CLO-002 Practice Questions 2 — 50 Questions

Question 1

An application is suffering from high latency for users across the globe. Which service can help cache content closer to the users?

Accepted Answer

Content Delivery Network. A Content Delivery Network (CDN) caches content at edge locations globally.

Answer

Auto Scaling Group

Answer

VPC Peering

Answer

Load Balancer

Question 2

What is the benefit of 'measured service' for a business?

Accepted Answer

Pay-as-you-go pricing. Businesses only pay for the actual resources consumed, ensuring cost transparency.

Answer

Increased security

Answer

Free unlimited resources

Answer

Faster CPU performance

Question 3

An auditor requests evidence that an organization is managing cloud risks. Which document should the IT team provide as the primary evidence of risk mitigation strategies?

Accepted Answer

Risk Register. The Risk Register is the formal document where identified risks, their impact, and mitigation strategies are documented.

Answer

Cloud Service Level Agreement (SLA)

Answer

System Security Plan (SSP)

Answer

Network Topology Diagram

Question 4

A company wants to move their legacy on-premises application to the cloud without refactoring the code. Which service model should they choose to minimize operational burden while maintaining application compatibility?

Accepted Answer

IaaS. IaaS allows the organization to migrate virtual machines or disk images directly to the cloud, maintaining the existing OS and application environment without code changes.

Answer

SaaS

Answer

PaaS

Answer

Serverless

Question 5

You are implementing a disaster recovery strategy. You need to ensure that database backups are stored in a different geographic region than the primary production database. What is this concept known as in cloud management?

Accepted Answer

Geo-redundancy. Geographic redundancy or cross-region replication is the practice of storing data in a different physical location to survive regional disasters.

Answer

Horizontal scaling

Answer

Availability Zone failover

Answer

Local data caching

Question 6

You are notified that an unused storage volume is incurring costs. What is the standard operational procedure to stop these charges?

Accepted Answer

Delete the volume. Deleting or detaching and deleting the orphaned resource is the standard way to stop billing.

Answer

Encrypt the volume

Answer

Rename the volume

Answer

Move to a different region

Question 7

To ensure that all virtual machines in a cloud environment comply with corporate security standards (e.g., specific OS versions), which tool should be used to enforce configuration policies automatically?

Accepted Answer

Azure Policy. Policy engines allow for the automated enforcement of configurations to ensure continuous compliance.

Answer

Azure Backup

Answer

Azure Resource Manager templates

Answer

Azure Monitor

Question 8

To comply with data sovereignty laws, a database must remain within a specific country's borders. Which architectural strategy ensures this?

Accepted Answer

Regional Resource Placement. Selecting the appropriate cloud region ensures that data remains within the physical infrastructure of a specific legal jurisdiction.

Answer

Content Delivery Network (CDN)

Answer

Global Accelerator

Answer

VPC Peering

Question 9

A developer is writing code that accesses an API key. Instead of hardcoding the key, which service should they use to retrieve it securely at runtime?

Accepted Answer

AWS Secrets Manager. Secrets Manager is specifically designed to store and retrieve API keys, database credentials, and secrets securely.

Answer

Environment Variables

Answer

Parameter Store

Answer

IAM Roles

Question 10

A company is conducting a risk assessment and needs to determine the impact of a potential cloud service provider outage. Which document provides the provider's commitment to uptime?

Accepted Answer

Service Level Agreement (SLA). The Service Level Agreement (SLA) defines the expected service availability and compensation for downtime.

Answer

Cloud Security Alliance (CSA) report

Answer

Acceptable Use Policy

Answer

Privacy Policy

Question 11

To meet compliance requirements, a firm must store log files for seven years in a read-only state. Which storage configuration provides this level of immutability?

Accepted Answer

S3 Object Lock in Compliance Mode. Object locking or WORM (Write Once Read Many) policies are designed for regulatory compliance in storage.

Answer

S3 Intelligent Tiering

Answer

S3 Standard Storage Class

Answer

S3 Cross-Region Replication

Question 12

Which TWO things should be checked when a cloud service is exceeding its budget?

Accepted Answer

Cost allocation reports. Budget overruns are typically caused by either runaway resource usage or inefficient resource selection.

Answer

The provider's marketing website

Answer

Internet speed tests

Answer

Internal employee email logs

Question 13

An enterprise is deploying a hybrid cloud model and must ensure that data moving between the on-premises data center and the cloud provider is encrypted. Which mechanism is most appropriate?

Accepted Answer

Site-to-Site VPN. A VPN tunnel provides an encrypted connection over the public internet, essential for hybrid connectivity security.

Answer

VPC Peering

Answer

IGW (Internet Gateway)

Answer

Direct Connect

Question 14

Which cloud computing concept best describes the ability to add and remove resources based on traffic demands to maintain performance?

Accepted Answer

Elasticity. Elasticity is the defining characteristic of cloud computing that allows scaling based on demand.

Answer

Multi-tenancy

Answer

High Availability

Answer

Scalability

Question 15

To ensure that no single administrator has full control over the environment, which security practice should be implemented?

Accepted Answer

Separation of Duties. Separation of duties ensures that critical tasks are divided between multiple people to prevent fraud or error.

Answer

Encryption at rest

Answer

Multi-Factor Authentication (MFA)

Answer

Password Complexity Policy

Question 16

After a security incident, it is discovered that a S3 bucket was publicly accessible. Which feature should be used to prevent this from happening in the future?

Accepted Answer

S3 Block Public Access. S3 Block Public Access is a setting that overrides bucket-level permissions to prevent public exposure.

Answer

Access Control Lists (ACLs)

Answer

IAM User Policies

Answer

Bucket Policy

Question 17

Which IAM entity should be created to delegate temporary access to a third-party service provider without sharing long-term credentials?

Accepted Answer

IAM Role. IAM Roles are designed for temporary, cross-account, or service-based access via tokenized credentials.

Answer

IAM Group

Answer

IAM Access Key

Answer

IAM User

Question 18

A cloud architect needs to ensure that all cloud resources are tagged with an 'Owner' and 'Environment' tag for governance. Which service helps automate the detection and remediation of non-compliant resources?

Accepted Answer

AWS Config. AWS Config provides rules to check for tags and can trigger automation to remediate non-compliance.

Answer

AWS CloudWatch

Answer

AWS Trusted Advisor

Answer

AWS Systems Manager

Question 19

What is the primary risk mitigation strategy when storing data in a single availability zone?

Accepted Answer

Multi-AZ deployment. If an entire availability zone fails, data in that zone is lost; using multi-AZ deployments mitigates this risk.

Answer

Using stronger encryption

Answer

Implementing MFA

Answer

Increasing compute power

Question 20

When a cloud service experiences a global outage, which document should you check to verify the current status of the provider's infrastructure?

Accepted Answer

Cloud provider status dashboard. Cloud providers maintain a public Status Dashboard to track the real-time health of their services.

Answer

Internal IT wiki

Answer

Billing report

Answer

Service Level Agreement (SLA) doc