CLO-002 Practice Test 12 — 15 Questions

Question 1

Which strategy minimizes 'vendor lock-in' when designing a cloud-native architecture?

Accepted Answer

Containerization. Containerization is correct because containers package applications and their dependencies into portable, OCI-standard images that can run on any conforming platform (Docker, Kubernetes, ECS, GKE, AKS, etc.). This portability means workloads are not tied to a specific cloud provider's proprietary runtime, dramatically reducing vendor lock-in. Because the image format and orchestration APIs are largely open standards, migrating between clouds or on-prem becomes a matter of re-deploying the same artifact rather than rewriting code.

Answer

Relying on proprietary database engines

Answer

Using vendor-specific serverless functions

Answer

Single-cloud architecture

Question 2

When conducting a cloud readiness assessment, what is the most important stakeholder to involve early in the process?

Accepted Answer

Security/Compliance team. Security and compliance must be engaged early because cloud readiness assessments evaluate data classification, regulatory obligations (GDPR, HIPAA, PCI-DSS), identity integration, and shared responsibility boundaries. If security is brought in late, architectural decisions may violate compliance and require costly rework. Early involvement ensures controls are designed in rather than bolted on.

Answer

HR department

Answer

Marketing department

Answer

Customer service representatives

Question 3

A company needs to store backups for compliance purposes for seven years. Access is rarely required. What is the most cost-effective storage class?

Accepted Answer

Archive/Glacier Storage. Archive/Glacier storage is designed for long-term retention of data that is rarely accessed, offering the lowest per-gigabyte storage price in exchange for higher retrieval latency and retrieval costs. For seven-year compliance backups where access is rare, the storage cost dominates the total cost of ownership, so archive tier is the most cost-effective choice.

Answer

Reduced Redundancy Storage

Answer

Intelligent-Tiering

Answer

Standard Storage

Question 4

Which THREE factors are primary drivers for cloud cost management?

Accepted Answer

Data transfer rates. Data transfer rates (B) are a primary cost driver because cloud providers bill egress traffic and inter-region or inter-AZ transfers separately, so higher transfer volumes or rates directly increase the bill. Resource type and size (D) determine the hourly or per-second compute, memory, storage, and database charges, making instance class and capacity a core lever for cost control. Geographic region (E) matters because each region has its own price list for compute, storage, and data transfer, so deploying in a cheaper region lowers costs. Employee salary (A) is an internal HR expense, not a metered cloud service charge, and Internet browser choice (C) has no bearing on cloud consumption pricing.

Answer

Employee salary

Answer

Internet browser choice

Question 5

Which THREE factors must be considered when estimating cloud costs?

Accepted Answer

Resource type (instance size). Option A (Resource type/instance size) is correct because cloud pricing is primarily driven by the compute capacity selected — larger instance sizes with more vCPUs and memory cost more per hour than smaller ones. Option D (Data transfer out) is correct because egress traffic is billed separately by cloud providers, while inbound data transfer is typically free, making outbound bandwidth a key cost variable. Option E (Resource uptime) is correct because most cloud resources are billed per-second or per-hour of running time, so how long an instance stays provisioned directly determines the total charge. Option B (Data center color) is not a real cost factor — physical facility aesthetics or color schemes have no bearing on cloud billing metrics. Option C (Number of end users) is not directly billed in most cloud pricing models; costs are tied to provisioned resources and consumption rather than user headcount, unless a per-user SaaS license applies, which is not the general cloud cost estimation factor here.

Answer

Data center color

Answer

Number of end users

Question 6

To meet compliance requirements, a firm must store log files for seven years in a read-only state. Which storage configuration provides this level of immutability?

Accepted Answer

S3 Object Lock in Compliance Mode. S3 Object Lock in Compliance Mode prevents any user, including the root account, from overwriting or deleting an object version until its retention period expires. This provides true WORM (Write Once, Read Many) immutability for the required seven years, satisfying regulatory compliance requirements.

Answer

S3 Intelligent Tiering

Answer

S3 Standard Storage Class

Answer

S3 Cross-Region Replication

Question 7

Your organization is experiencing high latency for end-users accessing a global web application. The static assets are currently stored in a single bucket in the US-East region. Which architectural change will most effectively reduce latency for international users?

Accepted Answer

Implementing a CDN. A Content Delivery Network (CDN) caches static assets at edge locations distributed globally, so international users fetch content from a nearby PoP (Point of Presence) instead of traversing the internet to US-East. This dramatically reduces round-trip latency, packet loss, and jitter for static content like images, CSS, and JavaScript. Because the question specifies static assets in a single bucket, a CDN is the direct, high-impact architectural fix.

Answer

Moving the database to a NoSQL engine

Answer

Switching to Private VCN peering

Answer

Vertical scaling of the web servers

Question 8

When a data breach occurs in a cloud environment, who is responsible for notifying the regulatory authorities?

Accepted Answer

The cloud customer. Under virtually all data protection regulations (GDPR, HIPAA, CCPA, etc.), the data controller — which in a cloud relationship is the cloud customer — bears the legal obligation to notify regulators and affected data subjects of a breach. The cloud provider is typically a data processor acting on the customer's instructions and may contractually assist with notification, but the legal duty rests with the customer. This is a foundational shared-responsibility concept tested heavily on CLO-002.

Answer

The local ISP

Answer

The cloud provider

Answer

The software vendor

Question 9

A company is comparing two cloud providers. Which contractual document should be reviewed to understand uptime guarantees and service credits?

Accepted Answer

Service Level Agreement (SLA). The Service Level Agreement (SLA) is the contractual document that defines the provider's committed uptime/availability percentage (e.g., 99.9%) and the financial remedies—service credits—issued when that commitment is missed. It is the only document in the list that combines availability guarantees with a defined compensation mechanism.

Answer

Privacy Policy

Answer

Master Service Agreement (MSA)

Answer

Acceptable Use Policy (AUP)

Question 10

A firm is deploying a web application across two different cloud providers to ensure business continuity. What is the most critical challenge they must overcome regarding data consistency?

Accepted Answer

Data synchronization and interoperability. In a multi-cloud deployment, each provider maintains its own data stores, APIs, and replication mechanisms, so keeping data consistent across both environments is the hardest problem. Without a unified synchronization strategy and interoperable data formats, the two sites can diverge, causing stale reads, conflicting writes, and failed failover. This directly threatens business continuity because the standby site may not reflect the true state of the primary. Billing, identity, and CI/CD are operational concerns but do not determine whether the application can correctly serve the same data from either cloud.

Answer

Managing different billing cycles

Answer

Configuring identity federation

Answer

Scaling the CI/CD pipeline

Question 11

You are managing a fleet of cloud servers and notice that CPU usage is consistently at 95% during peak hours. What operational action should you take to restore performance?

Accepted Answer

Scale out the application. Horizontal scaling (adding more instances) or vertical scaling (increasing instance size) are standard responses to high utilization.

Answer

Change the time zone

Answer

Reduce the logging level

Answer

Disable the firewall

Question 12

You notice that the latency of your web application is increasing. You have determined the database is the bottleneck. What is the most effective way to improve read performance?

Accepted Answer

Create read replicas. Adding read replicas distributes query load, reducing the pressure on the primary database instance.

Answer

Delete old indexes

Answer

Enable multi-AZ failover

Answer

Increase primary instance size

Question 13

Which cloud computing concept best describes the ability to add and remove resources based on traffic demands to maintain performance?

Accepted Answer

Elasticity. Elasticity is the cloud characteristic that describes the ability to automatically add and remove resources in response to real-time demand, scaling out during traffic spikes and scaling in when demand drops. This matches the question's emphasis on maintaining performance while matching capacity to traffic. Scalability, by contrast, is the broader ability to grow, but it does not inherently imply automatic, bidirectional adjustment.

Answer

Multi-tenancy

Answer

High Availability

Answer

Scalability

Question 14

A security administrator needs to ensure that all traffic between their on-premises data center and their cloud environment is encrypted and traverses a dedicated, private connection. What should they implement?

Accepted Answer

A dedicated private circuit with VPN encryption. A dedicated private circuit (such as AWS Direct Connect or Azure ExpressRoute) combined with VPN encryption provides a private, non-internet path between on-premises and cloud while encrypting the traffic in transit. This satisfies both requirements: dedicated connectivity and encryption.

Answer

A public load balancer

Answer

A public internet VPN

Answer

A standard cloud gateway

Question 15

An organization is conducting a cost-benefit analysis for moving data storage to the cloud. They find that the cloud provider offers a 'Tiered Storage' model. What is the primary business benefit of this feature?

Accepted Answer

Optimizing storage costs based on data access frequency. Tiered storage optimizes storage costs by automatically or manually moving data between storage tiers based on access frequency (C). Frequently accessed data stays in expensive high-performance tiers, while infrequently accessed data moves to cheaper archival tiers, reducing overall cost.

Answer

Ensuring 100% data availability

Answer

Increasing compute performance

Answer

Automating data encryption