Cloud Provider X (which owns Cloud X) deploys two physical servers (Physical Servers A
and B) and two databases (Databases A and B). Virtual Servers A and B are hosted by
Physical Server A and Ready-Made Environments A and B are hosted by Virtual Server B.
Virtual Servers C and D are hosted by Physical Server B.
Cloud Service Consumer A regularly accesses Virtual Server D in order to test and deploy a new cloud service that
was developed on-premise by the cloud consumer organization operating Cloud Service
Consumer A.
Cloud Service Consumer B (operated by a different cloud consumer organization) has been regularly accessing Ready-Made Environment A in order to develop
and deploy a different new cloud service.
The cloud consumer organizations that own and operate Cloud Service Consumers A and
B will soon be ready to launch their respective cloud services for use by their customers.
Both cloud consumer organizations are concerned that Cloud X does not provide sufficient
security and they demand that Cloud Provider X take the necessary steps to mitigate the
denial of service, insufficient authorization and overlapping trust boundaries security
threats.

Which of the following statements accurately describes the cloud delivery models used now
by the cloud service consumers and in the future by their customers - and - further
describes a solution that fulfills the identified security requirements by implementing a
single cloud security mechanism?

• A. Cloud Service Consumer A is using the IaaS delivery model. Cloud Service Consumer B
  is using the SaaS delivery model. Customers of the cloud services will be using the PaaS
  delivery model. The encryption mechanism can be implemented to mitigate the denial of
  service, insufficient authorization and overlapping trust boundaries security threats.
• B. Cloud Service Consumer A is using the IaaS delivery model. Cloud Service Consumer B
  is using the PaaS delivery model. Customers of the cloud services will be using the SaaS
  delivery model. The digital signatures mechanism can be implemented to mitigate the
  denial of service, insufficient authorization and overlapping trust boundaries security
  challenges.
• C. Cloud Service Consumer A is using the IaaS delivery model. Cloud Service Consumer B
  is using the PaaS delivery model. Customers of the cloud services will be using the SaaS
  delivery model. An identity and access management mechanism can be implemented to
  mitigate the denial of service, insufficient authorization and overlapping trust boundaries
  security challenges.
• D. Cloud Provider X is providing a hybrid delivery model comprised of a combination of the
  IaaS and PaaS delivery models, which means that Cloud Service Consumers A and B are
  using both the IaaS and PaaS delivery models. Customers of the cloud services will be
  using the PaaS delivery model. The single sign-on mechanism can be implemented to
  mitigate the denial of service and insufficient authorization security threats. The encryption
  mechanisms can be implemented to mitigate the overlapping trust boundaries security
  challenges.

A company is planning to build and launch a new SaaS product that will be available for
use by the general public. It intends to build the service on-premise and then deploy it in a
public cloud. The company has the following set of four requirements for the
implementation of the new service:
1. The cloud service needs to exchange messages primarily by using HTTP methods and
other features provided by HTTP.
2. The cloud service needs to store highly structured data with potentially complex
relationships.
3. The cloud service needs to be deployed on a dedicated virtual server that can be
administered with a high level of control by the cloud consumer's own cloud resource
administrator.
4. The cloud service needs to be deployed with a minimal amount of integration testing.
For this project, the company has a very limited budget. The company is assessing the IT
resources that are offered by Clouds X and Y within the constraints of its limited budget.
Cloud X can offer an IaaS environment with very few proprietary characteristics that
includes a database that supports only no relational storage, as well as support for the
deployment and usage of REST services.

Cloud Y can offer a PaaS environment with a pre-configured virtual server that includes
native support for WSDL and SOAP, as well as a database that supports only relational
storage. The implementation of a new service within Cloud Y will require compliance to a
high level of proprietary characteristics.
As previously listed, the company has identified four specific implementation requirements
for its new cloud service. Which of the following statements correctly identifies how many of
the four requirements Clouds X and Y can directly fulfill?

• A. Cloud X fulfills 3 out of 4 requirements. Cloud Y fulfills 1 out of 4 requirements.
• B. Cloud X fulfills 2 out of 4 requirements. Cloud Y fulfills 2 out of 4 requirements.
• C. Cloud X fulfills 0 out of 4 requirements. Cloud Y fulfills 4 out of 4 requirements.
• D. Cloud X fulfills 1 out of 4 requirements. Cloud Y fulfills 3 out of 4 requirements.