Arcitura Education C90.03 Exam - Topic 6 Question 20 Discussion

Question

Cloud Provider Y owns Cloud Y, which provides a set of cloud services, virtual servers and one physical server. Cloud Services A and B are hosted on Virtual Server A, which is hosted by Physical Server A . Physical Server A also hosts Virtual Server B, which hosts redundant implementations of Cloud Services A and B for load balancing purposes. Cloud Service Consumer A is accessing Cloud Service A located on Virtual Server A . Cloud Service Consumer B is accessing Cloud Service B located on Virtual Server B . Cloud Service Consumers A and B are both owned by Cloud Consumer X. Cloud Consumer X has recently complained that Cloud Services A and B have become less available than what is guaranteed in their service level agreements (SLAs). Cloud Provider Y launches an investigation that reveals that Virtual Servers A and B have been subjected to denial of service attacks. This is confirmed as the cause of the decline in the availability of Cloud Services A and B.

Which of the following statements describes a solution that can increase the availability of Cloud Services A and B?

Youlanda · Accepted Answer

A) Cloud Provider Y can implement the identity and access management mechanism to mitigate denial of service attacks and can further implement the failover system mechanism (by introducing a redundant physical server with redundant virtual servers) so that when an attack is successful on a given virtual server, a redundant virtual server can take its place.

Youlanda · Answer

B) Cloud Provider Y can move Cloud Service B to Virtual Server A, thereby positioning Virtual Server B as a redundant fallback server used when Virtual Server A is successfully attacked. Similarly, Cloud Provider Yean move Cloud Service A to Virtual Server B, so that Virtual Server A acts as a redundant fallback server for when Virtual Server B is successfully attacked.

Youlanda · Answer

C) Cloud Provider Y can implement a cloud bursting system, whereby Cloud Service A on Virtual Server B automatically takes the place of Cloud Service A on Virtual Server A when that service fails. Similarly, Cloud Service B on Virtual Server A can then automatically take the place of Cloud Service B on Virtual Server A when that service fails.

Youlanda · Answer

D) Cloud Provider Y can introduce a single sign-on mechanism for Virtual Server A to mitigate denial of service threats. The automated scaling listener can then be implemented on Virtual Server B in order to limit the number of instances of Cloud Services A and B. This will prevent Virtual Server B from overloading due to denial of service attacks.