Cloud Provider Y owns Cloud Y, which provides a set of cloud services, virtual servers and
one physical server. Cloud Services A and B are hosted on Virtual Server A, which is
hosted by Physical Server A.
Physical Server A also hosts Virtual Server B, which hosts
redundant implementations of Cloud Services A and B for load balancing purposes. Cloud
Service Consumer A is accessing Cloud Service A located on Virtual Server A.
Cloud Service Consumer B is accessing Cloud Service B located on Virtual Server B.
Cloud Service Consumers A and B are both owned by Cloud Consumer X.
Cloud Consumer X has recently complained that Cloud Services A and B have become
less available than what is guaranteed in their service level agreements (SLAs). Cloud
Provider Y launches an investigation that reveals that Virtual Servers A and B have been
subjected to denial of service attacks. This is confirmed as the cause of the decline in the
availability of Cloud Services A and B.

Which of the following statements describes a solution that can increase the availability of
Cloud Services A and B?
A cloud consumer is interested in leasing cloud-based virtual servers. It compares the
virtual servers offered by Cloud Provider X and Cloud Provider Y.
Cloud X (owned by Cloud Provider X) and Cloud Y (owned by Cloud Provider Y) both provide shared physical
servers that host multiple virtual servers for other cloud consumers.
The virtual servers on Cloud X are accessed directly, whereas the virtual servers on Cloud
Y are accessed via an automated scaling listener. On Cloud X, virtual servers are pre-
configured to support a specific amount of concurrent cloud service consumers. When this
threshold is exceeded, cloud service consumer requests are rejected. Due to the use of the
automated scaling listener, virtual servers on Cloud Y can provide a greater level of
elasticity.
The hourly cost to the cloud consumer to use a virtual server on Cloud X is half that of the
cost to use a virtual server on Cloud Y.
Within a one month period, Cloud Provider X bases its hourly charge on the maximum number of virtual servers used. Within a one month
period, Cloud Provider Y bases its hourly charges on actual virtual server usage. Cloud
Provider Y charges $20 for each hour that a cloud consumer uses a virtual server.

The cloud consumer predicts its monthly usage requirements to be as follows:

The cloud consumer is required choose the cloud provider with the lowest on-going cost
based on its predicted usage. Which of the following statements accurately calculates the
on-going usage costs of Cloud Providers X and Y and correctly states the cloud provider
that the cloud consumer must choose?
Cloud X (owned by Cloud Provider X) provides Physical Server A which hosts Virtual
Servers A and B.
Virtual Server B hosts Ready-Made Environments A and B.
Cloud Service Consumer A uses Virtual Server A as part of an IaaS leasing agreement in which
Cloud Consumer A is charged a fixed monthly fee for unlimited access. Cloud Service
Consumers B and C use Ready-Made Environments A and B respectively as part of a
PaaS leasing agreement based on per-minute usage fees. In both cases, access is
monitored via Pay-For-Use Monitor A, which keeps track of log-in and log-out times in
order to calculate the usage charges that are billed to Cloud Consumers B and C.

Physical Server A begins to become unstable. Over the course of a 24 hour period, the
server shuts down three times, taking down Virtual Servers A and B with it. This causes
numerous problems for Cloud Service Consumers A, B and C, which lose connections and
encounter a variety of exceptions.
A subsequent investigation of the log files generated by Pay-For-Use Monitor A reveals
that the three server crashes coincided with the usage periods of Ready-Made Er
n'ronment B b> Cloud Service Consumer B.
De 'elopers at the Cloud Consumer 3 organization confirm they did not actually log in during those periods, which leads Cloud
Provider X to discover that another cloud service consumer has been posing as Cloud
Service Consumer B in order to maliciously access Ready-Made Environment B, Virtual
Server B, and Physical Server B on Cloud X.
The investigation concludes that the malicious cloud service consumer was able to carry out the attack successfully by obtaining
a weak password being used by developers from Cloud Consumer B.
Which of the following statements accurately identifies the type of security threat that
corresponds to the described attack - and -provides a solution that can directly mitigate this
type of security threat within Cloud X?