CLOUD

Digital identities for logging onto SaaS solutions should be issued by all the following EXCEPT:

• A third-party identity provider.

• The customer organization.

• The SaaS provider.

• A user.

Why is it important to consider the cloud ecosystem when developing applications?

• Cloud providers will do application development.

• The development process needs to change.

• The role of the IT department will change.

• This can speed up the development process.

Which of the following actions should a company take if a cloud computing provider ceases to uphold their contract?

• Consult the company's exit plan.

• Move the company data to the backup provider that was selected earlier.

• Re-host all critical applications on the company's internal servers.

• Evaluate the company's strategic options for an alternative provider

Which of the following consequences does IT outsourcing and cloud computing have in common?

• Involvement of external staff

• Improved flexibility

• Reduced expense

• Shorter time to market

Which of the following is an important new skill for an IT organization to develop in the context of cloud computing?

• Provisioning services

• Incident management

• Technology upgrade monitoring

• Security and risk management

Which of the following is the function of orchestration services?

• Assemble functional requirements for application development

• Configure application clusters with Web services

• Enable and disable load balancers

• Manage the starting and stopping of application server clusters

Which of the following is a reason for business users lo be interested in cloud computing?

• Desire for vendor lock-in reduction

• Desire for improved security

• Desire for improved user experience

• Desire for reducing compliance issues

Which of the following is important to standardize?

• Information standards and applications

• User names and hardware providers

• Virtual machine images and applications

• Virtual machine images and identity information standards

Cloud computing _____________capital cost to variable cost.

• increases

• reduces

• shifts

• equates

Privacy is the right of________ to selectively disclose information about _________ and restrict the further use of that information by any party.

• companies, others

• companies, themselves

• individuals, others

• individuals, themselves

Which of the following IT processes is likely to become more important due to the adoption of cloud computing?

• Capacity management

• Troubleshooting management

• Project management

• Request fulfillment management

Which of the following is the primary way to access PaaS?

• Web services

• Websites

• Web hosting providers

• Data integrations

How can an organization successfully implement a SaaS strategy?

• Manage the risks associated with bringing in external providers

• Continuously execute performance analytics to monitor providers

• Open up internal databases with Web service access for easier access

• Standardize on a limited set of virtual machines to increase security

Which of the following is the MOST important service management consequence of elastic capacity?

• The need for better application development

• The need for better security management

• The need for good performance monitoring and management

• The need to improve the fulfillment and provisioning process

Which of the following is a typical concern for business and IT leaders when adopting cloud computing?

• Current cost structure of IT

• Quality of web-based user interfaces

• Security of current IT solutions

• Technical maintenance of current IT assets

Which of the following does IT outsourcing and cloud computing typically have in common?

• Pay as you go agreements

• Short-term financial commitment

• Tailor-made applications based on client needs

• Vendor lock-in potential

Which of the following does the server virtualization layer do?

• It allows the underling physical server hardware to be shared

• It allows the virtual machines to be dependent on each other

• It allows the virtual machines to be load balanced

• It prohibits the use of virtual machines by unauthorized users

Which of the following are essential steps to take when creating a virtual server?

• Select a machine image to run, select an application set to run, select security credentials.

• Select a machine image to run, select an application set to run, select the size of the virtual machine.

• Select a machine image to run, select security credentials, select the size of the virtual machine.

• Select an application set to run, select security credentials, select the size of the virtual machine.

Which of the following technologies are related to Web services?

• HTML, IDM, JSON

• HTML, IDM, XML

• HTML, JSON, XML

• DM, JSON, XML

Web hosting is a service that enables customers to deploy a website quickly. This is an example of:

• IaaS.

• SaaS.

• PaaS.

• On-demand software.

• None of the above.

Which of the following describes the amount of data that can be sent across a link in a given time?

• Network bandwidth

• Network QoS

• Network latency

• Network speed

How can the internal IT department successfully react to cloud computing?

• By becoming an external cloud provider

• By becoming an internal cloud provider

• By outsourcing all IT services

• By solely focusing on security issues

Which of the following is a business reason for IT outsourcing and cloud computing?

• Improving cost structure

• Improving customer satisfaction

• Increasing control over IT systems

• Decrease of security issues

Which of the following applications is MOST suitable for a cloud computing pilot?

• Applications that are currently expensive to maintain because of interconnections

• Applications that are easy to migrate and have some business value

• Applications with high risk and little business value

• Legacy applications that are coupled to specific hardware and systems software

Which of the following is an important skill for an organization wanting to adopt an IaaS strategy?

• Visualization technology

• Application service procurement

• Customer relations

• Security and risk management

Which of the following is an example of a cloud-related security risk?

• Losing network connectivity

• Not having enough software licenses

• Not knowing what the cloud provider will charge

• Storing customer data at a provider

Why do management tools introduce a risk?

• The management tools present a vendor lock-in

• The management tools are indispensible above a specific scale of operation

• The migration may not be successful

• Too many software licenses are needed

How do demand management processes change with the introduction of SaaS?

