CLO-002 Cloud Concepts Practice Test 3 — 15 Questions

Question 1

An application is suffering from high latency for users across the globe. Which service can help cache content closer to the users?

Accepted Answer

Content Delivery Network. A Content Delivery Network (CDN) caches content at edge locations geographically closer to users, reducing latency by serving requests from the nearest cache. This is the primary purpose of a CDN, making it the correct choice for improving global application performance.

Answer

Auto Scaling Group

Answer

VPC Peering

Answer

Load Balancer

Question 2

What is the primary difference between vertical and horizontal scaling?

Accepted Answer

Horizontal adds nodes. Horizontal scaling (scale-out) adds more nodes or instances to a pool, distributing load across them, which is the defining difference from vertical scaling. Vertical scaling (scale-up) instead increases the size or power of a single existing node — more CPU, RAM, or storage on the same machine.

Answer

Vertical is always cheaper

Answer

Horizontal is limited by hardware

Answer

Vertical adds nodes

Question 3

What does 'Multi-tenancy' in a public cloud mean?

Accepted Answer

Multiple customers, shared hardware. Multi-tenancy in public cloud means a single physical infrastructure (servers, storage, network) is shared among multiple customers (tenants), with logical isolation enforced by the provider's hypervisor, networking, and IAM controls. Each tenant's workloads are isolated from others even though they run on the same underlying hardware.

Answer

One customer, multiple regions

Answer

Multiple clouds, one company

Answer

Multiple applications, one customer

Question 4

Which technology is primarily used to isolate applications while sharing the same OS kernel?

Accepted Answer

Containers. Containers share the host OS kernel and use Linux primitives like namespaces (for isolation of process, network, mount, PID views) and cgroups (for resource limits) to isolate applications from each other. Because they do not bundle a full OS, containers are lightweight and start in milliseconds, unlike VMs which each run their own kernel. This kernel-sharing model is the defining characteristic that distinguishes containers from virtual machines.

Answer

Bare Metal

Answer

Virtual Machines

Answer

Hypervisors

Question 5

Which cloud service model is best suited for end-users who want to use software via a browser?

Accepted Answer

SaaS. SaaS (Software as a Service) delivers fully managed applications to end-users over the internet, typically accessed through a browser without any installation or infrastructure management. Examples include Gmail, Salesforce, and Microsoft 365. This matches the question's description of end-users consuming software via a browser.

Answer

DaaS

Answer

IaaS

Answer

PaaS

Question 6

What is the purpose of a VPC Endpoint?

Accepted Answer

To access cloud services privately. A VPC Endpoint is correct because it enables private connectivity from a VPC to supported cloud services (like S3, DynamoDB, or KMS) without traversing the public internet, keeping traffic on the provider's private network. This improves security by removing exposure to the internet and can reduce NAT gateway data-processing costs. It is the standard mechanism for private service access from within a VPC.

Answer

To connect two VPCs

Answer

To encrypt data transit

Answer

To provide public access

Question 7

You need to store audit logs that are immutable and cannot be deleted for a set period. Which feature should you enable?

Accepted Answer

Object Lock. S3 Object Lock enforces WORM (Write Once, Read Many) semantics, preventing objects from being deleted or overwritten for a specified retention period. It is the correct feature for immutable audit logs that must be preserved for compliance. Object Lock requires S3 Versioning to be enabled on the bucket and is configured in Governance or Compliance mode.

Answer

Access Logs

Answer

Versioning

Answer

Encryption

Question 8

A developer needs a serverless environment to run event-driven code. What should they choose?

Accepted Answer

FaaS (e.g., Lambda). FaaS (Function-as-a-Service), such as AWS Lambda, Azure Functions, or Google Cloud Functions, is the serverless model purpose-built for event-driven code: the platform provisions compute on demand, scales automatically, and bills per invocation. The developer uploads a function, binds it to an event source (HTTP, queue, object storage), and never manages servers.

Answer

Managed Kubernetes

Answer

Elastic Compute Cloud

Answer

Relational Database

Question 9

A company requires a highly available database that replicates data synchronously across availability zones. Which setting should be chosen?

Accepted Answer

Multi-AZ deployment. A Multi-AZ deployment is correct because it maintains a synchronous standby replica in a different availability zone, and the database endpoint automatically fails over to that standby if the primary fails. Synchronous replication guarantees zero data loss (RPO of zero) because the standby must acknowledge each write before the primary commits. This is the standard managed-database pattern for high availability with automatic failover in cloud platforms like AWS RDS.

Answer

Auto Scaling

Answer

Read replica

Answer

Database snapshot

Question 10

What is the benefit of 'measured service' for a business?

Accepted Answer

Pay-as-you-go pricing. Measured service in cloud computing refers to the ability to monitor, control, and report on resource usage, which enables pay-as-you-go pricing models. Businesses only pay for what they consume, providing cost transparency and efficiency.

Answer

Increased security

Answer

Free unlimited resources

Answer

Faster CPU performance

Question 11

Which TWO benefits are associated with cloud storage object versioning?

Accepted Answer

Protects against accidental deletion. Option D is correct because object versioning retains prior and deleted object versions in the bucket, so an accidental overwrite or delete does not permanently destroy data—the object can be restored by referencing its version ID. Option E is correct because versioning keeps each prior revision of an object as a distinct version, allowing you to retrieve or restore an earlier file version when needed. These two benefits stem directly from the versioning mechanism itself, which preserves multiple iterations of an object rather than replacing it. Option A is not a versioning benefit, since encryption is provided by separate features such as SSE-S3, SSE-KMS, or client-side encryption. Option B is not correct because versioning typically increases storage consumption and therefore cost, as all retained versions are billed. Option C is not correct because versioning does not improve read throughput or latency; performance is governed by factors like request patterns, transfer acceleration, and storage class.

Answer

Provides data encryption

Answer

Reduces storage costs

Answer

Increases read performance

Question 12

You need to allow temporary access to a file stored in a private bucket for a third party. What is the most secure method?

Accepted Answer

Create a Pre-signed URL. A pre-signed URL embeds the signer's credentials and an expiry timestamp into a time-limited URL, granting temporary, scoped access to a single object without changing bucket permissions or creating identities. This is the most secure method because access automatically expires, is limited to the specific object and HTTP method, and can be revoked by rotating the signing key or deleting the object.

Answer

Create an IAM user for them

Answer

Email the file

Answer

Make the bucket public

Question 13

Which THREE factors must be considered when estimating cloud costs?

Accepted Answer

Resource type (instance size). Option A (Resource type/instance size) is correct because cloud pricing is primarily driven by the compute capacity selected — larger instance sizes with more vCPUs and memory cost more per hour than smaller ones. Option D (Data transfer out) is correct because egress traffic is billed separately by cloud providers, while inbound data transfer is typically free, making outbound bandwidth a key cost variable. Option E (Resource uptime) is correct because most cloud resources are billed per-second or per-hour of running time, so how long an instance stays provisioned directly determines the total charge. Option B (Data center color) is not a real cost factor — physical facility aesthetics or color schemes have no bearing on cloud billing metrics. Option C (Number of end users) is not directly billed in most cloud pricing models; costs are tied to provisioned resources and consumption rather than user headcount, unless a per-user SaaS license applies, which is not the general cloud cost estimation factor here.

Answer

Data center color

Answer

Number of end users

Question 14

Which THREE are key characteristics of cloud computing?

Accepted Answer

Measured service. A. Measured service is correct because cloud providers meter resource usage (compute, storage, bandwidth) and bill customers based on consumption, enabling pay-as-you-go pricing. B. Broad network access is correct because cloud services are delivered over the network via standard mechanisms (e.g., HTTP/HTTPS, APIs) and accessible from diverse client devices such as laptops, phones, and tablets. E. Rapid elasticity is correct because cloud resources can scale out and in automatically or on demand to match workload changes, appearing nearly unlimited to the consumer. C. Static hardware provisioning is incorrect because cloud computing emphasizes dynamic, on-demand provisioning rather than fixed, pre-allocated hardware. D. Physical media access is incorrect because cloud services are accessed remotely over networks, not through physical media such as tapes, disks, or direct hardware connections.

Answer

Static hardware provisioning

Answer

Physical media access

Question 15

Which TWO scenarios are appropriate for using a load balancer?

Accepted Answer

To distribute traffic across multiple instances. Option C is correct because a load balancer's primary function is to distribute incoming traffic across multiple backend instances, preventing any single instance from being overwhelmed and enabling horizontal scaling. Option D is correct because by spreading requests across multiple instances and performing health checks, a load balancer can route traffic away from unhealthy instances, thereby improving fault tolerance and availability. Option A is incorrect because persistent data storage is the role of databases or storage services, not load balancers. Option B is incorrect because reducing internet latency is achieved through CDNs or edge caching, not load balancing. Option E is incorrect because encryption of data at rest is handled by storage-level encryption mechanisms, not load balancers.

Answer

To store persistent data

Answer

To reduce network latency to the internet

Answer

To encrypt data at rest