A company processes data subject to NDAs with partners that define the processing and storage constraints for the covered data. The agreements currently do not permit moving the covered data to the cloud, and the company would like to renegotiate the terms of the agreements.

Which of the following would MOST likely help the company gain consensus to move the data to the cloud?

1. Designing data protection schemes to mitigate the risk of loss due to multitenancy
2. Implementing redundant stores and services across diverse CSPs for high availability
3. Emulating OS and hardware architectures to blur operations from CSP view
4. Purchasing managed FIM services to alert on detected modifications to covered data

A network architect is designing a new SD-WAN architecture to connect all local sites to a central hub site. The hub is then responsible for redirecting traffic to public cloud and datacenter applications. The SD-WAN routers are managed through a SaaS, and the same security policy is applied to staff whether working in the office or at a remote location. The main requirements are the following:

1. The network supports core applications that have 99.99% uptime.

2. Configuration updates to the SD-WAN routers can only be initiated from the management service.

3. Documents downloaded from websites must be scanned for malware.

Which of the following solutions should the network architect implement to meet the requirements?

Options:

A Reverse proxy, stateful firewalls, and VPNs at the local sites
B IDSs, WAFs, and forward proxy IDS
C DoS protection at the hub site, mutual certificate authentication, and cloud proxy
D IPSs at the hub, Layer 4 firewalls, and DLP

An organization is designing a network architecture that must meet the following requirements:

✑ Users will only be able to access predefined services.

✑ Each user will have a unique allow list defined for access.

✑ The system will construct one-to-one subject/object access paths dynamically.

Which of the following architectural designs should the organization use to meet these requirements?

1. Peer-to-peer secure communications enabled by mobile applications
2. Proxied application data connections enabled by API gateways
3. Microsegmentation enabled by software-defined networking
4. VLANs enabled by network infrastructure devices

A small company needs to reduce its operating costs. vendors have proposed solutions, which all focus on management of the company's website and services. The Chief information Security Officer (CISO) insist all available resources in the proposal must be dedicated, but managing a private cloud is not an option. Which of the following is the BEST solution for this company?

Options:

A Community cloud service model
B Multinency SaaS
C Single-tenancy SaaS
D On-premises cloud service model