• New vendors have to be accommodated

• Users can procure SaaS solutions themselves

• The number of virtual machines can fluctuate with demand

• Maintenance will become easier

Why does hardware and operating system maintenance take less effort with SaaS?

• Maintenance becomes irrelevant

• Cloud provider takes care of it

• Hardware vendor takes care of it

• Operating system vendor takes care of it

Which of the following is a unique characteristic of virtualization?

• Security features

• Federated identities

• Shared hardware

• Sourcing challenges

Which of the following is the MOST complex security provisioning problem in a cloud environment?

• Handling credit cards for purchasing cloud services

• Keeping track of cloud provider performance

• Managing users and their rights across multiple providers

• Software assets that are introduced and can expire

How can an organization successfully implement a PaaS strategy?

• Take inventory of the application portfolio and select external suppliers

• Standardize on a limited set of virtual machines.

• Continuously execute performance analytics to monitor providers

• Open up internal databases with Web service access.

Eucalyptus is open-source software for quickly provisioning virtual servers. This is an example of:

• PaaS

• IaaS

• On-demand software.

• None of the above.

• SaaS

Why do business users prefer to deal with cloud providers directly, instead of via the IT department?

• It reduces financial risks to the business

• The IT department does not accommodate variable costs

• They can better measure the provider's quality

• They can use their own payment options

Why does request fulfillment become more complicated in a cloud environment?

• All processes must become automated.

• Processes must be redesigned with the user experience in mind.

• The IT service team must be expanded.

• Users should be aware of the benefits before changes to the process are incorporated

Private clouds are operated solely for _______________ organization(s)

• governmental

• specific

• for-profit

• multiple

Why are traditional chargeback systems not compatible with cloud computing?

• Cloud computing is low cost and does not accommodate charge back fees

• Cloud computing can be more expensive than in-house capacity

• Licensing models can become outdated quickly

• Resources that are used can fluctuate throughout the budget cycle

How does cloud computing improve business flexibility?

• Easier access by users outside of the organization

• Faster deployment of applications

• Rapidly growing and shrinking capacity

• All of the above are correct

How can cloud-related financial risks be managed?

• Credit cards must be used for handling transactions

• Eliminating legacy IT systems

• Making sure that cloud assets are generating revenue

• Renegotiating license agreements

Which represents the MOST important business continuity risk?

• Incomplete Service Level Agreements (SLAs)

• Network connectivity interruption

• Privacy laws

• Providers going out of business

Which of the following is a private SaaS?

• An application for external use only, on company-owned assets.

• An application for external use only, on public cloud-based systems.

• An application for internal use only, on company-owned assets.

• An application for internal use only, on public cloud-based systems.

Which of the following roles can the IT department play in the selection process of cloud computing providers?

• Help understand and explain the application lifecycle

• Help understand performance parameters

• Help understand provider quality

• All of the above are correct

Cloud computing has the greatest benefit for which of the following user populations?

• User populations which steadily increase in size.

• User populations that vary and are unpredictable.

• User populations that are of fixed size.

• User populations that vary in size on a seasonal basis.

Google Apps is a set of online applications allowing users to create and share documents and spreadsheets. This is an example of:

• IaaS

• SaaS

• PaaS

• None of the above.

Which of the following is a limitation of owning servers?

• Inability to deploy new services quickly

• Inability to rapidly change to a different technology

• Capital tied up in hardware that might become obsolete

• Additional resources must be hired to maintain each server

Which of the following is a benefit of cloud computing?

• Cloud computing delivers IT capabilities that scale with demand.

• Cloud computing delivers a wide range of services that are easily accessible to users

• Cloud computing delivers IT capacity on demand.

• Cloud computing negates the need for a procurement department.

Why is standardization of data formats important?

• It facilitates movement from one provider to another.

• It helps encourage innovation.

• It leads to a more mature stage of the cloud computing landscape

• It leads to more efficient machine utilization.

Synchronization of updates is ___________ than replicating data across locations because it gives better assurance that data is always ___________ everywhere.

• better, secure

• better, up to date

• worse, secure

• worse, up to date

Which of the following risk results if cloud computing providers limit their Service Level Agreement (SLA) liabilities?

• Compliance risk

• Legal risk

• Privacy risk

• Security risk

Amazon Elastic Cloud Computing (EC2) is a facility for quickly providing virtual servers. This is an example of:

• SaaS

• IaaS

• PaaS

• QoS

Which of the following is an essential step in the start-up process of a virtual server?

• Identify the location of the physical machine

• Select identity providers

• Select security credentials

• Select the application set that will run on it

Which of the following is MOST typically accessed through Web services?

• IaaS

• PaaS

• SaaS

• None of the above

Which of the following is the MOST important impact of cloud computing on managing service levels?

• Capacity can be more elastic.

• External providers can deny a capacity increase when required.

• Providers measure their own performance.

• Scarcity of resources can occur if not monitored

Which of the following do business accountants prefer with respect to the cost of cloud computing?

• Budgets to be fixed

• Costs that are related to number of users

• Costs that are related to profits

• Costs to be fixed

Why can cloud computing be a challenge in relation to compliance risks (e.g. compliance with the Sarbanes-Oxley Act)?

• It makes it harder to know where a company's important assets are.

• It is harder to limit the provider's liability in the contract.

• It makes it harder to know where a company’s physical assets are.

• Industry regulations change more frequently to ensure compliance.

Twitter is a service that allows users to exchange short text messages. This is an example of:

• PaaS

• SaaS

• IaaS

• QoS

Which of the following can cause user response times to deteriorate?

• High CPU usage and low network bandwidth

• High network latency and high volume of data stored

• Low network bandwidth and high network latency

• Low network bandwidth and high volume of data stored

Which of the following is a characteristic of cloud computing?

• Cloud computing is typically based on open Internet technology

• Cloud computing is typically based on web technology

• Cloud computing is cheaper compared to virtualization

• Cloud computing typically uses XML or JSON technologies

Which of the following assets have risks related to a cloud provider going out of business?

• Data stored at the provider

• Cloud management tools housed at the provider

• Investment in servers at the provider

• Machine capacity at the provider

Which of the following is included in a compliance audit?

• Analyzing chargeback agreements

• Analyzing cloud provider Service Level Agreements (SLAs)

• Analyzing identity management and access controls

• Analyzing the provider release calendar

How does cloud computing influence service operations?

• Cloud computing is more cost effective

• The provisioning of servers and services is quicker or ceases to be an issue

• The provisioning of servers and services can be much slower

• The security level will increase

Cloud computing brings new challenges to ___________ management, because traditional licensing models do not fit well with scalable resources.

• commercial

• financial

• legal

• service

Which of the following is indicated by a high number of variations of different virtual servers?

• Lack of an automated provisioning process of the virtual machines

• Lack of automation of virtual machine image manufacturing

• Lack of manpower to monitor the virtual machines

• Lack of physical servers to accommodate the different virtual servers

Cloud computing is priced according to ___________ or has ___________, rather than having upfront costs.

• recurring subscription, a yearly contract

• a yearly contract, usage-based charges

• recurring subscription, usage-based charges

• number of users, a yearly contract

Which change in the security processes is introduced by cloud computing?

• Increased security of accessing credit card information

• Regulations need to be updated more frequently

• Storing passwords in the Configuration Management Database (CMDB)

• Working with multiple providers of user identities

Who is responsible for granting access to a user in federated identity management?

• Identity provider

• Relying party

• SaaS provider

• User

Which of the following is a definition of virtualization?

• Virtualization is a method to organize servers in a more efficient manner to double the number of accessible users

• Virtualization is a set of techniques for hiding software resources behind hardware abstractions.

• Virtualization is a set of techniques for hiding hardware resources behind software abstractions.

• Virtualization is a method to structure data in a more efficient manner with less cost to the user.

Which of the following confidentiality risks is introduced by cloud computing?

• Company information can be transmitted electronically

• Digitizing information makes it easier to copy

• Government regulations require data to be disclosed

• Having files stored on the servers of a cloud provider

Which of the following processes needs to be changed to better handle Change Management in the cloud?

• Financial chargeback

• Security management

• Hardware maintenance

• Software distribution

In which of the following ways do IT outsourcing and cloud computing differ?

• Cloud computing services are typically much more scalable.

• Cloud computing is much cheaper.

• Hardware and software assets are typically customizable.

• IT outsourcing promotes innovation.

How can an organization successfully implement an IaaS strategy?

• Standardize on a limited set of virtual machines

• Continuously execute performance analytics

• Open up internal databases with Web service access

• Take inventory of the application portfolio and select external suppliers

Which of the following are strategic exit options?

• Change the system applications

• Change the cloud provider

• Re-host in-house

• All of the above

All of the following are important design decisions when deploying SaaS EXCEPT:

• How existing company data is integrated in or migrated to the application.

• How the application will be integrated with other applications.

• The number of users that will access the application simultaneously

• Where or by whom will digital identities be issued for logging on to the application.

Which of the following application types is suitable for a cloud computing pilot?

• Desktop productivity applications

• Marginal applications

• Mission-critical applications

• Legacy applications

A military facility is NOT able to fully embrace cloud computing because of which of the following?

• High degree of confidentiality and operational assurance

• The associates cost and infrastructure needs

• Constantly changing and unpredictable workloads

• Constantly changing data and accessibility needs

All of the following are availability risks that are introduced by cloud computing EXCEPT:

• Dependence on an external provider.

• Dependence on internal IT

• Increase in users who can change data.

• Network connectivity

How does scalability work with cloud computing?

• Servers and storage can be added quickly.

• Servers and storage can be released quickly.

• Users can be added and removed quickly.

• All of the above is correct.

Which of the following risks occurs when a cloud provider stops serving the company?

• Continuity risk

• Financial risk

• Legal risk

• Confidentiality risk

Which of the following is a relevant component of the cloud ecosystem?

• Hypervisors

• Image factory

• Security procedures

• Trained IT staff

Which of the following business benefits do cloud computing and IT outsourcing have in common?

