Implementing software-defined networking (SDN) to provide the ability for the network infrastructure to be integrated with the control and data planes is the recommendation that will support the move to a cloud infrastructure. A cloud infrastructure is a network architecture that provides on-demand access to shared and scalable resources and services over the Internet, such as computing, storage, networking, or applications. A cloud infrastructure can be classified into different service models, such as Infrastructure as a Service (IaaS), Platform as a Service (PaaS), or Software as a Service (SaaS), and into different deployment models, such as public cloud, private cloud, hybrid cloud, or community cloud. A private cloud is a type of cloud infrastructure that is owned, operated, and used by a single organization, and that is hosted on the organization's premises or on a third-party provider's premises. Implementing software-defined networking (SDN) to provide the ability for the network infrastructure to be integrated with the control and data planes is the recommendation that will support the move to a cloud infrastructure, because it can provide the following benefits:
* It can decouple the network control plane from the data plane, and enable the network to be
* programmatically configured and managed by a centralized software controller, which can improve the flexibility, efficiency, and performance of the network.
* It can dynamically adjust the network according to the policies and requirements of the cloud services and applications, and optimize the network resources and bandwidth allocation, which can enhance the scalability, reliability, and availability of the cloud infrastructure.
* It can implement the security controls and measures at the network level, and monitor and protect the network traffic and communication, which can increase the security and privacy of the cloud infrastructure. The other options are not the recommendations that will support the move to a cloud infrastructure, as they either do not provide the ability for the network infrastructure to be integrated with the control and data planes, or do not improve the flexibility, efficiency, performance, scalability, reliability, availability, security, or privacy of the cloud infrastructure. References: CISSP - Certified Information Systems Security Professional, Domain 3. Security Architecture and Engineering, 3.5 Implement and manage engineering processes using secure design principles, 3.5.1 Understand the fundamental concepts of security models, 3.5.1.2 Cloud-based systems; CISSP Exam Outline, Domain
3. Security Architecture and Engineering, 3.5 Implement and manage engineering processes using secure design principles, 3.5.1 Understand the fundamental concepts of security models, 3.5.1.2 Cloud-based systems