Pass with C90-03A Practice Materials 100% for sure

SOA Certified Professional C90-03A Exam Overview:

SOA Certified Professional C90-03A Exam Syllabus Topics:

SOA Certified Professional Cloud Technology Lab Sample Questions:

Question 1

Cloud Provider Y owns Cloud Y, which provides a set of cloud services, virtual servers and one physical server. Cloud Services A and B are hosted on Virtual Server A, which is hosted by Physical Server A. Physical Server A also hosts Virtual Server B, which hosts redundant implementations of Cloud Services A and B for load balancing purposes. Cloud Service Consumer A is accessing Cloud Service A located on Virtual Server A. Cloud Service Consumer B is accessing Cloud Service B located on Virtual Server B. Cloud Service Consumers A and B are both owned by Cloud Consumer X.
Cloud Consumer X has recently complained that Cloud Services A and B have become less available than what is guaranteed in their service level agreements (SLAs). Cloud Provider Y launches an investigation that reveals that Virtual Servers A and B have been subjected to denial of service attacks. This is confirmed as the cause of the decline in the availability of Cloud Services A and B.

Which of the following statements describes a solution that can increase the availability of Cloud Services A and B?

A. Cloud Provider Y can implement the identity and access management mechanism to mitigate denial of service attacks and can further implement the failover system mechanism (by introducing a redundant physical server with redundant virtual servers) so that when an attack is successful on a given virtual server, a redundant virtual server can take its place.
B. Cloud Provider Y can move Cloud Service B to Virtual Server A, thereby positioning Virtual Server B as a redundant fallback server used when Virtual Server A is successfully attacked. Similarly, Cloud Provider Yean move Cloud Service A to Virtual Server B, so that Virtual Server A acts as a redundant fallback server for when Virtual Server B is successfully attacked.
C. Cloud Provider Y can implement a cloud bursting system, whereby Cloud Service A on Virtual Server B automatically takes the place of Cloud Service A on Virtual Server A when that service fails. Similarly,Cloud Service B on Virtual Server A can then automatically take the place of Cloud Service B on Virtual Server A when that service fails.
D. Cloud Provider Y can introduce a single sign-on mechanism for Virtual Server A to mitigate denial of service threats. The automated scaling listener can then be implemented on VirtualServer B in order to limit the number of instances of Cloud Services A and B. This will prevent Virtual Server B from overloading due to denial of service attacks.

Question 2

Cloud X (owned by Cloud Provider X) provides Physical Server A which hosts Virtual Servers A and B. Virtual Server B hosts Ready-Made Environments A and B. Cloud Service Consumer A uses Virtual Server A as part of an IaaS leasing agreement in which Cloud Consumer A is charged a fixed monthly fee for unlimited access. Cloud Service Consumers B and C use Ready-Made Environments A and B respectively as part of a PaaS leasing agreement based on per-minute usage fees. In both cases, access is monitored via Pay-For-Use Monitor A, which keeps track of log-in and log-out times in order to calculate the usage charges that are billed to Cloud Consumers B and C.

Physical Server A begins to become unstable. Over the course of a 24 hour period, the server shuts down three times, taking down Virtual Servers A and B with it. This causes numerous problems for Cloud Service Consumers A, B and C, which lose connections and encounter a variety of exceptions.
A subsequent investigation of the log files generated by Pay-For-Use Monitor A reveals that the three server crashes coincided with the usage periods of Ready-Made Er n'ronment B b> Cloud Service Consumer B. De 'elopers at the Cloud Consumer 3 organization confirm they did not actually log in during those periods, which leads Cloud Provider X to discover that another cloud service consumer has been posing as Cloud Service Consumer B in order to maliciously access Ready-Made Environment B, Virtual Server B, and Physical Server B on Cloud X. The investigation concludes that the malicious cloud service consumer was able to carry out the attack successfully by obtaining a weak password being used by developers from Cloud Consumer B.
Which of the following statements accurately identifies the type of security threat that corresponds to the described attack - and -provides a solution that can directly mitigate this type of security threat within Cloud X?

A. Ready-Made Environment Virtual Server B and Physical Server B were subjected to a malicious intermediary attack that can be mitigated by implementing the cloud-based security groups and hardened virtual server images mechanisms.
B. Ready-Made Environments, Virtual Server B and Physical Server B were subjected to an attack that succeeded due to overlapping trust boundaries. This type of attack can be mitigated by implementing the single sign-on mechanism.
C. Ready-Made Environment B, Virtual Server B and Physical Server B were subjected to a virtualization attack that can be mitigated by implementing the encryption and digital signature mechanisms.
D. Ready-Made Environment B. Virtual Server B and Physical Server B were subjected to a weak authentication attack that can be mitigated by implementing the encryption and digital signature mechanisms.

Question 3

Cloud Service A is being made available on public Cloud X by Cloud Provider X via the SaaS delivery model. Cloud Service A is hosted by Physical Server A that also hosts cloud services being used by different cloud service consumers (and owned by different cloud service owners).
Cloud Service Consumers A and B access Cloud Service A on a regular basis and Physical Server A has been able to accommodate the resulting usage load After reviewing the implementation environment for Cloud Service A. Cloud Provider X determines it needs to enhance the ubiquitous access and multi-tenancy characteristics within this part of Cloud X.

Which of the following statements accurately describes a solution that fulfills all of these requirements?

A. The resilient computing mechanism can be implemented to address ubiquitous access requirements by making Cloud Service A available to a broader range of cloud service consumer devices, including desktops running Web browsers and various mobile devices. The resource replication mechanism can be implemented to enable multi-tenancy within the Cloud Service A implementation.
B. The multi-device broker mechanism can be implemented to address ubiquitous access requirements by broadening the range of cloud service consumers that can access Cloud Service A. The virtual server mechanism can be implemented to establish the multitenancy capabilities of Cloud Service A.
C. The resource replication mechanism can be introduced to address ubiquitous access requirements by broadening the range of cloud service consumers that can use Cloud Service A via standard service replication. The virtual server mechanism can be implemented to enable multi-tenancy via each service replication resulting from the application of the resource replication mechanism.
D. The multi-device broker mechanism can be implemented to address ubiquitous access requirements by broadening the range of cloud service consumers that can access Cloud Service The resilient computing mechanism can be implemented to establish the multitenancycapabilities of Cloud Service A so that it will be able to resiliency accommodate the additional cloud service consumer devices that will gain access to it.

Solutions: