CompTIA Cloud+ (CV0-004)Cloud ArchitectureHard
A cloud engineer is provisioning a new compute instance for a highly sensitive application that processes personally identifiable information (PII). The company policy dictates that the underlying physical server for this instance must be isolated from any other customer's workloads to prevent co-mingling of data and enhance security. Which compute option ensures this level of physical isolation?
- AOn-Demand Instance
- BSpot Instance
- CDedicated Instance
- DServerless Function
Show answer & explanationAnswer & explanation
Correct answer: C. Dedicated Instance
A Dedicated Instance ensures that your virtual machine runs on hardware that is physically isolated to a single customer, satisfying the requirement for preventing co-mingling of data on the same physical server.
Why the other options are wrong
- A. On-Demand Instances run on shared hardware with other customers by default, which violates the isolation requirement.
- B. Spot Instances are highly discounted, interruptible instances that also run on shared hardware.
- D. Serverless Functions abstract away the underlying infrastructure, offering no control or guarantee over physical server isolation for specific customer workloads.
Dedicated Instance
A Dedicated Instance is a virtual machine instance that runs on hardware dedicated to a single customer. While it's still a virtualized environment, it ensures that your instances are physically isolated from instances belonging to other customers.
- Virtual instances on hardware dedicated to a single customer
- Provides physical isolation from other customers' workloads
- Offers enhanced security and compliance for sensitive data (e.g., PII)
- Does not provide granular control over host placement or specific hardware (unlike Dedicated Hosts)
- More expensive than standard On-Demand instances
Memory trick: Dedicated Instances are like having your own 'private floor' in a shared building – still virtual, but no sharing with other tenants.