A financial company has made several acquisitions within the past few years. They currently have two primary data centers that are 50 km apart. Recently, an internal assessment was conducted to explore ways to improve ingress/egress utilization and to extend their firewall to the cloud.
Which type of firewall would best suit their needs?

• A. Linked VPN
• B. Reverse proxy servers
• C. Load balanced reverse proxy servers
• D. Federated

A government department has converted their internal software development environment into a cloud services offering. The department is actively marketing the capability to other agencies. The other agencies are interested, but identity compliance is a serious concern.
How can the department improve trust within their service offering?

• A. Identify the confidentiality, integrity and availability requirements for agency data. Use rights management software to restrict access to the agency's own data.
• B. Provide a self-service portal that describes how the department's security policy is implemented. Require users to accept the policy each time it is amended.
• C. Harden the cloud service infrastructure stack. Use geographic location to ensure agencies can only access servers that host their development environment.
• D. Establish a single sign-on capability in the cloud and federate with each subscribing agency using strong authentication policies and end-point access control.

An IT security team is concerned about the authentication traffic patterns that may be required to integrate the private and public clouds. As a result, IT has elected to federate their active directory using ADFS from the private cloud to the public cloud.
One of the design decisions is whether to use a Layer 2, 3, or 7 firewall / switch mechanism between the public and private clouds. There are trade-offs with each choice.
Which network layer would best address this situation, and why?

• A. Layer 2, because it provides the simplest configuration to manage and it is easy to isolate and troubleshoot problems.
• B. Layer 2, because it provides the best performance and it is easy to isolate problems.
• C. Layer 3, because it allows segment isolation while still providing high performance levels.
• D. Layer 7, because it allows control at the application layer and is policy driven.

An enterprise decided to place some sensitive data in the public cloud and implemented security mechanisms to protect this data.
Recently the public cloud provider's systems had a security breach. The enterprise was not concerned because they felt their data had been completely protected. All of the services housing the data are protected by an IPS application and no alerts were generated by the system.
How did the enterprise protect its data?

• A. All data in the public cloud environment was encrypted at-rest only. The encryption keys were
  under complete control of the enterprise and were not available to the public provider.
  The cloud provider's logs showed that the enterprise's services were copied.
• B. All data in the public cloud environment was encrypted in-transit only. The encryption keys were
  under complete control of the enterprise and were not available to the public provider.
  The cloud provider's logs showed that the enterprise's services were copied.
• C. All data in the public cloud environment was encrypted at-rest and in-transit. The encryption
  keys were under complete control of the enterprise and were not available to the public provider.
  The cloud provider's logs showed that the enterprise's services were copied.
• D. All data in the public cloud environment was encrypted at-rest and in-transit. Copies of the
  encryption keys were secured by the public cloud provider in case they were lost.
  The cloud provider's logs showed that the enterprise's services were neither accessed nor copied.

Refer to the exhibit.

You are discussing a network design that a cloud service provider has proposed for a tenant. The tenant states that one more firewall is required, and you agree.
Where should the firewall be placed?

• A. Between VM2 and the tenant network
• B. Between the tenant network and the external network
• C. Between the Service A and Service B
• D. Between VM2 and VM4