Management And Technical Operations

You are managing a multi-cloud environment using Terraform. You need to ensure that the infrastructure state is locked to prevent concurrent modifications during CI/CD pipeline runs. Which backend component should you implement to achieve state locking?

A system administrator needs to automatically replace unhealthy EC2 instances in an AWS Auto Scaling group. Which component must be configured?

A cloud administrator is tasked with reducing idle resource costs in AWS. Which tool should be configured to provide specific rightsizing recommendations for EC2 instances based on historical utilization data?

A developer needs to monitor real-time CPU utilization across a fleet of virtual machines in Azure. Which service should be used to capture and visualize these metrics?

Which cloud operation task is primarily responsible for ensuring that the cloud environment adheres to corporate security and regulatory standards?

You are implementing a disaster recovery strategy. You need to ensure that database backups are stored in a different geographic region than the primary production database. What is this concept known as in cloud management?

You are utilizing Infrastructure as Code (IaC) templates. You notice that a specific resource update is causing service downtime. Which deployment pattern should you adopt to verify updates in a controlled environment before rolling out to production?

Which of the following is an example of 'Infrastructure as Code'?

A company requires that all cloud logs be retained for seven years for legal compliance. Which service should they configure to ensure logs are moved to the cheapest storage class long-term?

You are managing a fleet of cloud servers and notice that CPU usage is consistently at 95% during peak hours. What operational action should you take to restore performance?

A developer needs to update a database schema without losing any existing data. Which concept is essential for this operational task?

You are notified that an unused storage volume is incurring costs. What is the standard operational procedure to stop these charges?

Which metric should you monitor to determine if your application's load balancer is struggling with concurrent user connections?

A security audit requires that all database queries be logged and stored securely. Which feature should be enabled to meet this requirement in a relational database service?

You have a microservices architecture. How can you effectively manage the deployment of configuration changes across hundreds of containers without manual intervention?

When a cloud service experiences a global outage, which document should you check to verify the current status of the provider's infrastructure?

What is the primary benefit of using a Managed Service (like RDS) over a self-managed database on a virtual machine?

Your organization uses a 'Shared Responsibility Model'. Which of the following is typically the customer's responsibility in the cloud?

You are tasked with automating a script that runs every night at 2 AM to clean up temporary files. Which service is most appropriate for triggering this task?

You notice that the latency of your web application is increasing. You have determined the database is the bottleneck. What is the most effective way to improve read performance?

Which document is essential to review to understand the scope and limitations of a cloud provider's commitment to service uptime?

You are migrating a legacy application to the cloud. The application requires an OS that is no longer supported by the provider. Which migration strategy is most appropriate?

You need to ensure that all virtual machines follow a consistent naming convention and have specific tags for cost tracking. What service should you use to enforce this?

You want to receive an email alert whenever your monthly cloud spending exceeds $500. Which service should you configure?

Which protocol is most commonly used for secure, encrypted remote management of Linux-based virtual machines in the cloud?

You have a fleet of instances that need to automatically update their software patches. What is the best cloud-native approach to manage this?

An administrator is setting up a new cloud account. What is the first security best practice they should implement?

Which TWO of the following are benefits of using a Content Delivery Network (CDN)?

Which THREE actions are best practices for securing a cloud virtual machine?

Which TWO of the following are common cloud monitoring tasks?

Your team needs to share a large, sensitive file with an external partner. What is the secure way to share this file in the cloud?

A database is experiencing high I/O wait times. Which resource change is most appropriate?

You are designing a high-availability architecture. Which configuration ensures that your application is resilient to the failure of an entire physical data center?

Which THREE factors are primary drivers for cloud cost management?

Which TWO components are essential for a robust cloud disaster recovery plan?

Which TWO of the following are benefits of using tags on cloud resources?

Which THREE items should be included in an incident response plan?

Which TWO things should be checked when a cloud service is exceeding its budget?

Which THREE services are typically involved in cloud infrastructure automation?

Which THREE factors influence cloud resource scalability decisions?

Which THREE cloud service models require different levels of operational management from the customer?

Which THREE items are considered part of cloud resource maintenance?

Which TWO of the following are common cloud deployment patterns?

Which TWO of the following are key considerations for cloud operational compliance?

