Downloaded from StudyXY.com Ww + StudyXY == as . Za \ Rr ' BE \ Study L Anything This ContentHas been Posted On StudyXY.com as supplementary learning material. StudyXY does not endrose any university, college or publisher. Allmaterials posted are under the liability of the contribuors. | 6) www.studyxy.com (up to a $35 value) Compl lA Get details at sybex.com/go/comptiavoucher CusvBEx CompTIA Cloud Essentials+" Study Guide Exam CLO-002 Second Edition Quentin Docter Cory Fuchs Copyright © 2020 by John Wiley & Sons, Inc. Published by John Wiley & Sons, Inc. 10475 Crosspoint Boulevard Indianapolis, IN 46256 ww. wiley. com Published simultaneously in Canada ISBN: 978-1-119-64222-0 ISBN: 978-1-119-64223-7 (ebk) ISBN: 978-1-119-64224-4 (ebk) Manufactured in the United States of America No part of this publication may be reproduced, stored in a retrieval system or transmitted in any form or by any means, electronic, mechanical, photocopying, recording, scanning or otherwise, except as permit- ted under Sections 107 or 108 of the 1976 United States Copyright Act, without either the prior written permission of the Publisher, or authorization through payment of the appropriate per-copy fee to the Copyright Clearance Center, 222 Rosewood Drive, Danvers, MA 01923, (978) 750-8400, fax (978) 646- 8600. Requests to the Publisher for permission should be addressed to the Permissions Department, John Wiley & Sons, Inc., 111 River Street, Hoboken, NJ 07030, (201) 748-6011, fax (201) 748-6008, or online at https: //www.wiley.con/go/permissions. Limit of Liability/Disclaimer of Warranty: The publisher and the author make no representations or war- ranties with respect to the accuracy or completeness of the contents of this work and specifically disclaim all warranties, including without limitation warranties of fitness for a particular purpose. No warranty may be created or extended by sales or promotional materials. The advice and strategies contained herein may not be suitable for every situation. This work is sold with the understanding that the publisher is not engaged in rendering legal, accounting, or other professional services. If professional assistance is required, the services of a competent professional person should be sought. Neither the publisher nor the author shall be liable for damages arising herefrom. The fact that an organization or Web site is referred to in this work as a citation and/or a potential source of further information does not mean that the author or the publisher endorses the information the organization or website may provide or recommendations it may make. Further, readers should be aware that Internet websites listed in this work may have changed or disappeared between when this work was written and when it is read. For general information on our other products and services please contact our Customer Care Depart- ment within the United States at (877) 762-2974, outside the United States at (317) 572-3993 or fax (317) 572-4002. Wiley publishes in a variety of print and electronic formats and by print-on-demand. Some material included with standard print versions of this book may not be included in e-books or in print-on-demand. If this book refers to media such as a CD or DVD that is not included in the version you purchased, you may download this material at http: //booksupport.wiley.com. For more information about Wiley prod- ucts, visit www. wiley con. Library of Congress Control Number: 2019953520 Trademarks: Wiley, the Wiley logo, and the Sybex logo are trademarks or registered trademarks of John Wiley & Sons, Inc. and/or its affiliates, in the United States and other countries, and may not be used without written permission. CompTIA and Cloud Essentials+ are trademarks or registered trademarks of CompTIA, Inc.. All other trademarks are the property of their respective owners. John Wiley & Sons, Inc. is not associated with any product or vendor mentioned in this book. Study! For my girls. — Quentin Docter To my amazing wife, Jamie, and my awesome children, Declan and Chella; they amaze me, and I love them more every day. To my parents, Adina and Wayne, for all the love and support throughout my life. Thank you. —Cory Fuchs StudyXY Acknowledgments On a personal note, I need to thank my family. My girls are all incredibly supportive. Unfortunately, writing a book while holding down a full-time job takes up a lot of time. I end up hiding in my office a lot, but they’re always there for me, and I couldn’t do it with- out them. Another huge thanks goes to my late grandpa Joe, who got me into computers and taught me so many lessons I will never be able to repay. Finally, thanks to my friends, who keep me relatively sane and laugh at me when I tell them I spent my weekend writing about cloud service models. Thanks as well to my co-author, Cory Fuchs. I appreciate his technical and business acumen as well as his taste in beverages and BBQ. I also need to give special thanks to our technical editor, Chris