SOA Cloud Technology Lab - C90.03 Exam Practice Test
Question 1
Cloud Provider X (which owns Cloud X) deploys two physical servers (Physical Servers A
and B) and two databases (Databases A and B). Virtual Servers A and B are hosted by
Physical Server A and Ready-Made Environments A and B are hosted by Virtual Server B.
Virtual Servers C and D are hosted by Physical Server B.
Cloud Service Consumer A regularly accesses Virtual Server D in order to test and deploy a new cloud service that
was developed on-premise by the cloud consumer organization operating Cloud Service
Consumer A.
Cloud Service Consumer B (operated by a different cloud consumer organization) has been regularly accessing Ready-Made Environment A in order to develop
and deploy a different new cloud service.
Cloud X is a private cloud that, to-date, has been set up within the cloud provider company
to provision IT resources free of charge to internal cloud consumers, via PaaS and IaaS
delivery models. The cloud consumers that have been operating Cloud Service Consumers
A and B represent different IT departments within the company that have been working
separately on the development of new cloud services. Cloud Service Consumer A has
been accessing Virtual Server D to make necessary configurations and administration
settings for the upcoming deployment of a new cloud service that was previously
developed outside of Cloud X.
Cloud Service Consumer B has been accessing Ready-
Made Environment A to develop and now deploy a different new cloud service.
Cloud Provider X (which is represented by a separate IT department dedicated to
governing and administering Cloud X) determines that it will need to introduce three
specific enhancements to Cloud X in order to accommodate both upcoming cloud services.
First, it needs to add a way to charge cloud consumers for the usage of cloud services.
Secondly, it needs to add a way for new cloud services to be automatically scaled. Finally,
it needs to add a way for a cloud consumer to be automatically notified when a cloud
service encounters runtime loads that exceed its allocated usage threshold.
Which of the following statements accurately describes a solution that fulfills all three
identified requirements?
and B) and two databases (Databases A and B). Virtual Servers A and B are hosted by
Physical Server A and Ready-Made Environments A and B are hosted by Virtual Server B.
Virtual Servers C and D are hosted by Physical Server B.
Cloud Service Consumer A regularly accesses Virtual Server D in order to test and deploy a new cloud service that
was developed on-premise by the cloud consumer organization operating Cloud Service
Consumer A.
Cloud Service Consumer B (operated by a different cloud consumer organization) has been regularly accessing Ready-Made Environment A in order to develop
and deploy a different new cloud service.
Cloud X is a private cloud that, to-date, has been set up within the cloud provider company
to provision IT resources free of charge to internal cloud consumers, via PaaS and IaaS
delivery models. The cloud consumers that have been operating Cloud Service Consumers
A and B represent different IT departments within the company that have been working
separately on the development of new cloud services. Cloud Service Consumer A has
been accessing Virtual Server D to make necessary configurations and administration
settings for the upcoming deployment of a new cloud service that was previously
developed outside of Cloud X.
Cloud Service Consumer B has been accessing Ready-
Made Environment A to develop and now deploy a different new cloud service.
Cloud Provider X (which is represented by a separate IT department dedicated to
governing and administering Cloud X) determines that it will need to introduce three
specific enhancements to Cloud X in order to accommodate both upcoming cloud services.
First, it needs to add a way to charge cloud consumers for the usage of cloud services.
Secondly, it needs to add a way for new cloud services to be automatically scaled. Finally,
it needs to add a way for a cloud consumer to be automatically notified when a cloud
service encounters runtime loads that exceed its allocated usage threshold.
Which of the following statements accurately describes a solution that fulfills all three
identified requirements?
Correct Answer: D
Question 2
Cloud Service A is being made available on public Cloud X by Cloud Provider X via the
SaaS delivery model. Cloud Service A is hosted by Physical Server A that also hosts cloud
services being used by different cloud service consumers (and owned by different cloud
service owners).
Cloud Provider X needs to make Cloud Service A available to a new group of cloud service
consumers, but must do so without the increase in usage volume affecting Cloud Service
Consumers A and B.
