EMC IT-as-a-Service Expert Exam for Cloud Architects Sample Questions:

1. An enterprise decided to place some sensitive data - intellectual property - in the public cloud and implemented security mechanisms to protect this data.
Recently the public cloud provider's systems had a security breach. The enterprise was not concerned because they felt their data had been completely protected. All of the services housing the data are protected by an IPS application and no alerts were generated by the system.
How did the enterprise protect its data?

A) All data in the public cloud environment was encrypted at-rest and in-transit. Copies of the
encryption keys were secured by the public cloud provider using 1024-bit encryption.
The cloud provider's logs showed that the enterprise's services were neither accessed nor copied.
B) All data in the public cloud environment was encrypted at-rest and in-transit. The encryption
keys were under complete control of the enterprise and were not available to the public provider.
The cloud provider's logs showed that the enterprise's services were copied.
C) All data in the public cloud environment was encrypted in-transit only. The encryption keys were
under complete control of the enterprise and were not available to the public provider.
The cloud provider's logs showed that the enterprise's services were neither accessed nor copied.
D) The data was not encrypted but the enterprise maintained a backup of the data in a secure off-
site location.
The cloud provider's logs showed that the enterprise's services were not copied.

2. A health care applications software company has been growing rapidly by acquiring several similar companies, which are based in other states.
IT is now struggling to provide services for developing, testing and supporting multiple application teams. For each application, customer support must frequently handle sensitive electronic medical records data that is subject to Federal compliance. No formal standards or policies have been established across application teams relative to sensitive data.
With the goal of ITaaS transformation, senior management seeks to establish IT governance. What would you recommend for a governance model, and why?

A) Centralized, since security and compliance concerns are relatively homogeneous across the enterprise
B) Distributed by geography, since it enables localized control and lock down of sensitive data
C) Federated by application, since it ensures autonomy for each application team and promotes customer satisfaction
D) Hybrid, since it is the best approach during rapid growth by acquisition

3. An IT security team is concerned about the authentication traffic patterns that may be required to integrate the private and public clouds. As a result, IT has elected to federate their active directory using ADFS from the private cloud to the public cloud.
One of the design decisions is whether to use a Layer 2, 3, or 7 firewall / switch mechanism between the public and private clouds. There are trade-offs with each choice.
Which network layer would best address this situation, and why?

A) Layer 2, because it provides the simplest configuration to manage and it is easy to isolate and troubleshoot problems.
B) Layer 2, because it provides the best performance and it is easy to isolate problems.
C) Layer 3, because it allows segment isolation while still providing high performance levels.
D) Layer 7, because it allows control at the application layer and is policy driven.

4. Which metric measures the time taken to realize benefits from an ITaaS solution?

A) Time-to-live
B) Time-to-deploy
C) Time-to-deliver
D) Time-to-value

5. The operations department of a major hosting provider is under pressure to deliver services more quickly. They have a significant number of tools for managing IT technologies across the data center.
Although investments in virtualization and automation have been made, it still takes months to provision basic IT services to meet new customer demands. The provider is considering offering cloud services.
What is a key focus area for driving higher operational efficiency and associated profits?

A) Strengthen the architecture to ensure that the components within the data center are modular and can be reused.
B) Deliver a custom capability for each customer based on analysis of the application architecture. Use shared services where possible.
C) Deliver custom services using automation tools. Apply change control to the tools to minimize change. Develop reusable components to build environments.
D) Deliver customer services that are derived from an approved set of service templates. Apply change control to manage the life cycle of the templates.

Solutions: