Topic 10 Practice Test 1 covers Security Architecture Models for CompTIA Security+ SY0-701 and maps to objective 3.1: Compare and contrast security implications of different architecture models. For broader exam preparation, review the CompTIA Security+ Exam Dumps. Every option includes focused editorial reasoning explaining both the concept and its fit to the scenario.
Question 1
During an architecture-model selection exercise, three requirements must be addressed: (1) division of security duties between a cloud service provider and the customer that varies by service model; (2) environment combining on-premises resources with cloud or other externally hosted services; and (3) industrial control and supervisory systems used to monitor or control physical processes. Which THREE choices best satisfy them? Choose THREE.
- Real-time operating system (RTOS)
- ICS/SCADA
- Cloud shared-responsibility model
- Centralized architecture
- Hybrid architecture
- Air-gapped network
Correct Answers: B, C, E
Correct Answers
Answer B is correct because ICS/SCADA means industrial control and supervisory systems used to monitor or control physical processes. The fixed-count item needs this function in the answer set. Air-gapped network covers a network intentionally isolated from other networks through physical separation, a different requirement.
Answer C is correct because Cloud shared-responsibility model means a division of security duties between a cloud service provider and the customer that varies by service model. This selection maps directly to one of the named needs. Real-time operating system (RTOS) addresses an operating system designed to meet strict timing and deterministic response requirements, so it does not satisfy the same slot.
Answer E is correct because Hybrid architecture means an environment combining on-premises resources with cloud or other externally hosted services. This selection maps directly to one of the named needs. Real-time operating system (RTOS) addresses an operating system designed to meet strict timing and deterministic response requirements, so it does not satisfy the same slot.
Incorrect Answers
Answer A is incorrect because Real-time operating system (RTOS) means an operating system designed to meet strict timing and deterministic response requirements. The required choices are Cloud shared-responsibility model, ICS/SCADA, Hybrid architecture. Although this option is security-relevant, it does not satisfy one of the functions named in the stem.
Answer D is incorrect because Centralized architecture means a design in which key control, processing, or management functions are concentrated in a central location or service. Every answer slot must map to a stated requirement. The correct set is Cloud shared-responsibility model, ICS/SCADA, Hybrid architecture, so this option cannot replace one of those selections.
Answer F is incorrect because Air-gapped network means a network intentionally isolated from other networks through physical separation. The fixed-count answer set is Cloud shared-responsibility model, ICS/SCADA, Hybrid architecture; this option does not fill one of those named functions.
Question 2
To change who bears defined portions of risk rather than eliminating the underlying threat, which security approach should be selected?
- Cloud shared-responsibility model
- Microservices architecture
- Risk transference
- Resilience
Correct Answer: C
Correct Answer
Answer C is correct because Risk transference means shifting some financial or operational consequences of risk to another party through contracts, insurance, or service arrangements. The requirement maps directly to this function, whereas Resilience is aimed at the ability of a system or organization to withstand disruption and recover acceptable operation.
Incorrect Answers
Answer A is incorrect because Cloud shared-responsibility model refers to a division of security duties between a cloud service provider and the customer that varies by service model. This could be appropriate elsewhere, but the required function is shifting some financial or operational consequences of risk to another party through contracts, insurance, or service arrangements; that makes Risk transference the precise choice.
Answer B is incorrect because Microservices architecture refers to an application model composed of small independently deployable services communicating through defined interfaces. This could be appropriate elsewhere, but the required function is shifting some financial or operational consequences of risk to another party through contracts, insurance, or service arrangements; that makes Risk transference the precise choice.
Answer D is incorrect because Resilience refers to the ability of a system or organization to withstand disruption and recover acceptable operation. The key mismatch is functional: Risk transference addresses shifting some financial or operational consequences of risk to another party through contracts, insurance, or service arrangements, the need stated by the question.
Question 3
Two requirements remain open in an architecture-model selection exercise: networking model that separates centralized control logic from packet-forwarding functions; operating-system-level isolation that packages applications and dependencies into lightweight containers. Which TWO options close those specific gaps? Choose TWO.
- Containerization
- Decentralized architecture
- ICS/SCADA
- Software-defined networking (SDN)
- Scalability
Correct Answers: A, D
Correct Answers
Answer A is correct because Containerization means operating-system-level isolation that packages applications and dependencies into lightweight containers. This option satisfies a specific requirement in the stem; Scalability serves the ability of an architecture to handle increased load by adding or expanding resources and therefore is not interchangeable with it.
Answer D is correct because Software-defined networking (SDN) means a networking model that separates centralized control logic from packet-forwarding functions. This selection maps directly to one of the named needs. Decentralized architecture addresses a design that distributes control or processing across multiple independent components or locations, so it does not satisfy the same slot.
Incorrect Answers
Answer B is incorrect because Decentralized architecture means a design that distributes control or processing across multiple independent components or locations. Every answer slot must map to a stated requirement. The correct set is Software-defined networking (SDN), Containerization, so this option cannot replace one of those selections.
Answer C is incorrect because ICS/SCADA means industrial control and supervisory systems used to monitor or control physical processes. The required choices are Software-defined networking (SDN), Containerization. Although this option is security-relevant, it does not satisfy one of the functions named in the stem.
Answer E is incorrect because Scalability means the ability of an architecture to handle increased load by adding or expanding resources. Every answer slot must map to a stated requirement. The correct set is Software-defined networking (SDN), Containerization, so this option cannot replace one of those selections.
Question 4
To consolidate workloads while maintaining logical separation, which security approach should be selected?
- Air-gapped network
- ICS/SCADA
- Cloud shared-responsibility model
- Virtualization
Correct Answer: D
Correct Answer
Answer D is correct because Virtualization means abstraction that allows multiple virtual systems to share physical compute resources through a hypervisor. The deciding point is functional fit: this option covers the stated need, while ICS/SCADA addresses industrial control and supervisory systems used to monitor or control physical processes.
Incorrect Answers
Answer A is incorrect because Air-gapped network refers to a network intentionally isolated from other networks through physical separation. The question is not asking for this function. It is testing abstraction that allows multiple virtual systems to share physical compute resources through a hypervisor, so Virtualization is the stronger fit.
Answer B is incorrect because ICS/SCADA refers to industrial control and supervisory systems used to monitor or control physical processes. The concept is valid, but it does not match this stem. The required function is abstraction that allows multiple virtual systems to share physical compute resources through a hypervisor, which maps to Virtualization.
Answer C is incorrect because Cloud shared-responsibility model refers to a division of security duties between a cloud service provider and the customer that varies by service model. The key mismatch is functional: Virtualization addresses abstraction that allows multiple virtual systems to share physical compute resources through a hypervisor, the need stated by the question.
Question 5
Two requirements remain open in an architecture-model selection exercise: network intentionally isolated from other networks through physical separation; abstraction that allows multiple virtual systems to share physical compute resources through a hypervisor. Which TWO options close those specific gaps? Choose TWO.
- Microservices architecture
- Virtualization
- Centralized architecture
- Air-gapped network
- High availability
Correct Answers: B, D
Correct Answers
Answer B is correct because Virtualization means abstraction that allows multiple virtual systems to share physical compute resources through a hypervisor. It belongs in the fixed-count answer set because it covers one of the stated requirements. Centralized architecture instead serves a design in which key control, processing, or management functions are concentrated in a central location or service and cannot replace this function.
Answer D is correct because Air-gapped network means a network intentionally isolated from other networks through physical separation. This option satisfies a specific requirement in the stem; Centralized architecture serves a design in which key control, processing, or management functions are concentrated in a central location or service and therefore is not interchangeable with it.
Incorrect Answers
Answer A is incorrect because Microservices architecture means an application model composed of small independently deployable services communicating through defined interfaces. Every answer slot must map to a stated requirement. The correct set is Air-gapped network, Virtualization, so this option cannot replace one of those selections.
Answer C is incorrect because Centralized architecture means a design in which key control, processing, or management functions are concentrated in a central location or service. The required choices are Air-gapped network, Virtualization. Although this option is security-relevant, it does not satisfy one of the functions named in the stem.
Answer E is incorrect because High availability means architecture designed to minimize service interruption through redundancy and failover. The fixed-count answer set is Air-gapped network, Virtualization; this option does not fill one of those named functions. For example, Virtualization is required for abstraction that allows multiple virtual systems to share physical compute resources through a hypervisor.
