Exam CAS-003 topic 1 question 64 discussion

(CISO) is still concerned with the availability requirements of critical company applications: Only multicloud will provide additional availability. CASB will do nothing to ensure additional availability .. unless if CASBs can do global load balancing like Azure front door.

The statement: migration is done.But the design has some steps. ✑ Selection of a cloud provider ✑ Architectural design ✑ Microservice segmentation ✑ Virtual private cloud ✑ Geographic service redundancy ✑ Service migration If you have, cloud provider, a design and so, but your CISO is concerned about availability. what do you need to protect and mantain that? A,B,C is cover by Selection of a cloud provider Cloud access security broker is not cover, based on the statement and is the more correct answer from the choices.

Multicloud can host a hybrid cloud, and is typically seen as a way to prevent cloud service downtime. Services like AWS and Microsoft Azure use multicloud solutions.

It's multicloud. The last thing they want to do is hybrid cloud and negate the benefits of cloud. A good article on hybrid and multicloud. https://www.ibm.com/cloud/learn/multicloud

On third review, I think the given answer is correct. The question (super poorly phrased) is asking for the next step in the cloud migration plan. The next logical step in the given plan to migrate from on-prem to cloud is to implement a CASB. This will prevent certain types of DOS attacks, prevent certain types of file transfers, and add a layer of credential security to prevent a malicious outsider from hacking into your cloud and disabling your company critical applications. Really really really badly written question, but read closely. CASB is the answer.

hybrid as stated

A. Multicloud In true CompTIA fashion, this is an unbelievably poorly phrased question and none of the answers are like... great. For an HA cloud solution you don't need multicloud OR hybrid you just set up redundancies across regions (all cloud providers now offer this) which can give you a sub-second RTO/RPO. I think that using a hybrid cloud will make your services less available, not more. You've just gone to all the effort to get out of the data center because your reliability was bad, so the solution is to pull part of your services back into the data center you just moved out of? No way. It just doesn't make any rational sense. Of all the bad answers here, multicloud makes the most sense.

C. Hybrid cloud solution. The hybrid approach allows the critical company applications to be stored on-site if the CISO is concerned about availability so they have the most control available to them.

A. Multicloud

CISO is asking for availability. I think C. Hybrid cloud is the best answer. You can provide redundancy through this solution. The rest do not deal with availability.