CLO-002 Practice Test 17 — 15 Questions

Question 1

A large enterprise is transitioning to a hybrid cloud architecture. The CIO mandates that the cloud adoption strategy must minimize vendor lock-in. Which architectural approach best achieves this requirement?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Utilizing container orchestration platforms. Container orchestration platforms, such as Kubernetes, provide a layer of abstraction that allows applications to run consistently across different cloud environments. By packaging applications in containers, organizations can avoid dependence on proprietary cloud services and move workloads between providers more easily, thus minimizing vendor lock-in.

Answer

Migrating to a single cloud-native database

Answer

Implementing vendor-specific identity management

Answer

Adopting serverless functions

Question 2

Which THREE of the following are cloud security best practices?

Accepted Answer

Automating security configuration audits. Option A is correct because automating security configuration audits ensures continuous, repeatable detection of drift and misconfigurations across cloud resources, aligning with frameworks like CIS Benchmarks and tools such as AWS Config or Azure Policy. Option D is correct because enforcing the principle of least privilege limits identities and roles to only the permissions required for their tasks, reducing the blast radius of compromised credentials and satisfying standards like NIST and ISO 27001. Option E is correct because encrypting all sensitive data at rest protects confidentiality even if storage media or snapshots are exposed, using services such as AWS KMS, Azure Key Vault, or GCP CMEK. Option B does not belong because storing passwords in plain text files exposes credentials to anyone with file access and violates secure secret management practices. Option C does not belong because granting 'Full Access' to all developers violates least privilege and dramatically increases the risk of accidental or malicious damage.

Answer

Storing passwords in plain text files

Answer

Granting 'Full Access' to all developers

Question 3

Which THREE of the following represent common compliance risks in a cloud environment?

Accepted Answer

Data sovereignty violations. Data sovereignty violations (A) are a common compliance risk because data stored or processed in a cloud region may be subject to different legal jurisdictions, potentially breaching laws like GDPR that restrict cross-border data transfers. Cloud resource misconfiguration (D) is a leading compliance risk since settings such as public S3 buckets, overly permissive security groups, or disabled encryption can directly violate standards like PCI DSS, HIPAA, or ISO 27001. Unauthorized access to sensitive data (E) is a core compliance risk because it breaches confidentiality requirements and mandates for access controls, audit logging, and breach notification under regulations such as HIPAA, SOX, and GDPR. Resource naming conventions (B) are an operational governance or tagging concern, not a compliance risk, and high monthly electricity bills (C) are a cost or sustainability matter unrelated to regulatory compliance obligations.

Answer

Resource naming conventions

Answer

High monthly electricity bills

Question 4

Which TWO business benefits are primarily driven by cloud computing's 'Agility'?

Accepted Answer

Ability to experiment with lower risk. Option D ('Ability to experiment with lower risk') is correct because cloud agility lets teams rapidly provision and tear down resources on demand, so failed experiments incur minimal cost and can be reversed quickly rather than requiring large upfront capital investments. Option E ('Reduced time-to-market for new features') is correct because agility enables fast provisioning, automated deployment, and elastic scaling, allowing new features to be developed, tested, and released far more quickly than with traditional procurement cycles. The remaining options do not belong: A ('Automatically reducing taxes') is a financial/regulatory matter unrelated to cloud agility, B ('Lowering the cost of the CEO's salary') is an HR/compensation decision with no connection to cloud capabilities, and C ('Increasing the number of printers') is a hardware procurement task that cloud computing does not drive.

Answer

Automatically reducing taxes

Answer

Lowering the cost of the CEO's salary

Answer

Increasing the number of printers

Question 5

Which TWO things should be checked when a cloud service is exceeding its budget?

Accepted Answer

Cost allocation reports. Cost allocation reports (A) are correct because they break down spending by service, project, or tag, letting you pinpoint exactly which resources or departments are driving the budget overrun. Resource utilization metrics (E) are correct because they reveal whether over-provisioned, idle, or inefficiently sized instances are wasting money, which is a common root cause of cloud overspend. Together these two checks address both where the money is going and why the consumption is higher than expected. The provider's marketing website (B) is irrelevant since promotional content contains no account-specific billing or usage data. Internet speed tests (C) measure network throughput and have no bearing on cloud service costs. Internal employee email logs (D) are unrelated to billing and would not explain a budget overage.