Question 6
To continue or restore essential functions after faults or attacks, which security approach should be selected?
- Centralized architecture
- Resilience
- Decentralized architecture
- Internet of Things (IoT)
Correct Answer: B
Correct Answer
Answer B is correct because Resilience means the ability of a system or organization to withstand disruption and recover acceptable operation. This matches the requirement as written. Centralized architecture can be valid in another context, but it is used for a design in which key control, processing, or management functions are concentrated in a central location or service.
Incorrect Answers
Answer A is incorrect because Centralized architecture refers to a design in which key control, processing, or management functions are concentrated in a central location or service. The key mismatch is functional: Resilience addresses the ability of a system or organization to withstand disruption and recover acceptable operation, the need stated by the question.
Answer C is incorrect because Decentralized architecture refers to a design that distributes control or processing across multiple independent components or locations. The scenario instead requires the ability of a system or organization to withstand disruption and recover acceptable operation, which is why Resilience is the better answer; this option serves the different function defined above.
Answer D is incorrect because Internet of Things (IoT) refers to network-connected embedded devices that often have specialized functions, constrained resources, and long lifecycles. This could be appropriate elsewhere, but the required function is the ability of a system or organization to withstand disruption and recover acceptable operation; that makes Resilience the precise choice.
Question 7
To program network behavior and policy through centralized software control, which security approach should be selected?
- Software-defined networking (SDN)
- Resilience
- Hybrid architecture
- Real-time operating system (RTOS)
Correct Answer: A
Correct Answer
Answer A is correct because Software-defined networking (SDN) means a networking model that separates centralized control logic from packet-forwarding functions. That makes it the best answer here; Hybrid architecture addresses an environment combining on-premises resources with cloud or other externally hosted services, not the function requested in the stem.
Incorrect Answers
Answer B is incorrect because Resilience refers to the ability of a system or organization to withstand disruption and recover acceptable operation. This could be appropriate elsewhere, but the required function is a networking model that separates centralized control logic from packet-forwarding functions; that makes Software-defined networking (SDN) the precise choice.
Answer C is incorrect because Hybrid architecture refers to an environment combining on-premises resources with cloud or other externally hosted services. That concept can be valid in another scenario, but this question is testing a networking model that separates centralized control logic from packet-forwarding functions; Software-defined networking (SDN) therefore fits the requirement more directly.
Answer D is incorrect because Real-time operating system (RTOS) refers to an operating system designed to meet strict timing and deterministic response requirements. The key mismatch is functional: Software-defined networking (SDN) addresses a networking model that separates centralized control logic from packet-forwarding functions, the need stated by the question.
Question 8
A review during an architecture-model selection exercise identifies two gaps. One requires networking model that separates centralized control logic from packet-forwarding functions. The other requires ability of an architecture to handle increased load by adding or expanding resources. Which TWO options should be included in the remediation plan? Choose TWO.
- Scalability
- Resilience
- Software-defined networking (SDN)
- Logical segmentation
- Decentralized architecture
Correct Answers: A, C
Correct Answers
Answer A is correct because Scalability means the ability of an architecture to handle increased load by adding or expanding resources. This option satisfies a specific requirement in the stem; Resilience serves the ability of a system or organization to withstand disruption and recover acceptable operation and therefore is not interchangeable with it.
Answer C is correct because Software-defined networking (SDN) means a networking model that separates centralized control logic from packet-forwarding functions. This selection maps directly to one of the named needs. Decentralized architecture addresses a design that distributes control or processing across multiple independent components or locations, so it does not satisfy the same slot. This question specifically tests the combined requirements represented by Scalability and Software-defined networking (SDN).
Incorrect Answers
Answer B is incorrect because Resilience means the ability of a system or organization to withstand disruption and recover acceptable operation. The fixed-count answer set is Scalability, Software-defined networking (SDN); this option does not fill one of those named functions.
Answer D is incorrect because Logical segmentation means separation of systems through technologies such as VLANs, routing, firewalls, or access policies rather than physical separation. The required choices are Scalability, Software-defined networking (SDN). Although this option is security-relevant, it does not satisfy one of the functions named in the stem.
Answer E is incorrect because Decentralized architecture means a design that distributes control or processing across multiple independent components or locations. Every answer slot must map to a stated requirement. The correct set is Scalability, Software-defined networking (SDN), so this option cannot replace one of those selections.
Question 9
Which design distributes control or processing across multiple independent components or locations?
- Decentralized architecture
- Centralized architecture
- Real-time operating system (RTOS)
- Virtualization
Correct Answer: A
Correct Answer
Answer A is correct because Decentralized architecture means a design that distributes control or processing across multiple independent components or locations. That makes it the best answer here; Virtualization addresses abstraction that allows multiple virtual systems to share physical compute resources through a hypervisor, not the function requested in the stem.
Incorrect Answers
Answer B is incorrect because Centralized architecture refers to a design in which key control, processing, or management functions are concentrated in a central location or service. The scenario instead requires a design that distributes control or processing across multiple independent components or locations, which is why Decentralized architecture is the better answer; this option serves the different function defined above.
Answer C is incorrect because Real-time operating system (RTOS) refers to an operating system designed to meet strict timing and deterministic response requirements. The concept is valid, but it does not match this stem. The required function is a design that distributes control or processing across multiple independent components or locations, which maps to Decentralized architecture.
Answer D is incorrect because Virtualization refers to abstraction that allows multiple virtual systems to share physical compute resources through a hypervisor. That concept can be valid in another scenario, but this question is testing a design that distributes control or processing across multiple independent components or locations; Decentralized architecture therefore fits the requirement more directly.
Question 10
To create repeatable, reviewable, and automatable infrastructure configurations, which security approach should be selected?
- Infrastructure as code (IaC)
- Risk transference
- Microservices architecture
- Scalability
Correct Answer: A
Correct Answer
Answer A is correct because Infrastructure as code (IaC) means definition and deployment of infrastructure through machine-readable configuration or code. This matches the requirement as written. Microservices architecture can be valid in another context, but it is used for an application model composed of small independently deployable services communicating through defined interfaces.
Incorrect Answers
Answer B is incorrect because Risk transference refers to shifting some financial or operational consequences of risk to another party through contracts, insurance, or service arrangements. The scenario instead requires definition and deployment of infrastructure through machine-readable configuration or code, which is why Infrastructure as code (IaC) is the better answer; this option serves the different function defined above.
Answer C is incorrect because Microservices architecture refers to an application model composed of small independently deployable services communicating through defined interfaces. This could be appropriate elsewhere, but the required function is definition and deployment of infrastructure through machine-readable configuration or code; that makes Infrastructure as code (IaC) the precise choice.
Answer D is incorrect because Scalability refers to the ability of an architecture to handle increased load by adding or expanding resources. The question is not asking for this function. It is testing definition and deployment of infrastructure through machine-readable configuration or code, so Infrastructure as code (IaC) is the stronger fit.
Question 11
Which term describes abstraction that allows multiple virtual systems to share physical compute resources through a hypervisor?
- Microservices architecture
- Cloud shared-responsibility model
- High availability
- Virtualization
Correct Answer: D
Correct Answer
Answer D is correct because Virtualization means abstraction that allows multiple virtual systems to share physical compute resources through a hypervisor. This is the precise fit for the scenario. High availability serves the different purpose of architecture designed to minimize service interruption through redundancy and failover.
Incorrect Answers
Answer A is incorrect because Microservices architecture refers to an application model composed of small independently deployable services communicating through defined interfaces. The scenario instead requires abstraction that allows multiple virtual systems to share physical compute resources through a hypervisor, which is why Virtualization is the better answer; this option serves the different function defined above.
Answer B is incorrect because Cloud shared-responsibility model refers to a division of security duties between a cloud service provider and the customer that varies by service model. The scenario instead requires abstraction that allows multiple virtual systems to share physical compute resources through a hypervisor, which is why Virtualization is the better answer; this option serves the different function defined above.
Answer C is incorrect because High availability refers to architecture designed to minimize service interruption through redundancy and failover. That concept can be valid in another scenario, but this question is testing abstraction that allows multiple virtual systems to share physical compute resources through a hypervisor; Virtualization therefore fits the requirement more directly.
Question 12
To run application logic without directly administering servers, which security approach should be selected?
- Containerization
- Hybrid architecture
- Software-defined networking (SDN)
- Serverless architecture
Correct Answer: D
Correct Answer
Answer D is correct because Serverless architecture means a cloud execution model where the provider manages underlying server infrastructure and customers deploy functions or services. This is the precise fit for the scenario. Hybrid architecture serves the different purpose of an environment combining on-premises resources with cloud or other externally hosted services.
Incorrect Answers
Answer A is incorrect because Containerization refers to operating-system-level isolation that packages applications and dependencies into lightweight containers. The scenario instead requires a cloud execution model where the provider manages underlying server infrastructure and customers deploy functions or services, which is why Serverless architecture is the better answer; this option serves the different function defined above.
Answer B is incorrect because Hybrid architecture refers to an environment combining on-premises resources with cloud or other externally hosted services. The key mismatch is functional: Serverless architecture addresses a cloud execution model where the provider manages underlying server infrastructure and customers deploy functions or services, the need stated by the question.
Answer C is incorrect because Software-defined networking (SDN) refers to a networking model that separates centralized control logic from packet-forwarding functions. The question is not asking for this function. It is testing a cloud execution model where the provider manages underlying server infrastructure and customers deploy functions or services, so Serverless architecture is the stronger fit.
Question 13
During an architecture-model selection exercise, the team has two independent requirements: (1) systems operated in facilities and infrastructure controlled directly by the organization; and (2) design that distributes control or processing across multiple independent components or locations. Which TWO choices best satisfy those requirements? Choose TWO.
- Hybrid architecture
- Decentralized architecture
- Logical segmentation
- ICS/SCADA
- On-premises architecture
Correct Answers: B, E
Correct Answers
Answer B is correct because Decentralized architecture means a design that distributes control or processing across multiple independent components or locations. This selection maps directly to one of the named needs. ICS/SCADA addresses industrial control and supervisory systems used to monitor or control physical processes, so it does not satisfy the same slot.
Answer E is correct because On-premises architecture means systems operated in facilities and infrastructure controlled directly by the organization. This selection maps directly to one of the named needs. ICS/SCADA addresses industrial control and supervisory systems used to monitor or control physical processes, so it does not satisfy the same slot.
Incorrect Answers
Answer A is incorrect because Hybrid architecture means an environment combining on-premises resources with cloud or other externally hosted services. The scenario calls for Decentralized architecture, On-premises architecture. Selecting this option would leave one of those required functions uncovered.
Answer C is incorrect because Logical segmentation means separation of systems through technologies such as VLANs, routing, firewalls, or access policies rather than physical separation. Every answer slot must map to a stated requirement. The correct set is Decentralized architecture, On-premises architecture, so this option cannot replace one of those selections.
Answer D is incorrect because ICS/SCADA means industrial control and supervisory systems used to monitor or control physical processes. The question requires exactly 2 selections: Decentralized architecture, On-premises architecture. This option falls outside that required set. For example, Decentralized architecture is required for a design that distributes control or processing across multiple independent components or locations.
Question 14
To reduce reliance on a single control point and support local autonomy, which security approach should be selected?
- High availability
- Real-time operating system (RTOS)
- Decentralized architecture
- Software-defined networking (SDN)
Correct Answer: C
Correct Answer
Answer C is correct because Decentralized architecture means a design that distributes control or processing across multiple independent components or locations. The requirement maps directly to this function, whereas Real-time operating system (RTOS) is aimed at an operating system designed to meet strict timing and deterministic response requirements.
Incorrect Answers
Answer A is incorrect because High availability refers to architecture designed to minimize service interruption through redundancy and failover. This could be appropriate elsewhere, but the required function is a design that distributes control or processing across multiple independent components or locations; that makes Decentralized architecture the precise choice.
Answer B is incorrect because Real-time operating system (RTOS) refers to an operating system designed to meet strict timing and deterministic response requirements. The scenario instead requires a design that distributes control or processing across multiple independent components or locations, which is why Decentralized architecture is the better answer; this option serves the different function defined above.
Answer D is incorrect because Software-defined networking (SDN) refers to a networking model that separates centralized control logic from packet-forwarding functions. The scenario instead requires a design that distributes control or processing across multiple independent components or locations, which is why Decentralized architecture is the better answer; this option serves the different function defined above.
Question 15
To determine which party must secure specific layers, configurations, identities, and data, which security approach should be selected?
- High availability
- Cloud shared-responsibility model
- Logical segmentation
- Scalability
Correct Answer: B
Correct Answer
Answer B is correct because Cloud shared-responsibility model means a division of security duties between a cloud service provider and the customer that varies by service model. This is the precise fit for the scenario. High availability serves the different purpose of architecture designed to minimize service interruption through redundancy and failover.
Incorrect Answers
Answer A is incorrect because High availability refers to architecture designed to minimize service interruption through redundancy and failover. That concept can be valid in another scenario, but this question is testing a division of security duties between a cloud service provider and the customer that varies by service model; Cloud shared-responsibility model therefore fits the requirement more directly.
Answer C is incorrect because Logical segmentation refers to separation of systems through technologies such as VLANs, routing, firewalls, or access policies rather than physical separation. The question is not asking for this function. It is testing a division of security duties between a cloud service provider and the customer that varies by service model, so Cloud shared-responsibility model is the stronger fit.
Answer D is incorrect because Scalability refers to the ability of an architecture to handle increased load by adding or expanding resources. The question is not asking for this function. It is testing a division of security duties between a cloud service provider and the customer that varies by service model, so Cloud shared-responsibility model is the stronger fit.
Question 16
The control set for an architecture-model selection exercise must address both abstraction that allows multiple virtual systems to share physical compute resources through a hypervisor and network-connected embedded devices that often have specialized functions, constrained resources, and long lifecycles. Which TWO choices map directly to those needs? Choose TWO.
- Logical segmentation
- Risk transference
- Virtualization
- ICS/SCADA
- Internet of Things (IoT)
Correct Answers: C, E
Correct Answers
Answer C is correct because Virtualization means abstraction that allows multiple virtual systems to share physical compute resources through a hypervisor. It belongs in the fixed-count answer set because it covers one of the stated requirements. Risk transference instead serves shifting some financial or operational consequences of risk to another party through contracts, insurance, or service arrangements and cannot replace this function.
Answer E is correct because Internet of Things (IoT) means network-connected embedded devices that often have specialized functions, constrained resources, and long lifecycles. It belongs in the fixed-count answer set because it covers one of the stated requirements. Risk transference instead serves shifting some financial or operational consequences of risk to another party through contracts, insurance, or service arrangements and cannot replace this function.
Incorrect Answers
Answer A is incorrect because Logical segmentation means separation of systems through technologies such as VLANs, routing, firewalls, or access policies rather than physical separation. The required choices are Internet of Things (IoT), Virtualization. Although this option is security-relevant, it does not satisfy one of the functions named in the stem.
Answer B is incorrect because Risk transference means shifting some financial or operational consequences of risk to another party through contracts, insurance, or service arrangements. The fixed-count answer set is Internet of Things (IoT), Virtualization; this option does not fill one of those named functions.
Answer D is incorrect because ICS/SCADA means industrial control and supervisory systems used to monitor or control physical processes. The fixed-count answer set is Internet of Things (IoT), Virtualization; this option does not fill one of those named functions.
Question 17
Which term describes architecture designed to minimize service interruption through redundancy and failover?
- On-premises architecture
- Scalability
- High availability
- Real-time operating system (RTOS)
Correct Answer: C
Correct Answer
Answer C is correct because High availability means architecture designed to minimize service interruption through redundancy and failover. The requirement maps directly to this function, whereas On-premises architecture is aimed at systems operated in facilities and infrastructure controlled directly by the organization.
Incorrect Answers
Answer A is incorrect because On-premises architecture refers to systems operated in facilities and infrastructure controlled directly by the organization. The concept is valid, but it does not match this stem. The required function is architecture designed to minimize service interruption through redundancy and failover, which maps to High availability.
Answer B is incorrect because Scalability refers to the ability of an architecture to handle increased load by adding or expanding resources. The key mismatch is functional: High availability addresses architecture designed to minimize service interruption through redundancy and failover, the need stated by the question.