Crayton. He was meticulous and thorough and challenged me to always find new and better ways to communicate complex concepts. His entire focus is on providing the best training material possible, and I doubt there’s better in the business. Last but certainly not least is the Wiley publishing team. Kenyon Brown, thank you for bringing me back for another project. Elizabeth Campbell, it’s been a few years since we last worked together, but thanks for keeping us on track and making good suggestions. Kathleen Wisor had the fun job of keeping us organized, which is akin to herding cats. Additional tech editor Chris Crayton provided a great set of expert eyes and made excellent suggestions. Copyeditor Kim Wimpsett, reminded me yet again that I am no master of the English language and saved me from butchering it (too badly). Many thanks also go out to proofreader Louise Watson and our indexer, Johnna VanHoose Dinse. Without their great contributions, this book would not have made it into your hands. —~Quentin Docter As this is my first time writing a book, this acknowledgment is going to be one of the most difficult parts of the book to write. I don’t know where to begin. Standard prac- tice would dictate that I thank my wife and children: Jamie, Declan, and Chella. Their patience and understanding during this process has been incalculable and more than I could have hoped for. I'must also thank Quentin Docter for his guidance and help in this opportunity. I would not be writing this without him. He is great friend and mentor in both writing and barbecue. There are numerous individuals at Wiley whom I need to thank. Many I cannot name because I still have not met them. I do want to thank Ken, Elizabeth, and Chris for working with me on this project. My parents, Wayne and Adina, have helped and supported me throughout my life. Words cannot begin to express my appreciation for everything they have done for me and my family. They have supported me through trying times and never wavered in their love. Thank you, Mom and Dad, I love you. — Cory Fuchs About the Authors Quentin Docter (Cloud Essentials+, A+, Networks, IT Fundamentals+, MCSE, CCNA, SCSA) is an IT consultant who started in the industry in 1994. Since then, he’s worked as a tech and network support specialist, trainer, consultant, and webmaster. He has written several books for Sybex, including books on A+, IT Fundamentals+, Server+, Windows, and Sun Solaris certifications, as well as PC hardware and maintenance. Cory Fuchs (Fox) has worked in IT for more than 25 years. He holds several certifications from CompTIA, Microsoft, Cisco, and Red Hat. As a consultant, he was the cloud architect for several Fortune 500 companies working on full migrations and hybrid cloud deployments. As an IT professional Cory has specialized in virtualization, messaging/ collaboration, telephony, identity management, automation, security, governance, and compliance. Cory can be reached at coryhfuchs@gmail. com. Study Contents at a Glance Introduction xix Assessment Test xxv Chapter 1 Cloud Principles and Design 1 Chapter 2 Cloud Networking and Storage 35 Chapter 3 Assessing Cloud Needs 77 Chapter 4 Engaging Cloud Vendors 127 Chapter 5 Management and Technical Operations 163 Chapter 6 Governance and Risk 215 Chapter 7 Compliance and Security in the Cloud 253 Appendix A Answers to Written Labs 303 Appendix B Answers to Review Questions 307 Index 323 StudyXY Contents Introduction xix Assessment Test xxv Chapter 1 Cloud Principles and Design 1 Understanding Cloud Principles 2 Virtualization 5 Service Models 9 Deployment Models 16 Cloud Characteristics 17 Shared Responsibility Model 19 Exploring Cloud Design 21 Redundancy and High Availability 22 Disaster Recovery 25 Summary 27 Exam Essentials 27 Written Lab 29 Review Questions 30 Chapter 2 Cloud Networking and Storage 35 Understanding Cloud Networking Concepts 36 Networking: A Quick Primer 37 Connecting to the Cloud 39 Cloud Networking Services 47 Understanding Cloud Storage Technologies 57 How Cloud Storage Works 57 Cloud-Based Storage Providers 59 Cloud Storage Terminology 59 Content Delivery Networks 68 Summary 70 Exam Essentials 70 Written Lab 72 Review Questions 73 Chapter 3 Assessing Cloud Needs 77 Using Cloud Assessments 79 Gathering Current and Future Requirements 80 Using Baselines 85 Running a Feasibility Study 86 Conducting a Gap Analysis 86 xiv Contents Using Reporting 88 Understanding Benchmarks $8 Creating Documentation and Diagrams 89 Understanding Cloud Services 91 Identity Access Management 91 Cloud-Native Applications 95 Data Analytics 97 Digital Marketing 100 Autonomous Environments 103 Internet of Things 104 Blockchain 110 Subscription Services 113 Collaboration 114 VDI 115 Self-Service 117 Summary 18 Exam Essentials 118 Written Lab 121 Review Questions 122 Chapter 4 Engaging Cloud Vendors 127 Understanding Business and Financial Concepts 129 Expenditures and Costs 129 Licensing Models 132 Human Capital 135 Professional Services 136 Finding and Evaluating Cloud Vendors 138 Gathering Information 138 Performing Evaluations 144 Negotiating Contracts and Billing 146 Choosing a Migration Approach 150 Migration Principles 150 Lift and Shift 152 Rip and Replace 153 Hybrid and Phased Migrations 153 Summary 154 Exam Essentials 155 Written Lab 156 Review Questions 158 Chapter 5 Management and Technical Operations 163 Explain Aspects of Operating within the Cloud 166 Data Management 166 Availability 169 Contents xv Disposable Resources 173 Monitoring and Visibility 175 Optimization 176 Explain DevOps in Cloud Environments 180 Provisioning 182 Continuous Integration/Continuous Delivery 185 Testing in QA Environments 186 Configuration Management 188 API Integration 193 Financial Planning of Cloud Resources 194 Storage 194 Network 197 Compute 198 Chargebacks 199 Maintenance 200 Instances 201 Licensing Types 204 License Quantity 206 Summary 207 Exam Essentials 207 Written Lab 210 Review Questions 211 Chapter 6 Governance and Risk 215 Recognize Risk Management Concepts Related to Cloud Services 217 Risk Assessment 219 Risk Response 225 Documentation 227 Vendor Lock-in 230 Data Portability 231 Explain Policies or Procedures 233 Standard Operating Procedures 234 Change Management 235 Resource Management 237 Security Policies 238 Access and Control Policies 240 Department-Specific Policies 242 Communication Policies 243 Summary 244 Exam Essentials 245 Written Lab 246 Review Questions 248 xvi Contents Chapter 7 Compliance and Security in the Cloud 253 Identify the Importance and Impacts of Compliance in the Cloud 255 Data Sovereignty 256 Regulatory Concerns 258 Industry-Based Requirements 260 International Standards 265 Certifications 269 Explain Security Concerns, Measures, or Concepts of Cloud Operations 270 Threat 270 Vulnerability 272 Security Assessments 273 Data Security 278 Application and Infrastructure Security 290 Summary 293 Exam Essentials 294 Written Lab 296 Review Questions 298 Appendix A Answers to Written Labs 303 Chapter 1: Cloud Principles and Design 304 Chapter 2: Cloud Networking and Storage 304 Chapter 3: Assessing Cloud Needs 304 Chapter 4: Engaging Cloud Vendors 305 Chapter 5: Management and Technical Operations 305 Chapter 6: Governance and Risk 306 Chapter 7: Compliance and Security in the Cloud 306 Appendix B Answers to Review Questions 307 Chapter 1: Cloud Principles and Design 308 Chapter 2: Cloud Networking and Storage 310 Chapter 3: Assessing Cloud Needs 312 Chapter 4: Engaging Cloud Vendors 315 Chapter 5: Management and Technical Operations 317 Chapter 6: Governance and Risk 319 Chapter 7: Compliance and Security in the Cloud 321 Index 323 Table of Exercises Exercise 1.1 Determining a User's Virtualization Needs ... .......................8 Exercise 1.2 Using Google's Cloud Services. ................ooiieeinen..... 12 Exercise 5.1 Demonstrationof Latency... ..............ciiiiiiia..... 168 StudyXY Shortly after the Internet exploded in popularity, it was common to hear people joke that “maybe this isn’t just a fad.” Looking back, it’s hard to believe that anyone would have ever seriously thought that it was, given its omnipresence in our lives today. The same things can be said about the cloud. What might have seemed like a novelty in the late 2000s is now mainstream. Most of us use cloud-based services every day, whether we realize it or not. It’s safe to say that the cloud has transformed our Internet experience as users. It’s also had a massive impact on the way that companies and other organizations conduct business. The cloud has the potential to save organizations money and time, but only if it’s imple- mented properly. Of course, that takes some technical expertise. But it also takes business knowledge. The intersection of business acumen and technical knowledge is where this book focuses. There is a major need in the market today for people who understand both the technical side and the business side of an organization. Indeed, all of the following are reasons to become certified in cloud business skills: = The largest skills gap in IT workers is business acumen. = IT employees are now expected to weigh in on business decisions. = Certification empowers both technical and nontechnical employees to make data- driven cloud recommendations. = Certification demonstrates readiness for promotional opportunities to management- level positions. = Certification ensures understanding of personnel working for cloud product and ser- vices organizations. The CompTIA Cloud Essentials+ exam is a great certification for a few reasons. First, it’s job-focused and aligned with the needs of employers. Second, it’s current with today’s cloud environment—the technology and how it’s used. Third, it’s the only vendor-neutral cloud-specific business certification. It’s a great stepping stone for IT and business profes- sionals who want to become certified in specific cloud technologies such as Amazon AWS or Microsoft Azure. rd As noted, this