A company has decided to scale its e-commerce application from its corporate datacenter to a commercial cloud provider to meet an anticipated increase in demand during an upcoming holiday. The majority of the application load takes place on the application server under normal conditions. For this reason, the company decides to deploy additional application servers into a commercial cloud provider using the on-premises orchestration engine that installs and configures common software and network configurations. The remote computing environment is connected to the on-premises datacenter via a site-to-site IPSec tunnel. The external DNS provider has been configured to use weighted round-robin routing to load balance connections from the Internet.

During testing, the company discovers that only 20% of connections completed successfully.

Review the network architecture and supporting documents and fulfill these requirements: Identify the correct options to provide adequate configuration for hybrid cloud architecture.

Instructions:

If at any time you would like to bring back the initial state of the simulation, please select the Reset button. When you have completed the simulation, please select the Done button to submit. Once the simulation is submitted, please select the Next button to continue.

Simulation

Instruction: Only select a maximum of TWO options from the multiple choice question.

A. Deploy a Replica of the Database Server in the Cloud Provider

B. Update the PSK (Pre-shared key in Router2)

C. Update the A record on the DNS from 2.2.2.2 to 1.1.1.1

D. Promote deny All to allow All in Firewall1 and Firewall2

E. Change the Address Space on Router2

F. Change internal IP Address of Router1

G. Reverse the Weight property in the two CNAME records on the DNS

H. Add the Application Server at on-premises to the Load Balancer

The InfoSec team has directed compliance database activity monitoring without agents on a hosted database server in the public IaaS. Which of the following configurations is needed to ensure this requirement is achieved?

A. Configure the agent configuration file to log to the syslog server.

B. Configure sniffing mode on database traffic.

C. Implement built-in database tracking functionality.

D. Implement database encryption and secure copy to the NAS.

Ann, a cloud administrator, is reporting on how the organization has adhered to its marketing of 99.99999% system availability SLA. Given this scenario, which of the following should Ann include in her report?

A. System clock time

B. System idle percentage

C. System response time

D. System uptime

A cloud-based web proxy is blocking key sites that a business requires for operation. After validation, the sites are legitimate, and access is required for end users to complete their work. Which of the following is the BEST solution to allow access to the sites?

A. Instruct users to bypass the cloud-based web proxy.

B. Whitelist the URLs.

C. Blacklist the URLs.

D. Create a security group for those users and enforce MFA.

A cloud engineer needs to deploy a new virtual firewall in a private cloud. Which of the following should the engineer do as a FIRST step?

A. Document the deployment in a knowledge base.

B. Create a change for deploying the firewall.

C. Put the hypervisor in maintenance mode.

D. Inform users that the cloud will be momentarily unavailable.