CLO-002 Practice Test 2 — 30 Questions

Question 1

What does 'Multi-tenancy' in a public cloud mean?

Accepted Answer

Multiple customers, shared hardware. Multiple customers share the same underlying hardware resources.

Answer

One customer, multiple regions

Answer

Multiple clouds, one company

Answer

Multiple applications, one customer

Question 2

Which THREE factors must be considered when estimating cloud costs?

Accepted Answer

Resource type (instance size). Usage, region, and resource type are primary cost drivers.

Answer

Data center color

Answer

Number of end users

Question 3

Which THREE risks are associated with a 'Lift and Shift' (re-hosting) migration strategy?

Accepted Answer

Lower performance than on-premises. Lifting and shifting fails to take advantage of cloud-native benefits and often results in higher costs.

Answer

Lower security

Answer

Increased hardware maintenance

Question 4

A security auditor requests a solution to ensure that all data stored in the cloud is encrypted at rest. What should the administrator implement?

Accepted Answer

Server-side encryption. Server-side encryption ensures data is encrypted before being stored on disk.

Answer

VPC Security Groups

Answer

SSL/TLS

Answer

Multi-factor authentication

Question 5

A company requires a highly available database that replicates data synchronously across availability zones. Which setting should be chosen?

Accepted Answer

Multi-AZ deployment. Multi-AZ deployment ensures synchronous replication for high availability.

Answer

Auto Scaling

Answer

Read replica

Answer

Database snapshot

Question 6

Which THREE factors should a cloud architect consider when designing for high availability?

Accepted Answer

Multi-region deployment. High availability requires redundancy at multiple layers, geographical distribution, and automated failure detection.

Answer

Centralizing all resources in a single region

Answer

Fixed-capacity hardware provisioning

Question 7

Which THREE of the following tools or methods are used to secure data in transit in the cloud?

Accepted Answer

TLS 1.2/1.3. Data in transit is secured using encryption protocols (TLS/SSL) and private networking methods (VPN/Direct Connect).

Answer

Server-side encryption at rest

Answer

User access logs

Question 8

When evaluating a cloud service provider (CSP), which TWO of the following business-focused documentation should be requested to verify the vendor's reliability and security posture?

Accepted Answer

SOC 2 Type II reports. To assess risk and reliability, organizations must review the CSP's audit reports (like SOC2) and their documented Service Level Agreements.

Answer

The provider's quarterly stock earnings report

Answer

Employee payroll records

Answer

Internal office floor plans

Question 9

What is the purpose of a VPC Endpoint?

Accepted Answer

To access cloud services privately. It allows private communication between a VPC and cloud services, avoiding the public internet.

Answer

To connect two VPCs

Answer

To encrypt data transit

Answer

To provide public access

Question 10

Your organization is reviewing the shared responsibility model. Which TWO of the following are typically the responsibility of the cloud service provider?

Accepted Answer

Maintenance of the host virtualization layer. The provider is responsible for the underlying infrastructure (physical hardware and data center security).

Answer

Configuration of customer firewall rules

Answer

Management of customer guest OS

Answer

User access management

Question 11

Which TWO of the following are essential components of a Cloud Security Policy?

Accepted Answer

Data classification scheme. Security policies must define both authorized access and the classification of data being protected.

Answer

Cloud provider marketing strategy

Answer

Hardware procurement schedule

Answer

Network cable standards

Question 12

Which cloud characteristic allows an organization to rapidly increase resources during a spike in traffic and decrease them when traffic drops?

Accepted Answer

Elasticity. Elasticity is the ability to scale resources up and down based on demand.

Answer

Resource pooling

Answer

Broad network access

Answer

Measured service

Question 13

What is the primary difference between vertical and horizontal scaling?

Accepted Answer

Horizontal adds nodes. Vertical adds power to an existing node; horizontal adds more nodes.

Answer

Vertical is always cheaper

Answer

Horizontal is limited by hardware

Answer

Vertical adds nodes

Question 14

Which THREE are key characteristics of cloud computing?

Accepted Answer

Measured service. Broad network access, elasticity, and measured service are foundational characteristics.

Answer

Static hardware provisioning

Answer

Physical media access

Question 15

Which of the following represents a major benefit of cloud computing where resources are shared among multiple customers?

Accepted Answer

Resource pooling. Resource pooling allows providers to serve multiple customers efficiently using the same physical hardware.

Answer

Local area networking

Answer

Static provisioning

Answer

Dedicated hosting

Question 16

Which cloud service model provides a platform for developers to deploy applications without managing the underlying infrastructure?

Accepted Answer

PaaS. PaaS provides the development and runtime environment.

Answer

SaaS

Answer

IaaS

Answer

DaaS

Question 17

An administrator needs to securely manage access to cloud resources. Which service should be used to create groups, users, and roles?

Accepted Answer

Identity and Access Management. Identity and Access Management (IAM) is the central service for user and access control.

Answer

Key Management Service

Answer

Security Groups

Answer

Active Directory

Question 18

Which THREE items should be included in a disaster recovery plan?

Accepted Answer

Backup strategy. RTO, RPO, and backup procedures are critical for recovery plans.

Answer

Customer marketing materials

Answer

Physical access badges

Question 19

A company is using a SaaS application for email. Which part of the security responsibility remains with the company?

Accepted Answer

Identity and access management. In SaaS, the provider manages the application and infrastructure, but the customer retains responsibility for identity and data access.

Answer

Server physical security

Answer

Patching the application software

Answer

Database engine version

Question 20

Which TWO of the following scenarios represent a breach of the Shared Responsibility Model?

Accepted Answer

Customer leaves a database port open to the public. Shared responsibility requires the customer to manage what is in their control; failing to do so creates security gaps.

Answer

Provider has a data center power outage

Answer

Customer deploys code in a private VPC

Answer

Provider fails to patch their physical hardware firmware