CLO-002 Practice Test 24 — 15 Questions

Question 1

A financial services firm is migrating its on-premises data warehouse to a cloud provider. The firm must comply with regulations that require data to remain within the country. The cloud provider offers multiple regions and availability zones. Which of the following should the firm implement to meet the regulatory requirement while ensuring high availability?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Deploy the data warehouse across multiple availability zones within a single region in the required country.. Deploying across multiple availability zones within a single region ensures data remains in the required country while providing redundancy. Availability zones are isolated locations within a region, so an outage in one zone does not affect the others. This meets both the regulatory data residency requirement and the need for high availability, making it the optimal solution.

Answer

Deploy the data warehouse in a single region but use a content delivery network (CDN) for global access.

Answer

Deploy the data warehouse in a single availability zone within the required country.

Answer

Deploy the data warehouse in multiple regions across different countries.

Question 2

A company runs a stateless web application on a fleet of cloud virtual machines behind a load balancer in a single region. The operations team wants to survive the loss of an entire availability zone with minimal manual intervention, while keeping the recovery time objective as low as possible. Which approach best meets these requirements?

Accepted Answer

Deploy the fleet across multiple availability zones and configure the load balancer to distribute traffic across all of them.. Because the application is stateless, the most effective resilience measure is to distribute identical instances across multiple availability zones and let the load balancer route around failures. This removes the single point of failure at the zone level, keeps recovery automatic, and preserves a low recovery time objective without manual rebuild steps.

Answer

Take scheduled snapshots of the instance volumes every hour and restore them into a new availability zone during an outage.

Answer

Increase the instance size so fewer, larger virtual machines can absorb the full production workload if one host fails.

Answer

Enable termination protection on each instance and configure the load balancer health checks to restart failed instances automatically.

Question 3

A retail company runs a legacy inventory application on physical servers in its own data center. The CIO wants to keep the application unchanged but gain cloud elasticity for seasonal peaks, and legal requires that all customer data remain on company-owned hardware. Which cloud deployment consideration does this scenario illustrate?

Accepted Answer

The company should use a hybrid approach, keeping data on-premises while bursting compute to the cloud. The scenario pits a desire for cloud elasticity against a legal mandate for on-premises data ownership. A hybrid deployment is the only option that honors both: private infrastructure retains the sensitive data and legacy application, while public cloud capacity can be engaged during seasonal peaks without relocating regulated information.

Answer

The company should adopt a public cloud because elasticity is only available there

Answer

The company should keep everything on-premises because cloud elasticity requires rewriting the application

Answer

The company should rehost the application in a community cloud shared with competitors

Question 4

A small graphic design firm wants to move its project files to a cloud service so designers can access them from any device. The company has no IT staff and wants to avoid managing servers or installing software locally. Which cloud service model should the firm choose?

Accepted Answer

Software as a Service (SaaS). SaaS is the correct choice because it provides a complete, provider-managed application that users access over the internet. The firm does not need to provision servers, patch operating systems, or install software. This directly satisfies the need for simple, device-independent access to project files with minimal administrative effort.

Answer

Container as a Service (CaaS)

Answer

Infrastructure as a Service (IaaS)

Answer

Platform as a Service (PaaS)

Question 5

A media company runs a video transcoding workload that is idle most of the day but must process large batches quickly when new content arrives. The company wants to minimize cost while accepting that interruptions can occur. Which cloud characteristic or purchasing option should the company use?

Accepted Answer

Spot instances. Spot instances offer the lowest cost for interruptible, bursty workloads by using spare capacity. The media company explicitly accepts interruptions and has an idle-mostly, batch-oriented pattern, which aligns with spot pricing. Reserved instances, dedicated hosts, and on-demand instances either require commitments, cost more, or bill for idle capacity, making them less suitable.

Answer

Reserved instances

Answer

On-demand instances

Answer

Dedicated hosts

Question 6

A retail company is migrating its e-commerce platform to a public cloud. The security team must decide how to handle encryption keys for data at rest in the cloud provider's object storage. The compliance officer requires that the company retain full control over key lifecycle management, including rotation and revocation, without the cloud provider being able to access the keys. Which approach BEST meets these requirements?

Accepted Answer

Implement customer-managed keys stored in a hardware security module (HSM) or cloud key management service (KMS) that the company controls.. Customer-managed keys in an HSM or customer-controlled KMS ensure the company retains exclusive control over key lifecycle, including rotation and revocation, and prevents the cloud provider from accessing the keys. Provider-managed or default encryption gives control to the provider, while static passphrases lack proper lifecycle management. Thus, only customer-managed keys satisfy the compliance requirement.

Answer

Use provider-managed encryption keys with automatic rotation enabled.

Answer

Rely on the cloud provider's default encryption at rest, which uses AES-256 and is enabled by default.

Answer

Encrypt data using client-side encryption with a static passphrase embedded in the application code.

Question 7

A company is migrating a latency-sensitive trading application to the cloud. The application must remain available even if an entire data center suffers a power outage, and it must be able to fail over automatically with minimal downtime. Which deployment approach best meets these requirements?

Accepted Answer

Deploy resources across multiple availability zones within a single region and configure automatic failover.. Deploying across multiple availability zones within one region provides resilience to a data center outage because each zone has independent infrastructure, and automatic failover with health checks minimizes downtime. This balances high availability with the low latency a trading application needs. A single zone, manual multi-region failover, or reliance on the shared responsibility model each fails to deliver both automatic recovery and protection against a full data center loss.

Answer

Deploy resources across multiple regions and use manual failover procedures.

Answer

Deploy resources in a single region and rely on the cloud provider's shared responsibility model for availability.

Answer

Deploy all resources in a single availability zone within one region.