Which THREE of the following are necessary to manage multi-cloud deployments effectively?

A company runs a stateless web application on a fleet of cloud virtual machines behind a load balancer in a single region. The operations team wants to survive the loss of an entire availability zone with minimal manual intervention, while keeping the recovery time objective as low as possible. Which approach best meets these requirements?

A cloud operations team needs to ensure that the production environment can be rebuilt identically after a region-wide failure. The team already stores nightly database backups in an object storage bucket in a second region. Which additional artifact is MOST critical to include in the recovery plan to guarantee the application tier can be redeployed consistently?

A cloud operations team wants to automatically remediate an EC2 instance that has been running with CPU utilization below 5% for 14 consecutive days. The team needs the remediation to trigger without manual intervention and to notify a Slack channel. Which AWS service should be used to orchestrate this workflow?

A company's cloud administrator needs to reduce the cost of a fleet of Amazon EC2 instances that run a stateless web application. The workload can tolerate interruptions but must be highly available. Which AWS purchasing option should the administrator select to achieve the LOWEST cost while meeting these requirements?

A financial services firm runs a regulated workload in a public cloud. Compliance requires that data at rest be encrypted with keys the firm controls and can rotate independently of the provider, and that an audit trail record every key usage. The firm wants to minimize operational overhead while retaining exclusive control of key material. Which approach best satisfies these requirements?

A company runs a production workload on Azure Kubernetes Service (AKS). The operations team must reduce the blast radius of a node failure and ensure that pod disruption budgets are respected during voluntary disruptions. Which two actions should the team take? (Choose two.)

A cloud engineer is designing a solution on Microsoft Azure that must distribute incoming HTTP traffic across a set of virtual machines in a single region, provide URL-based routing, and support TLS termination. Which Azure service should the engineer use?

A cloud engineer is configuring a lifecycle policy for an object storage bucket that holds compliance audit logs. Regulations require that logs be retained for seven years and that they cannot be altered or deleted during that period. Which combination of lifecycle actions should the engineer implement?

A financial services company runs a regulated workload on a public cloud. The compliance team requires that all data stored in object storage be encrypted at rest using keys that the company generates and controls, and that key usage be independently auditable. The cloud provider's default encryption uses provider-managed keys. Which action should the cloud operations team take?

A startup is deploying a new web application on a public cloud. The team wants to minimize the attack surface of the web tier by allowing only HTTP and HTTPS traffic from the internet while blocking all other inbound ports. Which cloud construct should the team configure to enforce this network-level restriction?

A financial services company must store monthly compliance reports in Amazon S3 for seven years. The reports are accessed only during the first 30 days after creation and must be retained even if accidentally deleted. Which S3 feature should be enabled to prevent deletion during the retention period?

A cloud operations team wants to receive alerts before their monthly cloud spend exceeds the approved budget for the production subscription. They already use Azure Cost Management and want an automated notification when actual or forecasted costs cross a defined threshold. What should they configure?

A cloud operations team needs to ensure that a critical application running on Google Cloud can automatically recover from a zone failure without manual intervention. The application is deployed on Compute Engine instances managed by an instance group. Which feature should the team configure?

A startup deploys a web application on a public cloud. The operations team wants to be notified automatically when average CPU utilization on the application servers exceeds 80 percent for five consecutive minutes, without manually checking dashboards. Which capability should the team configure?

A cloud architect is designing a solution that must provide a recovery point objective (RPO) of 15 minutes and a recovery time objective (RTO) of 2 hours for a critical database. The database currently runs on a single virtual machine with nightly backups. Which change should the architect implement to meet these objectives?

A DevOps team manages a Google Cloud environment with many projects. They need a centralized view of all audit logs and the ability to create log-based metrics that alert on suspicious IAM changes across all projects. Which Google Cloud service should they use?

A company runs a three-tier application in AWS. During peak hours, users report slow page loads. CloudWatch metrics show the application load balancer is healthy, the web tier CPU is at 40 percent, and the database read replica latency is 20 ms, but the application tier shows high request queue depth and steady CPU near 95 percent. The team wants the fastest operational fix that preserves availability. What should they do?

A media company stores millions of video files in a public cloud object storage bucket. Legal hold requirements mandate that specific files be retained for seven years and that no user, including administrators, can delete or overwrite them during that period. The company wants to enforce this at the storage layer without relying on application logic. Which capability should be implemented?

