Point out the wrong statement.

You can use proxy and brokerage services to separate clients from direct access to shared cloud storage

Any distributed application has a much greater attack surface than an application that is closely held on a Local Area Network

All of the mentioned