nerdexam
CompTIA

CAS-003 · Question #690

A company is in the process of re-architecting its sensitive system infrastructure to take advantage of on-demand computing through a public cloud provider. The system to be migrated is sensitive…

The correct answer is A. Implement a direct connection from the company to the cloud provider. The architecture has application servers in the cloud but database servers on-premises, with the system being sensitive to latency, availability, and integrity. This hybrid design requires a reliable, low-latency, private connection between the on-premises data center and the…

Enterprise Security Architecture

Question

A company is in the process of re-architecting its sensitive system infrastructure to take advantage of on-demand computing through a public cloud provider. The system to be migrated is sensitive with respect to latency availability, and integrity. The infrastructure team agreed to the following

  • Application and middleware servers will migrate to the cloud"; Database servers will remain on-

site

  • Data backup wilt be stored in the cloud

Which of the following solutions would ensure system and security requirements are met?

Options

  • AImplement a direct connection from the company to the cloud provider
  • BUse a cloud orchestration tool and implement appropriate change control processes
  • CImplement a standby database on the cloud using a CASB for data-at-rest security
  • DUse multizone geographic distribution with satellite relays

How the community answered

(33 responses)
  • A
    67% (22)
  • B
    3% (1)
  • C
    12% (4)
  • D
    18% (6)

Explanation

The architecture has application servers in the cloud but database servers on-premises, with the system being sensitive to latency, availability, and integrity. This hybrid design requires a reliable, low-latency, private connection between the on-premises data center and the cloud. A dedicated direct connection (such as AWS Direct Connect or Azure ExpressRoute) bypasses the public internet entirely, providing consistent low latency, high bandwidth, and strong integrity guarantees for communication between cloud app servers and the on-site database. Cloud orchestration tools (B) manage deployments but do not solve the connectivity problem. Putting a standby DB in the cloud (C) contradicts the requirement to keep the database on-site. Satellite relays (D) introduce latency, violating the sensitivity requirement.

Topics

#hybrid cloud architecture#direct connect#latency and integrity#cloud migration

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice