Courses and Certificates Managing-Cloud-Security Passing Score

Apache OpenStack is an open-source cloud computing platform that provides a comprehensive set of features and components for building and managing cloud environments. Managing Cloud principles explain that OpenStack supports compute, storage, networking, identity, and orchestration services.

It enables organizations to deploy private and hybrid clouds with full control over infrastructure and security configurations. The modular architecture allows flexibility and scalability.

The other options are not full cloud platforms. A hypervisor provides virtualization, VMware vSphere is proprietary, and OWASP focuses on application security guidance. Therefore, Apache OpenStack is the correct answer.

Video surveillance capability is a key security control used as part of a layered physical defense at a cloud hosting site. Managing Cloud principles explain that physical security relies on multiple overlapping controls to deter, detect, and respond to unauthorized physical access.

Video surveillance provides continuous monitoring of data center facilities, including entrances, exits, server rooms, and perimeter boundaries. It acts as both a deterrent and a detection mechanism, enabling real-time observation and post-incident investigation. Surveillance footage supports incident response, forensic analysis, and compliance requirements.

Access control enforcement and multifactor authentication are primarily logical or administrative controls, while background checks are personnel security measures. Although important, they are not physical perimeter controls. Therefore, video surveillance capability is the correct answer.

Persistent protection is the security strategy most closely associated with data rights management (DRM) solutions. Managing Cloud principles explain that DRM is designed to ensure that data remains protected throughout its entire lifecycle, regardless of where it is stored, shared, or accessed.

Persistent protection means that security controls such as access restrictions, usage limitations, and expiration rules stay attached to the data itself. Even if the data is copied, transferred, or moved outside the original system, DRM policies continue to enforce protection. This approach is critical in cloud environments where data frequently moves across platforms, users, and geographic regions.

The other options do not represent DRM strategies. Multilevel aggregation and enhanced detail relate to data processing or analytics concepts, while unexpired digital content describes a content state rather than a security strategy. Therefore, persistent protection correctly represents the security approach used by data rights management solutions.

The cloud controller determines whether a server has sufficient capacity and appropriate instance allocation to meet customer requirements. Managing Cloud principles explain that the cloud controller manages resource scheduling, provisioning, and allocation across the cloud infrastructure.

It evaluates available compute, memory, storage, and network resources before assigning workloads to physical or virtual servers. This ensures that customer requests are fulfilled without overcommitting resources or degrading performance.

A cloud provider delivers services, an instance provider is not a standard cloud role, and a UniFi controller manages networking devices. Therefore, the cloud controller is the correct answer.