How can you architect the application to minimize the risk involved with data exposure?

You are designing a cloud services architecture for a company. You have determined that running some of the customer facing applications the company uses in a public cloud would save a significant amount of money but the security department wants to retain control of customer data at rest. The application infrastructure consists of two database servers and eight web servers.

How can you architect the application to minimize the risk involved with data exposure?
A . Host the application servers in the public cloud and host the databases in the private cloud.
B . Scale the application horizontally by utilizing a hybrid cloud where the application and database are mirrored a public cloud.
C . Cluster four of the application servers and one database server in the public cloud and the remaining servers in the private cloud.
D . Host the application servers and database servers in the public cloud and set up RBAC to restrict access to the applications

Answer: A