CLO-002 Practice Exam 3 — 20 Questions

Question 1

Which TWO of the following are essential components of a Cloud Security Policy?

Accepted Answer

Data classification scheme. Security policies must define both authorized access and the classification of data being protected.

Answer

Cloud provider marketing strategy

Answer

Hardware procurement schedule

Answer

Network cable standards

Question 2

Which cloud characteristic allows an organization to rapidly increase resources during a spike in traffic and decrease them when traffic drops?

Accepted Answer

Elasticity. Elasticity is the ability to scale resources up and down based on demand.

Answer

Resource pooling

Answer

Broad network access

Answer

Measured service

Question 3

What is the primary difference between vertical and horizontal scaling?

Accepted Answer

Horizontal adds nodes. Vertical adds power to an existing node; horizontal adds more nodes.

Answer

Vertical is always cheaper

Answer

Horizontal is limited by hardware

Answer

Vertical adds nodes

Question 4

Which THREE are key characteristics of cloud computing?

Accepted Answer

Measured service. Broad network access, elasticity, and measured service are foundational characteristics.

Answer

Static hardware provisioning

Answer

Physical media access

Question 5

Which of the following represents a major benefit of cloud computing where resources are shared among multiple customers?

Accepted Answer

Resource pooling. Resource pooling allows providers to serve multiple customers efficiently using the same physical hardware.

Answer

Local area networking

Answer

Static provisioning

Answer

Dedicated hosting

Question 6

Which cloud service model provides a platform for developers to deploy applications without managing the underlying infrastructure?

Accepted Answer

PaaS. PaaS provides the development and runtime environment.

Answer

SaaS

Answer

IaaS

Answer

DaaS

Question 7

An administrator needs to securely manage access to cloud resources. Which service should be used to create groups, users, and roles?

Accepted Answer

Identity and Access Management. Identity and Access Management (IAM) is the central service for user and access control.

Answer

Key Management Service

Answer

Security Groups

Answer

Active Directory

Question 8

Which THREE items should be included in a disaster recovery plan?

Accepted Answer

Backup strategy. RTO, RPO, and backup procedures are critical for recovery plans.

Answer

Customer marketing materials

Answer

Physical access badges

Question 9

A company is using a SaaS application for email. Which part of the security responsibility remains with the company?

Accepted Answer

Identity and access management. In SaaS, the provider manages the application and infrastructure, but the customer retains responsibility for identity and data access.

Answer

Server physical security

Answer

Patching the application software

Answer

Database engine version

Question 10

Which TWO of the following scenarios represent a breach of the Shared Responsibility Model?

Accepted Answer

Customer leaves a database port open to the public. Shared responsibility requires the customer to manage what is in their control; failing to do so creates security gaps.

Answer

Provider has a data center power outage

Answer

Customer deploys code in a private VPC

Answer

Provider fails to patch their physical hardware firmware

Question 11

An application is suffering from high latency for users across the globe. Which service can help cache content closer to the users?

Accepted Answer

Content Delivery Network. A Content Delivery Network (CDN) caches content at edge locations globally.

Answer

Auto Scaling Group

Answer

VPC Peering

Answer

Load Balancer

Question 12

What is the benefit of 'measured service' for a business?

Accepted Answer

Pay-as-you-go pricing. Businesses only pay for the actual resources consumed, ensuring cost transparency.

Answer

Increased security

Answer

Free unlimited resources

Answer

Faster CPU performance

Question 13

An auditor requests evidence that an organization is managing cloud risks. Which document should the IT team provide as the primary evidence of risk mitigation strategies?

Accepted Answer

Risk Register. The Risk Register is the formal document where identified risks, their impact, and mitigation strategies are documented.

Answer

Cloud Service Level Agreement (SLA)

Answer

System Security Plan (SSP)

Answer

Network Topology Diagram

Question 14

A company wants to move their legacy on-premises application to the cloud without refactoring the code. Which service model should they choose to minimize operational burden while maintaining application compatibility?

Accepted Answer

IaaS. IaaS allows the organization to migrate virtual machines or disk images directly to the cloud, maintaining the existing OS and application environment without code changes.

Answer

SaaS

Answer

PaaS

Answer

Serverless

Question 15

You are implementing a disaster recovery strategy. You need to ensure that database backups are stored in a different geographic region than the primary production database. What is this concept known as in cloud management?

Accepted Answer

Geo-redundancy. Geographic redundancy or cross-region replication is the practice of storing data in a different physical location to survive regional disasters.

Answer

Horizontal scaling

Answer

Availability Zone failover

Answer

Local data caching

Question 16

You are notified that an unused storage volume is incurring costs. What is the standard operational procedure to stop these charges?

Accepted Answer

Delete the volume. Deleting or detaching and deleting the orphaned resource is the standard way to stop billing.

Answer

Encrypt the volume

Answer

Rename the volume

Answer

Move to a different region

Question 17

To ensure that all virtual machines in a cloud environment comply with corporate security standards (e.g., specific OS versions), which tool should be used to enforce configuration policies automatically?

Accepted Answer

Azure Policy. Policy engines allow for the automated enforcement of configurations to ensure continuous compliance.

Answer

Azure Backup

Answer

Azure Resource Manager templates

Answer

Azure Monitor

Question 18

To comply with data sovereignty laws, a database must remain within a specific country's borders. Which architectural strategy ensures this?

Accepted Answer

Regional Resource Placement. Selecting the appropriate cloud region ensures that data remains within the physical infrastructure of a specific legal jurisdiction.

Answer

Content Delivery Network (CDN)

Answer

Global Accelerator

Answer

VPC Peering

Question 19

A developer is writing code that accesses an API key. Instead of hardcoding the key, which service should they use to retrieve it securely at runtime?

Accepted Answer

AWS Secrets Manager. Secrets Manager is specifically designed to store and retrieve API keys, database credentials, and secrets securely.

Answer

Environment Variables

Answer

Parameter Store

Answer

IAM Roles

Question 20

A company is conducting a risk assessment and needs to determine the impact of a potential cloud service provider outage. Which document provides the provider's commitment to uptime?

Accepted Answer

Service Level Agreement (SLA). The Service Level Agreement (SLA) defines the expected service availability and compensation for downtime.

Answer

Cloud Security Alliance (CSA) report

Answer

Acceptable Use Policy

Answer

Privacy Policy