A small business wants to move its customer relationship management system to a public cloud provider. The IT manager is concerned about the provider's ability to guarantee a specific level of uptime and to define remedies if that level is not met. Which document should the manager review to find the committed uptime percentage and any service credits?

A cloud administrator is implementing a backup strategy for an Amazon RDS for MySQL database. The administrator must ensure point-in-time recovery and long-term retention beyond the maximum automated backup window. Which TWO actions should the administrator take? (Choose two.)

A multinational enterprise is migrating a latency-sensitive trading application to a public cloud. The architecture team must select deployment characteristics that minimize network round-trip time for users in multiple regions while maintaining high availability. Which TWO characteristics should the team prioritize? (Choose two.)

A cloud engineer needs to deploy a set of resources on Microsoft Azure in a repeatable and consistent manner. The engineer wants to define the infrastructure as code and be able to deploy it multiple times without manual intervention. Which Azure service should the engineer use?

An organization runs a containerized e-commerce platform on a managed Kubernetes service. During a flash sale, response times degrade sharply. Metrics show the application pods are healthy and the database is not saturated, but the cluster reports that some nodes cannot schedule new pods because of resource pressure. The team must add capacity automatically when pod demand rises and remove it when demand falls. Which action should the team take?

A financial services firm is preparing to move a regulated workload to a public cloud. The compliance officer requires evidence that the provider's controls are independently assessed and that the firm can retrieve its data in a usable format if it leaves the provider. Which TWO provider artifacts should the firm obtain? (Choose two.)

A cloud operations team is preparing to migrate a legacy three-tier application to a public cloud. The team must ensure the new environment supports operational visibility and controlled change management after cutover. Which two actions should the team take? (Choose two.)

A media company stores years of video assets in a public cloud object storage bucket. Auditors require that no object can be deleted or overwritten for seven years, even by a user with full administrative rights, to satisfy a regulatory retention rule. Which capability should the company implement?

A financial services firm runs regulated workloads on AWS. An auditor requires proof that data stored in Amazon S3 is encrypted at rest with keys the firm controls, that key usage is logged, and that keys can be rotated on a defined schedule. Which combination of AWS services and features satisfies these requirements?

A company runs a production workload across two public cloud providers. The security team requires that a single set of identity policies govern access to resources in both environments, and that a terminated employee lose access everywhere within minutes. Which approach should the company adopt?

A company is preparing a change management process for its cloud environment. The operations lead wants to ensure that changes to production workloads are traceable, reversible, and reviewed before deployment. Which TWO practices best support these goals? (Choose two.)

A financial services firm runs a payment API on Amazon EC2 instances behind an Application Load Balancer. The security team mandates that all incoming traffic be inspected for SQL injection and cross-site scripting before reaching the application, without modifying the application code. Which AWS service should the cloud operations team implement to meet this requirement?

A startup is migrating its on-premises PostgreSQL database to Microsoft Azure. The team wants to minimize administrative overhead for patching, backups, and high availability while retaining control over database schema and query tuning. Which Azure service best fits these requirements?

A cloud engineer must ensure that an Amazon S3 bucket used for regulatory archives cannot have objects deleted or overwritten by any user, including the root account, for a fixed retention period of seven years. Which combination of settings should the engineer configure?

A cloud operations team is preparing to migrate a business-critical workload to a public cloud provider. Leadership wants assurance that the provider's internal controls, security posture, and compliance status have been independently validated. Which TWO artifacts should the team request from the cloud provider to satisfy this due diligence? (Choose two.)

A cloud operations team is implementing a cost optimization strategy for their Google Cloud environment. They want to reduce spend on Compute Engine instances without affecting performance. Which TWO actions should they take? (Choose two.)

A retailer's cloud architect is designing a strategy to avoid vendor lock-in for a containerized order-processing application. The application must be able to move between Amazon Elastic Kubernetes Service and Azure Kubernetes Service with minimal rework. Which approach best supports this goal?

A company is deploying a new web application on AWS. The security team requires that all data stored in Amazon S3 be encrypted at rest. The operations team wants to minimize management overhead while ensuring compliance. Which S3 encryption option should they choose?