E20-918 Real Exam Questions

EMC E20-918 Exam Which risk domain(s) is a concern when end users independently leverage the public cloud outside the management of corporate IT?

A large health insurance company has a mature ITaaS implementation. They have developed a SaaS claims filing application for use in their internal telephone claims center. Last month, a decision to sell policies through independent insurance agents was approved by the Board of Directors. As a result, claims data must be made available in the offices of the independent insurance agents. Which body has the responsibility of defining data access to the independent insurance agents?

A company has deployed a fully operational, private PaaS service. The service catalog links to an orchestration engine that builds servers automatically. What is the primary reason the IT security risk team is proposing the use of strong authentication for all service catalog users?

Refer to Scenario 5. Another evaluation point is the completion time for weekly full backups to the cloud service provider. Which would have the most favorable impact on full backup speed?

An IT security team is concerned about the authentication traffic patterns that may be required to integrate the private and public clouds. As a result, IT has elected to federate their active directory using ADFS from the private cloud to the public cloud. One of the design decisions is whether to use a Layer 2, 3, or 7 firewall / switch mechanism between the public and private clouds. There are trade-offs with each choice. Which network layer would best address this situation, and why?