• Clarity and budgeting ease of upfront costs

• Improvement of employee skills sets

• Reduction of capital expenditures

• Flexible contracts

Which IT process is likely to take more effort with cloud computing?

• Hardware maintenance

• Installing operating system patches

• Performance monitoring

• Server maintenance

Why does cloud computing shift capital cost to variable cost?

• Cloud computing is more cost-efficient

• IT assets are not owned by the customer

• Servers are better utilized

• Staff is no longer hired by the customer

Which of the following is the risk when an IT department restricts itself to solely being an infrastructure provider?

• Business users will bypass the IT department

• Cloud providers will take over the role of the IT department

• Service providers will bypass the IT department

• All of the above are correct

Which of the following cloud computing risks is compliance related?

• Access rights that are handled by a cloud provider

• Capacity management that is handled by a cloud provider

• Cross-charging policies that are handled by both clients

• Provider reputation

Which of the following is the difference between cloud computing and IT outsourcing?

• The service levels of cloud computing are much better.

• IT outsourcing is not based on open standards.

• Contracts with cloud providers can be changed much quicker.

• Only IT outsourcing works with external staff.

How can cloud computing help reduce integrity risks?

• Cloud computing makes it easier to have a backup available.

• Cloud computing makes it easier to monitor access and usage of data.

• Cloud computing makes it easier to give people access to data in the cloud.

• Cloud computing makes it easier to have redundancy capabilities.

Which of the following is the business benefit of private PaaS?

• Improve the reuse of internal databases in an organization.

• Improve the speed of the internal development and deployment processes.

• Reduce cost and reliance on internal technical skills.

• Simplify interfaces for specific user groups.

In order for an organization to have a successful cloud implementation, which of the following must be true?

• The organization must perform and successfully complete a cloud readiness assessment.

• The organization must have used virtualization technology in the past.

• The organization must have an unlimited budget for allocation of cloud resources.

• The organization must have an in-house IT department.

Which of the following correctly identifies a key difference between cloud computing and IT outsourcing?

• Typically, industry definitions state that cloud computing and IT outsourcing are synonymous terms with the same meaning.

• Cloud computing only works when there is satisfactory Internet connectivity whereas
  outsourcing requires dedicated WAN links.

• Cloud computing generally allows for on-demand utilization, whereas outsourcing is typically defined by contract terms.

• Cloud computing provides only external IT equipment to a company whereas outsourcing involves external only resources managing internal company equipment.

Which of the following is the BEST example of maintaining 'strategic flexibility'?

• Cloud provisioning models have a risk of not maintaining flexibility once services have been migrated.

• When choosing services to migrate into the cloud, there should be a focus on ensuring that future migration between different cloud providers can be facilitated.

• Cloud providers need to provide countermeasures to any consequences of not maintaining flexibility of services in a strategic manner.

• When choosing services to migrate into the cloud, it should be ensured that the cloud provider can change underlying hardware platforms in case the customer needs change.

A company is adopting a public SaaS cloud based computing system to migrate a mission critical application. Which of the following capabilities will be MOST likely lost?

• Centralized management of user access to the application.

• Aversion of the software that will be accessed in the cloud.

• The ability to perform fine grained customizations to the software.

• The ability to access the application from the internal company network.

Which of the following refers to providing a combination of servers, networking components, hosting, provisioning, and basic services needed to run a cloud?

• PaaS

• CaaS

• SaaS

• IaaS

The business benefits of mobile computing are enhanced MOST by which of the following cloud service characteristics?

• Hardware independence

• Security

• Distribution over the Internet

• Time to market

A company decides to subscribe to a new CRM product that will help improve their business
processes. Which of the following types of cloud computing would MOST likely be implemented?

• PaaS

• XaaS

• IaaS

• SaaS

An organization is replacing its core insurance platform. The solution is made up of internally hosted insurance systems and applications hosted in the cloud. Which of the following activities is part of service transition?

• Ensure that as part of the change management process the events are sequenced to include the cloud provider and that they have resources available.

• Ensure that monitoring controls are implemented by the cloud provider to ensures that the system is highly available and that performance can be measured.

• Ensure that the SLA's for availability have been well documented and agreed to as part of the contract arrangement between the two companies.

• Ensure that the capacity and storage is available to meet the current and future demands of the solution of the cloud provider's infrastructure.

Which of the following early examples of cloud computing was used for software engineering purposes in the form of web-based applications and required interoperability between different systems?

• Distributed Computing

• Service-Oriented Architecture (SOA)

• Virtual Private Networks (VPNs)

• Desktop Virtualization

An existing capability is being migrated into the cloud. Capacity management issues have been noticed in the past and an exercise is being performed to calculate current and future volumes. In which of the following lifecycle phases is this likely to be performed?

• Operation

• Design

• Transition

• Strategy

Which of the following is an advantage of cloud computing for an organization?

• Increased security of applications and data due to virtualization

• Decreased downtime due to increased control over hosted servers

• Increased internal focus on IT when hosting with proven providers

• Increased scalability to meet usage demands

A specific cloud deployment has been established specifically for financial services companies to consume. Which of the following BEST describes this type of cloud environment?

