Cloud X (owned by Cloud Provider X) provides Physical Server A which hosts Virtual
Servers A and B.
Virtual Server B hosts Ready-Made Environments A and B.
Cloud Service Consumer A uses Virtual Server A as part of an IaaS leasing agreement in which
Cloud Consumer A is charged a fixed monthly fee for unlimited access. Cloud Service
Consumers B and C use Ready-Made Environments A and B respectively as part of a
PaaS leasing agreement based on per-minute usage fees. In both cases, access is
monitored via Pay-For-Use Monitor A, which keeps track of log-in and log-out times in
order to calculate the usage charges that are billed to Cloud Consumers B and C.
Virtual Server A begins generating a series of exceptions. Soon thereafter, Virtual Server B
becomes destabilized, resulting in further exceptions being raised in Ready-Made
Environments A and B.
Cloud Service Consumers B and C receive a series of error
messages until both of their connections are dropped Finally, Physical Server A shuts
down completely. A subsequent investigation reveals that Virtual Server A was the victim of
a security attack performed by a malicious cloud service consumer, the attacker generated
increased loads of external communication requests on Virtual Server A and the underlying
network, causing Physical Server A (along with Virtual Server B) to eventually shut down.

Which of the following statements accurately identifies the type of security threat that
corresponds to the described attack - and -provides a solution that can directly mitigate this
type of security threat within Cloud X?

• A. Virtual Server A was subjected to an insufficient authorization attack that can be
  mitigated by implementing the digital signature and hardened virtual server image
  mechanisms.
• B. Virtual Server A was subjected to a denial of service attack that can be mitigated by
  implementing the hardened virtual server image and identity and access management
  mechanisms.
• C. Virtual Server A was subjected to a denial of service attack that can be mitigated by
  implementing the encryption and digital signature mechanisms.
• D. Virtual Server A was subjected to an insufficient authorization attack that can be
  mitigated by implementing the single sign-on mechanism.

Cloud Provider X (which owns Cloud X) deploys two physical servers (Physical Servers A
and B) and two databases (Databases A and B). Virtual Servers A and B are hosted by
Physical Server A and Ready-Made Environments A and B are hosted by Virtual Server B.
Virtual Servers C and D are hosted by Physical Server B.
Cloud Service Consumer A regularly accesses Virtual Server D in order to test and deploy a new cloud service that
was developed on-premise by the cloud consumer organization operating Cloud Service
Consumer A.
Cloud Service Consumer B (operated by a different cloud consumer organization) has been regularly accessing Ready-Made Environment A in order to develop
and deploy a different new cloud service.

Cloud X is a private cloud that, to-date, has been set up within the cloud provider company
to provision IT resources free of charge to internal cloud consumers, via PaaS and IaaS
delivery models. The cloud consumers that have been operating Cloud Service Consumers
A and B represent different IT departments within the company that have been working
separately on the development of new cloud services. Cloud Service Consumer A has
been accessing Virtual Server D to make necessary configurations and administration
settings for the upcoming deployment of a new cloud service that was previously
developed outside of Cloud X.
Cloud Service Consumer B has been accessing Ready-
Made Environment A to develop and now deploy a different new cloud service.
Cloud Provider X (which is represented by a separate IT department dedicated to
governing and administering Cloud X) determines that it will need to introduce three
specific enhancements to Cloud X in order to accommodate both upcoming cloud services.
First, it needs to add a way to charge cloud consumers for the usage of cloud services.
Secondly, it needs to add a way for new cloud services to be automatically scaled. Finally,
it needs to add a way for a cloud consumer to be automatically notified when a cloud
service encounters runtime loads that exceed its allocated usage threshold.
Which of the following statements accurately describes a solution that fulfills all three
identified requirements?

• A. The pay-for-use monitor mechanism can be installed to address the requirement for
  cloud service usage charges to be tracked and recorded. The automated scaling listener
  mechanism can be implemented to address the requirement for cloud services to be
  automatically scaled. The multi-device broker mechanism can be implemented to address
  the requirement for notifications to be issued when cloud service loads exceed thresholds.
• B. The pay-for-use monitor mechanism can be installed to address the requirement for
  cloud service usage to be tracked and recorded. The automated scaling listener
  mechanism can be implemented to address both the requirement for cloud services to be
  automatically scaled and for notifications to be issued when cloud service loads exceed
  thresholds.
• C. The pay-for-use monitor mechanism can be implemented to address the requirement for
  cloud service usage charges to be tracked and recorded, for cloud services to be
  automatically scaled, and for notifications to be issued when cloud service loads exceed
  thresholds.
• D. The state management database mechanism together with the virtual server mechanism
  and the automated scaling listener mechanism can be implemented to address the
  requirement for cloud service usage charges to be tracked and recorded, for cloud services
  to be automatically scaled, and for notifications to be issued when cloud service loads
  exceed thresholds.