Question 1140
A software team migrates its custom virtual machines to cloud IaaS and assumes the provider patches the guest operating system. Before acting, which evidence should the project team examine FIRST to assess the stated need?
Explanation
Correct Answer
Inspect deployment architecture, shared-responsibility terms, maintenance needs, vendor guarantees, and administrator duties. This checks the relevant condition before the team intervenes. IaaS exposes infrastructure management, PaaS abstracts more platform maintenance, and SaaS provides a complete application with continuing customer identity and data duties. The controlled response is: Match cloud service models to who manages applications, operating systems, platforms and underlying infrastructure for an IT project. Situation: A software team migrates its custom virtual machines to cloud IaaS and assumes the provider patches the guest operating system.
Incorrect Answers
Inspect topology diagrams, firewalls, DNS, application tiers, storage latency, and service dependencies. That evidence would investigate Networking storage and tiered architecture dependencies, not the main uncertainty in this situation. To decide the current case, examine: Inspect deployment architecture, shared-responsibility terms, maintenance needs, vendor guarantees, and administrator duties. Situation: A software team migrates its custom virtual machines to cloud IaaS and assumes the provider patches the guest operating system.
Inspect data subjects' locations, hosting regions, contractual transfers, retention policies, and applicable regulatory requirements. That evidence would investigate Geographic privacy jurisdiction and data residency, not the main uncertainty in this situation. To decide the current case, examine: Inspect deployment architecture, shared-responsibility terms, maintenance needs, vendor guarantees, and administrator duties. Situation: A software team migrates its custom virtual machines to cloud IaaS and assumes the provider patches the guest operating system.
Inspect document retention rules, legal holds, disclosure agreements, disposal methods, and contractual audit rights. That evidence would investigate Retention and confidentiality compliance controls, not the main uncertainty in this situation. To decide the current case, examine: Inspect deployment architecture, shared-responsibility terms, maintenance needs, vendor guarantees, and administrator duties. Situation: A software team migrates its custom virtual machines to cloud IaaS and assumes the provider patches the guest operating system.