certification focuses on the intersection of business and << technology. If you're interested in the more technical side of cloud man- agement, consider the CompTIA Cloud+ certification. To help prepare for it, look for Sybex CompTIA Cloud+ Study Guide, Second Edition, by Todd Montgomery and Stephen Olson. Study! xx Introduction Who Should Read This Book? This book is a great resource as a primer to cloud technologies, with a practical focus. ‘We don’t get into too much deep technical theory. We want people who read this book to understand cloud terms and basic technologies and be able to apply that knowledge to busi- ness situations. The Cloud Essentials+ cert, and therefore this book, is for IT and business professionals who: = Want to move into management and leadership roles = Work for cloud product and services companies = Have a strong technical or data background, but do not have a business degree = Have good general business acumen, but do not have validation of their competency in cloud-specific situations = Are responsible for providing recommendations on cloud-related decisions = Wish to understand why their company makes the cloud-related decisions they do = Want to remain relevant to their employers by demonstrating professional growth, in an area of unmet need If any of these apply to you, then this book can help you out! What Does This Book Cover? This book covers everything you need to know to pass the CompTIA Cloud Essentials+ exam. Official objectives are available here: https: //certification.comptia.org/certifications/cloud-essentials Chapter 1: Cloud Principles and Design This chapter introduces basic cloud principles. Included are service models, or what the cloud can deliver, deployment models, or how the cloud can be executed, and several characteristics that make the cloud valuable to a business. Chapter 2: Cloud Networking and Storage The cloud is perhaps best known for its storage capabilities, so this chapter covers different features of cloud storage such as compression, deduplication, and capacity on demand, as well as hot versus cold storage, storage types, and software-defined storage and content delivery networks. Accessing the cloud is also of high importance, so this chapter also discusses cloud connectivity and access types and popular networking tools such as load balancers, DNS, and firewalls. Study! Introduction xxi Chapter 3: Assessing Cloud Needs Every organization has slightly different cloud needs. This chapter starts with assessing company needs to determine how the cloud will provide benefits. Then, it moves into looking into some specific types of benefits in detail, including access management, data analytics, digital marketing, the Internet of Things, blockchain, and more. Chapter 4: Engaging Cloud Vendors After an organization has analyzed the technical side and decided to move to the cloud, it’s time to find the right cloud provider. This chapter looks at financial and business aspects of engaging cloud providers. We talk about types of expenditures, licensing models, requests for information, statements of work, service level agreements, evaluations, and contracts and billing. Chapter 5: Management and Technical Operations Continuing with some of the techni- cal aspects of operating in the cloud, we discuss data management, availability, disposable resources, monitoring, and visibility. These are a precursor and are used when starting DevOps and a CICD pipeline. Testing and configuration management are critical aspects of DevOps, and we walk through a few examples. Finally, we discuss financials and reporting on usage when using resources in the cloud. Chapter 6: Governance and Risk Organizations will have to manage risk whenever they use cloud resources. In this chapter we introduce the concept of risk and the responses. We discuss some risks that are different when using the cloud versus on-premises data centers. We introduce policies and procedures and some of the organization management needed for cloud initiatives. We finish with policies that are specific to security, access, and control. Chapter 7: Compliance and Security in the Cloud Cloud security will be a critical piece for any organization wanting to implement resources in the cloud. This chapter looks at regulations and standards that may be required for an organization to use the cloud. We take a deeper dive into data security and processes for securing the data. We give examples of security assessments that any organization should be performing. Finally, we discuss applications and infrastructure security. What's Included in This Book? We've included the following study tools throughout the book: Assessment Test At the end of this introduction is an assessment test that you can use to check your readiness for the exam. Take this test before you start reading the book; it will help you determine the areas where you might need to brush up. The answers to the assessment test questions appear on a separate page