CV0-002 · Question #282
A cloud administrator for a state government agency is tasked with giving access to the voter registration application to a government agency in another state. Only authorized officials from each stat
The correct answer is C. Deploy the application to a public cloud and implement ACLs and security access policies to limit. To grant access to a voter registration application to another state agency while ensuring only authorized officials can use it, leveraging existing common environments.
Question
A cloud administrator for a state government agency is tasked with giving access to the voter registration application to a government agency in another state. Only authorized officials from each state should access the application. These agencies have a common environment where applications have been deployed in the past. Which of the following should the cloud administrator do to give access to the application?
Options
- ADeploy part of the application into a public cloud and establish secure connections to a private
- BDeploy the application to a community cloud that is shared with multiple state government
- CDeploy the application to a public cloud and implement ACLs and security access policies to limit
- DDeploy the application to the state's private cloud and give authentication credentials to the other
How the community answered
(47 responses)- A4% (2)
- B11% (5)
- C83% (39)
- D2% (1)
Why each option
To grant access to a voter registration application to another state agency while ensuring only authorized officials can use it, leveraging existing common environments.
Deploying part of the application to a public cloud and establishing secure connections to a private cloud creates a hybrid environment which is overly complex for simply granting access, and doesn't inherently address the "only authorized officials" requirement for the other agency.
While a community cloud is shared among specific organizations, deploying to one might not be necessary if the application already exists, and the prompt implies leveraging existing infrastructure rather than a new deployment model; a community cloud doesn't inherently guarantee granular access control without additional policies.
Deploying the application to a public cloud and implementing Access Control Lists (ACLs) and security access policies allows for granular control over who can access the application. Public clouds offer robust identity and access management (IAM) features, such as federated identity or guest access, that can be configured to grant specific authorized officials from both states access while restricting all others.
Deploying to the state's private cloud and simply giving authentication credentials to the other state agency is less secure and scalable than leveraging public cloud IAM features, which provide more sophisticated policy enforcement capabilities.
Concept tested: Secure cross-agency access in cloud
Source: https://learn.microsoft.com/en-us/azure/architecture/guide/security/access-control-identity
Topics
Community Discussion
No community discussion yet for this question.