Which of the following statements does not accurately describe a solution (or a set of
solutions) that addresses this requirement?
SaaS delivery model. Cloud Service A is hosted by Physical Server A that also hosts cloud
services being used by different cloud service consumers (and owned by different cloud
service owners).
Cloud Provider X needs to make Cloud Service A available to a new group of cloud service
consumers, but must do so without the increase in usage volume affecting Cloud Service
Consumers A and B.
Which of the following statements does not accurately describe a solution (or a set of
solutions) that addresses this requirement?
Correct Answer: B
Question 3
Cloud X (owned by Cloud Provider X) provides Physical Server A which hosts Virtual
Servers A and B.
Virtual Server B hosts Ready-Made Environments A and B.
Cloud Service Consumer A uses Virtual Server A as part of an IaaS leasing agreement in which
Cloud Consumer A is charged a fixed monthly fee for unlimited access. Cloud Service
Consumers B and C use Ready-Made Environments A and B respectively as part of a
PaaS leasing agreement based on per-minute usage fees. In both cases, access is
monitored via Pay-For-Use Monitor A, which keeps track of log-in and log-out times in
order to calculate the usage charges that are billed to Cloud Consumers B and C.
Physical Server A begins to become unstable. Over the course of a 24 hour period, the
server shuts down three times, taking down Virtual Servers A and B with it. This causes
numerous problems for Cloud Service Consumers A, B and C, which lose connections and
encounter a variety of exceptions.
A subsequent investigation of the log files generated by Pay-For-Use Monitor A reveals
that the three server crashes coincided with the usage periods of Ready-Made Er
n'ronment B b> Cloud Service Consumer B.
De 'elopers at the Cloud Consumer 3 organization confirm they did not actually log in during those periods, which leads Cloud
Provider X to discover that another cloud service consumer has been posing as Cloud
Service Consumer B in order to maliciously access Ready-Made Environment B, Virtual
Server B, and Physical Server B on Cloud X.
The investigation concludes that the malicious cloud service consumer was able to carry out the attack successfully by obtaining
a weak password being used by developers from Cloud Consumer B.
Which of the following statements accurately identifies the type of security threat that
corresponds to the described attack - and -provides a solution that can directly mitigate this
type of security threat within Cloud X?
Servers A and B.
Virtual Server B hosts Ready-Made Environments A and B.
Cloud Service Consumer A uses Virtual Server A as part of an IaaS leasing agreement in which
Cloud Consumer A is charged a fixed monthly fee for unlimited access. Cloud Service
Consumers B and C use Ready-Made Environments A and B respectively as part of a
PaaS leasing agreement based on per-minute usage fees. In both cases, access is
monitored via Pay-For-Use Monitor A, which keeps track of log-in and log-out times in
order to calculate the usage charges that are billed to Cloud Consumers B and C.
Physical Server A begins to become unstable. Over the course of a 24 hour period, the
server shuts down three times, taking down Virtual Servers A and B with it. This causes
numerous problems for Cloud Service Consumers A, B and C, which lose connections and
encounter a variety of exceptions.
A subsequent investigation of the log files generated by Pay-For-Use Monitor A reveals
that the three server crashes coincided with the usage periods of Ready-Made Er
n'ronment B b> Cloud Service Consumer B.
De 'elopers at the Cloud Consumer 3 organization confirm they did not actually log in during those periods, which leads Cloud
Provider X to discover that another cloud service consumer has been posing as Cloud
Service Consumer B in order to maliciously access Ready-Made Environment B, Virtual
Server B, and Physical Server B on Cloud X.
The investigation concludes that the malicious cloud service consumer was able to carry out the attack successfully by obtaining
a weak password being used by developers from Cloud Consumer B.
Which of the following statements accurately identifies the type of security threat that
corresponds to the described attack - and -provides a solution that can directly mitigate this
type of security threat within Cloud X?
Correct Answer: C
