EMC IT-as-a-Service Expert Exam for Cloud Architects Sample Questions:

1. Refer to the exhibit.

A cloud architect has presented you with the exhibit for peer review. You immediately realize that a firewall is missing. Where is the missing firewall?

A) Between the external network and the internet
B) Between VM2 and the tenant network
C) Between VM2 and VM4
D) Between the Service A and Service B

2. You are reviewing an organization's IT decision making processes in preparation for ITaaS. IT has a history of implementing technologies and solutions that don't meet the needs of the enterprise. What would you recommend to solve this problem?

A) Services should align to business objectives and be placed in a service catalog
B) Services should align to IT goals and be placed in a service catalog
C) Services should align to IT goals and be implemented through orchestration
D) Services should align to business objectives and be implemented through orchestration

3. A health care applications software company has been growing rapidly by acquiring several similar companies, which are based in other states.
IT is now struggling to provide services for developing, testing and supporting multiple application teams. For each application, customer support must frequently handle sensitive electronic medical records data that is subject to Federal compliance. No formal standards or policies have been established across application teams relative to sensitive data.
With the goal of ITaaS transformation, senior management seeks to establish IT governance. What would you recommend for a governance model, and why?

A) Hybrid, since it is the best approach during rapid growth by acquisition
B) Federated by application, since it ensures autonomy for each application team and promotes customer satisfaction
C) Centralized, since security and compliance concerns are relatively homogeneous across the enterprise
D) Distributed by geography, since it enables localized control and lock down of sensitive data

4. An enterprise company has a large, virtualized data center. They are currently in the process of auditing their virtual servers to ensure they are in compliance with regulatory requirements.
They want to be able to check new and existing virtual servers for compliance and automatically remediate any virtual machines that are found to be out of compliance.
As a Cloud Architect, which product would you recommend for this purpose?

A) RSA Archer eGRC Platform
B) VMware vCenter Configuration Manager
C) VMware vCenter Orchestrator
D) Cisco Intelligent Automation for Cloud (CIAC)

5. A government department has converted their internal software development environment into a cloud services offering. The department is actively marketing the capability to other agencies. The other agencies are interested, but identity compliance is a serious concern.
How can the department improve trust within their service offering?

A) Establish a single sign-on capability in the cloud and federate with each subscribing agency using strong authentication policies and end-point access control.
B) Identify the confidentiality, integrity and availability requirements for agency data. Use rights management software to restrict access to the agency's own data.
C) Provide a self-service portal that describes how the department's security policy is implemented. Require users to accept the policy each time it is amended.
D) Harden the cloud service infrastructure stack. Use geographic location to ensure agencies can only access servers that host their development environment.

Solutions: