nerdexam
CompTIA

CV0-002 · Question #282

A cloud administrator for a state government agency is tasked with giving access to the voter registration application to a government agency in another state. Only authorized officials from each stat

The correct answer is C. Deploy the application to a public cloud and implement ACLs and security access policies to limit. To grant access to a voter registration application to another state agency while ensuring only authorized officials can use it, leveraging existing common environments.

Cloud architecture

Question

A cloud administrator for a state government agency is tasked with giving access to the voter registration application to a government agency in another state. Only authorized officials from each state should access the application. These agencies have a common environment where applications have been deployed in the past. Which of the following should the cloud administrator do to give access to the application?

Options

  • ADeploy part of the application into a public cloud and establish secure connections to a private
  • BDeploy the application to a community cloud that is shared with multiple state government
  • CDeploy the application to a public cloud and implement ACLs and security access policies to limit
  • DDeploy the application to the state's private cloud and give authentication credentials to the other

How the community answered

(47 responses)
  • A
    4% (2)
  • B
    11% (5)
  • C
    83% (39)
  • D
    2% (1)

Why each option

To grant access to a voter registration application to another state agency while ensuring only authorized officials can use it, leveraging existing common environments.

ADeploy part of the application into a public cloud and establish secure connections to a private

Deploying part of the application to a public cloud and establishing secure connections to a private cloud creates a hybrid environment which is overly complex for simply granting access, and doesn't inherently address the "only authorized officials" requirement for the other agency.

BDeploy the application to a community cloud that is shared with multiple state government

While a community cloud is shared among specific organizations, deploying to one might not be necessary if the application already exists, and the prompt implies leveraging existing infrastructure rather than a new deployment model; a community cloud doesn't inherently guarantee granular access control without additional policies.

CDeploy the application to a public cloud and implement ACLs and security access policies to limitCorrect

Deploying the application to a public cloud and implementing Access Control Lists (ACLs) and security access policies allows for granular control over who can access the application. Public clouds offer robust identity and access management (IAM) features, such as federated identity or guest access, that can be configured to grant specific authorized officials from both states access while restricting all others.

DDeploy the application to the state's private cloud and give authentication credentials to the other

Deploying to the state's private cloud and simply giving authentication credentials to the other state agency is less secure and scalable than leveraging public cloud IAM features, which provide more sophisticated policy enforcement capabilities.

Concept tested: Secure cross-agency access in cloud

Source: https://learn.microsoft.com/en-us/azure/architecture/guide/security/access-control-identity

Topics

#Community cloud#Cloud deployment models#Multi-tenancy#Inter-agency collaboration

Community Discussion

No community discussion yet for this question.

Full CV0-002 Practice