Refer to the exhibit.

You have been hired to assist with a migration to an ITaaS environment. The company has offices
in Atlanta, Dubai, and London, with 5000, 2000, and 3000 employees, respectively. A data center exists in each location, and most services have been virtualized. Messaging services are provided locally to the user.
You have just performed an assessment of the environment. The results are shown in the exhibit.
The CIO is interested in closing one of the data centers and migrating some or all of the services to a public cloud service provider (CSP). Any services that do not get migrated to the CSP will be hosted at one of the other two data centers. Network latency averages 8 milliseconds between the Atlanta and London offices, and 10 milliseconds between the London and Dubai offices. Traffic between Atlanta and Dubai is routed through London.
The eCommerce application is external facing and is hosted at all three data centers. Atlanta services 50% of the users in North and South America. London services 40% of the users in Europe and Asia. Dubai services 10% of the users in Africa and Australia.
You have tentatively chosen a CSP that is housed in Frankfurt, and would have access to 3 Gb/s of network bandwidth to the facility. The CSP's service levels are as follows:
-RPO: 4 hours -RTO: 1 hour -Availability: 99.995%
Your recommendation is to close the Dubai data center over a one-year time horizon.
What migration strategy would you recommend for the services that are currently hosted in the Dubai data center, and why?

• A. eCommerce to the public cloud; Messaging to Atlanta; CSP cannot support the bandwidth requirements for Messaging, and latency will be less from Atlanta
• B. Messaging to the public cloud; split eCommerce between London and Atlanta; CSP cannot support the availability for eCommerce
• C. Messaging and eCommerce to the public cloud; CSP can support availability and bandwidth requirements for both applications
• D. eCommerce to the public cloud; Messaging to London; CSP cannot support the bandwidth requirements for Messaging, and latency will be less from London

Which risk domain(s) is a concern when end users independently leverage the public cloud outside the management of corporate IT?

• A. Accessibility and Ease of use
• B. FIPS-140 enforcement
• C. Non-repudiation
• D. Availability and Control

You have been hired by a large, global manufacturing company to conduct a consolidation assessment.
During the interview process, you determine which applications are most important to the business. Key performance metrics are also collected. You also find:
-Some applications see little or no use -SLAs for mission critical applications are 99.99% -Corporate email is considered proprietary and confidential information -Country specific regulations apply to certain applications
What should you use to determine proper application placement?

• A. Cloud security alliance controls matrix
• B. Application level gap analysis
• C. Workload analysis for right-sourcing
• D. Cloud services assessment

An enterprise has decided to implement a new service that will process credit card information.
They will deploy this service within a hybrid cloud.
Their public cloud provider claims to be PCI DSS compliant. The enterprise wishes to implement a service that is PCI compliant with the least amount of effort. The service is protected by a policy based intrusion detection system. Cardholder data is securely transmitted to the web interface.
Which additional design elements would best be suited for this implementation?

• A. The card number is masked as it is typed and is immediately encrypted and securely sent directly to the credit card processing system. Credit card information is stored using AES 128 encryption within the public cloud provider or within the private cloud, depending on the location of the service.
• B. The card number is masked as it is typed and is immediately encrypted and securely sent directly to the credit card processing system. No credit card information is stored within the application.
• C. The card number is masked as it is typed and is immediately encrypted and securely sent to both the credit card processing system and to the private cloud for historical tracking and reporting only.
• D. The card number is masked as it is typed and is immediately encrypted and securely sent directly to the credit card processing system. Credit card information is only stored in the public cloud provider's systems using AES 128 encryption.