After initial stress testing showed that a platform performed well with the specification of a single 32 vCPU node, which of the following will provide the desired service with the LOWEST cost and downtime?
Correct Answer: B
Question 282
A company would like to move all its on-premises platforms to the cloud. The company has enough skilled Linux and web-server engineers but only a couple of skilled database administrators. It also has little expertise in managing email services. Which of the following solutions would BEST match the skill sets of available personnel?
Correct Answer: C
Explanation To answer this question, we need to understand the different types of cloud computing models and how they suit the skill sets of the available personnel. According to Google Cloud, there are three main models for cloud computing: Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS). Each model provides different levels of control, flexibility, and management over the cloud resources and services1. IaaS: This model provides access to networking features, computers (virtual or on dedicated hardware), and data storage space. It gives the highest level of flexibility and management control over the IT resources and is most similar to existing IT resources that many IT departments and developers are familiar with2. PaaS: This model provides a complete cloud platform for developing, running, and managing applications without the cost, complexity, and inflexibility of building and maintaining the underlying infrastructure. It removes the need for organizations to manage the hardware and operating systems and allows them to focus on the deployment and management of their applications2. SaaS: This model provides a completed product that is run and managed by the service provider. It does not require any installation, maintenance, or configuration by the customers. It is typically used for end-user applications that are accessed through a web browser or a mobile app2. Based on these definitions, we can evaluate each option: Option A: Run the web servers in PaaS, and run the databases and email in SaaS. This option is not the best match for the skill sets of the available personnel because it does not leverage their expertise in Linux and web-server engineering. Running the web servers in PaaS means that they will have less control and customization over the web server environment and will have to rely on the service provider's platform features. Running the databases and email in SaaS means that they will not need any database administration or email management skills, but they will also have less flexibility and security over their data and communication. Option B: Run the web servers, databases, and email in SaaS. This option is not a good match for the skill sets of the available personnel because it does not utilize their skills at all. Running everything in SaaS means that they will have no control or responsibility over any aspect of their cloud environment and will have to depend entirely on the service provider's products. This option may be suitable for some small businesses or non-technical users who do not have any IT skills or resources, but not for a company that has skilled Linux and web-server engineers. Option C: Run the web servers in IaaS, the databases in PaaS, and the email in SaaS. This option is the best match for the skill sets of the available personnel because it balances their strengths and weaknesses. Running the web servers in IaaS means that they can use their Linux and web-server engineering skills to configure, manage, and optimize their web server infrastructure according to their needs. Running the databases in PaaS means that they can leverage the service provider's platform features to simplify their database development and administration tasks without having to worry about the underlying hardware and operating systems. Running the email in SaaS means that they can outsource their email services to a reliable and secure service provider without having to invest in or manage their own email infrastructure. Option D: Run the web servers, databases, and email in IaaS. This option is not a good match for the skill sets of the available personnel because it puts too much burden on them. Running everything in IaaS means that they will have to handle all aspects of their cloud environment, including networking, computing, storage, security, backup, scaling, patching, etc. This option may be suitable for some large enterprises or highly technical users who have full control and customization over their cloud environment, but not for a company that has only a couple of skilled database administrators and little expertise in managing email services. Therefore, option C is the correct answer.
Question 283
Some users are experiencing high latency when accessing their virtual desktops or retrieving saved documents. The administrator notices that two virtual desktops in the department are reserved for database processing applications that run several times a day. These machines are assigned to different hosts in the resource pool to provide a level of redundancy. Which of the following is the BEST course of action to remedy the situation?
Correct Answer: B
Question 284
A cloud architect is designing the VPCs for a new hybrid cloud deployment. The business requires the following: * High availability * Horizontal auto-scaling * 60 nodes peak capacity per region * Five reserved network IP addresses per subnet * /24 range Which of the following would BEST meet the above requirements?
Correct Answer: C
A /26 subnet is a subnet that has a network prefix of 26 bits and a host prefix of 6 bits. A /26 subnet can support up to 64 hosts (62 usable hosts) and has a subnet mask of 255.255.255.192. Creating two /26 subnets in different regions can best meet the business requirements for deploying a high availability, horizontally auto-scaling solution that has a peak capacity of 60 nodes per region and five reserved network IP addresses per subnet. Creating two /26 subnets can provide enough host addresses for the peak capacity and the reserved addresses, as well as allow for some growth or redundancy. Creating the subnets in different regions can provide high availability and horizontal auto-scaling, as it can distribute the workload across multiple locations and scale out or in based on demand. References: CompTIA Cloud+ Certification Exam Objectives, page 15, section 2.8
Question 285
A cloud security analyst needs to ensure the web servers in the public subnet allow only secure communications and must remediate any possible issue. The stateful configuration for the public web servers is as follows: Which of the following actions should the analyst take to accomplish the objective?
Correct Answer: A
To ensure the web servers in the public subnet allow only secure communications and remediate any possible issue, the analyst should remove rules 1, 2, and 5 from the stateful configuration. These rules are allowing insecure or unnecessary traffic to or from the web servers, which may pose security risks or performance issues. The rules are: Rule 1: This rule allows inbound traffic on port 80 (HTTP) from any source to any destination. HTTP is an unencrypted and insecure protocol that can expose web traffic to interception, modification, or spoofing. The analyst should remove this rule and use HTTPS (port 443) instead, which encrypts and secures web traffic. Rule 2: This rule allows outbound traffic on port 25 (SMTP) from any source to any destination. SMTP is a protocol that is used to send email messages. The web servers in the public subnet do not need to send email messages, as this is not their function. The analyst should remove this rule and block outbound SMTP traffic, which may prevent spamming or phishing attacks from compromised web servers. Rule 5: This rule allows inbound traffic on port 22 (SSH) from any source to any destination. SSH is a protocol that allows remote access and management of systems or devices using a command-line interface. The web servers in the public subnet do not need to allow SSH access from any source, as this may expose them to unauthorized or malicious access. The analyst should remove this rule and restrict SSH access to specific sources, such as the administrator's workstation or a bastion host.
