EMC IT-as-a-Service Expert Exam for Cloud Architects Sample Questions:

1. An enterprise has decided to implement a new service that will process credit card information. They will deploy this service within their private cloud. They have a relationship with a public cloud provider that claims to be PCI compliant.
The enterprise wishes to implement a service that is PCI compliant with the least amount of effort. The service is protected by a policy-based intrusion detection system. Cardholder data is securely transmitted to the web interface.
Which additional design elements would best be suited for this implementation?

A) The card number is masked as it is typed and is immediately encrypted and securely sent directly to the credit card processing system. Credit card information is backed up to the private cloud system and stored using AES 128 encryption.
B) The card number is masked as it is typed and is immediately encrypted and securely sent directly to the credit card processing system. No credit card information is stored within the application.
C) The card number is masked as it is typed and is immediately encrypted and securely sent to both the credit card processing system and to private cloud for historical tracking and reporting only.
D) The card number is masked as it is typed and is immediately encrypted, stored, and securely sent directly to the credit card processing system. Credit card information is stored within the public cloud provider using AES 128 encryption.

2. The IT department and lines of business at a pharmaceutical company are determining what the best resource allocation and chargeback models would be to fund their development efforts.
The primary drivers are:
-Guaranteed resources are always available -Applications should be able to burst quickly on-demand -SLAs are negotiable
Which best meets the requirements?

A) A guaranteed allocation model. Each LOB is billed one rate for both the resources used within the guaranteed pool and the shared pool.
B) A variable resource allocation model. Each LOB is billed one rate for the resources used within the guaranteed pool and a different rate for the resources used within the shared pool.
C) A guaranteed allocation model. Each LOB is billed one rate for the resources used within the guaranteed pool and a different rate for the resources used within the shared pool.
D) A variable resource allocation model. Each LOB is billed one rate for both the resources used within the guaranteed pool and shared pool.

3. An IT group within an organization is transforming their virtualized data center to ITaaS. They plan to implement a chargeback method to appropriately bill the lines of business for the resources consumed. IT will initially offer a Windows platform for the QA personnel to perform end user testing on the application developed by the engineering group.
How would they effectively determine the cost of a service instance?

A) Use the fixed costs and variable costs associated with the service, then factor in the number of service instances that the infrastructure resources can support.
B) Use the cost of the hardware, software, and licensing. Add in growth, then factor in the number of VMs that the hypervisors can support.
C) Use the price that is used by a competitive CSP as a baseline. Factor in variable administrative costs, and then divide by the number of planned service instances.
D) Use the Windows license cost and growth requirements, then factor in the number of service instances that can be supported.

4. You are working with an independent software vendor to deploy a new SaaS-based application into an organization's private cloud. The application supports REST and SAML binding for authentication. Which cloud single sign-on solution would best fit the needs of this SaaS application?

A) OpenID
B) LDAP
C) SCIM
D) OAuth

5. An enterprise is beginning its journey to IT-as-a-Service (ITaaS), and has retained a Cloud Architect to assist them. An assessment of their current environment has already been completed and a gap analysis has been done.
What should the Cloud Architect recommend to determine if business activities are aligned with strategic vision?

A) A Balanced Scorecard
B) A Controls Matrix
C) Right-Sourced Workloads
D) ITaaS Organizational Readiness Assessment

Solutions: