Arcitura Education C90.03 Exam - Topic 6 Question 5 Discussion

Question

Cloud Provider Y owns Cloud Y, which provides a set of cloud services, virtual servers, and one physical server. Cloud Services A and B are hosted on Virtual Server A, which is hosted by Physical Server A . Physical Server A also hosts Virtual Server B, which hosts redundant implementations of Cloud Services A and B for load balancing purposes. Cloud Service Consumer A is accessing Cloud Service A located on Virtual Server A . Cloud Service Consumer B is accessing Cloud Service B located on Virtual Server B . Cloud Service Consumers A and B are both owned by Cloud Consumer X. Cloud Consumer X has recently complained that Cloud Service A is becoming increasingly unreliable. Cloud Provider Y launches an investigation that reveals that Virtual Server A has been crashing sporadically due to successful malicious intermediary attacks where malicious service agents have been inserting harmful data into messages sent by Cloud Service Consumer A to Cloud Service A

Which of the following statements describes a solution that can mitigate the malicious intermediary attacks that have been occurring on Virtual Server A - and - can further help prevent the same types of attacks from occurring on Virtual Server B?

Art · Accepted Answer

B) Cloud Provider Y can implement the encryption and digital signatures mechanisms to protect the contents of messages from being augmented by malicious service agents.

Art · Answer

A) Cloud Provider Y can implement the cloud-based security group mechanism that establishes a logical trust boundary that encompasses Virtual Servers A and B

Art · Answer

C) Cloud Provider Y can implement the failover system mechanism by requiring that redundant copies of all service agents be deployed. This will reduce the chances of any one service agent performing malicious actions at runtime.

Art · Answer

D) Cloud Provider Y can implement the identity and access management mechanism for Virtual Servers A and B by physically deploying this mechanism on Physical Server A and then further implementing the resource replication mechanism to propagate the identity and access management system across Virtual Servers A and B.