Answer

The provider's marketing website

Answer

Internet speed tests

Answer

Internal employee email logs

Question 6

Which THREE types of costs should be included in a thorough TCO analysis for cloud migration?

Accepted Answer

Application refactoring and development labor. A thorough cloud migration TCO analysis must capture the one-time and ongoing costs directly tied to moving and running workloads in the cloud. Option A (Application refactoring and development labor) is correct because re-architecting, re-platforming, or rewriting applications for cloud-native services (e.g., converting to containers or serverless) consumes significant engineering hours and is a major migration cost driver. Option D (Data egress and ingress network charges) is correct because cloud providers bill for data transfer, especially egress out of the provider's network, and bulk data migration or ongoing cross-region/replication traffic can materially affect TCO. Option E (Cloud service subscription and consumption costs) is correct because the recurring compute, storage, database, and managed-service charges (on-demand, reserved, or savings-plan pricing) form the core of the ongoing cloud operating cost. Option B (Marketing budget for the migration project) is not a standard TCO component, as marketing spend is a business promotion expense rather than a migration or operational IT cost. Option C (Physical office building rent) is a facilities expense unrelated to cloud migration economics, unless a specific data-center exit is being modeled, which is not the scenario here.

Answer

Marketing budget for the migration project

Answer

Physical office building rent

Question 7

An IT team is conducting a cost-benefit analysis. Which THREE of the following are considered 'hidden' or 'indirect' costs that must be accounted for when moving to the cloud?

Accepted Answer

Staff training and skill acquisition. Option A (Staff training and skill acquisition) is correct because moving to the cloud requires IT staff to learn new platforms, tools, and practices (e.g., AWS/Azure/GCP consoles, IaC, cloud security), and these upskilling costs are often overlooked in a simple subscription-price comparison. Option C (Data migration and integration efforts) is correct because transferring large data sets (e.g., over the internet or via Snowball/Datasync) and re-architecting integrations with APIs, middleware, and legacy systems consume significant labor and tooling budget beyond the headline cloud service fees. Option D (Dedicated network connectivity, such as AWS Direct Connect or Azure ExpressRoute) is correct because reliable, low-latency, high-bandwidth hybrid connectivity typically requires dedicated circuits, cross-connects, and provider fees that are indirect costs not included in standard cloud compute/storage pricing. Option B (Operating system license fees) is not a hidden or indirect cost in this context, since OS licensing is a direct, visible cost that is often bundled into the cloud instance price or BYOL agreement. Option E (Office furniture for the IT department) is unrelated to cloud adoption and is a general facilities expense, not a cloud migration cost.

Answer

Operating system license fees

Answer

Office furniture for the IT department

Question 8

Which TWO of the following are benefits of using tags on cloud resources?

Accepted Answer

Improved cost allocation. Option A (Improved cost allocation) is correct because tags such as CostCenter, Owner, or Environment are propagated into cloud billing and cost-management services (e.g., AWS Cost Explorer, Azure Cost Management, GCP Billing), letting you filter, group, and charge back spend by tag key/value. Option C (Better resource organization) is correct because tags provide searchable, filterable metadata that lets you group, inventory, and automate operations on related resources (e.g., by application, project, or lifecycle stage) across services and regions. The remaining options do not belong: tags are metadata only and do not trigger automatic software updates (B), do not enable automatic data encryption (D), and have no effect on compute performance or processing speed (E).

Answer

Automatic software updates

Answer

Automatic data encryption

Answer

Increased processing speed

Question 9

Which TWO financial models are typical for cloud resource billing?

Accepted Answer

Pay-as-you-go / On-demand. Cloud providers meter actual consumption of compute, storage, and network resources and bill the customer for exactly what is used, with no upfront commitment — the defining characteristic of cloud billing. Option E (Reserved capacity / Subscription) is also correct because customers can commit to a term (e.g., 1- or 3-year reserved instances or savings plans) in exchange for a discounted rate, which is a standard cloud financial model alongside on-demand pricing. Option A (One-time hardware purchase) is a traditional capital-expenditure model for on-premises equipment, not cloud resource billing. Option C (Barter system) is not a recognized cloud billing model, as providers charge monetary fees rather than exchanging goods or services. Option D (Lifetime license purchase) describes perpetual software licensing, which does not reflect the metered, recurring nature of cloud resource billing.

