A Content Delivery Network (CDN) is the service that will help reduce latency for a static website accessed globally. CDNs distribute content across multiple geographically dispersed servers, allowing users to connect to a server that is closer to them, thereby reducing the time it takes to load the website.
The use of CDNs is a common practice to enhance global access and improve user experience, as covered under Cloud Concepts in the CompTIA Cloud+ certification.

Before a configuration change is deployed in the cloud production environment, it is crucial to conduct User Acceptance Testing (UAT). UAT involves testing the system by the end-users or clients to ensure it can handle required tasks in real-world scenarios, according to specifications. This testing is the final stage before the change is approved for production, ensuring that all functionalities meet user requirements and the system is ready for deployment.
The CompTIA Cloud+ certification highlights the significance of various testing phases, including UAT, as part of the cloud deployment process to validate the system's readiness and functionality for end-users.

Discretionary Access Control (DAC) and Role-Based Access Control (RBAC) are effective methods for granting authorization based on system classification levels. DAC allows resource owners to grant access rights, making it flexible for environments with varying classification levels. RBAC assigns permissions based on roles within an organization, aligning access rights with the user's job functions and ensuring that users access only what is necessary for their role, which can be mapped to system classifications.
CompTIA Cloud+ content covers various access control models, emphasizing the importance of implementing appropriate security measures that align with organizational policies and classification levels to ensure secure and authorized access to cloud systems.

This incident occurred because the logging service account had excessive privileges (full directory administrator) and was able to add itself to a privileged group that grants interactive access to the virtual network console, then delete a production VM. In the CompTIA Cloud+ (CV0-004) security objectives, the primary control to prevent recurrence is enforcing least privilege using role-based access control (RBAC) and properly scoping permissions for service accounts. The logging account should be granted only the minimum rights required to collect and aggregate logs (for example, read access to resources and write access to a logging destination), and it should not have broad directory admin or console administration capabilities.
While enabling MFA (A) and using strong passwords (B) are good compensating controls, they do not correct the underlying authorization problem-an over-privileged account can still cause significant damage even if it authenticates securely. Disabling RDP (C) is unrelated to the console/API-based privilege escalation shown.
Creating a scoped administrative role (D) directly reduces blast radius and prevents similar privilege misuse.

Load scaling is the most suitable approach for scaling several cloud workloads on demand. It automatically adjusts the number of active servers in a cloud environment based on the current load or traffic, ensuring that resources are efficiently utilized to meet demand without manual intervention. This approach helps maintain optimal performance and availability, particularly during unexpected surges in workload or traffic.
Understanding cloud management and technical operations, including scaling strategies, is crucial for optimizing resource utilization and performance in cloud environments, as outlined in the CompTIA Cloud+ objectives.