Answer D is incorrect because Real-time operating system (RTOS) refers to an operating system designed to meet strict timing and deterministic response requirements. This could be appropriate elsewhere, but the required function is architecture designed to minimize service interruption through redundancy and failover; that makes High availability the precise choice.
Question 18
To integrate security across different trust, ownership, and connectivity models, which security approach should be selected?
- Hybrid architecture
- Real-time operating system (RTOS)
- On-premises architecture
- Infrastructure as code (IaC)
Correct Answer: A
Correct Answer
Answer A is correct because Hybrid architecture means an environment combining on-premises resources with cloud or other externally hosted services. That makes it the best answer here; Infrastructure as code (IaC) addresses definition and deployment of infrastructure through machine-readable configuration or code, not the function requested in the stem.
Incorrect Answers
Answer B is incorrect because Real-time operating system (RTOS) refers to an operating system designed to meet strict timing and deterministic response requirements. This could be appropriate elsewhere, but the required function is an environment combining on-premises resources with cloud or other externally hosted services; that makes Hybrid architecture the precise choice.
Answer C is incorrect because On-premises architecture refers to systems operated in facilities and infrastructure controlled directly by the organization. The concept is valid, but it does not match this stem. The required function is an environment combining on-premises resources with cloud or other externally hosted services, which maps to Hybrid architecture.
Answer D is incorrect because Infrastructure as code (IaC) refers to definition and deployment of infrastructure through machine-readable configuration or code. The concept is valid, but it does not match this stem. The required function is an environment combining on-premises resources with cloud or other externally hosted services, which maps to Hybrid architecture.
Question 19
What is a cloud execution model where the provider manages underlying server infrastructure and customers deploy functions or services?
- Real-time operating system (RTOS)
- ICS/SCADA
- Decentralized architecture
- Serverless architecture
Correct Answer: D
Correct Answer
Answer D is correct because Serverless architecture means a cloud execution model where the provider manages underlying server infrastructure and customers deploy functions or services. That is the function the question is testing. Real-time operating system (RTOS) would instead be used for an operating system designed to meet strict timing and deterministic response requirements.
Incorrect Answers
Answer A is incorrect because Real-time operating system (RTOS) refers to an operating system designed to meet strict timing and deterministic response requirements. The concept is valid, but it does not match this stem. The required function is a cloud execution model where the provider manages underlying server infrastructure and customers deploy functions or services, which maps to Serverless architecture.
Answer B is incorrect because ICS/SCADA refers to industrial control and supervisory systems used to monitor or control physical processes. That concept can be valid in another scenario, but this question is testing a cloud execution model where the provider manages underlying server infrastructure and customers deploy functions or services; Serverless architecture therefore fits the requirement more directly.
Answer C is incorrect because Decentralized architecture refers to a design that distributes control or processing across multiple independent components or locations. The key mismatch is functional: Serverless architecture addresses a cloud execution model where the provider manages underlying server infrastructure and customers deploy functions or services, the need stated by the question.
Question 20
What is an environment combining on-premises resources with cloud or other externally hosted services?
- ICS/SCADA
- Hybrid architecture
- Air-gapped network
- Software-defined networking (SDN)
Correct Answer: B
Correct Answer
Answer B is correct because Hybrid architecture means an environment combining on-premises resources with cloud or other externally hosted services. The requirement maps directly to this function, whereas Air-gapped network is aimed at a network intentionally isolated from other networks through physical separation.
Incorrect Answers
Answer A is incorrect because ICS/SCADA refers to industrial control and supervisory systems used to monitor or control physical processes. The concept is valid, but it does not match this stem. The required function is an environment combining on-premises resources with cloud or other externally hosted services, which maps to Hybrid architecture.
Answer C is incorrect because Air-gapped network refers to a network intentionally isolated from other networks through physical separation. The scenario instead requires an environment combining on-premises resources with cloud or other externally hosted services, which is why Hybrid architecture is the better answer; this option serves the different function defined above.
Answer D is incorrect because Software-defined networking (SDN) refers to a networking model that separates centralized control logic from packet-forwarding functions. The concept is valid, but it does not match this stem. The required function is an environment combining on-premises resources with cloud or other externally hosted services, which maps to Hybrid architecture.
