CLO-002 Management And Technical Operations — All Questions With Answers

Question 1hardmultiple choice

Read the full Management And Technical Operations explanation →

An organization is migrating to a hybrid cloud model. They require a dedicated, private connection between their on-premises data center and the cloud provider to reduce latency. Which service should be provisioned?

Question 2mediummultiple choice

Review the full subnetting walkthrough →

You need to restrict outgoing network traffic from a private subnet to only specific API endpoints. Which security component should be configured?

Question 3hardmultiple choice

Read the full Management And Technical Operations explanation →

Your organization requires that a specific cloud environment be isolated from the internet, yet it must access a private service hosted on another cloud provider. Which networking configuration is most appropriate?

Question 4hardmultiple choice

Read the full Management And Technical Operations explanation →

You are responsible for managing access keys for service accounts. You suspect a key has been compromised. What is the immediate operational step to take?

Question 5mediummultiple choice

Read the full Management And Technical Operations explanation →

You are troubleshooting a connectivity issue where an application cannot reach a database. Which tool allows you to trace the network path and identify the specific point of failure?

Question 6easymultiple choice

Read the full Management And Technical Operations explanation →

An administrator wants to ensure that a storage bucket is not accidentally deleted. Which feature should be enabled?

Question 7hardmulti select

Read the full Management And Technical Operations explanation →

Which TWO of the following are valid strategies for cloud data migration?

Question 8hardmulti select

Read the full Management And Technical Operations explanation →

Which THREE services allow you to restrict network access in a cloud VPC?

Question 9easymulti select

Read the full Management And Technical Operations explanation →

Which TWO are common types of cloud backups?

Question 10easymultiple choice

Read the full Management And Technical Operations explanation →

A company wants to reduce the risk of a single cloud provider outage affecting its customer-facing web application. The application currently runs entirely in one region of a single provider. Which approach BEST addresses this availability concern while keeping operational complexity manageable?

Question 11mediummultiple choice

Read the full Management And Technical Operations explanation →

A company runs a production web application on Amazon EC2 instances behind an Application Load Balancer. The operations team must deploy a new version of the application with zero downtime and the ability to roll back immediately if the new version fails health checks. Which deployment strategy should the team implement?

Question 12hardmultiple choice

Read the full Management And Technical Operations explanation →

A media company stores millions of video files in a public cloud object storage bucket. A small subset of files is accessed frequently for the first week after upload, then rarely accessed again, but must remain immediately retrievable for seven years for legal reasons. The storage team wants to minimize cost without adding retrieval delays. Which storage strategy should the team implement?

Question 13hardmultiple choice

Read the full Management And Technical Operations explanation →

A cloud architect is designing a disaster recovery strategy for a critical application. The business requires an RTO of 15 minutes and an RPO of 5 minutes. The application runs on virtual machines with a database. Which approach best meets these objectives at the lowest cost?

Question 14mediummultiple choice

Read the full Management And Technical Operations explanation →

A platform team manages a Kubernetes cluster on Google Cloud. They need a managed, cluster-level observability service that captures metrics, logs, and traces from workloads, provides dashboards with minimal configuration, and integrates with Cloud Monitoring for alerting. Which Google Cloud service should they enable?

Question 15mediummultiple choice

Read the full Management And Technical Operations explanation →

A financial services company runs a payment processing application on Amazon EC2 instances behind an Application Load Balancer. The compliance team requires that all data in transit between clients and the load balancer, and between the load balancer and the EC2 instances, be encrypted. The company has a valid public certificate for the external domain but wants to minimize administrative overhead for internal encryption. Which combination of configurations should the cloud operations team implement to meet these requirements?

Question 16hardmultiple choice

Read the full Management And Technical Operations explanation →

A healthcare organization is migrating its patient records system to Microsoft Azure. The system uses a SQL Server database on an Azure Virtual Machine. The compliance officer insists that all data at rest be encrypted with customer-managed keys stored in a hardware security module (HSM). The IT team needs to implement this without modifying the application. Which Azure feature should they use?

Question 17hardmultiple choice

Read the full Management And Technical Operations explanation →

You are managing a multi-cloud environment using Terraform. You need to ensure that the infrastructure state is locked to prevent concurrent modifications during CI/CD pipeline runs. Which backend component should you implement to achieve state locking?