after the last question of the test. Each answer includes an explanation and a note telling you the chapter in which the material appears. Study xxii Introduction Objective Map and Opening List of Objectives Just before the assessment test, you'll find a detailed exam objective map, showing you where each of the CompTIA exam objectives is covered in this book. In addition, each chapter opens with a list of the exam objectives it covers. Use these to see exactly where each of the exam topics is covered. Exam Essentials Each chapter, just after the summary, includes a number of exam essen- tials. These are the key topics that you should take from the chapter in terms of areas to focus on when preparing for the exam. Written Labs Each chapter includes a written lab to test your knowledge. These labs map to the exam objectives. You can find the answers to those questions in Appendix A. Chapter Review Questions To test your knowledge as you progress through the book, there are 20 review questions at the end of each chapter. As you finish each chapter, answer the review questions and then check your answers—the correct answers and explanations are in Appendix B. You can go back to reread the section that deals with each question you got wrong in order to ensure that you answer correctly the next time you're tested on the material. Interactive Online Learning Environment and Test Bank Studying the material in the CompTIA Cloud Essentials+ Study Guide is an important part of preparing for the Cloud Essentials+ certification exam, but we provide additional tools to help you prepare. The online Test Bank will help you understand the types of ques- tions that will appear on the certification exam. The sample tests in the Test Bank include all the questions in each chapter as well as the questions from the Assessment test. In addition, there is one more practice exam with 70 questions. You can use these test questions to evaluate your understanding and identify areas that may require additional study. The flashcards in the Test Bank will push the limits of what you should know for the certification exam. There are more than 100 questions that are provided in digital format. Each flashcard has one question and one correct answer. The online glossary is a searchable list of key terms introduced in this exam guide that you should know for the Cloud Essentials+ certification exam. To start using these items to study for the Cloud Essentials+ exam, go to www. wiley .com/go/sybextestprep and register your book to receive your unique PIN. Once you have the PIN, return to www.wiley.com/go/sybextestprep, find your book, and click register or log in and follow the link to register a new account or add this book to an existing account. Introduction xxiii How to Contact the Publisher If you believe you've found a mistake in this book, please bring it to our attention. At John Wiley & Sons, we understand how important it is to provide our customers with accurate content, but even with our best efforts an error may occur. To submit your possible errata, please email it to our Customer Service Team at wileysupport@wiley.com with the subject line “Possible Book Errata Submission.” Cloud Essentials+ Study Guide Exam Objectives This table provides the extent, by percentage, to which each domain is represented on the actual examination. Domain % of Examination 1.0 Cloud Concepts 24% 2.0 Business Principles of Cloud Environments 28% 3.0 Management and Technical Operations 26% 4.0 Governance, Risk, Compliance, and Security for the Cloud 22% Total 100% -_ Exam objectives are subject to change at any time without prior notice 4 TE and at CompTIA's sole discretion. Please visit CompTIA's website (www. comptia.org) for the most current listing of exam objectives. StudyXY xxiv Introduction Objective Map Objective Chapter Domain 1.0: Cloud Concepts 1.1 Explain cloud principles. 1 1.2 Identify cloud networking concepts. 2 1.3 Identify cloud storage technologies. 2 1.4 Summarize important aspects of cloud design. 1 Domain 2.0: Business Principles of Cloud Environments 2.1 Given a scenario, use appropriate cloud assessments. 3 2.2 Summarize the financial aspects of engaging a cloud provider. a 2.3 Identify the important business aspects of vendor relations in cloud 4 adoptions. 2.4 Identify the benefits or solutions of utilizing cloud services. 3 2.5 Compare and contrast cloud migration approaches. 4 Domain 3.0: Management and Technical Operations 3.1 Explain aspects of operating within the cloud. 5 3.2 Explain DevOps in cloud environments. 5 3.3 Given a scenario, review and report on the financial expenditures relatedto ~~ 5 cloud resources. Domain 4.0: Governance, Risk, Compliance, and Security for the Cloud 4.1 Recognize risk management concepts related to cloud services. 6 4.2 Explain policies or procedures. 6 4.3 Identify the importance and impacts of compliance in the cloud. 6 4.4 Explain security concerns, measures, or concepts of cloud operations. 