CLO-002 Cloud Concepts Practice Test 5 — 15 Questions

Question 1

A financial services firm is migrating a legacy trading application to the cloud. The application requires sub-millisecond latency and cannot tolerate noisy neighbors. The firm also needs to comply with regulations that mandate dedicated physical hardware for certain workloads. Which cloud deployment model should the firm choose?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Private cloud. The firm requires dedicated physical hardware, isolation from noisy neighbors, and very low latency for a regulated workload. A private cloud provides dedicated infrastructure for a single organization, meeting the regulatory and performance requirements. Public and community clouds involve shared hardware, and hybrid cloud does not inherently guarantee dedicated hardware for the specific workload.

Answer

Community cloud

Answer

Hybrid cloud

Answer

Public cloud

Question 2

A healthcare company is migrating its patient records system to a cloud environment. The company must ensure that only authorized users can access the data and that the data is encrypted both at rest and in transit. The cloud provider offers encryption services, but the company wants to control the encryption keys. Which cloud concept best describes the company's need to manage its own encryption keys while using the provider's infrastructure?

Accepted Answer

Bring your own key (BYOK). BYOK is the cloud concept that lets an organization use its own encryption keys with a cloud provider's services. The healthcare company needs to control keys for compliance and security, so BYOK is the best fit. An HSM may be used to store keys, but the concept of customer-managed keys is BYOK. Shared responsibility and MFA address different aspects of cloud security.

Answer

Multi-factor authentication (MFA)

Answer

Shared responsibility model

Answer

Hardware security module (HSM)

Question 3

A company is evaluating cloud service providers for a new application. The IT director wants to understand the financial and operational benefits of the cloud's measured service and pay-as-you-go model. Which TWO of the following are direct benefits of these characteristics? (Choose two.)

Accepted Answer

The company can avoid paying for idle or unused capacity.. Measured service and pay-as-you-go directly enable shifting from capital to operational expenditure and avoiding payment for idle capacity. Automatic scaling is a benefit of rapid elasticity, physical security control is not provided to the customer, and operational costs are not eliminated but rather transformed and reduced.

Answer

The company can eliminate all IT operational costs.

Answer

The company gains complete control over the physical security of the data center.

Answer

The company can automatically scale resources based on demand without manual intervention.

Question 4

A small marketing agency wants to move its client relationship management (CRM) application to the cloud. The agency has no IT staff and wants to eliminate server maintenance, patching, and database administration. Which cloud service model should the agency choose?

Accepted Answer

Software as a Service (SaaS). SaaS is the correct choice because it delivers a fully managed application where the provider handles infrastructure, patching, and database maintenance. The agency's lack of IT staff and desire to avoid server administration align with the SaaS consumption model, not with IaaS, PaaS, or CaaS, which all leave significant operational responsibilities with the customer.

Answer

Container as a Service (CaaS)

Answer

Infrastructure as a Service (IaaS)

Answer

Platform as a Service (PaaS)

Question 5

A media company runs a video transcoding workload that is idle most of the day but must process large batches quickly when new content arrives. The company wants to minimize cost while accepting that interruptions can occur. Which cloud characteristic or purchasing option should the company use?

Accepted Answer

Spot instances. Spot instances offer the lowest cost for interruptible, bursty workloads by using spare capacity. The media company explicitly accepts interruptions and has an idle-mostly, batch-oriented pattern, which aligns with spot pricing. Reserved instances, dedicated hosts, and on-demand instances either require commitments, cost more, or bill for idle capacity, making them less suitable.

Answer

Reserved instances

Answer

On-demand instances

Answer

Dedicated hosts

Question 6

A small marketing agency wants to move its email and collaboration suite to the cloud. The agency has no IT staff and wants the vendor to manage servers, storage, and the application itself, while users simply log in through a browser. Which cloud service model BEST fits this requirement?

Accepted Answer

Software as a Service (SaaS). SaaS is the only model in which the provider manages the entire stack up through the application, letting users consume the service through a browser. The agency has no IT staff and wants zero responsibility for servers, storage, or application maintenance, which exactly matches the SaaS consumption model rather than infrastructure or platform hosting.

Answer

Desktop as a Service (DaaS)

Answer

Platform as a Service (PaaS)

Answer

Infrastructure as a Service (IaaS)

Question 7

A small graphic design firm wants to move its project files to a cloud service so designers can access them from any device. The company has no IT staff and wants to avoid managing servers or installing software locally. Which cloud service model should the firm choose?

Accepted Answer

Software as a Service (SaaS). SaaS is the correct choice because it provides a complete, provider-managed application that users access over the internet. The firm does not need to provision servers, patch operating systems, or install software. This directly satisfies the need for simple, device-independent access to project files with minimal administrative effort.

Answer

Container as a Service (CaaS)

Answer

Infrastructure as a Service (IaaS)

Answer

Platform as a Service (PaaS)

Question 8

A healthcare company must run a patient-portal workload that processes protected health information. The compliance team requires that the cloud provider supply independent audit reports and a contractual commitment for data handling, while the company retains full control of the guest operating system and application stack. Which cloud service model BEST satisfies these requirements?

Accepted Answer

Infrastructure as a Service (IaaS). The requirement to retain control of the guest operating system and application stack points to Infrastructure as a Service, where the customer manages everything above the hypervisor. The provider still furnishes independent audit reports and signs contractual data-handling commitments covering the physical and virtualization layers, satisfying the compliance team without surrendering guest-level administration.

Answer

Function as a Service (FaaS)

Answer

Platform as a Service (PaaS)

Answer

Software as a Service (SaaS)

Question 9

A retail company runs a legacy inventory application on physical servers in its own data center. The CIO wants to keep the application unchanged but gain cloud elasticity for seasonal peaks, and legal requires that all customer data remain on company-owned hardware. Which cloud deployment consideration does this scenario illustrate?

Accepted Answer

The company should use a hybrid approach, keeping data on-premises while bursting compute to the cloud. The scenario pits a desire for cloud elasticity against a legal mandate for on-premises data ownership. A hybrid deployment is the only option that honors both: private infrastructure retains the sensitive data and legacy application, while public cloud capacity can be engaged during seasonal peaks without relocating regulated information.

Answer

The company should adopt a public cloud because elasticity is only available there

Answer

The company should keep everything on-premises because cloud elasticity requires rewriting the application

Answer

The company should rehost the application in a community cloud shared with competitors

Question 10

A company is evaluating the business value of moving its on-premises data center to a public cloud. Which TWO of the following are direct cloud economic benefits that the company should expect? (Choose two.)

Accepted Answer

Ability to scale resources up or down based on demand. The two direct economic benefits are converting capital expenditures to operational expenditures and gaining elastic scaling. Both change how the company pays for and consumes IT resources, aligning cost with demand. Eliminating security responsibilities, guaranteeing lower total cost for every workload, and removing all capacity planning are inaccurate overstatements that do not reflect the shared responsibility and planning realities of cloud adoption.

Answer

Elimination of all security responsibilities

Answer

Permanent removal of the need for capacity planning

Answer

Guaranteed lower total cost of ownership for every workload

Question 11

A company runs a web application on virtual machines in a public cloud. The application must remain available even if an entire data center loses power. The cloud provider offers regions and availability zones. Which deployment approach should the company use?

Accepted Answer

Deploy virtual machines across multiple availability zones within a single region.. Spreading instances across multiple availability zones within a region is the correct high-availability design. Each zone has independent power and networking, so a failure in one data center does not affect the others. The application remains available without manual intervention, and latency between zones is low enough for most workloads.

Answer

Deploy all virtual machines in a single availability zone within one region.

Answer

Deploy virtual machines in two regions but keep all traffic routed to one region.

Answer

Deploy virtual machines in a single region and rely on the provider's backup service.

Question 12

A financial services firm is evaluating a cloud provider for a new analytics platform. The firm's auditors require proof that the provider undergoes independent security assessments and that the firm can review those results before signing. Which cloud concept should the firm examine?

Accepted Answer

The provider's compliance certifications and audit reports. Auditors seeking evidence of independent security assessment need artifacts such as SOC 2 reports, ISO 27001 certificates, or equivalent attestations. These documents show that a third party evaluated the provider's controls. Uptime agreements, API quotas, and egress pricing address availability, capacity, and cost, not the compliance assurance the firm requires.

Answer

The provider's data egress pricing schedule

Answer

The provider's service level agreement for uptime

Answer

The provider's published API rate limits and quotas

Question 13

A retail company is planning to adopt a public cloud infrastructure. The IT director wants to understand the financial and operational benefits of the cloud. Which TWO of the following are key benefits of the public cloud model? (Choose two.)

Accepted Answer

Ability to scale resources up or down based on demand. The key benefits of public cloud include the ability to scale resources dynamically based on demand and a pay-as-you-go pricing model that aligns costs with usage. These benefits help a retail company handle seasonal spikes without over-investing in hardware. Eliminating all capital expenditures is an overstatement, controlling physical security is not a customer benefit, and zero downtime is not guaranteed.

Answer

Complete control over the physical security of data centers

Answer

Guaranteed zero downtime for all services

Answer

Elimination of all capital expenditures for IT hardware

Question 14

A retail company wants to ensure its online store remains available even if an entire cloud region fails. The company is willing to pay for duplicate resources in a second region and wants automatic failover. Which design approach should the company implement?

Accepted Answer

Use a multi-region active-active deployment with automated failover. Surviving a full region failure with automatic failover requires resources in at least two regions and automated traffic redirection. A multi-region active-active design duplicates the environment and shifts traffic when a region becomes unavailable, matching the company's willingness to pay for redundancy. Single-zone, same-region backup, and single-region load balancing designs do not protect against regional outages.

Answer

Configure a single-region load balancer across multiple subnets

Answer

Deploy all resources in a single availability zone within one region

Answer

Take nightly backups to object storage in the same region

Question 15

A financial services company is designing a cloud architecture that must remain operational even if an entire cloud provider region becomes unavailable. The company wants to avoid a single point of failure and is willing to accept some additional cost and complexity. Which design approach BEST meets this requirement?

Accepted Answer

Deploy resources across multiple regions and use global load balancing or DNS failover.. Deploying across multiple regions with global load balancing or DNS failover is the only option that directly protects against a complete region outage. It ensures that another region can take over traffic and continue serving users. The other options either rely on a single region, a single zone, or a caching layer that cannot replace the full application stack during a regional disaster.

Answer

Deploy all resources in a single availability zone within one region and rely on the provider's SLA.

Answer

Use a content delivery network (CDN) to cache all application responses at edge locations.

Answer

Deploy resources across multiple availability zones within a single region.