CLO-002 Business Principles OF Cloud Environments Practice Test 4 — 15 Questions

Question 1

An organization is evaluating the 'Total Cost of Ownership' of a cloud migration. What is a 'Hidden' administrative cost?

Accepted Answer

Employee retraining and upskilling. Hidden administrative costs in cloud TCO often include training and upskilling of staff to manage new cloud technologies, which is not always obvious in initial cost estimates. These costs are considered 'hidden' because they are indirect and often overlooked.

Answer

Cloud service provider fees

Answer

Internet bandwidth cost

Answer

Cloud storage costs

Question 2

A business is analyzing cloud provider pricing. What is 'Metering' in this context?

Accepted Answer

Measurement of resource consumption. In cloud computing, metering refers to the measurement of resource consumption by a customer. Cloud providers use metering to track usage of compute, storage, network, and other services, which is then used for billing and reporting. This allows for pay-as-you-go pricing models. Therefore, metering is the measurement of resource consumption.

Answer

Limiting the speed of a network connection

Answer

Allocating dedicated physical hardware

Answer

Creating security firewall rules

Question 3

A company needs to store static website assets such as images and CSS files cheaply. Which service is appropriate?

Accepted Answer

Object storage. Object storage is appropriate for storing static website assets such as images and CSS files cheaply. Services like Amazon S3 provide highly durable, scalable, and low-cost object storage designed for unstructured data like web assets. It offers features like static website hosting, content delivery via CloudFront, and pay-as-you-go pricing, making it ideal for this use case.

Answer

Block storage

Answer

Ephemeral storage

Answer

Relational database

Question 4

An organization is migrating to a cloud environment and needs to maintain strict control over its encryption keys. Which service should they utilize?

Accepted Answer

Key Management Service (KMS). A Key Management Service (KMS) is purpose-built to create, store, rotate, and control access to cryptographic keys, giving the organization strict control over key lifecycle and usage. It provides centralized key management with audit logging and integration with cloud services for encryption at rest.

Answer

Identity and Access Management (IAM)

Answer

Security Groups

Answer

Public Key Infrastructure (PKI)

Question 5

What is the primary benefit of 'Elasticity' for an e-commerce company during a major sale?

Accepted Answer

Dynamically scaling resources to meet demand. Elasticity is the cloud capability to automatically provision and de-provision resources in response to real-time demand. During a major e-commerce sale, traffic can spike by orders of magnitude within minutes; elasticity lets the platform add compute, memory, and storage capacity on demand and release it afterward, so the site stays responsive without over-provisioning for peak load year-round. This directly matches option B.

Answer

Reducing the number of required database admins

Answer

Ensuring the website never experiences any latency

Answer

Decreasing the need for network security

Question 6

Which TWO criteria are essential when selecting a cloud vendor for an enterprise?

Accepted Answer

Compliance and regulatory certifications. Option D is correct because compliance and regulatory certifications (for example ISO/IEC 27001, SOC 2, PCI DSS, HIPAA, or GDPR alignment) are essential to verify that the vendor meets the legal, industry, and data-protection obligations the enterprise must satisfy. Option E is correct because the Service Level Agreement defines measurable guarantees such as uptime percentage, latency, RTO/RPO, and remediation or credits, which directly determine whether the cloud service can meet the enterprise's availability and performance requirements. Options A, B, and C are not essential selection criteria: free trial gifts have no bearing on production suitability, the number of employees does not indicate service quality or compliance, and the headquarters location alone does not establish where data is stored or processed, which is what actually matters for regulatory and latency concerns.

Answer

Availability of free trial gifts

Answer

The number of employees at the cloud company

Answer

The physical location of the cloud company's headquarters

Question 7

Which TWO factors should be considered when conducting a cost-benefit analysis for cloud adoption?

Accepted Answer

Initial migration and transition labor costs. Option A (Initial migration and transition labor costs) is correct because a cloud cost-benefit analysis must capture one-time costs such as staff time, consulting, training, and application refactoring required to move workloads to the cloud. Option E (Potential long-term reduction in physical maintenance expenses) is correct because the ongoing savings from eliminating or reducing on-premises hardware, data center power/cooling, and related maintenance are a core benefit that offsets migration costs. Option B (Number of employees) is not a direct cost or benefit factor; headcount may influence scale but is not itself a financial input to the analysis. Option C (Office furniture costs) is unrelated to cloud adoption economics, and Option D (Cloud provider color scheme) is a cosmetic branding detail with no bearing on cost-benefit calculations.

Answer

Number of employees in the company

Answer

Office furniture costs

Answer

Cloud provider color scheme

Question 8

Which THREE types of costs should be included in a thorough TCO analysis for cloud migration?

Accepted Answer

Application refactoring and development labor. A thorough cloud migration TCO analysis must capture the one-time and ongoing costs directly tied to moving and running workloads in the cloud. Option A (Application refactoring and development labor) is correct because re-architecting, re-platforming, or rewriting applications for cloud-native services (e.g., converting to containers or serverless) consumes significant engineering hours and is a major migration cost driver. Option D (Data egress and ingress network charges) is correct because cloud providers bill for data transfer, especially egress out of the provider's network, and bulk data migration or ongoing cross-region/replication traffic can materially affect TCO. Option E (Cloud service subscription and consumption costs) is correct because the recurring compute, storage, database, and managed-service charges (on-demand, reserved, or savings-plan pricing) form the core of the ongoing cloud operating cost. Option B (Marketing budget for the migration project) is not a standard TCO component, as marketing spend is a business promotion expense rather than a migration or operational IT cost. Option C (Physical office building rent) is a facilities expense unrelated to cloud migration economics, unless a specific data-center exit is being modeled, which is not the scenario here.

Answer

Marketing budget for the migration project

Answer

Physical office building rent

Question 9

Which TWO business benefits are primarily driven by cloud computing's 'Agility'?

Accepted Answer

Ability to experiment with lower risk. Option D ('Ability to experiment with lower risk') is correct because cloud agility lets teams rapidly provision and tear down resources on demand, so failed experiments incur minimal cost and can be reversed quickly rather than requiring large upfront capital investments. Option E ('Reduced time-to-market for new features') is correct because agility enables fast provisioning, automated deployment, and elastic scaling, allowing new features to be developed, tested, and released far more quickly than with traditional procurement cycles. The remaining options do not belong: A ('Automatically reducing taxes') is a financial/regulatory matter unrelated to cloud agility, B ('Lowering the cost of the CEO's salary') is an HR/compensation decision with no connection to cloud capabilities, and C ('Increasing the number of printers') is a hardware procurement task that cloud computing does not drive.

Answer

Automatically reducing taxes

Answer

Lowering the cost of the CEO's salary

Answer

Increasing the number of printers

Question 10

Which TWO items are typically included in a cloud 'Cloud Adoption Strategy' document?

Accepted Answer

Migration roadmap and timeline. A cloud Cloud Adoption Strategy document typically includes a migration roadmap and timeline (A), because it must sequence workloads, define phases (assess, mobilize, migrate, modernize), and set milestones for moving to the cloud. It also includes business goals and success criteria (D), since the strategy must tie cloud adoption to measurable outcomes such as cost reduction, agility, or compliance targets. Options B, C, and E are irrelevant to cloud adoption planning: telephone history, office coffee brands, and employees' personal email addresses have no bearing on migration approach, governance, or success metrics.

Answer

The history of the telephone

Answer

List of office coffee brands

Answer

The personal email addresses of all employees

Question 11

Which THREE factors can lead to 'Cloud Sprawl' (unmanaged resource accumulation)?

Accepted Answer

Shadow IT usage. Cloud sprawl occurs when unmanaged resources accumulate, and option A (Shadow IT usage) is correct because business units provisioning cloud services outside IT governance create untracked instances, storage, and accounts that no one centrally manages or monitors. Option D (Lack of centralized resource tagging) is correct because without a consistent tagging policy (e.g., mandatory tags for owner, cost center, environment, and expiration), organizations cannot inventory, attribute costs, or identify orphaned resources, so unused assets silently pile up. Option E (Failure to decommission development environments) is correct because dev/test sandboxes, proof-of-concept VMs, and temporary databases are frequently left running after a project ends, directly producing idle, billable resource accumulation. Option B (High internet speed) is not a cause of sprawl; faster connectivity may ease provisioning but does not itself create unmanaged resources. Option C (Over-hiring of IT personnel) is unrelated, since headcount growth does not inherently generate ungoverned cloud resources and could even improve oversight.

Answer

High internet speed

Answer

Over-hiring of IT personnel

Question 12

Which TWO financial models are typical for cloud resource billing?

Accepted Answer

Pay-as-you-go / On-demand. Cloud providers meter actual consumption of compute, storage, and network resources and bill the customer for exactly what is used, with no upfront commitment — the defining characteristic of cloud billing. Option E (Reserved capacity / Subscription) is also correct because customers can commit to a term (e.g., 1- or 3-year reserved instances or savings plans) in exchange for a discounted rate, which is a standard cloud financial model alongside on-demand pricing. Option A (One-time hardware purchase) is a traditional capital-expenditure model for on-premises equipment, not cloud resource billing. Option C (Barter system) is not a recognized cloud billing model, as providers charge monetary fees rather than exchanging goods or services. Option D (Lifetime license purchase) describes perpetual software licensing, which does not reflect the metered, recurring nature of cloud resource billing.

Answer

One-time hardware purchase

Answer

Barter system

Answer

Lifetime license purchase

Question 13

Which THREE items are generally included in a cloud provider's 'Service Level Agreement' (SLA)?

Accepted Answer

Financial service credits for outages. Option B is correct because cloud SLAs typically specify financial service credits (often a percentage of the monthly bill) that the provider grants when availability falls below the guaranteed threshold. Option C is correct because an SLA defines the uptime percentage guarantee, such as 99.9% or 99.99% availability, which is the core measurable commitment. Option E is correct because the SLA must define which services are 'covered' (for example, compute, storage, or database services) and the scope of the guarantee. Option A is not included because a CEO's performance review is an internal HR matter, not a contractual service commitment. Option D is not included because the customer's office address is a billing/contact detail, not a service-level term.

Answer

The provider's CEO's performance review

Answer

The office address of the customer

Question 14

Which TWO factors contribute to the risk of 'Vendor Lock-in'?

Accepted Answer

Usage of proprietary APIs. Vendor lock-in risk rises when a solution depends on technology that is proprietary and cannot be easily replicated or migrated elsewhere. Option B is correct because proprietary APIs are vendor-controlled interfaces: once an application is built against them, moving to another provider requires rewriting integration code, since those APIs are not standardized or portable. Option D is correct because custom, vendor-specific database formats store data in a schema or engine unique to that vendor, so migration demands costly conversion, export tooling, or re-architecture, making it hard to leave the vendor. By contrast, option A (standard HTTP protocols) reduces lock-in because HTTP is an open, widely implemented standard that any provider supports. Option C (open-source software) also lowers lock-in risk since the source code is available and can be run or modified elsewhere. Option E (hiring many employees) is unrelated to vendor lock-in; headcount does not create dependency on a specific vendor's technology.

Answer

Using standard HTTP protocols

Answer

Using open-source software

Answer

Hiring many employees

Question 15

Which THREE regulatory or compliance frameworks might an enterprise need to audit a cloud provider for?

Accepted Answer

HIPAA (Healthcare). HIPAA (A) is correct because it governs protected health information (PHI), and an enterprise handling healthcare data must verify that its cloud provider enforces the required administrative, physical, and technical safeguards through a Business Associate Agreement (BAA) and audit rights. PCI-DSS (C) is correct because any organization storing, processing, or transmitting cardholder data must ensure its cloud provider meets the 12 PCI-DSS requirements, and the provider's compliance must be validated via an Attestation of Compliance (AOC) or Report on Compliance (ROC). SOC 2 Type II (D) is correct because it reports on the design and operating effectiveness of a provider's controls over security, availability, processing integrity, confidentiality, and privacy across a defined audit period, which enterprises rely on to satisfy due diligence and vendor risk management. The company dress code policy (B) is an internal HR matter with no regulatory or compliance auditing relevance to a cloud provider, and the local library catalog system (E) is a public information system, not a compliance framework applicable to enterprise cloud audits.

Answer

Company dress code policy

Answer

The local library catalog system