I85PREP
⌘ K
C-CATODSW study materials
C-CATODSW study resources

C-CATODSW practice questions

One question at a time. Build your C-CATODSW understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Cloud Concepts

Which cloud characteristic lets customers provision additional compute capacity automatically as demand rises, without manual intervention from the provider?

  1. Resource pooling
  2. Measured service
  3. Rapid elasticity Correct answer.
  4. Broad network access

Explanation

Rapid elasticity describes the ability to scale resources outward and inward automatically in response to demand, so capacity appears unlimited to the consumer. Measured service concerns metering and billing, resource pooling concerns shared physical assets, and broad network access concerns connectivity.

Question 2Cloud Concepts

A company wants to move from large upfront hardware purchases to a pay-per-use model. Which cloud benefit does this primarily describe?

  1. Guaranteed zero latency for all workloads
  2. Elimination of the need for any monitoring
  3. Conversion of capital expense to operational expense Correct answer.
  4. Improved physical security of the data center

Explanation

Cloud consumption converts large capital expenditures on owned equipment into variable operational expenses tied to actual usage. This improves cash flow flexibility and reduces the risk of over-provisioning, but it does not remove operational responsibilities such as monitoring or guarantee performance outcomes.

Question 3Cloud Concepts

Which deployment model places infrastructure on premises while using cloud provider services for orchestration, monitoring, or management?

  1. Community cloud
  2. Private cloud
  3. Hybrid cloud Correct answer.
  4. Public cloud

Explanation

A hybrid model combines on-premises or private resources with public cloud services, including management and orchestration tooling that spans both environments. Public cloud is entirely provider-operated, private cloud is dedicated to one organization, and community cloud is shared by a specific group of organizations.

Question 4Cloud Concepts

Which service model gives the customer the greatest degree of control over the operating system and runtime configuration?

  1. Software as a Service
  2. Platform as a Service
  3. Function as a Service
  4. Infrastructure as a Service Correct answer.

Explanation

With Infrastructure as a Service the provider supplies virtualized compute, storage, and networking while the customer manages the operating system, middleware, and applications. Higher-level models such as PaaS and SaaS abstract away the operating system, reducing customer control.

Question 5Cloud Concepts

What is the primary purpose of a cloud region?

  1. To limit an account to one virtual network per subscription
  2. To define a geographic area containing multiple isolated data center facilities Correct answer.
  3. To specify the billing currency used for a customer account
  4. To provide a single physical building where all customer data is stored

Explanation

A region is a geographic area that contains multiple availability zones or data center facilities connected by low-latency links. Customers choose regions to place workloads near users and to satisfy data residency requirements.

Question 6Cloud Concepts

Which statement best describes an availability zone?

  1. A software-defined boundary that isolates tenant virtual networks
  2. A billing construct that groups charges by department
  3. A caching layer that sits in front of a database
  4. A distinct location within a region with independent power and cooling Correct answer.

Explanation

An availability zone is a physically separate location within a region, engineered with independent power, cooling, and networking so a failure in one zone does not affect others. Distributing workloads across zones improves resilience against localized failures.

Question 7Cloud Concepts

Which cloud concept refers to the provider automatically adding or removing resources to match current demand?

  1. Multi-tenancy
  2. Elasticity Correct answer.
  3. Fault tolerance
  4. Load balancing

Explanation

Elasticity is the automated adjustment of resource capacity to track demand, scaling out during peaks and in during lulls. Load balancing distributes traffic, fault tolerance maintains operation despite failures, and multi-tenancy describes shared infrastructure.

Question 8Cloud Concepts

Which responsibility always remains with the customer across IaaS, PaaS, and SaaS models?

  1. Maintaining physical server hardware
  2. Patching the hypervisor
  3. Replacing failed disk drives in the data center
  4. Managing their own user identities and access permissions Correct answer.

Explanation

Regardless of service model, the customer retains responsibility for governing who may access their data and applications, including identity lifecycle and permission assignment. Hypervisor patching, hardware maintenance, and disk replacement belong to the provider in public cloud offerings.

Question 9Cloud Concepts

A startup expects unpredictable traffic and wants to minimize idle spend while keeping a baseline of always-on capacity. Which combination best fits?

  1. On-demand instances for the baseline plus autoscaling for peak demand Correct answer.
  2. Reserved capacity for the entire workload plus a fixed number of servers
  3. Dedicated hosts for every workload component
  4. A single large instance sized for the highest possible peak

Explanation

Pairing on-demand baseline capacity with autoscaling lets the workload grow and shrink with real demand, so the customer pays for idle capacity only at the small baseline. Fixed reservations or single oversized instances waste money when traffic is unpredictable and low.

Question 10Cloud Concepts

An application must survive the loss of an entire data center within a region. Which design choice addresses this most directly?

  1. Deploying instances across multiple availability zones behind a load balancer Correct answer.
  2. Storing backups in the same data center as the primary database
  3. Increasing the CPU count of a single database server
  4. Deploying all instances into one availability zone with larger instance sizes

Explanation

Spreading instances across availability zones ensures that the failure of one zone leaves capacity running in others, and a load balancer redirects traffic to healthy targets. Larger instances or backups in the same facility do not protect against a facility-wide outage.

Question 11Cloud Concepts

A team needs a managed environment where they deploy code without administering servers or operating systems. Which service model matches?

  1. Software as a Service
  2. Platform as a Service Correct answer.
  3. Bare-metal hosting
  4. Infrastructure as a Service

Explanation

Platform as a Service supplies managed runtime, operating system, and scaling so developers focus on application code and configuration. IaaS and bare metal leave operating system administration to the customer, while SaaS delivers a finished application rather than a deployment platform.

Question 12Cloud Concepts

A regulated firm must keep customer records inside a specific country. Which cloud decision most directly satisfies this?

  1. Enabling multi-factor authentication for administrators
  2. Choosing the largest available instance type
  3. Selecting a region located in that country for storage and processing Correct answer.
  4. Enabling automatic scaling across all regions

Explanation

Data residency requirements are met by choosing regions and services that keep data stored and processed within the required jurisdiction. Authentication settings and instance sizing affect security and performance but not where data physically resides.

Question 13Cloud Concepts

Under the shared responsibility model for a managed database service, which task typically belongs to the customer?

  1. Maintaining the underlying storage hardware
  2. Applying engine patches released by the provider
  3. Configuring firewall rules and access policies for the database Correct answer.
  4. Managing the physical network switches in the data center

Explanation

For managed databases the provider handles the engine, patching, and hardware, while the customer configures network access, authentication, and data-level permissions. Hardware and physical network upkeep remain provider duties.

Question 14Cloud Concepts

Which approach best reduces the blast radius of a compromised credential in a cloud account?

  1. Storing a single long-lived key in application source code
  2. Granting every workload a shared administrator credential for simplicity
  3. Disabling logging so credentials are not recorded
  4. Issuing short-lived, narrowly scoped credentials per workload Correct answer.

Explanation

Least privilege combined with short-lived credentials limits what a stolen credential can do and for how long. Shared administrator credentials, embedded long-lived keys, and disabled logging all increase exposure and hinder investigation.

Question 15Cloud Concepts

A workload runs only during business hours on weekdays. Which action most directly reduces cost without changing functionality?

  1. Scheduling the workload to stop outside business hours Correct answer.
  2. Adding a second availability zone for redundancy
  3. Enabling cross-region replication for all volumes
  4. Moving the workload to a larger instance type

Explanation

Stopping or deallocating compute when it is not needed eliminates charges for idle hours, which is the largest saving for a schedule-bound workload. Larger instances, extra replication, and additional zones all add cost rather than reduce it.

Question 16Cloud Concepts

Which characteristic distinguishes a private cloud from a public cloud?

  1. Resources cannot be accessed over a network
  2. Resources are billed only on a fixed annual contract
  3. Resources are dedicated to a single organization rather than shared among unrelated tenants Correct answer.
  4. Resources are always located in the customer's own building

Explanation

The defining trait of a private cloud is that the infrastructure is provisioned for exclusive use by one organization, whether operated on premises or by a third party. Location, network accessibility, and billing arrangements vary and do not define the model.

Question 17Cloud Concepts

An architect must choose between two regions for a latency-sensitive application serving users in one city. Which factor matters most?

  1. The number of services offered in each region
  2. The network distance between each region and the user population Correct answer.
  3. The default quota limits for each account
  4. The age of the hardware in each region

Explanation

For latency-sensitive workloads, round-trip time is dominated by the network path between users and the deployed region, so geographic proximity to the user base is the primary consideration. Service catalog breadth and quotas matter for feasibility but not for latency.

Question 18Cloud Concepts

A company wants to avoid vendor lock-in for a containerized application. Which practice best supports portability?

  1. Using proprietary managed services for every application component
  2. Relying on a single provider-specific scheduler API throughout the code
  3. Packaging the application in standard containers with externalized configuration Correct answer.
  4. Hard-coding provider-specific identifiers into application source

Explanation

Standard container images with configuration supplied externally can run on many platforms with minimal change, which reduces switching costs. Deep dependence on proprietary services or embedded provider identifiers makes migration expensive.

Question 19Cloud Concepts

Which scenario most clearly calls for a hybrid cloud architecture?

  1. A startup with no existing infrastructure deploying entirely to a public cloud
  2. A retailer keeping sensitive records on premises while bursting web traffic to the public cloud Correct answer.
  3. A research group sharing a cloud funded by several universities
  4. A firm replacing all its servers with a single dedicated host

Explanation

Hybrid architectures combine on-premises systems with public cloud services, often to keep sensitive data local while gaining elastic capacity for variable workloads. The other scenarios describe public, community, and dedicated single-host arrangements.

Question 20Cloud Concepts

Which two practices together best support both durability and rapid recovery of data in the cloud?

  1. Keeping a single copy in one zone and testing restores annually
  2. Storing backups only on the same volume as the live data
  3. Replicating data across zones and regularly testing restore procedures Correct answer.
  4. Encrypting backups and never verifying that they can be restored

Explanation

Durability comes from maintaining redundant copies in separate failure domains, while recoverability depends on verified restore procedures that are exercised regularly. Encryption protects confidentiality but does not prove restorability, and co-located backups share the primary's failure risk.

Question 21Cloud Concepts

Which statement accurately contrasts vertical and horizontal scaling in cloud environments?

  1. Both terms describe adding storage capacity only
  2. Vertical scaling enlarges one instance, while horizontal scaling adds more instances Correct answer.
  3. Horizontal scaling always requires downtime, while vertical scaling never does
  4. Vertical scaling adds more instances, while horizontal scaling enlarges one instance

Explanation

Vertical scaling increases the size of a single instance, such as more CPU or memory, while horizontal scaling adds more instances behind a distribution layer. Horizontal scaling generally suits distributed, stateless workloads and avoids the upper size limit of a single machine.

Question 22Cloud Concepts

A team is comparing total cost of ownership for a steady, predictable workload over three years against equivalent on-demand pricing. Which analysis is most complete?

  1. Comparing only the hourly compute rate of each option
  2. Assuming staffing costs are zero because the workload is in the cloud
  3. Including compute, storage, data transfer, staffing, and commitment discounts over the period Correct answer.
  4. Ignoring data transfer because it is always free between regions

Explanation

A sound total cost comparison includes all recurring cost categories such as compute, storage, egress, operational staffing, and any commitment-based discounts across the full period. Comparing a single rate or assuming away real costs produces a misleading result.

Question 23Cloud Concepts

An application writes to a queue that a pool of workers consumes. During a traffic spike, workers fall behind and the queue grows. Which change best preserves responsiveness while controlling cost?

  1. Reducing the number of workers to lower compute spend
  2. Increasing the message retention period on the queue
  3. Scaling worker count based on queue depth and scaling in when it drains Correct answer.
  4. Switching the queue to a synchronous direct call between services

Explanation

Scaling on queue depth directly ties capacity to backlog, adding workers while demand outpaces processing and removing them once the queue drains. Retention settings do not add processing capacity, and reducing workers or making calls synchronous worsens the backlog.

Question 24Cloud Concepts

A firm must prove to auditors that access to a regulated dataset is limited to approved staff. Which combination provides the strongest evidence?

  1. Role-based access policies enforced centrally plus immutable access logs retained for the audit period Correct answer.
  2. A shared administrator account used by the operations team
  3. Encryption of the dataset at rest with keys held by the provider
  4. A written policy document that staff are asked to follow

Explanation

Central role-based policies enforce least privilege, and tamper-resistant logs provide the record auditors need to verify who accessed the data and when. Shared accounts destroy attribution, encryption alone does not restrict who may read data, and undocumented practice cannot be verified.

Question 25Cloud Concepts

A company runs a stateful legacy application that cannot be modified. It needs high availability across zones. Which approach is most defensible?

  1. Running a single instance in one zone with a larger disk
  2. Redeploying the application as stateless functions without changing code
  3. Relying on daily backups taken from the single instance
  4. Using an active-passive pair across zones with shared replicated storage and automated failover Correct answer.

Explanation

When the application cannot be redesigned, an active-passive pair spanning zones with replicated shared storage and automated failover provides continuity without code changes. Stateless redesign is excluded by the constraint, and single-instance or backup-only approaches leave long recovery windows.

Question 26Cloud Concepts

Which statement best defines cloud computing as described by the NIST model?

  1. A model that requires every workload to run on dedicated physical servers
  2. A model that provides unlimited free storage to any internet user
  3. A model in which an organization owns all hardware and software inside its own data center
  4. A model for enabling on-demand network access to a shared pool of configurable computing resources that can be provisioned with minimal management effort Correct answer.

Explanation

Cloud computing is characterized by on-demand self-service, broad network access, resource pooling, rapid elasticity, and measured service. These traits let consumers provision resources programmatically with minimal provider interaction.

Question 27Cloud Concepts

Which cloud service model gives the customer the greatest control over the operating system and runtime?

  1. Function as a Service
  2. Infrastructure as a Service Correct answer.
  3. Software as a Service
  4. Platform as a Service

Explanation

In IaaS the provider supplies virtualized compute, storage, and networking, while the customer manages the operating system, middleware, and applications. Higher-level models such as PaaS, SaaS, and FaaS abstract the OS away from the customer.

Question 28Cloud Concepts

A company wants to pay only for the compute it consumes each month, with no long-term commitment. Which cloud characteristic does this describe?

  1. Multi-tenancy
  2. High availability
  3. Measured service Correct answer.
  4. Fault tolerance

Explanation

Measured service means the provider meters consumption and bills accordingly, so customers pay for what they use. This pay-as-you-go billing is a defining economic trait of cloud computing.

Question 29Cloud Concepts

Which cloud deployment model places workloads on infrastructure shared by many unrelated organizations but logically isolated from one another?

  1. Hybrid cloud
  2. Community cloud
  3. Public cloud Correct answer.
  4. Private cloud

Explanation

A public cloud is owned by a provider and offers resources to any customer, with logical isolation separating tenants. Multi-tenancy is the underlying mechanism that keeps each customer's data and workloads separate.

Question 30Cloud Concepts

Which term describes the ability of a system to keep running, often without interruption, when a component fails?

  1. Scalability
  2. Resilience Correct answer.
  3. Elasticity
  4. Portability

Explanation

Resilience is the capacity to recover from and continue operating through failures, typically through redundancy and automated recovery. It differs from scalability, which concerns handling growth in load.

Question 31Cloud Concepts

Which cloud benefit most directly reduces the need for large upfront capital expenditure?

  1. Extending hardware refresh cycles on owned equipment
  2. Converting capital expense into variable operational expense Correct answer.
  3. Increasing the number of physical servers owned
  4. Requiring long-term data center leases

Explanation

Because cloud resources are rented and metered, spending shifts from upfront capital purchases to ongoing operational costs tied to usage. This reduces the risk of over-provisioning capacity for peak demand.

Question 32Cloud Concepts

Which statement best describes a region in a major cloud provider's global infrastructure?

  1. A logical grouping of resources within one account
  2. A content delivery edge location serving cached files
  3. A geographic area containing multiple isolated data center groups Correct answer.
  4. A single physical server rack inside a data center

Explanation

A region is a geographic area that contains multiple availability zones, each made up of one or more discrete data centers. Customers choose regions to control latency, data residency, and service availability.

Question 33Cloud Concepts

A retailer wants its web tier to add instances automatically when CPU utilization exceeds a threshold and remove them when it drops. Which capability does this require?

  1. Manual vertical scaling by resizing the instance type
  2. Auto scaling based on monitored metrics Correct answer.
  3. A reserved instance purchase
  4. Cross-region replication

Explanation

Auto scaling uses monitored metrics such as CPU utilization to adjust the number of instances dynamically. This keeps capacity aligned with demand without manual intervention.

Question 34Cloud Concepts

A team wants to store infrequently accessed archives at the lowest cost while tolerating retrieval delays of several hours. Which storage tier characteristic fits best?

  1. An archive tier with delayed retrieval and low storage price Correct answer.
  2. A high-performance tier designed for frequent reads
  3. A local instance disk that persists only while the instance runs
  4. A content delivery network cache

Explanation

Archive storage tiers trade retrieval latency for a much lower per-gigabyte storage price, which suits long-term retention of rarely read data. The delayed retrieval is acceptable when access is infrequent and not time-critical.

Question 35Cloud Concepts

A company must ensure that a database failure in one zone does not lose committed transactions. Which design element is most important?

  1. A nightly full backup stored in the same zone
  2. Increasing the instance size of the primary database
  3. Synchronous replication of data to another zone before acknowledging the write Correct answer.
  4. Caching reads at the application layer

Explanation

Synchronous replication confirms that a write is durably stored in more than one zone before it is acknowledged. If the primary zone fails, the replicated copy preserves committed transactions with no data loss.

Question 36Cloud Concepts

A global media site wants users worldwide to receive images with low latency. Which service is most appropriate?

  1. A content delivery network with edge locations Correct answer.
  2. A relational database read replica
  3. A single object storage bucket in one region
  4. A virtual private network gateway

Explanation

A content delivery network caches content at edge locations close to users, reducing the distance and time needed to fetch it. This lowers latency for a globally distributed audience.

Question 37Cloud Concepts

An organization wants its developers to create resources quickly but must prevent them from exceeding approved budgets or opening public storage. Which approach best achieves this?

  1. Grant every developer full administrator rights
  2. Rely on developers to follow a written policy document
  3. Apply guardrails through policy as code and budget alerts Correct answer.
  4. Disable logging to reduce overhead

Explanation

Policy as code enforces rules automatically at provisioning time, and budget alerts notify stakeholders when spending approaches limits. Together they provide preventive and detective controls rather than relying on human discipline.

Question 38Cloud Concepts

A team is designing a system that must continue serving traffic if an entire region becomes unavailable. Which approach addresses this requirement?

  1. Deploying all resources in one zone of one region
  2. Adding more read replicas within the primary region
  3. Replicating the workload and data to a second region with failover routing Correct answer.
  4. Using a larger instance type in the primary region

Explanation

Surviving a regional outage requires resources and data in at least one other region plus a routing mechanism that redirects traffic during failover. Redundancy confined to a single region cannot protect against regional loss.

Question 39Cloud Concepts

A firm is migrating to the cloud and must decide which workloads to move first. Which criterion usually identifies the best early candidates?

  1. Workloads that are low-risk, loosely coupled, and easy to re-platform Correct answer.
  2. Workloads with the highest regulatory complexity
  3. Workloads that depend on specialized on-premises hardware
  4. Workloads with the largest number of undocumented integrations

Explanation

Starting with low-risk, loosely coupled workloads lets a team build cloud skills and validate processes while limiting business impact. Complex, tightly coupled systems are better migrated after the operating model matures.

Question 40Cloud Concepts

Which practice best protects data at rest in cloud storage from unauthorized disclosure?

  1. Storing data only in caches
  2. Publishing bucket names in public documentation
  3. Encryption with provider-managed or customer-managed keys Correct answer.
  4. Relying on unpredictable object names for secrecy

Explanation

Encrypting data at rest ensures that stored objects remain unreadable without the appropriate keys, even if the underlying media is exposed. Key management choices determine how much control the customer retains.

Question 41Cloud Concepts

A company wants its on-premises systems to reach cloud services over a private connection that avoids the public internet. Which option fits best?

  1. A dedicated private interconnect to the provider Correct answer.
  2. A content delivery network
  3. A public API gateway with open access
  4. A site-to-site VPN over the internet

Explanation

A dedicated private interconnect carries traffic between the customer network and the provider without traversing the public internet. This typically offers more consistent latency and stronger privacy than internet-based paths.

Question 42Cloud Concepts

An application's demand varies widely and unpredictably, and the team wants to minimize cost while preserving responsiveness. Which combination is most suitable?

  1. On-demand instances combined with auto scaling Correct answer.
  2. Only long-term reserved instances sized for peak
  3. A single large instance with manual resizing
  4. A fixed fleet sized for peak load

Explanation

On-demand capacity paired with auto scaling follows actual demand, so the fleet shrinks during quiet periods and grows during spikes. This avoids paying continuously for peak capacity that is rarely used.

Question 43Cloud Concepts

An architect must choose a database for a workload that needs flexible schemas and very high write throughput across many servers. Which option fits best?

  1. A file share mounted on one server
  2. A data warehouse optimized for batch reporting
  3. A single-node relational database
  4. A horizontally scalable NoSQL database Correct answer.

Explanation

NoSQL databases with horizontal partitioning distribute writes across many nodes and support flexible schemas. This suits high-volume, rapidly evolving data better than a single relational node.

Question 44Cloud Concepts

A team wants to run a containerized workload without managing the underlying cluster nodes. Which service category should they select?

  1. A static website host
  2. A bare-metal server
  3. Self-managed virtual machines
  4. A managed container orchestration service Correct answer.

Explanation

A managed container orchestration service runs the control plane and often the worker nodes for the customer, removing cluster administration tasks. The team focuses on deploying containers rather than patching hosts.

Question 45Cloud Concepts

A bank must ensure that only approved employees can read a sensitive dataset, and it must demonstrate this to auditors. Which combination is most appropriate?

  1. Shared administrator credentials and periodic verbal confirmation
  2. Storing the dataset on a public share
  3. Disabling access logs to protect privacy
  4. Fine-grained identity policies plus immutable access logging Correct answer.

Explanation

Fine-grained identity policies restrict access to approved principals, and immutable logs create tamper-resistant evidence of who accessed what. Auditors can then verify both control design and actual usage.

Question 46Cloud Concepts

A workload must process a burst of messages without losing any, even if some workers crash mid-processing. Which design is most robust?

  1. A queue that deletes a message as soon as it is delivered
  2. A queue that retains messages until a worker acknowledges successful processing Correct answer.
  3. Direct calls from producers to workers with no retry
  4. An in-memory list held by a single worker

Explanation

Retaining messages until an explicit acknowledgment means that a crashed worker's message becomes visible again and can be reprocessed. This at-least-once pattern prevents loss during failures.

Question 47Cloud Concepts

A company must keep certain records within a national boundary while still using public cloud services for other workloads. Which design best meets both goals?

  1. Use a region inside the required country for regulated data and other regions for the rest Correct answer.
  2. Place all workloads in a single foreign region
  3. Replicate regulated data to every region for redundancy
  4. Store regulated data only in edge caches

Explanation

Region selection lets an organization keep regulated data inside the required jurisdiction while placing unregulated workloads wherever is most efficient. This satisfies residency obligations without abandoning public cloud benefits.

Question 48Cloud Concepts

An engineering team wants to compare the cost of running a steady workload on owned hardware versus the cloud over three years. Which factor is most often overlooked in such comparisons?

  1. The number of application features
  2. The purchase price of the servers
  3. Operational costs such as power, staffing, and refresh cycles Correct answer.
  4. The programming language used

Explanation

Total cost of ownership comparisons frequently count hardware purchase price but omit power, cooling, facilities, administrative staffing, and periodic refresh. Including these operational costs usually narrows the apparent gap between owned infrastructure and cloud.

Question 49Security and Compliance

Which concept describes granting users only the minimum access needed to perform their job duties?

  1. Zero trust
  2. Separation of duties
  3. Least privilege Correct answer.
  4. Defense in depth

Explanation

Least privilege limits each account to the permissions required for its tasks, reducing the blast radius of a compromised credential. Separation of duties splits critical tasks between people, defense in depth layers controls, and zero trust removes implicit trust based on network location.

Question 50Security and Compliance

An auditor finds that administrators use the same account for daily email and for changing firewall rules. Which control weakness does this represent?

  1. Insufficient password complexity policy
  2. Absence of data loss prevention scanning
  3. Weak physical access controls
  4. Missing role separation between privileged and routine activity Correct answer.

Explanation

Reusing a privileged account for routine work such as email exposes administrative rights to phishing and malware. The standard remedy is separate accounts, with privileged activity performed from a dedicated administrative identity.