Question 18mediummultiple choice

Read the full Management And Technical Operations explanation →

A system administrator needs to automatically replace unhealthy EC2 instances in an AWS Auto Scaling group. Which component must be configured?

Question 19mediummultiple choice

Read the full Management And Technical Operations explanation →

A cloud administrator is tasked with reducing idle resource costs in AWS. Which tool should be configured to provide specific rightsizing recommendations for EC2 instances based on historical utilization data?

Question 20easymultiple choice

Read the full Management And Technical Operations explanation →

A developer needs to monitor real-time CPU utilization across a fleet of virtual machines in Azure. Which service should be used to capture and visualize these metrics?

Question 21easymultiple choice

Read the full Management And Technical Operations explanation →

Which cloud operation task is primarily responsible for ensuring that the cloud environment adheres to corporate security and regulatory standards?

Question 22mediummultiple choice

Read the full Management And Technical Operations explanation →

You are implementing a disaster recovery strategy. You need to ensure that database backups are stored in a different geographic region than the primary production database. What is this concept known as in cloud management?

Question 23hardmultiple choice

Read the full Management And Technical Operations explanation →

You are utilizing Infrastructure as Code (IaC) templates. You notice that a specific resource update is causing service downtime. Which deployment pattern should you adopt to verify updates in a controlled environment before rolling out to production?

Question 24easymultiple choice

Read the full Management And Technical Operations explanation →

Which of the following is an example of 'Infrastructure as Code'?

Question 25hardmultiple choice

Read the full Management And Technical Operations explanation →

A company requires that all cloud logs be retained for seven years for legal compliance. Which service should they configure to ensure logs are moved to the cheapest storage class long-term?

Question 26easymultiple choice

Read the full Management And Technical Operations explanation →

You are managing a fleet of cloud servers and notice that CPU usage is consistently at 95% during peak hours. What operational action should you take to restore performance?

Question 27mediummultiple choice

Read the full Management And Technical Operations explanation →

A developer needs to update a database schema without losing any existing data. Which concept is essential for this operational task?

Question 28easymultiple choice

Read the full Management And Technical Operations explanation →

You are notified that an unused storage volume is incurring costs. What is the standard operational procedure to stop these charges?

Question 29mediummultiple choice

Read the full Management And Technical Operations explanation →

Which metric should you monitor to determine if your application's load balancer is struggling with concurrent user connections?

Question 30hardmultiple choice

Read the full Management And Technical Operations explanation →

A security audit requires that all database queries be logged and stored securely. Which feature should be enabled to meet this requirement in a relational database service?

Question 31mediummultiple choice

Read the full Management And Technical Operations explanation →

You have a microservices architecture. How can you effectively manage the deployment of configuration changes across hundreds of containers without manual intervention?

Question 32easymultiple choice

Read the full Management And Technical Operations explanation →

When a cloud service experiences a global outage, which document should you check to verify the current status of the provider's infrastructure?

Question 33easymultiple choice

Read the full Management And Technical Operations explanation →

What is the primary benefit of using a Managed Service (like RDS) over a self-managed database on a virtual machine?

Question 34hardmultiple choice

Read the full Management And Technical Operations explanation →

Your organization uses a 'Shared Responsibility Model'. Which of the following is typically the customer's responsibility in the cloud?

Question 35mediummultiple choice

Read the full Management And Technical Operations explanation →

You are tasked with automating a script that runs every night at 2 AM to clean up temporary files. Which service is most appropriate for triggering this task?

Question 36hardmultiple choice

Read the full Management And Technical Operations explanation →

You notice that the latency of your web application is increasing. You have determined the database is the bottleneck. What is the most effective way to improve read performance?

Question 37easymultiple choice

Read the full Management And Technical Operations explanation →

Which document is essential to review to understand the scope and limitations of a cloud provider's commitment to service uptime?

Question 38hardmultiple choice

Read the full Management And Technical Operations explanation →

You are migrating a legacy application to the cloud. The application requires an OS that is no longer supported by the provider. Which migration strategy is most appropriate?

