EMC IT-as-a-Service Expert Exam for Cloud Architects Sample Questions:

1. An enterprise decided to place some sensitive data - intellectual property - in the public cloud and implemented security mechanisms to protect this data.
Recently the public cloud provider's systems had a security breach. The enterprise was not concerned because they felt their data had been completely protected. All of the services housing the data are protected by an IPS application and no alerts were generated by the system.
How did the enterprise protect its data?

A) All data in the public cloud environment was encrypted in-transit only. The encryption keys were
under complete control of the enterprise and were not available to the public provider.
The cloud provider's logs showed that the enterprise's services were neither accessed nor copied.
B) All data in the public cloud environment was encrypted at-rest and in-transit. Copies of the
encryption keys were secured by the public cloud provider using 1024-bit encryption.
The cloud provider's logs showed that the enterprise's services were neither accessed nor copied.
C) The data was not encrypted but the enterprise maintained a backup of the data in a secure off-
site location.
The cloud provider's logs showed that the enterprise's services were not copied.
D) All data in the public cloud environment was encrypted at-rest and in-transit. The encryption
keys were under complete control of the enterprise and were not available to the public provider.
The cloud provider's logs showed that the enterprise's services were copied.

2. Refer to Scenario 4.
A construction firm with a substantially virtualized IT infrastructure wishes to consider cloud enablement next, as part of its logical progression to ITaaS.
As a first step, the firm plans to transition one relatively low-risk service -- daily backup -- to a public CSP. The existing backup strategy involves array-based cloning, followed by backup of the clones with dedicated servers. The system is functional; however, since the backup target device is due for a technology refresh, the firm is open to alternatives.
In evaluating alternatives, the key consideration is the ability to meet backup windows for daily incremental backups during the work week.
As advisor to this firm, you have conducted a quick assessment of the candidate applications and storage involved in daily backups. Relevant details are presented in the exhibit.

Your second goal is to demonstrate that the CSP solution will suit even the most demanding application relative to backup needs.
Which application would you select for this test?

A) Finance
B) Eng CAD/CAM
C) Messaging
D) SCM

3. An enterprise is beginning its journey to IT-as-a-Service (ITaaS), and has retained a Cloud Architect to assist them. An assessment of their current environment has already been completed and a gap analysis has been done.
What should the Cloud Architect recommend to determine if business activities are aligned with strategic vision?

A) Right-Sourced Workloads
B) A Balanced Scorecard
C) ITaaS Organizational Readiness Assessment
D) A Controls Matrix

4. An organization is expanding its private cloud to a hybrid deployment to accommodate growth in its web / database application. The CIO is concerned about the security risks associated with the public cloud. They do not view firewall security as adequate to protect important company data. Encryption is being considered as a security measure.
As the cloud architect, what would you recommend?

A) Utilize application encryption.
Tell the CIO that the level of control is very granular, and developer resource requirements are
minimal.
B) Utilize application encryption.
Tell the CIO that search look-ups can be resource intensive.
C) Utilize database encryption.
Tell the CIO that search look-ups can be resource intensive.
D) Utilize database encryption.
Tell the CIO that the level of control is very granular, but substantial developer resources are
required.

5. The human resources division of your organization is planning to deploy their health and benefits application into the corporate hybrid cloud. The goal is to provide off-site employees access to their records data from a centralized resource that is protected by the organization's security and compliance guidelines.
The manager of the human resources division would prefer to pay for the use of this application with no fixed guarantee, paying for only the resources consumed.
Which VMware vCenter Chargeback cost model would best fit the needs of the human resources division?

A) Fixed
B) Resource-based
C) Utilization-based
D) Allocation-based

Solutions: