CLO-002 Cloud Concepts Practice Test 6 — 15 Questions

Question 1

A financial services company is evaluating a public cloud provider. The company must ensure that its data is encrypted at rest and in transit, and that only authorized employees can access it. The provider offers encryption and identity management services. Under the shared responsibility model, which statement is correct?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The customer is responsible for configuring encryption and managing access controls for their data.. The customer is responsible for security in the cloud, including encryption and access management. The provider secures the underlying infrastructure, but the customer must configure encryption, manage keys, and define IAM policies. This division ensures the financial firm meets its compliance obligations for data protection and authorized access.

Answer

The cloud provider is responsible for managing user identities and access permissions.

Answer

The customer is responsible for the physical security of the data center.

Answer

The cloud provider is responsible for encrypting all customer data at rest and in transit.

Question 2

A media company is comparing total cost of ownership for running a video transcoding workload on-premises versus in the public cloud. The finance team wants to identify costs that are characteristic of the cloud consumption model but are often overlooked. Which TWO factors should the team include? (Choose two.)

Accepted Answer

Per-second or per-minute metered compute charges during transcoding jobs. Cloud consumption economics center on variable, usage-based charges and network transfer fees. Metered compute reflects paying only for active transcoding time, while egress charges capture the cost of delivering finished video to viewers. Together they represent the two cloud-specific cost drivers finance must model, unlike depreciation, idle capacity, and facility power, which belong to the on-premises capital model.

Answer

Idle capacity reserved for projected peak transcoding demand

Answer

Depreciation of the physical servers that host the transcoding farm

Answer

Facility power and cooling costs for the company's own data center

Question 3

A software development team is using a cloud-based platform that provides a runtime environment, middleware, and database services. The team can deploy their code without managing the underlying operating system or servers. However, they are responsible for configuring the application and its data. Which cloud service model is the team using?

Accepted Answer

Platform as a Service (PaaS). PaaS provides a complete development and deployment environment in the cloud, including runtime, middleware, and database services. The team can deploy code without managing the OS or servers, and they remain responsible for their application and data. This aligns with the PaaS model, where the provider manages the platform and the customer manages the application.

Answer

Function as a Service (FaaS)

Answer

Infrastructure as a Service (IaaS)

Answer

Software as a Service (SaaS)

Question 4

A healthcare company is migrating a patient records system to the cloud. The system must comply with strict data residency regulations that require all patient data to remain within the country. The company also wants to minimize latency for local users. Which cloud deployment model is MOST appropriate?

Accepted Answer

Private cloud hosted within the country. A private cloud hosted within the country is the most appropriate because it guarantees that patient data remains within national borders, directly meeting data residency regulations. It also gives the healthcare company control over the infrastructure, which helps with compliance audits and local latency optimization. The other models either risk cross-border data movement or do not inherently ensure in-country data location.

Answer

Community cloud shared with other healthcare providers globally

Answer

Hybrid cloud using a public cloud for primary storage and an on-premises private cloud for backup

Answer

Public cloud with resources in multiple global regions

Question 5

A hospital is migrating patient records to a cloud environment. The compliance officer insists that the hospital retain control over encryption keys so that the cloud provider cannot read the data at rest. Which capability should the hospital require from the provider?

Accepted Answer

Customer-managed encryption keys held in the hospital's own key management system. The compliance officer's requirement is cryptographic control: the provider must be unable to read records at rest. Customer-managed keys, held in the hospital's own key management system or hardware security module, achieve this because the provider never possesses the key material needed to decrypt. Provider-managed keys, TLS, and MFA address other risks and leave decryption capability with the provider.

Answer

Transport Layer Security enforced for all connections to the storage service

Answer

Provider-managed encryption with keys stored in the provider's key vault

Answer

Multi-factor authentication enforced for all hospital administrator accounts

Question 6

A retail company is using a public cloud provider. The IT manager wants to understand how the cloud provider's use of shared physical resources affects the company's data. Which cloud characteristic ensures that the provider's other customers cannot access the retail company's data?

Accepted Answer

Multi-tenancy with logical isolation. Multi-tenancy with logical isolation is the cloud characteristic that allows multiple customers to share physical resources while keeping their data separate. The provider uses virtualization, network segmentation, and access controls to ensure that one tenant cannot access another's data. Elasticity, measured service, and on-demand self-service are important cloud traits but do not provide the security isolation required.

Answer

Measured service

Answer

On-demand self-service

Answer

Elasticity

Question 7

A media company stores finished video masters in a public cloud object store. Legal requires that each object be retrievable even if a single facility is destroyed, and that any silent data corruption be detectable years later. The storage team wants the provider to handle replication and integrity verification without application changes. Which capability should the team verify is available from the provider?

Accepted Answer

Cross-region replication with checksum-based integrity validation. The legal requirements combine geographic durability with long-term corruption detection. Cross-region replication addresses facility loss, and checksum-based integrity validation catches silent bit-level corruption, both delivered by the provider without application changes. The other capabilities address confidentiality, version history, or authorization, none of which replicate data or verify integrity.

Answer

Object versioning with a lifecycle rule to expire old versions

Answer

A read-only access control list on the bucket

Answer

Client-side encryption with customer-managed keys

Question 8

A company is evaluating the financial implications of moving from on-premises infrastructure to a public cloud. The CFO wants to understand which cost factors are typically eliminated or reduced when using a public cloud. (Choose two.)

Accepted Answer

Upfront capital expenditure for physical servers. Moving to the public cloud eliminates the need for upfront capital expenditure on physical servers and removes the direct operational costs of data center power and cooling. These are shifted to the provider and become part of the service fee. Application licensing, IT staff salaries, and data egress costs are not eliminated; in fact, data egress can be a new expense. The CFO should focus on the CapEx and facility OpEx reductions.

Answer

Salaries for IT staff who manage the cloud infrastructure

Answer

Costs for application licensing

Answer

Costs associated with data egress

Question 9

A logistics firm is evaluating whether to move its custom routing engine to a public cloud. The CIO wants to understand which characteristics are inherent to the public cloud model rather than benefits the firm must build itself. (Choose two.)

Accepted Answer

On-demand self-service provisioning of resources without human interaction from the provider. On-demand self-service and broad network access are two of the essential characteristics that define public cloud, alongside resource pooling, rapid elasticity, and measured service. The logistics firm gets automatic provisioning and reachability from many device types as part of the model, while latency guarantees, code ownership transfer, and mandatory single-tenancy are not cloud characteristics at all.

Answer

Automatic ownership transfer of the customer's source code to the provider

Answer

Mandatory single-tenancy of all physical hosts for every customer

Answer

Guaranteed elimination of all application latency across every geographic region

Question 10

A company is planning to migrate its on-premises workloads to a public cloud. The IT director asks which factors are key considerations when evaluating the cloud provider's service level agreement (SLA). (Choose two.)

Accepted Answer

The scope of services covered and any exclusions.. The two key SLA factors are the guaranteed uptime percentage and remedies, and the scope of services covered with exclusions. These define what the provider commits to and what happens if commitments are missed. They directly affect availability expectations and risk management for the migration.

Answer

The provider's data center locations and their proximity to the company's offices.

Answer

The provider's process for handling customer support tickets.

Answer

The maximum number of virtual machines the company can deploy.

Question 11

A small accounting practice wants to move its email and document collaboration to the cloud. The staff has no server administration skills and wants the provider to manage patching, uptime, and the application itself, paying a per-user subscription. Which cloud service model is the practice seeking?

Accepted Answer

Software as a Service (SaaS). The practice wants a finished application managed end to end by the provider and billed per user, which is the definition of Software as a Service. IaaS and PaaS leave administrative or development responsibilities with the customer, and FaaS targets event-driven code rather than office productivity software.

Answer

Infrastructure as a Service (IaaS)

Answer

Platform as a Service (PaaS)

Answer

Function as a Service (FaaS)

Question 12

A retail company experiences a sudden spike in online orders during a flash sale, causing its on-premises web servers to become overwhelmed and the site to slow down. The company wants to avoid this problem in the future without permanently adding hardware. Which cloud characteristic directly addresses this need?

Accepted Answer

Rapid elasticity. Rapid elasticity is the cloud characteristic that lets resources scale out quickly during demand spikes and scale back in afterward. The flash sale creates a temporary surge that overwhelms fixed on-premises servers, and elasticity provides the dynamic capacity needed to absorb that surge without permanent hardware purchases. The other characteristics describe billing, sharing, and access, but none automatically adjusts capacity to match changing demand.

Answer

Resource pooling

Answer

Measured service

Answer

Broad network access

Question 13

A startup wants to deploy a new web application but has a small operations team with limited expertise in patching operating systems and managing runtime environments. The team is comfortable configuring web server settings and deploying application code. Which cloud service model should they choose to minimize operational overhead while retaining control over the application environment?

Accepted Answer

Platform as a Service (PaaS). PaaS is the right choice because it removes the burden of managing operating systems, runtimes, and middleware while leaving application code and configuration to the customer. The startup's team lacks OS and runtime expertise but is comfortable with web server settings and code deployment, which aligns precisely with the PaaS division of responsibility. IaaS, SaaS, and FaaS each place control or constraints in the wrong place for this requirement.

Answer

Infrastructure as a Service (IaaS)

Answer

Function as a Service (FaaS)

Answer

Software as a Service (SaaS)

Question 14

A company is migrating a latency-sensitive trading application to the cloud. The application must remain available even if an entire data center suffers a power outage, and it must be able to fail over automatically with minimal downtime. Which deployment approach best meets these requirements?

Accepted Answer

Deploy resources across multiple availability zones within a single region and configure automatic failover.. Deploying across multiple availability zones within one region provides resilience to a data center outage because each zone has independent infrastructure, and automatic failover with health checks minimizes downtime. This balances high availability with the low latency a trading application needs. A single zone, manual multi-region failover, or reliance on the shared responsibility model each fails to deliver both automatic recovery and protection against a full data center loss.

Answer

Deploy resources across multiple regions and use manual failover procedures.

Answer

Deploy resources in a single region and rely on the cloud provider's shared responsibility model for availability.

Answer

Deploy all resources in a single availability zone within one region.

Question 15

A regional accounting firm runs a legacy payroll application on a physical server in its office. The server is aging, and the firm wants to move the application to a cloud provider without modifying the application or its operating system. The firm also wants to keep full administrative control over the OS, patching, and runtime configuration. Which cloud service model best fits these requirements?

Accepted Answer

Infrastructure as a Service (IaaS). IaaS is the only model that supplies raw virtual infrastructure while leaving the guest operating system, patching, and runtime under the customer's control. Because the payroll application must move without modification and the firm insists on managing the OS itself, the provider supplies only the virtualized foundation, and the firm remains responsible for everything above the hypervisor.

Answer

Software as a Service (SaaS)

Answer

Function as a Service (FaaS)

Answer

Platform as a Service (PaaS)