Question 39mediummultiple choice

Read the full Management And Technical Operations explanation →

You need to ensure that all virtual machines follow a consistent naming convention and have specific tags for cost tracking. What service should you use to enforce this?

Question 40easymultiple choice

Read the full Management And Technical Operations explanation →

You want to receive an email alert whenever your monthly cloud spending exceeds $500. Which service should you configure?

Question 41mediummultiple choice

Read the full Management And Technical Operations explanation →

Which protocol is most commonly used for secure, encrypted remote management of Linux-based virtual machines in the cloud?

Question 42hardmultiple choice

Read the full Management And Technical Operations explanation →

You have a fleet of instances that need to automatically update their software patches. What is the best cloud-native approach to manage this?

Question 43easymultiple choice

Read the full Management And Technical Operations explanation →

An administrator is setting up a new cloud account. What is the first security best practice they should implement?

Question 44mediummulti select

Read the full Management And Technical Operations explanation →

Which TWO of the following are benefits of using a Content Delivery Network (CDN)?

Question 45hardmulti select

Read the full Management And Technical Operations explanation →

Which THREE actions are best practices for securing a cloud virtual machine?

Question 46easymulti select

Read the full Management And Technical Operations explanation →

Which TWO of the following are common cloud monitoring tasks?

Question 47mediummultiple choice

Read the full Management And Technical Operations explanation →

Your team needs to share a large, sensitive file with an external partner. What is the secure way to share this file in the cloud?

Question 48mediummultiple choice

Read the full Management And Technical Operations explanation →

A database is experiencing high I/O wait times. Which resource change is most appropriate?

Question 49hardmultiple choice

Read the full Management And Technical Operations explanation →

You are designing a high-availability architecture. Which configuration ensures that your application is resilient to the failure of an entire physical data center?

Question 50easymulti select

Read the full Management And Technical Operations explanation →

Which THREE factors are primary drivers for cloud cost management?

Question 51hardmulti select

Read the full Management And Technical Operations explanation →

Which TWO components are essential for a robust cloud disaster recovery plan?

Question 52mediummulti select

Read the full Management And Technical Operations explanation →

Which TWO of the following are benefits of using tags on cloud resources?

Question 53hardmulti select

Read the full Management And Technical Operations explanation →

Which THREE items should be included in an incident response plan?

Question 54easymulti select

Read the full Management And Technical Operations explanation →

Which TWO things should be checked when a cloud service is exceeding its budget?

Question 55mediummulti select

Read the full Management And Technical Operations explanation →

Which THREE services are typically involved in cloud infrastructure automation?

Question 56mediummulti select

Read the full Management And Technical Operations explanation →

Which THREE factors influence cloud resource scalability decisions?

Question 57easymulti select

Read the full Management And Technical Operations explanation →

Which THREE cloud service models require different levels of operational management from the customer?

Question 58easymulti select

Read the full Management And Technical Operations explanation →

Which THREE items are considered part of cloud resource maintenance?

Question 59mediummulti select

Read the full Management And Technical Operations explanation →

Which TWO of the following are common cloud deployment patterns?

Question 60hardmulti select

Read the full Management And Technical Operations explanation →

Which TWO of the following are key considerations for cloud operational compliance?

Question 61mediummulti select

Read the full Management And Technical Operations explanation →

Which THREE of the following are necessary to manage multi-cloud deployments effectively?

Question 62mediummultiple choice

Read the full Management And Technical Operations explanation →

A company runs a stateless web application on a fleet of cloud virtual machines behind a load balancer in a single region. The operations team wants to survive the loss of an entire availability zone with minimal manual intervention, while keeping the recovery time objective as low as possible. Which approach best meets these requirements?

Question 63mediummultiple choice

Read the full Management And Technical Operations explanation →

A cloud operations team needs to ensure that the production environment can be rebuilt identically after a region-wide failure. The team already stores nightly database backups in an object storage bucket in a second region. Which additional artifact is MOST critical to include in the recovery plan to guarantee the application tier can be redeployed consistently?

Question 64mediummultiple choice

Read the full Management And Technical Operations explanation →

A cloud operations team wants to automatically remediate an EC2 instance that has been running with CPU utilization below 5% for 14 consecutive days. The team needs the remediation to trigger without manual intervention and to notify a Slack channel. Which AWS service should be used to orchestrate this workflow?

