CRISC Certified in Risk and Information Systems ControlInformation Technology and SecurityHard
A company is implementing a new cloud platform and is concerned about vendor lock-in and the ability to easily migrate services between different cloud providers in the future. Which of the following architectural considerations would BEST address these concerns?
- AUtilizing open-source technologies and containerization for application deployment.
- BAdopting a single, highly specialized cloud provider for maximum optimization.
- CImplementing a tightly coupled monolithic application architecture.
- DDesigning the application using proprietary services unique to one cloud vendor.
Show answer & explanationAnswer & explanation
Correct answer: A. Utilizing open-source technologies and containerization for application deployment.
Utilizing open-source technologies and containerization (like Docker and Kubernetes) creates a more portable application environment, reducing reliance on proprietary vendor services and making it easier to move workloads between different cloud providers or even to on-premises infrastructure, directly addressing vendor lock-in and migration concerns.
Why the other options are wrong
- B. Adopting a single, specialized cloud provider increases vendor lock-in, contrary to the objective.
- C. A tightly coupled monolithic architecture makes it harder to decompose and migrate parts of the application, increasing the difficulty of moving between cloud providers.
- D. Designing with proprietary services unique to one cloud vendor directly leads to vendor lock-in.
Cloud Portability
The ability to move applications and data from one cloud environment to another (or to on-premises) with minimal effort and re-engineering.
- Reduces vendor lock-in.
- Achieved through open standards, APIs, and containerization.
- Enhances flexibility and disaster recovery options.
Memory trick: To 'Move Clouds', 'Open Containers' are 'Key'.