A cloud architect needs to isolate the most sensitive portion of the network while maintaining hosting in a public cloud. Which of the following configurations can be employed to support this effort?

Question

Options

• ACreate a single-tenancy security group in the public cloud that hosts only similar types of servers
• BPrivatize the cloud by implementing an on-premises instance.
• CCreate a hybrid cloud with an on-premises instance for the most sensitive server types.
• DSandbox the servers with the public cloud by server type

• A
  4% (1)
• B
  8% (2)
• C
  85% (22)
• D
  4% (1)

Explanation

A hybrid cloud architecture places the most sensitive workloads on an on-premises (private) infrastructure while less sensitive workloads remain in the public cloud. This achieves both goals: the organization retains public cloud hosting for general workloads and the cost/scalability benefits that come with it, while the most sensitive servers are isolated on-premises where physical security, access controls, and data sovereignty can be strictly enforced. Public cloud security groups (A) provide logical segmentation but do not truly isolate sensitive data from the cloud provider's infrastructure. Fully privatizing the cloud on-premises (B) abandons public cloud hosting entirely, which contradicts the requirement. Sandboxing within the public cloud (D) still leaves sensitive data in a shared cloud environment.

No community discussion yet for this question.