Exam CAS-004 All QuestionsBrowse all questions from this exam
Question 444

A security architect is reviewing the following organizational specifications for a new application:

• Be sessionless and API-based

• Accept uploaded documents with PII, so all storage must be ephemeral

• Be able to scale on-demand across multiple nodes

• Restrict all network access except for the TLS port

Which of the following ways should the architect recommend the application be deployed in order to meet security and organizational infrastructure requirements?

    Correct Answer: A

    Deploying the application utilizing the cloud container service aligns best with the specified requirements. A cloud container service supports sessionless and API-based architecture, can provide ephemeral storage for securing PII, allows for on-demand scalability across multiple nodes, and can be configured to restrict network access to only the TLS port.

Discussion
isaphiltrickOption: A

Deploying the application using a cloud container service aligns well with the specified security and organizational infrastructure requirements. It ensures sessionless, API-based operation, supports ephemeral storage for uploaded documents with PII, enables on-demand scalability across multiple nodes, and facilitates strict restriction of network access except for the TLS port.