SOA C90.03 問題集

質問 1：
Cloud X (owned by Cloud Provider X) provides Physical Server A which hosts Virtual
Servers A and B.
Virtual Server B hosts Ready-Made Environments A and B.
Cloud Service Consumer A uses Virtual Server A as part of an IaaS leasing agreement in which
Cloud Consumer A is charged a fixed monthly fee for unlimited access. Cloud Service
Consumers B and C use Ready-Made Environments A and B respectively as part of a
PaaS leasing agreement based on per-minute usage fees. In both cases, access is
monitored via Pay-For-Use Monitor A, which keeps track of log-in and log-out times in
order to calculate the usage charges that are billed to Cloud Consumers B and C.

Physical Server A begins to become unstable. Over the course of a 24 hour period, the
server shuts down three times, taking down Virtual Servers A and B with it. This causes
numerous problems for Cloud Service Consumers A, B and C, which lose connections and
encounter a variety of exceptions.
A subsequent investigation of the log files generated by Pay-For-Use Monitor A reveals
that the three server crashes coincided with the usage periods of Ready-Made Er
n'ronment B b> Cloud Service Consumer B.
De 'elopers at the Cloud Consumer 3 organization confirm they did not actually log in during those periods, which leads Cloud
Provider X to discover that another cloud service consumer has been posing as Cloud
Service Consumer B in order to maliciously access Ready-Made Environment B, Virtual
Server B, and Physical Server B on Cloud X.
The investigation concludes that the malicious cloud service consumer was able to carry out the attack successfully by obtaining
a weak password being used by developers from Cloud Consumer B.
Which of the following statements accurately identifies the type of security threat that
corresponds to the described attack - and -provides a solution that can directly mitigate this
type of security threat within Cloud X?
A. Ready-Made Environment B.
Virtual Server B and Physical Server B were subjected to a weak authentication attack that can be mitigated by implementing the encryption and
digital signature mechanisms.
B. Ready-Made Environment B, Virtual Server B and Physical Server B were subjected to
a virtualization attack that can be mitigated by implementing the encryption and digital
signature mechanisms.
C. Ready-Made Environment B.
Virtual Server B and Physical Server B were subjected to a malicious intermediary attack that can be mitigated by implementing the cloud-based
security groups and hardened virtual server images mechanisms.
D. Ready-Made Environments, Virtual Server B and Physical Server B were subjected to
an attack that succeeded due to overlapping trust boundaries. This type of attack can be
mitigated by implementing the single sign-on mechanism.
正解：A

質問 2：
Cloud Provider X (which owns Cloud X) deploys two physical servers (Physical Servers A
and B) and two databases (Databases A and B). Virtual Servers A and B are hosted by
Physical Server A and Ready-Made Environments A and B are hosted by Virtual Server B.
Virtual Servers C and D are hosted by Physical Server B.
Cloud Service Consumer A regularly accesses Virtual Server D in order to test and deploy a new cloud service that
was developed on-premise by the cloud consumer organization operating Cloud Service
Consumer A.
Cloud Service Consumer B (operated by a different cloud consumer organization) has been regularly accessing Ready-Made Environment A in order to develop
and deploy a different new cloud service.

Cloud X is a private cloud that, to-date, has been set up within the cloud provider company
to provision IT resources free of charge to internal cloud consumers, via PaaS and IaaS
delivery models. The cloud consumers that have been operating Cloud Service Consumers
A and B represent different IT departments within the company that have been working
separately on the development of new cloud services. Cloud Service Consumer A has
been accessing Virtual Server D to make necessary configurations and administration
settings for the upcoming deployment of a new cloud service that was previously
developed outside of Cloud X.
Cloud Service Consumer B has been accessing Ready-
Made Environment A to develop and now deploy a different new cloud service.
Cloud Provider X (which is represented by a separate IT department dedicated to
governing and administering Cloud X) determines that it will need to introduce three
specific enhancements to Cloud X in order to accommodate both upcoming cloud services.
First, it needs to add a way to charge cloud consumers for the usage of cloud services.
Secondly, it needs to add a way for new cloud services to be automatically scaled. Finally,
it needs to add a way for a cloud consumer to be automatically notified when a cloud
service encounters runtime loads that exceed its allocated usage threshold.
Which of the following statements accurately describes a solution that fulfills all three
identified requirements?
A. The pay-for-use monitor mechanism can be installed to address the requirement for
cloud service usage charges to be tracked and recorded. The automated scaling listener
mechanism can be implemented to address the requirement for cloud services to be
automatically scaled. The multi-device broker mechanism can be implemented to address
the requirement for notifications to be issued when cloud service loads exceed thresholds.
B. The state management database mechanism together with the virtual server mechanism
and the automated scaling listener mechanism can be implemented to address the
requirement for cloud service usage charges to be tracked and recorded, for cloud services
to be automatically scaled, and for notifications to be issued when cloud service loads
exceed thresholds.
C. The pay-for-use monitor mechanism can be implemented to address the requirement for
cloud service usage charges to be tracked and recorded, for cloud services to be
automatically scaled, and for notifications to be issued when cloud service loads exceed
thresholds.
D. The pay-for-use monitor mechanism can be installed to address the requirement for
cloud service usage to be tracked and recorded. The automated scaling listener
mechanism can be implemented to address both the requirement for cloud services to be
automatically scaled and for notifications to be issued when cloud service loads exceed
thresholds.
正解：D