Question 8

A financial services firm runs a payment API on Amazon EC2 instances behind an Application Load Balancer. The security team mandates that all incoming traffic be inspected for SQL injection and cross-site scripting before reaching the application, without modifying the application code. Which AWS service should the cloud operations team implement to meet this requirement?

Accepted Answer

AWS WAF attached to the Application Load Balancer. AWS WAF is the only listed service that performs inline application-layer inspection of HTTP(S) requests and can block SQL injection and XSS patterns. It integrates directly with the Application Load Balancer, so requests are filtered before reaching the EC2 instances and no application changes are needed.

Answer

AWS Shield Advanced associated with the load balancer

Answer

Amazon Inspector assessment targeting the EC2 instances

Answer

Amazon GuardDuty enabled in the account

Question 9

A multinational corporation is planning a cloud migration and needs to ensure that its data remains within specific geographic boundaries for legal compliance. The company operates in the EU and must comply with GDPR, which requires that personal data of EU citizens be stored within the EU. Which cloud concept should the company prioritize when selecting a provider?

Accepted Answer

Regions. Regions are the geographic areas where cloud providers host their data centers. By choosing a region within the EU, the company can ensure that data at rest and in processing remains within the EU, satisfying GDPR requirements. Other concepts like availability zones, edge locations, and virtual private clouds do not directly control the geographic boundary for data residency.

Answer

Availability zones

Answer

Edge locations

Answer

Virtual private clouds

Question 10

A retail company experiences a sudden spike in online orders during a flash sale, causing its on-premises web servers to become overwhelmed and the site to slow down. The company wants to avoid this problem in the future without permanently adding hardware. Which cloud characteristic directly addresses this need?

Accepted Answer

Rapid elasticity. Rapid elasticity is the cloud characteristic that lets resources scale out quickly during demand spikes and scale back in afterward. The flash sale creates a temporary surge that overwhelms fixed on-premises servers, and elasticity provides the dynamic capacity needed to absorb that surge without permanent hardware purchases. The other characteristics describe billing, sharing, and access, but none automatically adjusts capacity to match changing demand.

Answer

Resource pooling

Answer

Measured service

Answer

Broad network access

Question 11

A company is adopting a public cloud model and wants to ensure its workloads benefit from the core characteristics of cloud computing. The IT director asks which characteristics are essential to the cloud model and should guide the migration. (Choose two.)

Accepted Answer

Measured service with pay-as-you-go billing. On-demand self-service and measured service with pay-as-you-go billing are two of the essential characteristics of cloud computing. They enable users to provision resources automatically and pay only for consumption, which supports agility and cost efficiency during migration. Dedicated hardware, mandatory long-term contracts, and physical data center access are inconsistent with the public cloud model and do not represent core cloud characteristics.

Answer

Physical access to the provider's data center for maintenance

Answer

Dedicated physical hardware for each tenant

Answer

Mandatory long-term contracts for all resources

Question 12

A small business is adopting a public cloud for the first time. The owner wants to ensure that the cloud provider's security responsibilities are clearly understood and that the business knows what it must secure. Which document should the business review to understand the division of security responsibilities between the provider and the customer?

Accepted Answer

Shared responsibility model. The shared responsibility model is the definitive document that clarifies which security controls the cloud provider manages and which the customer must implement. It helps customers understand their obligations for data, applications, and access management. SLAs, AUPs, and privacy policies address different aspects and do not define the security responsibility split.

Answer

Service level agreement (SLA)

Answer

Privacy policy

Answer

Acceptable use policy (AUP)

Question 13

A regional accounting firm runs a legacy payroll application on a physical server in its office. The server is aging, and the firm wants to move the application to a cloud provider without modifying the application or its operating system. The firm also wants to keep full administrative control over the OS, patching, and runtime configuration. Which cloud service model best fits these requirements?

Accepted Answer

Infrastructure as a Service (IaaS). IaaS is the only model that supplies raw virtual infrastructure while leaving the guest operating system, patching, and runtime under the customer's control. Because the payroll application must move without modification and the firm insists on managing the OS itself, the provider supplies only the virtualized foundation, and the firm remains responsible for everything above the hypervisor.

Answer

Software as a Service (SaaS)

Answer

Function as a Service (FaaS)

Answer

Platform as a Service (PaaS)

Question 14

A startup is migrating its on-premises PostgreSQL database to Microsoft Azure. The team wants to minimize administrative overhead for patching, backups, and high availability while retaining control over database schema and query tuning. Which Azure service best fits these requirements?

Accepted Answer

Azure Database for PostgreSQL Flexible Server. Azure Database for PostgreSQL Flexible Server is a managed platform-as-a-service database that offloads patching, backup, and high-availability configuration to Microsoft while preserving PostgreSQL compatibility. The team can still manage schemas, indexes, and queries, which matches the requirement for reduced overhead without losing tuning control.

Answer

PostgreSQL installed on an Azure Virtual Machine

Answer

Azure Cosmos DB for PostgreSQL

Answer

Azure SQL Database

Question 15

A startup wants to give its data scientists on-demand access to GPU-backed virtual machines for experiments. Usage will be sporadic, and the company wants to pay only for the time the machines run. Which cloud characteristic is the company primarily relying on?

Accepted Answer

Measured service with pay-as-you-go billing. The defining element in this scenario is that cost tracks actual consumption: GPU instances are provisioned on demand and billed only for the time they run. Measured service, with its metering and pay-as-you-go billing, is the cloud characteristic that enables this economic model, letting the startup avoid paying for idle hardware.

Answer

Broad network access from any device

Answer

Resource pooling across multiple tenants

Answer

Rapid elasticity to scale capacity automatically