An organization wants to include performance monitoring in their cloud environment. However, they want to minimize the number of accounts and passwords that must be created on target devices and sent across the network.
Which monitoring solution should a cloud architect recommend to meet this requirement?
A. Proxy
B. Agent-based
C. Agentless
D. Central
An organization uses Microsoft Active Directory (AD) for service authentication in their private cloud. They want to use the same authentication source for services in the public cloud. External employees access services in both clouds and need to authenticate with AD.
The organization wants to minimize and secure network traffic. Which solution will address these requirements?
A. Connect the two clouds through IPsec VPNPlace AD controllers in the private cloud only
B. Connect the two clouds through IPsec VPNPlace AD controllers in the private and public clouds
C. Configure perimeter firewalls to allow AD traffic Place AD controllers in the private and public clouds
D. External users connect with IPsec VPNPlace AD controllers in the private cloud only
A cloud architect is designing a hybrid cloud for an organization. A requirement for this environment is that the private cloud user credential be trusted by both cloud provisioning APIs. Which type of authentication will meet this requirement?
A. Federated authentication
B. Asymmetric encryption
C. Symmetric encryption
D. Shared-key authentication
You are creating a cloud infrastructure design for an organization. The cloud design includes physical servers with hypervisors which will be used to host consumer services. The hosts are managed through a hypervisor element manager.
Which step should be taken to secure the hypervisor environment?
A. Place the element manager administrative interfaces on a consumer-facing network and hypervisoradministrative interfaces on an isolated network
B. Place the element manager administrative interfaces on a consumer-facing network and hypervisoradministrative interfaces on a secure network
C. Place the element manager and hypervisor administrative interfaces on a secure network
D. Place the element manager and hypervisor administrative interfaces on a consumer- facing network
You are designing consumer compute resources in an onsite private cloud. During an assessment, you discover that the organization's IT staff wants secure access to the underlying host OS. What should be included in the design to support this requirement?
A. Host IDS configurationSecure key infrastructure Bridged management network
B. Perimeter firewall configuration VPN encryption Separate management network
C. Host OS firewall configuration Central logging Physically isolated management network
D. Host OS firewall configuration Secure key infrastructure Separate management network
A cloud architect has included a monitoring application in a cloud design to ensure infrastructure performance meets agreed-upon service levels. The application resides on a virtual appliance. The application vendor provides guidance for sizing the appliance.
What will be part of the sizing calculations for the virtual appliance storage?
A. Number of targetsMessage bus subscribers Data deduplication policies
B. Number of segments Number of metrics Data deduplicaiton policies
C. Number of targetsNumber of metrics Data retention policies
D. Message bus subscribers Number of users Data retention policies
A cloud architect is designing a distributed block storage solution that will support application HA. The solution will consist of 10 nodes with all SAS devices. There are five racks available in the data center. Each rack has a single top-of-rack access layer switch with sufficient bandwidth to the aggregate layer. Each node will have multiple connections to the local top-of-rack switch.
The architect wants to provide a design that has the fewest number of storage pools maximizing the number of fault domains. How should the storage pools be designed?
A. One pool with SSD nodes located in one rackOne pool with all SAS nodes located in a different rack
B. One pool with 50% SSD and 50% SAS nodes distributed equally across five racks
C. One pool with SSD nodes distributed equally across five racksOne pool with all SAS nodes distributed equally across five racks
D. One pool with 50% SSD and 50% SAS nodes located in one rackOne pool with 50% SSD and 50% SAS nodes located in a different rack
What are key benefits of ITaaS compared to traditional IT processes?
A. Tiered services, integrated inventory management, and SLA-driven profit model
B. Service catalog, SLA-driven management, and chargeback
C. Strong policies, DevOps, and software licensing
D. Ticket-based service model, cost, and chargeback
A cloud architect is evaluating an organization's need for encryption. Which type of encryption eliminates the requirement for key management?
A. Embedded
B. File-based
C. File system-based
D. Virtual disk
An architect is designing the compute resource pools for a cloud. As part of the deliverables, the architect has included the standard specifications for the physical servers to be used. The organization has provided estimates for future growth but has concerns about whether these estimates are accurate. What should be included in the design to address these concerns?
A. A monitoring application and procedures for pool expansion
B. A chargeback application and orchestration workflows to auto-scale pools
C. A metering application and orchestration workflows to auto-scale pools
D. A configuration management application and procedures for pool expansion
