Lesson 6

In the shared-responsibility model for SaaS, which area is typically handled entirely by the cloud service provider?

• Guest operating-system patching

• Underlying host and hypervisor security

• Customer data classification

• Identity and access management policies

Which cloud deployment model gives a single organization exclusive use of hardware hosted in the provider’s datacenter?

• Community cloud

• Hybrid cloud

• Hosted private cloud

• Public multi-tenant cloud

A business needs to run identical web servers in multiple regions and pay only for CPU cycles consumed. Which service model aligns best?

• Infrastructure as a Service

• Function as a Service (serverless)

• Software as a Service

• Platform as a Service

Choosing two different CSPs for separate workloads is an example of:

• Single-tenant architecture

• Multi-cloud strategy

• Edge computing appliance

• Layer 2 network segmentation

In a responsibility matrix for IaaS, who is normally in charge of configuring host-based firewalls on virtual machines?

• The cloud provider’s SOC team

• The cloud customer’s administrators

• Third-party auditors under the SLA

• Automatic hypervisor scripts

What primary security concern arises when moving data from private storage to public cloud storage in a hybrid design?

• Increased air-conditioning costs

• Loss of clear boundary for data governance and compliance

• Reduced disk read performance on SSDs

• Inability to de-duplicate backup archives

Which benefit is most associated with serverless computing?

• Persistent local storage volumes

• Manual provisioning of virtual NICs

• Automatic scaling based on event triggers

• Dedicated hardware isolation per tenant

HashiCorp Configuration Language (HCL) is mainly used for:

• Monitoring zero-day exploits in IoT

• Managing mobile device certificates

• Writing Infrastructure as Code templates

• Encrypting IPsec tunnels in hardware

An organization wants real-time traffic steering between MPLS and broadband links with built-in encryption. Which technology meets this need?

• Secure Access Service Edge (SASE)

• Software-Defined Networking in data center only

• Software-Defined WAN (SD-WAN)

• Edge Content Delivery Network (CDN)

In an SDN architecture, the southbound API connects:

• User portal to policy engine

• Controller to data-plane devices

• Public cloud to on-prem firewall

• Management plane to ticketing system