• Private cloud

• Community cloud

• Hybrid cloud

• Public cloud

Which of the following aspects of public cloud computing would a company MOST likely need to consider to ensure information security?

• Data integrity

• Server type

• Firewall specifications

• Network hardware

Which of the following factors of service must be managed effectively by a SaaS provider in a cloud computing environment?

• Application access levels

• Client background checks

• Availability

• User acceptance

A private cloud generally has which of the following characteristics?

• Services are restricted to members of the same organization

• Infrastructure is managed by an independent service provider

• Services are managed by a third-party provider

• Services are accessed by members outside of the organization

A software development platform is in the process of being migrated from an in-house framework to a cloud-based PaaS. Which of the following development aspects is likely to be applicable in the PaaS environment?

• PaaS providers do not allow customers with their own software development teams to write new applications on the cloud platform.

• Cloud environments only support agile development. The software development team will need to change from their waterfall SDLC methodology before migrating.

• Familiarization will be required with cloud provider-based APIs, web services, and development frameworks.

• No expected change in software development process when migrating from in-house to PaaS.

Which of the following is improved by choosing cloud computing versus traditional IT infrastructure outsourcing?

• Resource spending

• Legal requirements

• Employee morale

• Controllable response time

Which of the following organizations are MOST liking to consider confidentiality requirements before implementing a backup and disaster recovery cloud solution?

• An advertising company

• A public library

• A recreational park district

• A hospital and outpatient facility

A company's IT department currently spends several hours a day maintaining the hardware of the database server. The company migrates the server to the cloud. Which of the following job responsibilities of the IT department has been MOST impacted by this change?

• Service Strategy

• Service Operation

• Service Design

• Service Transition

Which of the following is a difference between cloud computing and visualization when implementing IaaS?

• All hardware is maintained on-site by current IT staff and managers

• Both a cloud and a virtual solution will provide additional programmers for application
  development

• Boxed, retail versions of office suite software must be used for consistent licensing

• Cloud computing may use visualization, while visualization does not require cloud services

Which of the following is a negative business impact of cloud computing?

• It lowers the company's overall application processing availability.

• It is difficult to implement problem management.

• It is more difficult to ensure policy compliance.

• It slows down the company's ability to deal with server capacity issues.

Which of the following is the MOST significant difference between SaaS and IaaS?

• IaaS can test network configurations.

• SaaS is accessible anywhere.

• SaaS is used for only public clouds.

• IaaS can be secured and encrypted.

An organization subscribes to a public cloud. For which of the following does the subscriber NOT depend on the vendor?

• Internet bandwidth and packet latency

• Service Level Agreement

• Data backups

• Infrastructure availability

How does using cloud computing help to enhance business value?

• By using cloud computing, businesses are able to realize lower asset utilization for personnel.

• By paying for actual usage, cloud computing allows businesses to convert fixed costs into variable costs.

• By using cloud computing, businesses are able to lower server utilization.

• By paying for actual usage, cloud computing allows businesses to convert variable costs into fixed costs.

Which of the following cloud service characteristics would impact how a current application will adapt in the future according to how quickly a business will grow?

• Time to market

• Scalability

• Hardware independence

• Security

Which of the following is an advantage of cloud computing that can enhance business value?

• Hardware dependence

• Scalability

• Fixed costs

• Security

Which of the following would be considered in a private cloud?

• Organizational direct attached storage

• Organizational SAN

• Vendor leased co-hosted storage

• Encrypted shared drive

Which of the following critical success factors would likely persuade a company to use a SaaS service?

• The elimination of company driven application maintenance and backups

• The lowering of thin client management costs

• The decrease of company-owned physical system downtime

• The increase of web presence

Which of the following statements represents the correct definition of the terms 'cost allocation' and 'chargeback'?

• 'Cost allocation' focuses on recovering costs from consumers of cloud-delivered services whereas 'chargeback' relates to identifying costs and assigning them to specific cost categories.

• 'Cost allocation' and 'chargeback' are synonymous terms that relate to allocating costs of cloud services and ensuring that billing occurs for the services being delivered.

• 'Cost allocation' relates to identifying costs and assigning them to specific cost categories. 'Chargeback' is focused on recovering costs from consumers of the cloud-delivered services.

• 'Cost allocation' and 'chargeback' relate to ensuring that cloud computing delivery services are a profit center instead of a cost center. This leads to a positive return on investment for both cloud provider and cloud consumer.

Cloud computing can BEST reduce costs for a business by:

• Utilizing services as needed.

• Increasing available data storage.

• Utilizing local resources.

• Increasing sales potential.

Which of the following is an important factor for maintaining strategic flexibility?

• Return on investment

• Integrity

• Elasticity

• Vendor lock-in

In cloud computing, the ability to scale resources on demand, benefits the business in which of the following ways?

• Allowing a third party to manage service delivery ensures lower staffing costs.

• It is more cost effective to pay for what is needed rather than pay for peak demand upfront.

