CLO-002 Practice Test 3 — 10 Questions

Question 1

Which cloud service model is best suited for end-users who want to use software via a browser?

Accepted Answer

SaaS. SaaS delivers applications over the internet to end-users.

Answer

DaaS

Answer

IaaS

Answer

PaaS

Question 2

What is the benefit of moving from an on-premises data center to a cloud provider?

Accepted Answer

Reduced physical infrastructure management. Cloud providers assume the physical maintenance, allowing users to focus on apps.

Answer

No need for networking

Answer

Guaranteed 100% uptime

Answer

Elimination of software updates

Question 3

You need to store audit logs that are immutable and cannot be deleted for a set period. Which feature should you enable?

Accepted Answer

Object Lock. Object locking (or WORM) prevents objects from being deleted or overwritten.

Answer

Access Logs

Answer

Versioning

Answer

Encryption

Question 4

Which THREE items are generally included in a cloud provider's 'Service Level Agreement' (SLA)?

Accepted Answer

Financial service credits for outages. SLAs include uptime percentages, financial credits, and service scope definitions.

Answer

The provider's CEO's performance review

Answer

The office address of the customer

Question 5

An organization is conducting a cost-benefit analysis for moving data storage to the cloud. They find that the cloud provider offers a 'Tiered Storage' model. What is the primary business benefit of this feature?

Accepted Answer

Optimizing storage costs based on data access frequency. Tiered storage allows businesses to place data on the most cost-effective storage class based on access frequency, directly impacting cloud spend efficiency.

Answer

Ensuring 100% data availability

Answer

Increasing compute performance

Answer

Automating data encryption

Question 6

You need to ensure that a web server can only accept traffic on port 443. Where should this rule be defined?

Accepted Answer

Security Group. A security group acts as a firewall for instances, allowing port control.

Answer

Route Table

Answer

Network ACL

Answer

VPC Peering

Question 7

Which cloud networking component allows an instance in a public subnet to communicate with the internet?

Accepted Answer

Internet Gateway. An Internet Gateway allows traffic between a VPC and the internet.

Answer

NAT Gateway

Answer

Peering Connection

Answer

VPC Endpoint

Question 8

Which TWO advantages does a public cloud provide for a small business?

Accepted Answer

Ability to scale instantly. Public cloud offers lower upfront costs and operational flexibility (elasticity).

Answer

Total control over hardware

Answer

Guaranteed data privacy

Answer

No internet connectivity needed

Question 9

Which THREE components are typically included in the cloud provider's 'Shared Responsibility Model' as the CUSTOMER'S responsibility?

Accepted Answer

Identity and access management (IAM) policies. The customer is responsible for everything they put 'in' the cloud, including data, apps, and OS configurations.

Answer

Global network physical cabling

Answer

Physical data center security

Question 10

Which TWO factors contribute to the risk of 'Vendor Lock-in'?

Accepted Answer

Usage of proprietary APIs. Proprietary APIs and tightly coupled data formats prevent easy migration.

Answer

Using standard HTTP protocols

Answer

Using open-source software

Answer

Hiring many employees