Question 65mediummultiple choice

Read the full Management And Technical Operations explanation →

A company's cloud administrator needs to reduce the cost of a fleet of Amazon EC2 instances that run a stateless web application. The workload can tolerate interruptions but must be highly available. Which AWS purchasing option should the administrator select to achieve the LOWEST cost while meeting these requirements?

Question 66hardmultiple choice

Read the full Management And Technical Operations explanation →

A financial services firm runs a regulated workload in a public cloud. Compliance requires that data at rest be encrypted with keys the firm controls and can rotate independently of the provider, and that an audit trail record every key usage. The firm wants to minimize operational overhead while retaining exclusive control of key material. Which approach best satisfies these requirements?

Question 67hardmulti select

Study the full AAA explanation →

A company runs a production workload on Azure Kubernetes Service (AKS). The operations team must reduce the blast radius of a node failure and ensure that pod disruption budgets are respected during voluntary disruptions. Which two actions should the team take? (Choose two.)

Question 68easymultiple choice

Review the full routing breakdown →

A cloud engineer is designing a solution on Microsoft Azure that must distribute incoming HTTP traffic across a set of virtual machines in a single region, provide URL-based routing, and support TLS termination. Which Azure service should the engineer use?

Question 69hardmultiple choice

Read the full Management And Technical Operations explanation →

A cloud engineer is configuring a lifecycle policy for an object storage bucket that holds compliance audit logs. Regulations require that logs be retained for seven years and that they cannot be altered or deleted during that period. Which combination of lifecycle actions should the engineer implement?

Question 70mediummultiple choice

Read the full Management And Technical Operations explanation →

A financial services company runs a regulated workload on a public cloud. The compliance team requires that all data stored in object storage be encrypted at rest using keys that the company generates and controls, and that key usage be independently auditable. The cloud provider's default encryption uses provider-managed keys. Which action should the cloud operations team take?

Question 71easymultiple choice

Read the full Management And Technical Operations explanation →

A startup is deploying a new web application on a public cloud. The team wants to minimize the attack surface of the web tier by allowing only HTTP and HTTPS traffic from the internet while blocking all other inbound ports. Which cloud construct should the team configure to enforce this network-level restriction?

Question 72easymultiple choice

Read the full Management And Technical Operations explanation →

A financial services company must store monthly compliance reports in Amazon S3 for seven years. The reports are accessed only during the first 30 days after creation and must be retained even if accidentally deleted. Which S3 feature should be enabled to prevent deletion during the retention period?

Question 73easymultiple choice

Read the full Management And Technical Operations explanation →

A cloud operations team wants to receive alerts before their monthly cloud spend exceeds the approved budget for the production subscription. They already use Azure Cost Management and want an automated notification when actual or forecasted costs cross a defined threshold. What should they configure?

Question 74mediummultiple choice

Read the full Management And Technical Operations explanation →

A cloud operations team needs to ensure that a critical application running on Google Cloud can automatically recover from a zone failure without manual intervention. The application is deployed on Compute Engine instances managed by an instance group. Which feature should the team configure?

Question 75easymultiple choice

Read the full Management And Technical Operations explanation →

A startup deploys a web application on a public cloud. The operations team wants to be notified automatically when average CPU utilization on the application servers exceeds 80 percent for five consecutive minutes, without manually checking dashboards. Which capability should the team configure?

Question 76hardmultiple choice

Read the full Management And Technical Operations explanation →

A cloud architect is designing a solution that must provide a recovery point objective (RPO) of 15 minutes and a recovery time objective (RTO) of 2 hours for a critical database. The database currently runs on a single virtual machine with nightly backups. Which change should the architect implement to meet these objectives?

Question 77mediummultiple choice

Read the full Management And Technical Operations explanation →

A DevOps team manages a Google Cloud environment with many projects. They need a centralized view of all audit logs and the ability to create log-based metrics that alert on suspicious IAM changes across all projects. Which Google Cloud service should they use?

