nerdexam
Huawei

H13-821_V3.0 · Question #119

Security is the basis of architecture design. Designing a secure architecture can minimize the risk of system intrusion and ensure business operation. Which of the following is not a high-security…

The correct answer is B. Use the elastic scaling service AS to adjust the number of instances according to the actual. Option B describes elastic auto-scaling, which is a feature designed for availability, performance, and cost efficiency - adjusting compute capacity based on demand has no direct role in securing a system against intrusion or protecting data. Options A, C, and D are each core…

Network and Security Solution Design on Huawei Cloud

Question

Security is the basis of architecture design. Designing a secure architecture can minimize the risk of system intrusion and ensure business operation. Which of the following is not a high-security architecture design purpose?

Options

  • AManage IAM through a unified identity, distinguishing system roles and corresponding
  • BUse the elastic scaling service AS to adjust the number of instances according to the actual
  • CMulti-dimensional monitoring of the system, real-time assessment of system risk
  • DUse cloud certificate management CCM to manage certificates

How the community answered

(25 responses)
  • A
    4% (1)
  • B
    72% (18)
  • C
    16% (4)
  • D
    8% (2)

Explanation

Option B describes elastic auto-scaling, which is a feature designed for availability, performance, and cost efficiency - adjusting compute capacity based on demand has no direct role in securing a system against intrusion or protecting data. Options A, C, and D are each core security architecture concerns: unified IAM with role separation enforces least-privilege access control; multi-dimensional monitoring with real-time risk assessment enables threat detection and incident response; and certificate management via CCM ensures encrypted communications and authenticated identities. The key distinction is that auto-scaling addresses operational resilience, while the other three options directly address confidentiality, integrity, or access control.

Memory tip: Ask yourself whether each option "keeps bad actors out or detects them" - IAM controls who enters, monitoring watches for threats, and certificates authenticate identities. Auto-scaling only adjusts how many servers are running, which has nothing to do with keeping attackers out.

Topics

#Security Architecture Design#Identity & Access Management#Risk Monitoring#Certificate Management

Community Discussion

No community discussion yet for this question.

Full H13-821_V3.0 Practice