• Fewer in-house servers lower the power consumption of the datacenter.

• Shorter contracts and less capital expenses reduce expenditures to the IT budget.

An organization requires that it federates its internal systems and their externally hosted SaaS finance system so a user does not have to re-authenticate. This is an example of which of the following?

• Open authentication

• Single sign-on

• Biometric scanning

• Multifactor authentication

Which of the following are the appropriate steps to migrating a backwards compatible application into the cloud?

• Assess, proof of concept, migrate data, migrate application, automation/scaling, and optimizing

• Migrate the data and rebuild the application using APIs

• Purchase service from cloud provider, migrate the user accounts, and disable the internal infrastructure

• Decommission the internal infrastructure, purchase service from the cloud provider, and enable for business users

Which of the following risks are associated with using a customized proprietary cloud application?

• Simplified continuity of operation and disaster recovery plan

• Lack of internal control over function and design of applications

• Locking into the cloud provider and increasing costs over the long term

• Reassignment of roles and responsibilities would be necessary

Which of the following only provides configurable physical hardware and network resources used to make up the cloud?

• IaaS

• SaaS

• PaaS

• CaaS

Which of the following would help an organization's IT department set their objectives and expectations for a cloud computing solution?

• Service Transition

• Service Operation

• Service Strategy

• Service Design

Which of the following is the BEST way to mitigate the security and privacy issues associated with cloud computing?

• Allowing only cloud administrators to have access to cloud resources

• Removing firewalls and access control routers from the network

• Implementation and enforcement of a comprehensive security policy

• Removing virtualized hardware from the organization

A software development company would like to deploy all of their application development using their own software to the cloud. The type of cloud they will MOST likely choose to implement is which of the following?

• XaaS

• IaaS

• SaaS

• PaaS

A company has hired a third party vendor to provide email and spam/anti-malware filtering services. The type of cloud service provided by the vendor is BEST described as which of the following?

• SaaS

• IaaS

• CaaS

• PaaS

Which of the following should be implemented to BEST roll out desktop images from a cloud network?

• Automation and self service

• Backup and recovery

• Federation

• Virtual servers

A technology manager is explaining the company's latest move toward cloud computing. Which of the following statements would NOT be an example of cloud computing?

• The company is moving their email to a third party web application.

• The company is consolidating their 10 web servers to one physical server located in the datacenter.

• The company is going to leverage hosted servers to handle any additional processing power needed for the application developers.

• The employees will now access their hosted finance application via their web browser.

Which of the following can be deployed by a cloud provider to reduce storage costs?

• Journaling file systems

• Two-factor authentication

• Data de-duplication

• Data encryption

An organization has just gone to a start-up cloud provider for its entire infrastructure. Which of the following is one of the new organizational roles required at the cloud provider?

• Supply manager

• Commercial manager

• Infrastructure project manager

• Credit risk manager

Which of the following companies would BEST benefit from moving to a cloud service?

• A retail company that has a history of peaks and troughs throughout the year with its online shopping application.

• A family business that does not have any IT applications, but runs off manual processes and good customer service.

• A financial services company that is having a number of security issues with its customer internet banking platform.

• An insurance company that has a mature, low cost and efficient IT infrastructure that does not have significant change.

A cloud subscriber may come under certain security constraints when hosting sensitive data in the cloud due to government regulations. Which of the following is the BEST mitigating control that could be implemented by the cloud provider?

• Offer multi-tenancy software as a service with segregated physical infrastructure.

• Offer a single-tenancy software service with segregated virtualized infrastructure.

• Offer multi-tenancy software as a service with logically segregated infrastructure.

• Offer a single-tenancy software service with monitored intrusion detection systems.

A company is trying to understand the IT service management impacts of adopting cloud computing as the delivery vehicle for a new service. Which of the following lifecycle phases would be likely to see these impacts evaluated?

• Strategy

• Operation

• Design

• Transition

A university has migrated several services from their internal infrastructure to a third-party cloud provider. Which of the following is MOST important to the university in order to ensure an appropriate security posture?

• Regular patching applied by the university

• Governance and oversight by the cloud provider

• Antivirus checks performed by the cloud provider

• SLA and metrics requested by the cloud provider

An external cloud service provider has been chosen by a financial company to deliver some capabilities that used to be performed in-house. Which of the following would provide the BEST amount of coverage to the financial company byway of continually asserting that there is an acceptable security posture being achieved by the service provider?

• Define required security service levels, agree on security evaluation criteria, and perform regular compliance checks based on the service levels and evaluation criteria.

• Perform a penetration test every 6 to 12 months and mandate that any unacceptably high issues or risks are mitigated.

• Perform a risk assessment annually and mandate that any unacceptably high risks are
  mitigated.

• Ensure that the service provider aligns to an industry standard, such as ISO 27000 series or another regulatory compliance framework and request that they self-monitor annually.

When an organization moves to a cloud service for IaaS the cost model changes. Which of the following illustrates that cost model?

• Move from an ongoing OPEX model for infrastructure to an ongoing service charge for the life of the infrastructure

• Move from a depreciation model of infrastructure to a leasing model of infrastructure with bundled support and maintenance.