Answer

One-time hardware purchase

Answer

Barter system

Answer

Lifetime license purchase

Question 10

An organization is calculating the cost of cloud vs. on-premises. What is the benefit of 'economies of scale' provided by the cloud vendor?

Accepted Answer

Lower unit costs for resources. Economies of scale in cloud computing refer to the cost advantages that cloud providers achieve by operating at massive scale, which allows them to purchase hardware, power, and networking at lower unit costs and pass those savings to customers. This results in lower per-unit costs for compute, storage, and network resources compared to what an individual organization could achieve on-premises. The benefit is directly financial: customers pay less per resource than if they built and maintained their own infrastructure.

Answer

Unlimited bandwidth

Answer

Elimination of all maintenance

Answer

Guaranteed 100% uptime

Question 11

Your organization uses a 'Shared Responsibility Model'. Which of the following is typically the customer's responsibility in the cloud?

Accepted Answer

Configuration of security groups. In most cloud models, the provider manages the physical hardware, while the customer manages data, patches, and configurations.

Answer

Maintenance of the host OS kernel

Answer

Redundancy of the physical power grid

Answer

Physical security of the data center

Question 12

A retail company is preparing a business case for migrating its e-commerce platform to a public cloud. The CFO is concerned about unpredictable monthly costs and wants to ensure the company can plan its budget effectively. The IT team has analyzed the workload and determined that usage is steady and predictable, with minimal seasonal spikes. Which cloud pricing model should the team recommend to address the CFO's concern?

Accepted Answer

Reserved instances. The retailer needs both cost predictability and savings for a steady workload. Reserved instances provide a committed-term discount that stabilizes monthly costs, making them the best fit. On-demand and pay-as-you-go models offer flexibility but result in variable expenses, while spot instances are unsuitable for a production e-commerce platform due to interruption risk.

Answer

On-demand pricing

Answer

Pay-as-you-go pricing

Answer

Spot instances

Question 13

A security audit requires that all database queries be logged and stored securely. Which feature should be enabled to meet this requirement in a relational database service?

Accepted Answer

Database auditing/Query logging. Database auditing/query logging captures all SQL statements executed against the database, including who ran them and when, and can store them securely for compliance. This directly satisfies the requirement to log and store all database queries. Storage encryption, backups, and connection pooling do not provide query-level logging.

Answer

Storage encryption

Answer

Automated backups

Answer

Connection pooling

Question 14

Which TWO of the following are essential components of a Cloud Security Policy?

Accepted Answer

Data classification scheme. Option C (Data classification scheme) is essential because a Cloud Security Policy must define how data is categorized by sensitivity (e.g., public, internal, confidential, restricted) so that appropriate controls, encryption, and handling procedures can be applied to each class in the cloud. Option E (Access management requirements) is essential because the policy must specify identity and access controls such as least privilege, role-based access control (RBAC), multi-factor authentication (MFA), and periodic access reviews to protect cloud resources. Options A (Cloud provider marketing strategy) and B (Hardware procurement schedule) are business or logistics concerns, not security policy components, and option D (Network cable standards) is a physical-layer infrastructure detail irrelevant to a cloud security policy, since cloud networking is abstracted and governed by the provider.

Answer

Cloud provider marketing strategy

Answer

Hardware procurement schedule

Answer

Network cable standards

Question 15

To comply with data sovereignty laws, a database must remain within a specific country's borders. Which architectural strategy ensures this?

Accepted Answer

Regional Resource Placement. Regional Resource Placement means deploying and storing resources within a specific geographic region (e.g., a country) to comply with data sovereignty laws. By choosing a region that is within the required borders, organizations ensure that data does not leave the country, thus meeting legal requirements.

Answer

Content Delivery Network (CDN)

Answer

Global Accelerator

Answer

VPC Peering