Exam CAS-004 topic 1 question 104 discussion

Because all the requirements want to keep the control of the software. ✑ Support all phases of the SDLC. PaaS (manage data, app) ✑ Use tailored website portal software. PaaS (manage app) ✑ Allow the company to build and use its own gateway software. to build its own gateway "on top".... this is PaaS...the req assumes there's an existing GW but company would rather use theirs ✑ Utilize its own data management platform. PaaS (manage application.) u would manage data from an application interface ✑ Continue using agent-based "security tools" (is an application). The agent based security tools would be on user devices.

D. For a couple of reasons: Allow the company to build and use its own gateway software - there are no PaaS services that will allow you to build your own gateway. You will need OS access to do this. Utilize its own data management PLATFORM - You can't run your own platform on a PLATFORM-as-a-Service solution. Continue using agent-based "security tools" - You can not install agents on PaaS because you do not have access to the OS.

PaaS. An example for this would be Github workflows that automatically build your application and pushes them to the release section or deploys the web application on CF or Vercel, following all scans and stuff

A. SaaS (Software as a Service): SaaS offers pre-built software applications and does not allow customization of the underlying infrastructure or support for custom software development (e.g., tailored portal or gateway software). B. PaaS (Platform as a Service): PaaS supports application development but limits the ability to customize infrastructure, install custom data management platforms, or use specific agent-based security tools. C. MaaS (Monitoring as a Service): MaaS refers to services focused on monitoring IT systems and is unrelated to hosting or developing software and infrastructure.

Why not IaaS the model where the business manage basically all, with the CSP just managing a couple of things? In this case per the requirements, seems that the business takes charge of almost everything.

IaaS offers the highest level of control and flexibility, allowing the organization to support all phases of the SDLC, use tailored software, build and use custom gateway software, utilize its own data management platform, and continue using agent-based security tools. PaaS, while beneficial for accelerating development and providing integrated tools, may impose restrictions on customization and the use of specific security tools and data management platforms.

agent based security = IaaS

Keyword is "agent-based security".

The Key requirement is ✑ Utilize its own data management platform.

You can't install agent based security tools into a PaaS and the question doesn't indicate they are talking about for end users. Servers need security tools as well and you won't be able to install agent based ones on PaaS.

Tough cookie here but beanbag did well explaining it Source: Verifying each answer against Chat GPT, my experience, other test banks, a written book, and weighing in the discussion from all users to create a 100% accurate guide for myself before I take the exam. (It isn't easy because of the time needed, but it is doing my diligence)

PaaS is a cloud computing model that provides a platform for developing, testing, and deploying applications and services. It allows organizations to build, deploy, and manage applications and services without having to worry about the underlying infrastructure, such as servers, storage, and networking. A PaaS solution would allow the company to support all phases of the SDLC (Software Development Lifecycle) by providing a platform for developing and testing applications and services. It would also allow the company to use its own data management platform and agent-based security tools, as it would have control over the platform and the ability to customize it as needed. Additionally, a PaaS solution would allow the company to build and use its own gateway software and utilize tailored website portal software, as it would have access to the necessary tools and resources to do so.

D. IaaS why? IaaS, or Infrastructure-as-a-Service, is the most suitable cloud-computing model for the CIO's requirements. IaaS provides access to virtualized computing resources, such as servers, storage, and networking, which can be used to build, deploy, and manage applications. In addition, IaaS offers the flexibility to use tailored website portal software, build and use its own gateway software, utilize its own data management platform, and continue using agent-based security tools, all while supporting all phases of the SDLC.