Question 78mediummultiple choice

Read the full Management And Technical Operations explanation →

A company runs a three-tier application in AWS. During peak hours, users report slow page loads. CloudWatch metrics show the application load balancer is healthy, the web tier CPU is at 40 percent, and the database read replica latency is 20 ms, but the application tier shows high request queue depth and steady CPU near 95 percent. The team wants the fastest operational fix that preserves availability. What should they do?

Question 79mediummultiple choice

Read the full Management And Technical Operations explanation →

A media company stores millions of video files in a public cloud object storage bucket. Legal hold requirements mandate that specific files be retained for seven years and that no user, including administrators, can delete or overwrite them during that period. The company wants to enforce this at the storage layer without relying on application logic. Which capability should be implemented?

Question 80easymultiple choice

Read the full Management And Technical Operations explanation →

A small business wants to move its customer relationship management system to a public cloud provider. The IT manager is concerned about the provider's ability to guarantee a specific level of uptime and to define remedies if that level is not met. Which document should the manager review to find the committed uptime percentage and any service credits?

Question 81hardmulti select

Read the full Management And Technical Operations explanation →

A cloud administrator is implementing a backup strategy for an Amazon RDS for MySQL database. The administrator must ensure point-in-time recovery and long-term retention beyond the maximum automated backup window. Which TWO actions should the administrator take? (Choose two.)

Question 82hardmulti select

Read the full Management And Technical Operations explanation →

A multinational enterprise is migrating a latency-sensitive trading application to a public cloud. The architecture team must select deployment characteristics that minimize network round-trip time for users in multiple regions while maintaining high availability. Which TWO characteristics should the team prioritize? (Choose two.)

Question 83mediummultiple choice

Read the full Management And Technical Operations explanation →

A cloud engineer needs to deploy a set of resources on Microsoft Azure in a repeatable and consistent manner. The engineer wants to define the infrastructure as code and be able to deploy it multiple times without manual intervention. Which Azure service should the engineer use?

Question 84hardmultiple choice

Read the full Management And Technical Operations explanation →

An organization runs a containerized e-commerce platform on a managed Kubernetes service. During a flash sale, response times degrade sharply. Metrics show the application pods are healthy and the database is not saturated, but the cluster reports that some nodes cannot schedule new pods because of resource pressure. The team must add capacity automatically when pod demand rises and remove it when demand falls. Which action should the team take?

Question 85mediummulti select

Read the full Management And Technical Operations explanation →

A financial services firm is preparing to move a regulated workload to a public cloud. The compliance officer requires evidence that the provider's controls are independently assessed and that the firm can retrieve its data in a usable format if it leaves the provider. Which TWO provider artifacts should the firm obtain? (Choose two.)

Question 86mediummulti select

Read the full Management And Technical Operations explanation →

A cloud operations team is preparing to migrate a legacy three-tier application to a public cloud. The team must ensure the new environment supports operational visibility and controlled change management after cutover. Which two actions should the team take? (Choose two.)

Question 87hardmultiple choice

Read the full Management And Technical Operations explanation →

A media company stores years of video assets in a public cloud object storage bucket. Auditors require that no object can be deleted or overwritten for seven years, even by a user with full administrative rights, to satisfy a regulatory retention rule. Which capability should the company implement?

Question 88hardmultiple choice

Read the full Management And Technical Operations explanation →

A financial services firm runs regulated workloads on AWS. An auditor requires proof that data stored in Amazon S3 is encrypted at rest with keys the firm controls, that key usage is logged, and that keys can be rotated on a defined schedule. Which combination of AWS services and features satisfies these requirements?

Question 89mediummultiple choice

Read the full Management And Technical Operations explanation →

A company runs a production workload across two public cloud providers. The security team requires that a single set of identity policies govern access to resources in both environments, and that a terminated employee lose access everywhere within minutes. Which approach should the company adopt?

Question 90mediummulti select

Read the full Management And Technical Operations explanation →

A company is preparing a change management process for its cloud environment. The operations lead wants to ensure that changes to production workloads are traceable, reversible, and reviewed before deployment. Which TWO practices best support these goals? (Choose two.)

