CLO-002 Business Principles OF Cloud Environments Practice Test 6 — 15 Questions

Question 1

A retail company plans to migrate its e-commerce platform to AWS. The CFO wants to understand the total cost of ownership (TCO) for the first three years. The IT team provides estimates for compute, storage, and network costs but omits the cost of retraining staff and potential downtime during migration. Which additional cost category should be included to make the TCO analysis more accurate?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

One-time migration costs such as training and downtime. A comprehensive TCO for cloud migration must include one-time costs like training and downtime, which are often overlooked. These costs directly affect the total investment and should be part of the financial analysis. Excluding them leads to an underestimation of the true cost and could result in poor budgeting.

Answer

Capital expenditures for purchasing new servers

Answer

Depreciation of existing on-premises equipment

Answer

Operational expenditures such as ongoing cloud subscription fees

Question 2

A financial services firm is evaluating a move to Microsoft Azure. The CIO is concerned about vendor lock-in and wants to ensure the ability to move workloads between cloud providers in the future. Which factor should be prioritized in the cloud strategy to mitigate lock-in?

Accepted Answer

Using open standards and portable technologies. To mitigate vendor lock-in, organizations should prioritize open standards and portable technologies. These allow applications to be moved between cloud providers with less effort. Proprietary services, long-term contracts, and siloed multi-cloud approaches can increase dependency and hinder portability.

Answer

Negotiating a long-term contract with Azure for cost savings

Answer

Implementing a multi-cloud strategy with separate silos for each provider

Answer

Adopting proprietary Azure services for maximum performance

Question 3

A company is migrating its customer relationship management (CRM) system to the cloud. The CIO wants to ensure that the cloud provider's security controls meet the company's compliance requirements. Which document should the company request from the cloud provider to verify compliance?

Accepted Answer

Compliance certification (e.g., SOC 2, ISO 27001). To verify that a cloud provider's security controls meet compliance requirements, the company should request independent compliance certifications such as SOC 2 or ISO 27001. These reports provide audited evidence of the provider's security posture. SLAs, AUPs, and MSAs are important contractual documents but do not offer the necessary compliance validation.

Answer

Service level agreement (SLA)

Answer

Master service agreement (MSA)

Answer

Acceptable use policy (AUP)

Question 4

A retail company is preparing a business case for migrating its e-commerce platform to a public cloud. The CFO is concerned about unpredictable monthly costs and wants to ensure the company can plan its budget effectively. The IT team has analyzed the workload and determined that usage is steady and predictable, with minimal seasonal spikes. Which cloud pricing model should the team recommend to address the CFO's concern?

Accepted Answer

Reserved instances. The retailer needs both cost predictability and savings for a steady workload. Reserved instances provide a committed-term discount that stabilizes monthly costs, making them the best fit. On-demand and pay-as-you-go models offer flexibility but result in variable expenses, while spot instances are unsuitable for a production e-commerce platform due to interruption risk.

Answer

On-demand pricing

Answer

Pay-as-you-go pricing

Answer

Spot instances

Question 5

A retail company is comparing the total cost of running its e-commerce platform on-premises versus on a public cloud. The finance team wants to ensure the comparison includes costs that are often overlooked when only hardware and software license fees are considered. Which cost category should be added to make the comparison accurate?

Accepted Answer

Electricity, cooling, and data center facility costs. A complete TCO comparison for cloud versus on-premises must include facility-related costs like electricity, cooling, and physical space. These are frequently omitted because they are not part of a typical server purchase order. When they are added, the true cost of on-premises hosting becomes clearer and the cloud value proposition can be evaluated fairly.

Answer

Cloud provider's marketing and sales expenses

Answer

Employee salaries for the sales department

Answer

Cost of developing new application features

Question 6

A retail company wants to move its customer-facing web application to the public cloud. The CIO is concerned about unpredictable monthly costs and wants to ensure the finance team can forecast expenses accurately. The application experiences steady traffic during business hours but spikes during seasonal sales. Which cloud pricing model should the company adopt to best balance cost predictability and scalability?

Accepted Answer

A hybrid model combining reserved instances for baseline load and on-demand for peak load. Combining reserved instances for baseline capacity with on-demand for peaks provides cost predictability for steady usage and flexibility for variable demand. This hybrid model addresses the CIO's concern about forecasting while ensuring the application can scale during seasonal spikes. It avoids the higher costs of pure on-demand and the rigidity of full reserved commitments.

Answer

Spot instances for the entire application

Answer

Reserved instances with a one-year commitment

Answer

On-demand pricing with auto-scaling enabled

Question 7

A healthcare company is evaluating a move to cloud-based collaboration tools. The IT director must present a business case that addresses both financial and non-financial factors. Which two factors should be included in the business case to demonstrate the full value of the migration? (Choose two.)

Accepted Answer

Potential reduction in capital expenditure on physical servers. A strong cloud business case balances financial gains with operational and strategic benefits. Scalability supports service quality during demand spikes, while reduced capital expenditure improves cash flow and budgeting. Together they show that the migration delivers both cost efficiency and business agility, which are central to the CompTIA Cloud Essentials+ business principles domain.

Answer

Reduced need for a disaster recovery plan

Answer

Guaranteed elimination of all data breaches

Answer

Ability to ignore industry regulations because the provider handles compliance

Question 8

A retail company is migrating its order-processing application to the cloud. The application experiences unpredictable traffic spikes during flash sales, and the finance team wants to avoid paying for idle capacity. The IT manager proposes a cloud deployment model where the provider manages the infrastructure and the company pays only for what it consumes. Which cloud characteristic best describes this financial benefit?

Accepted Answer

Measured service. Measured service is the cloud characteristic that enables pay-per-use billing by monitoring and reporting resource consumption. In this scenario, the retail company needs to avoid costs for idle capacity during unpredictable spikes, which is achieved through measured service. Rapid elasticity, resource pooling, and on-demand self-service are related but do not directly address the financial requirement.

Answer

On-demand self-service

Answer

Resource pooling

Answer

Rapid elasticity

Question 9

A financial services firm is migrating its on-premises data warehouse to a cloud provider. The firm must comply with regulations that require data to remain within the country. The cloud provider offers multiple regions and availability zones. Which of the following should the firm implement to meet the regulatory requirement while ensuring high availability?

Accepted Answer

Deploy the data warehouse across multiple availability zones within a single region in the required country.. Deploying across multiple availability zones within a single region ensures data remains in the required country while providing redundancy. Availability zones are isolated locations within a region, so an outage in one zone does not affect the others. This meets both the regulatory data residency requirement and the need for high availability, making it the optimal solution.

Answer

Deploy the data warehouse in a single region but use a content delivery network (CDN) for global access.

Answer

Deploy the data warehouse in a single availability zone within the required country.

Answer

Deploy the data warehouse in multiple regions across different countries.

Question 10

A retail company wants to forecast monthly cloud expenses for a new e-commerce platform. The finance team needs to distinguish costs that scale directly with customer traffic from fixed monthly fees. Which cloud billing concept should they use to categorize these costs?

Accepted Answer

Metered usage and subscription fees. Cloud bills typically combine metered usage charges that vary with consumption and subscription fees that remain fixed. For forecasting, separating these two categories allows the finance team to project costs that scale with traffic separately from predictable monthly commitments. This distinction is fundamental to cloud financial management and budgeting.

Answer

Reserved instances and spot instances

Answer

Capital expenditure (CapEx) and operational expenditure (OpEx)

Answer

Total cost of ownership (TCO) and return on investment (ROI)

Question 11

A financial services firm is migrating its customer relationship management (CRM) system to a public cloud. The CIO wants to ensure the migration aligns with the firm's risk appetite and regulatory obligations. Which action best demonstrates that the firm is applying proper cloud risk management?

Accepted Answer

Conducting a risk assessment that maps cloud controls to regulatory requirements. Mapping cloud controls to regulatory requirements is a proactive risk management step that shows the firm understands its responsibilities under the shared responsibility model. It ensures compliance is designed into the migration rather than bolted on later. This approach supports audit readiness and aligns with the firm's risk appetite, making it the most appropriate action.

Answer

Transferring all risk to the cloud provider through the service contract

Answer

Accepting the cloud provider's default security settings to avoid configuration errors

Answer

Delaying the migration until the cloud provider achieves perfect security

Question 12

A small marketing agency is considering moving its customer relationship management (CRM) system to the cloud. The agency has a limited IT staff and wants to minimize upfront capital expenditure. The owner asks which cloud service model would allow the agency to use the CRM software without managing the underlying operating system, middleware, or runtime. Which model should be recommended?

Accepted Answer

Software as a Service (SaaS). SaaS is the correct choice because it provides a complete application managed by the provider, requiring no infrastructure or platform management from the customer. The marketing agency can use the CRM software immediately, with minimal IT involvement and no upfront capital costs. IaaS, PaaS, and FaaS would require the agency to manage some layers, which contradicts their constraints.

Answer

Functions as a Service (FaaS)

Answer

Infrastructure as a Service (IaaS)

Answer

Platform as a Service (PaaS)

Question 13

A small marketing agency is considering moving its project management software to a SaaS solution. The agency's IT manager wants to understand the financial implications. Which of the following best describes a key financial benefit of adopting SaaS compared to maintaining on-premises software?

Accepted Answer

Conversion of capital expenses to operational expenses. Moving to SaaS shifts costs from capital expenditures to operational expenditures. Instead of purchasing servers and licenses upfront, the agency pays a recurring subscription fee. This improves cash flow and allows for more predictable budgeting. It also reduces the need for IT staff to maintain hardware and software, freeing resources for other tasks.

Answer

Complete transfer of data security responsibility to the vendor

Answer

Elimination of all software licensing costs

Answer

Guaranteed reduction in total cost of ownership

Question 14

A healthcare organization is migrating patient records to a public cloud. The compliance officer insists that data must remain within the country and that the provider must undergo regular independent audits. Which cloud characteristic should the organization verify FIRST to meet these requirements?

Accepted Answer

The provider's compliance certifications and data residency options. For regulated data like patient records, compliance certifications prove independent audits, and data residency options ensure data stays within required geographic boundaries. These two provider characteristics directly satisfy the compliance officer's mandates. Other factors like SLAs, disaster recovery, and network performance are important but do not address the specific legal and regulatory requirements.

Answer

The provider's disaster recovery plan and recovery time objective (RTO)

Answer

The provider's service level agreement (SLA) for data durability

Answer

The provider's network latency and bandwidth guarantees

Question 15

A healthcare organization is evaluating a move to the cloud for its electronic health record (EHR) system. The CIO is concerned about regulatory compliance, data sovereignty, and the ability to audit provider operations. The organization must ensure that the cloud provider meets strict healthcare regulations. Which two factors should be prioritized during the provider evaluation? (Choose two.)

Accepted Answer

Compliance certifications such as HIPAA and HITRUST. For a healthcare organization, compliance certifications and data residency guarantees are paramount to protect sensitive EHR data and meet legal requirements. HIPAA and HITRUST certifications confirm the provider's adherence to healthcare security standards, while data residency guarantees ensure compliance with data sovereignty laws. Other factors like marketing, network reach, and financials, while potentially relevant, do not directly address the CIO's stated concerns.

Answer

The provider's stock performance and financial stability

Answer

The number of global points of presence (PoPs)

Answer

The provider's marketing materials and analyst reports