the service catalog.