7 Assessment Test 1. In the shared responsibility model, who is responsible for the security of compute and storage resources? A. csp B. Client C. CSP and client D. All clients together 2. Gmail is an example of which type of cloud service? A. SaaS B. Iaa$ C. Xaa$ D. PaaS 3. Microsoft Azure is an example of which type of cloud deployment model? A. Commercial B. Public C. Private D. Hybrid 4. Your CTO wants to ensure that company users in Asia, Europe, and South America have access to cloud resources. Which cloud characteristic should be considered to meet the business need? A. Self-service B. Broad network access C. Scalability D. Shared responsibility 5. You are negotiating the SLA with a CSP. Which of the following high availability guaran- tees is likely to cost you the most? A. Three nines B. Four nines C. Five nines D. None—they should all be the same price 6. You are negotiating an SLA with a CSP. Who is responsible for defining the RPO and RTO? A. The client. B. The CSP. C. The client defines the RPO, and the CSP defines the RTO. D. The client defines the RTO, and the CSP defines the RPO. xxvi Assessment Test 7. Which of the following cloud technologies reduces the amount of storage space needed by removing redundant copies of stored files? A. Capacity on demand B. Compression C. Deduplication D. Block storage 8. You are setting up a cloud solution for your company, and it needs to be optimized for unstructured data. Which storage type is appropriate? A. Block B. File C. Cold D. Object 9. What is SSH used for within the cloud environment? A. To remotely manage a Windows server B. To remotely manage a Linux server C. To remotely access cloud storage D. To remotely deliver content to clients 10. You are setting up cloud services and need space to store email archives. Which of the following will be the least expensive solution? A. Hot storage B. Cold storage C. Object storage D. Block storage 11. You are obtaining cloud-based networking for your company. The CIO insists that the cloud resources be as safe as possible from potential hackers. Which service will help with this? A. Load balancing B. DNS C. SDN D. Firewall 12. Which of the following services within a cloud is responsible for resolving host names to IP addresses? A. DNS B. SDN C. CDN D. SDS Assessment Test xxvii 13. You are consulting for Company A, and they ask you to run a cloud assessment. In which order should you perform the following tasks as part of this assessment? (List the steps in order.) A. Compare benchmarks B. Perform a feasibility study C. Runa baseline D. Gather current and future requirements 14. An engineer on your team says that the company should use new technology to enter a new stream of business. He says that you should sell and monitor linked home appliances and smart thermostats. Which technology is he talking about using? A. VDI B. oT C. SSO D. Al 15. You are beginning a cloud assessment for your company and need to contact key stakeholders. Who in the following list is NOT an example of a key stakeholder for the cloud assessment? A. CEO B. CISO C. csp D. Department manager 16. Which of the following cloud services uses probabilities to make predictions about input? A. Artificial intelligence B. Autonomous environments C. Microservices D. Machine learning 17. Which of the following is NOT a key operating principle of blockchain? A. Anonymity B. Transparency C. Immutability D. Decentralization 18. You are implementing multiple levels of security for new cloud resources. Which of the fol- lowing is NOT a method of cloud-based identity access management? A. SSO B. MFA C. VDI D. Federation xxviii Assessment Test 19. You are searching for the right cloud vendor for your organization. Which of the following should be your first step? A. Pilot B. RFP C. RFQ D. RFI 20. Your current cloud contract is expiring, and you need to quickly move to a different pro- vider. Which type of migration is best in this situation? A. Rip and replace B. Lift and shift C. Hybrid D. Phased 21. You want to test a solution from a CSP to show that a new technology works properly. Which type of evaluation should you perform? A. PoC B. PoV C. Managed D. Pilot 22. Internal IT employees need to learn to use a new cloud-based software interface to manage corporate services. What should you request from the CSP? A. Support B. Managed services C. Training D. Professional development 23. The finance department wants you to convert the IT infrastructure capital expenditures to operating expenditures. Which of the following would do this? A. Switch to BYOL licensing B. Negotiate billing terms for new IT hardware C. Switch to a pay-as-you-go model D. Depreciate the IT assets on a shorter time horizon 24. A company hires contractors for six-month projects. After six months, a new team of con- tractors will be brought in. Which type of software licensing allows the licenses to be trans- ferred from the first group to the second group? A. Pilot B. PoC C. Subscription D. BYOL