Question 91mediummultiple choice

Read the full Management And Technical Operations explanation →

A financial services firm runs a payment API on Amazon EC2 instances behind an Application Load Balancer. The security team mandates that all incoming traffic be inspected for SQL injection and cross-site scripting before reaching the application, without modifying the application code. Which AWS service should the cloud operations team implement to meet this requirement?

Question 92easymultiple choice

Read the full Management And Technical Operations explanation →

A startup is migrating its on-premises PostgreSQL database to Microsoft Azure. The team wants to minimize administrative overhead for patching, backups, and high availability while retaining control over database schema and query tuning. Which Azure service best fits these requirements?

Question 93hardmultiple choice

Read the full Management And Technical Operations explanation →

A cloud engineer must ensure that an Amazon S3 bucket used for regulatory archives cannot have objects deleted or overwritten by any user, including the root account, for a fixed retention period of seven years. Which combination of settings should the engineer configure?

Question 94mediummulti select

Read the full Management And Technical Operations explanation →

A cloud operations team is preparing to migrate a business-critical workload to a public cloud provider. Leadership wants assurance that the provider's internal controls, security posture, and compliance status have been independently validated. Which TWO artifacts should the team request from the cloud provider to satisfy this due diligence? (Choose two.)

Question 95mediummulti select

Read the full Management And Technical Operations explanation →

A cloud operations team is implementing a cost optimization strategy for their Google Cloud environment. They want to reduce spend on Compute Engine instances without affecting performance. Which TWO actions should they take? (Choose two.)

Question 96hardmultiple choice

Read the full Management And Technical Operations explanation →

A retailer's cloud architect is designing a strategy to avoid vendor lock-in for a containerized order-processing application. The application must be able to move between Amazon Elastic Kubernetes Service and Azure Kubernetes Service with minimal rework. Which approach best supports this goal?

Question 97easymultiple choice

Read the full Management And Technical Operations explanation →

A company is deploying a new web application on AWS. The security team requires that all data stored in Amazon S3 be encrypted at rest. The operations team wants to minimize management overhead while ensuring compliance. Which S3 encryption option should they choose?

Question 1hardmultiple choice

Read the full Management And Technical Operations explanation →

An organization is migrating to a hybrid cloud model. They require a dedicated, private connection between their on-premises data center and the cloud provider to reduce latency. Which service should be provisioned?

Question 2mediummultiple choice

Review the full subnetting walkthrough →

You need to restrict outgoing network traffic from a private subnet to only specific API endpoints. Which security component should be configured?

Question 3hardmultiple choice

Read the full Management And Technical Operations explanation →

Your organization requires that a specific cloud environment be isolated from the internet, yet it must access a private service hosted on another cloud provider. Which networking configuration is most appropriate?

Question 4hardmultiple choice

Read the full Management And Technical Operations explanation →

You are responsible for managing access keys for service accounts. You suspect a key has been compromised. What is the immediate operational step to take?

Question 5mediummultiple choice

Read the full Management And Technical Operations explanation →

You are troubleshooting a connectivity issue where an application cannot reach a database. Which tool allows you to trace the network path and identify the specific point of failure?

Question 6easymultiple choice

Read the full Management And Technical Operations explanation →

An administrator wants to ensure that a storage bucket is not accidentally deleted. Which feature should be enabled?

Question 7hardmulti select

Read the full Management And Technical Operations explanation →

Which TWO of the following are valid strategies for cloud data migration?

Question 8hardmulti select

Read the full Management And Technical Operations explanation →

Which THREE services allow you to restrict network access in a cloud VPC?

Question 9easymulti select

Read the full Management And Technical Operations explanation →

Which TWO are common types of cloud backups?

Question 10easymultiple choice

Read the full Management And Technical Operations explanation →

A company wants to reduce the risk of a single cloud provider outage affecting its customer-facing web application. The application currently runs entirely in one region of a single provider. Which approach BEST addresses this availability concern while keeping operational complexity manageable?

Question 11mediummultiple choice

Read the full Management And Technical Operations explanation →

A company runs a production web application on Amazon EC2 instances behind an Application Load Balancer. The operations team must deploy a new version of the application with zero downtime and the ability to roll back immediately if the new version fails health checks. Which deployment strategy should the team implement?

