nerdexam
CompTIA

CV0-003 · Question #302

A cloud administrator is securing access to a VM using an IaaS cloud platform. The administrator must perform this task using an automated method, allow administrators to perform any method and…

The correct answer is C. Java. Automating granular VM access control on an IaaS platform requires a full programming language capable of calling cloud management APIs and enforcing role-based policies.

Security

Question

A cloud administrator is securing access to a VM using an IaaS cloud platform. The administrator must perform this task using an automated method, allow administrators to perform any method and expose any property of the VM, deny access for everyone else, and allow only read-only access to everyone else. Given this scenario, which of the following should the administrator use to BEST meet these requirements?

Options

  • AjQuery
  • BJavaScript
  • CJava
  • DJSON

How the community answered

(37 responses)
  • A
    5% (2)
  • B
    16% (6)
  • C
    70% (26)
  • D
    8% (3)

Why each option

Automating granular VM access control on an IaaS platform requires a full programming language capable of calling cloud management APIs and enforcing role-based policies.

AjQuery

jQuery is a JavaScript library for DOM manipulation in web browsers and has no capability to interface with IaaS management APIs for VM access control.

BJavaScript

JavaScript is a web-centric scripting language and, while Node.js can call cloud APIs, it is not the standard or most capable choice for enterprise IaaS automation with fine-grained access control enforcement.

CJavaCorrect

Java is a widely supported programming language with mature, official SDKs for major IaaS platforms such as AWS, Azure, GCP, and OpenStack. A Java-based automation program can programmatically interact with cloud management APIs to define and enforce role-based access policies - granting administrators full method and property access, restricting others to read-only operations, and denying all remaining users - satisfying all specified requirements through code-driven automation.

DJSON

JSON is a data interchange format used to represent configurations and policies, but it is not an executable programming language and cannot perform automated logic on its own.

Concept tested: IaaS VM access control automation via programming languages

Source: https://docs.aws.amazon.com/sdk-for-java/latest/developer-guide/home.html

Topics

#API access control#IaaS automation#VM security#RBAC

Community Discussion

No community discussion yet for this question.

Full CV0-003 Practice