An insurance company has a claims application used to capture data about their

policyholders and any property damage they suffer. A hurricane is projected to strike the

Gulf Coast region of the US$,$ likely causing massive property damage. This will create a

huge spike in claims which will in turn create an enormous load on the corporate IT

infrastructure. The company's decision is to use a public cloud provider to deliver virtual

machines to handle the expected demand. The company must control access between

the enterprise system and the virtual machines hosted by the cloud provider, limiting

access to only authorized agents of the company. The company must securely transmit

any data created by cloud$-$based instances of the application back inside the corporate

firewall. The cloud provider must ensure that no traces of the application or its data

remain whenever a virtual machine is shut down.

The insurance company is based in the U$.$S$.$ and only has domestic offices $($there are no

operations outside of the U$.$S$.).$ The company is using Microsoft Active Directory $($AD$)$

for authentication, with workstations running Windows $10.$ The claims systems are

running Oracle Database $19$c on Linux.