Free D-CIS-FN-01 sample questions

Correct answer: Hold Your Own Key (HYOK)

Hold Your Own Key (HYOK) is the correct model for this scenario. It allows an organization to use its on-premises key management infrastructure, such as an HSM, to generate and manage encryption keys. The cloud service uses these keys to encrypt and decrypt data but never has access to the keys themselves, fulfilling the strict compliance requirement. Cloud provider-managed keys and keys in a cloud vault both involve the provider having some level of access or control, which is forbidden by the requirements. Encryption in use protects data during processing, which is different from key management.

Correct answers: Create three distinct copies of the critical data.; Store the backup copies on at least two different types of media.; Keep one of the backup copies at an off-site location.

The 3-2-1 rule dictates maintaining at least three copies of your data (the primary data plus two backups).

The rule specifies using two different storage media types (e.g., disk and cloud storage, or disk and tape) to protect against media-specific failures.

The rule requires keeping one copy off-site to protect against local disasters like fire or flood.

Correct answer: Refactor

Refactoring is the most appropriate approach. It involves restructuring and re-architecting parts of the application to take advantage of cloud-native features, such as breaking down the monolith into microservices. This directly addresses the need to scale and update components independently without a complete rewrite. Rehosting would not solve the underlying architectural problems. Replatforming would make only minor changes. Rebuilding implies a complete rewrite, which the company wants to avoid.

Correct answer: On-demand self-service

On-demand self-service allows a consumer to unilaterally provision computing capabilities, such as server time and network storage, as needed automatically without requiring human interaction with each service provider. The scenario described, where developers use a web portal to provision resources without manual intervention, is a classic example of this characteristic.

Correct answer: SLA Management

SLA Management is the process responsible for negotiating, agreeing upon, and monitoring Service Level Agreements. This includes tracking performance against the agreed-upon metrics (like uptime), reporting on the results, and initiating actions if the service levels are not met. Identifying that the 99.91% actual uptime is below the 99.95% guaranteed uptime is a core function of SLA Management.

Correct answer: N+1 Redundancy

This configuration represents N+1 redundancy. Here, 'N' is the number of components required for the system to operate (e.g., 2 servers to handle the load), and '+1' is the extra component added for failover. If one of the three servers fails, the remaining two can still handle the workload. This is a common and cost-effective way to provide high availability. 2N would require full duplication (4 servers if N=2), and N+M allows for multiple failures. Geographic redundancy involves multiple locations.

Correct answer: Dell EMC VxRail for the private cloud and Dell EMC VxFlex for the block storage.

Dell EMC VxRail is a hyperconverged infrastructure (HCI) appliance that tightly integrates compute, storage, virtualization, and management, making it ideal for the primary goal of a simple, scalable private cloud. Dell EMC VxFlex is a software-defined storage (SDS) solution that provides highly scalable and flexible block storage, which can be deployed on commodity hardware, perfectly matching the secondary project's requirement. PowerEdge MX is modular infrastructure, not a complete HCI solution in the same way VxRail is.

Correct answer: False

This statement is false. MFA enhances security by requiring two or more verification factors from independent categories: something you know (password), something you have (a security token or phone), and something you are (biometrics). Complex password requirements are a single-factor control, whereas MFA adds additional, separate layers of verification.

Correct answer: A hot DR site in Munich with synchronous replication.

A hot DR site is a fully operational duplicate of the primary site, allowing for near-instantaneous failover, which is necessary to meet the 1-hour RTO. Synchronous replication ensures that data is written to both the primary and DR sites simultaneously, achieving a near-zero RPO, which satisfies the 15-minute RPO requirement. Locating the site in Munich keeps all data within Germany, meeting data sovereignty laws. A cold or warm site would not meet the stringent RTO, and asynchronous replication might not meet the 15-minute RPO.

Correct answer: Platform as a Service (PaaS)

Platform as a Service (PaaS) is the correct model. PaaS provides a platform allowing customers to develop, run, and manage applications without the complexity of building and maintaining the infrastructure typically associated with developing and launching an app. The cloud provider manages the OS, hardware, and runtime, while the customer manages their application and data. IaaS would require the company to manage the OS. SaaS would provide a complete application, not a platform for development.