Free EMC E20-918 Exam Dumps Questions & Answers

An enterprise has decided to implement a new service that will process credit card information. They will deploy this service within their private cloud. They have a relationship with a public cloud provider that claims to be PCI compliant.
The enterprise wishes to implement a service that is PCI compliant with the least amount of effort. The service is protected by a policy-based intrusion detection system. Cardholder data is securely transmitted to the web interface.
Which additional design elements would best be suited for this implementation?

• A.The card number is masked as it is typed and is immediately encrypted, stored, and securely sent directly to the credit card processing system. Credit card information is stored within the public cloud provider using AES 128 encryption.
• B.The card number is masked as it is typed and is immediately encrypted and securely sent directly to the credit card processing system. Credit card information is backed up to the private cloud system and stored using AES 128 encryption.
• C.The card number is masked as it is typed and is immediately encrypted and securely sent to both the credit card processing system and to private cloud for historical tracking and reporting only.
• D.The card number is masked as it is typed and is immediately encrypted and securely sent directly to the credit card processing system. No credit card information is stored within the application.

A hosting company has experienced a sudden increase in customer interest and wishes to implement ITaaS. They are now hosting online shopping applications for several retail computer and electronics companies.
Developers in the customer companies use their own internal credentials and have the ability to publish applications and changes to their stores. Shoppers access these stores using a variety of mobile applications and web browsers.
What should be addressed when migrating to ITaaS and implementing a service catalog for the retail and electronic companies?

• A.On-demand resource pool creation
• B.Support for several different CMDB systems
• C.Integration with different authentication systems
• D.Integration of multiple hypervisors

The CEO of a company states that the IT department has serious problems to solve:
-There have been several breaches of company confidential data over the years. -IT budgets are frequently over- or under-estimated -The IT organization might not meet regulatory compliance requirements for the several countries
in which they operate. -There is a lack of alignment of IT activities with the organization as a whole.
Which action should be taken by the board of directors and senior executives to most quickly and effectively resolve all of these issues and concerns?

• A.Implement IT governance within the organization
• B.Form a services governance committee
• C.Perform a third-party audit of IT operations
• D.Place company confidential data into security zones

An organization is expanding its private cloud to a hybrid deployment to accommodate growth in its web / database application. The CIO is concerned about the security risks associated with the public cloud. They do not view firewall security as adequate to protect important company data. Encryption is being considered as a security measure.
As the cloud architect, what would you recommend?

• A.Utilize database encryption.
  Tell the CIO that search look-ups can be resource intensive.
• B.Utilize database encryption.
  Tell the CIO that the level of control is very granular, but substantial developer resources are
  required.
• C.Utilize application encryption.
  Tell the CIO that the level of control is very granular, and developer resource requirements are
  minimal.
• D.Utilize application encryption.
  Tell the CIO that search look-ups can be resource intensive.

A marketing company is using a Customer Relationship Management SaaS. The SaaS provider has deployed hardware load balancers to distribute users between application servers. User login states are preserved in the load balancer. Subsequent login requests direct each user to the same application server. If the server is unavailable or too busy, the user cannot log on.
Although the company is very happy with the SaaS cost savings they are unhappy with application availability. To improve application scalability the SaaS provider added new servers to the environment. Users, however, are still experiencing the same problem.
Which service characteristic should the SaaS provider implement to improve the user log-on reliability and scale application performance?

• A.Reusable
• B.Stateless
• C.Abstraction
• D.Autonomy