• Move from a CAPEX model for infrastructure to an ongoing OPEX charge with bundled support and ongoing maintenance.

• Move from an OPEX model for infrastructure to an ongoing CAPEX charge with bundled support and ongoing maintenance.

Which of the following is BEST used when setting up security for services being used within a public cloud?

• LDAP

• SFTP

• SNMP

• SSL

Which of the following cloud services would be used to rent hardware, computing and network space, and storage over the Internet?

• SaaS

• IaaS

• PaaS

• XaaS

In order to maintain strategic flexibility and the ability to bring a cloud system back internally, which of the following is the MOST important requirement in the contract?

• Yearly independent audit is performed to measure performance

• Cloud provider has ability to terminate contract

• One week timeframe for termination of service

• Cloud subscriber maintains ownership of their data

Which of the following characteristics of cloud computing describes the ability to grow easily in response to an increase in demand?

• Hardware independence

• Scalability

• Variability

• Security

As part of a critical SaaS application, one of the contractual statements by the cloud provider is a requirement to perform scheduled maintenance. This has a direct impact on which of the
following?

• Service strategy

• Service transition

• Service operation

• Service design

Which of the following is a differentiating characteristic of private cloud solutions compared to public cloud solutions?

• Private cloud solutions are dedicated for use by a single organization.

• Private cloud solutions are never accessible via the public Internet.

• Private cloud solutions do not provide incremental scalability.

• Private cloud solutions save considerably more money than a public cloud solution.

A company is using an Internet-based cloud service provided by a third party. Which of the following can the third party NOT guarantee when providing cloud resources?

• Capacity

• Scalability

• Network path

• Cost

Since the implementation of a cloud infrastructure, a senior level network administrator's job description has changed from being responsible for maintaining the hardware of the network infrastructure to more of a management position, ensuring the cloud vendor is providing the services specified in the contract with the company. Which of the following has been impacted the MOST by the change in job responsibility?

• Service Transition

• Service Design

• Service Operation

• Service Strategy

Which of the following must be implemented by a cloud provider to ensure that different entities can authenticate and share basic user accounting information?

• Scalability

• Federation

• Virtualization

• Self service

Company A has a SaaS cloud that hosts their office suite software. Company B has an IaaS cloud that provides all their server hardware, including the server hosting their office suite software. Which of the following is a similarity between both company's clouds?

• Backups synchronize with the hot site

• Servers are on-site

• Software is hosted

• Multiple servers are clustered

Elastic computing is important to businesses as it relates to which of the following cloud characteristics?

• Scalability

• Security

• Integrity

• Distribution

Which of the following is true when mitigating risks in a cloud environment while avoiding impact to performance?

• When securing cloud resources, only the most sensitive data should be secured.

• When securing cloud resources, it is always a best practice to encrypt all data stored in the cloud.

• When securing cloud resources, data security is not an issue.

• When securing cloud resources, it is always a best practice to use the strongest security on the most sensitive data.

A financial services company plans to move its existing CRM system into the cloud. The current system hosts 50 million customers. Which of the following steps should be done FIRST for moving this application into the cloud?

• Perform security testing of the application to ensure that there are no new security vulnerabilities being introduced.

• Perform testing to confirm that all the customer data can be mapped/migrated during the allocated change window.

• Communicate with customers that they will be moving to a new CRM system which will be hosted in the cloud.

• Perform a physical site assessment on where the application is hosted to ensure adequate controls are in place.

Which of the following is an effect of cloud computing on application development?

• SaaS allows for open-source application development.

• SaaS delays the time to market for most applications.

• SaaS inhibits vendor interoperability on application platforms.

• SaaS allows for a shorter time to market for some applications.

Which of the following BEST describes the properly of cloud computing that allows changes in transaction volume without major changes to the system?

• Scalability

• Reliability

• Integrity

• Availability

The IT department has migrated company email to a web-based cloud provider. Which of the following dependencies placed on the cloud computing vendor will have the MOST affect on all company staff?

• Cost of service

• Availability of service

• Maintainability of service

• Location of service

Which of the following skills is MOST needed by the cloud vendor to communicate with the subscriber?

• Project management

• Customer service

• Industry best practices

• Visualization

A company is implementing a system replacement which has application components that are internally hosted and multiple application components that are hosted as software as a service by different cloud providers. Which of the following represents the challenge of this architecture?

• Complexity

• Time to market

• Cost saving

• Elasticity

Which of the following would be a method to ensure ongoing benefits of a cloud agreement?

• Confirm a continual assurance framework is in place to measure the cloud provider's
  performance in line with organizational objectives.

• Have independent security testing performed against the cloud provider to ensure that the business's customer data is safe.

• Ask the cloud provider to lower the cost before each contractual renewal so that the business is obtaining value for money.

• Have independent stress and volume testing performed against the cloud provider to measure the availability SLA.

Which of the following is a benefit of implementing cloud computing via the ITIL guideline?

• Increased costs

• Larger knowledge base

• Increased free hard drive space

• Improved service level

A new Chief Information Officer (CIO) has been hired to develop competitive advantage strategies for the company, which is falling behind the competition. The CIO is looking at cloud computing to give the company a competitive edge. Which of the following is the CIO MOST interested in?

• Increasing the company carbon footprint

• Upgrading the company datacenter

• Implementing new IT strategies

• Increasing the MTTR after an incident

A provider supplies storage, processing, memory, and network bandwidth to multiple tenants, using physical and virtual resources. This is an example of which of the following cloud characteristics?

• On-demand self-service

• Measured service

• Resource pooling

• Rapid elasticity

Which of the following characteristics would allow a company to market its product to the public by
using cloud computing services?

• Desktop virtualization throughout the company

• Client-server application modules

• Web-based application modules

• Client-based training modules

Which of the following is the BEST example of a cloud vendor's monthly hosting fee changing based on cost allocations?

• The company's fee varies based on the projected quarterly revenue of the client's company.

• The company's fee varies based on the number of their IT staff required to support the
  infrastructure.

• The company's fee varies based on the number of servers needed to house data in the
  datacenter.

• The company's fee varies based on the energy consumption of each server in the datacenter.

A company has decided to implement a third-party hosted service so that they have access to as many virtual instances as needed, for exclusive use. Which of the following types of services would this represent?

• VPN

• Public cloud

• Private cloud

• VTP

Which of the following is a service level management tool aimed at quantifying a cloud offerings' performance?

• Mean Time to Recovery

• Risk Assessment

• Business Impact Analysis

• Request for Proposal

Which of the following services represents an environment where the computing architecture is providing a hosted service to a limited group inside a corporate firewall?

• Public Cloud

• VLAN

• Private Cloud

• VPN

In which of the following scenarios would a hybrid cloud be the BEST choice for an organization to use?

• A security organization that performs a large percentage of penetration testing.

• A financial organization that must keep all data under their control.

• A retail organization that needs to maintain all processing in their own datacenter.

• A large development firm that creates applications for the customer to host on their cloud.

Which of the following questions should be considered BEFORE selecting a cloud computing vendor?

• What cloud computing product will fit the business need?

• What is the vendor policy on telecommuting?

• What is the timeline for transition to the vendor?

• What is the datacenter's power consumption?

Which of the following can influence the monthly service fee Company A pays for Company B to host their cloud, such that Company A might pay more per month as their company grows?

• Amount of data stored

• Connectivity speed

• Confidentiality of the data

• Uptime requirements

Which of the following is a drawback of direct cost when implementing cloud computing?

• It cannot be applied to IaaS.

• It is complex.

• It is less accurate.

• It only works with SaaS.

Which of the following is one way to mitigate the issue of non-secure communication methods used by cloud providers?

• Insist that the provider switch to secure protocols, such as SSH instead of Telnet.

• Insist that the provider use authentication to connect to the non-secure applications.

• Insist that the provider place firewalls and routers at the border of the cloud environment.

• Insist that the provider implement username/password on all protocols.

Which of the following types of organizations would NOT benefit from cloud computing due to legal requirements?

• Online library

• Social media sites

• Large marketing agencies

• Medical facility

A company decides to reduce its IT labor force by hiring an external company to manage various aspects of IT administration, such as software patch management, desktop virtualization, and
remote network maintenance. The company will still retain technicians for maintenance and
storage administration. Which of the following services has this company implemented?

• Outsourcing

• Virtualization

• PaaS

• IaaS

Which of the following processes should be implemented to validate the application security of the cloud provider's SaaS application?

• Periodic integrity testing

• Periodic penetration testing

• Review of operating system configuration

• Application load testing

Which of the following would represent a successful implementation of a cloud service strategy?

• An organization has identified services, investments, partners, and delivery channels designed to meet requirements.

• An organization has identified patterns of business activities that use services and manage activities to influence demand.

• An organization has managed the investment portfolio for services available to users of the cloud services.

• An organization has managed budgeting and accounting for cloud services needed for the organization.

Which of the following BEST describes the properly of cloud computing that enables services to be readily on hand?

• Integrity

• Confidentiality

• Availability

• Scalability

A legal hold has been requested on an employee's mailbox by the company's legal office. The company IT group is unable to implement the legal hold since the email system has recently been outsourced to the cloud. Which of the following has the company failed to consider when migrating the email service to the cloud?

• Business continuity plan

• Email restoration process

• Archival procedures

• Retention policy

Which of the following steps BEST leads to successful adoption of a cloud service?

• Gather stakeholder requirements, select potentially suitable cloud providers, perform a pilot, and select the most appropriate provider.

• Choose the most well known cloud provider for the given service and negotiate a short-lived contract with strong penalty clauses.

• Request a list of reference sites from the potential cloud provider and interview a reference from within the same industry sector. If the site reference check is positive, then choose the cloud provider.

• Workshop selection criteria items with company management and choose the service provider based on the strongest formal responses from cloud providers.

Which of the following is the FIRST item of consideration when a company wants to implement a cloud network by following the ITIL standard?