Question 12hardmultiple choice

Read the full Management And Technical Operations explanation →

A media company stores millions of video files in a public cloud object storage bucket. A small subset of files is accessed frequently for the first week after upload, then rarely accessed again, but must remain immediately retrievable for seven years for legal reasons. The storage team wants to minimize cost without adding retrieval delays. Which storage strategy should the team implement?

Question 13hardmultiple choice

Read the full Management And Technical Operations explanation →

A cloud architect is designing a disaster recovery strategy for a critical application. The business requires an RTO of 15 minutes and an RPO of 5 minutes. The application runs on virtual machines with a database. Which approach best meets these objectives at the lowest cost?

Question 14mediummultiple choice

Read the full Management And Technical Operations explanation →

A platform team manages a Kubernetes cluster on Google Cloud. They need a managed, cluster-level observability service that captures metrics, logs, and traces from workloads, provides dashboards with minimal configuration, and integrates with Cloud Monitoring for alerting. Which Google Cloud service should they enable?

Question 15mediummultiple choice

Read the full Management And Technical Operations explanation →

A financial services company runs a payment processing application on Amazon EC2 instances behind an Application Load Balancer. The compliance team requires that all data in transit between clients and the load balancer, and between the load balancer and the EC2 instances, be encrypted. The company has a valid public certificate for the external domain but wants to minimize administrative overhead for internal encryption. Which combination of configurations should the cloud operations team implement to meet these requirements?

Question 16hardmultiple choice

Read the full Management And Technical Operations explanation →

A healthcare organization is migrating its patient records system to Microsoft Azure. The system uses a SQL Server database on an Azure Virtual Machine. The compliance officer insists that all data at rest be encrypted with customer-managed keys stored in a hardware security module (HSM). The IT team needs to implement this without modifying the application. Which Azure feature should they use?

Question 17hardmultiple choice

Read the full Management And Technical Operations explanation →

You are managing a multi-cloud environment using Terraform. You need to ensure that the infrastructure state is locked to prevent concurrent modifications during CI/CD pipeline runs. Which backend component should you implement to achieve state locking?

Question 18mediummultiple choice

Read the full Management And Technical Operations explanation →

A system administrator needs to automatically replace unhealthy EC2 instances in an AWS Auto Scaling group. Which component must be configured?

Question 19mediummultiple choice

Read the full Management And Technical Operations explanation →

A cloud administrator is tasked with reducing idle resource costs in AWS. Which tool should be configured to provide specific rightsizing recommendations for EC2 instances based on historical utilization data?

Question 20easymultiple choice

Read the full Management And Technical Operations explanation →

A developer needs to monitor real-time CPU utilization across a fleet of virtual machines in Azure. Which service should be used to capture and visualize these metrics?

Question 21easymultiple choice

Read the full Management And Technical Operations explanation →

Which cloud operation task is primarily responsible for ensuring that the cloud environment adheres to corporate security and regulatory standards?

Question 22mediummultiple choice

Read the full Management And Technical Operations explanation →

You are implementing a disaster recovery strategy. You need to ensure that database backups are stored in a different geographic region than the primary production database. What is this concept known as in cloud management?

Question 23hardmultiple choice

Read the full Management And Technical Operations explanation →

You are utilizing Infrastructure as Code (IaC) templates. You notice that a specific resource update is causing service downtime. Which deployment pattern should you adopt to verify updates in a controlled environment before rolling out to production?

Question 24easymultiple choice

Read the full Management And Technical Operations explanation →

Which of the following is an example of 'Infrastructure as Code'?

Question 25hardmultiple choice

Read the full Management And Technical Operations explanation →

A company requires that all cloud logs be retained for seven years for legal compliance. Which service should they configure to ensure logs are moved to the cheapest storage class long-term?

Question 26easymultiple choice

Read the full Management And Technical Operations explanation →

You are managing a fleet of cloud servers and notice that CPU usage is consistently at 95% during peak hours. What operational action should you take to restore performance?

Question 27mediummultiple choice

Read the full Management And Technical Operations explanation →

A developer needs to update a database schema without losing any existing data. Which concept is essential for this operational task?

Question 28easymultiple choice

Read the full Management And Technical Operations explanation →

You are notified that an unused storage volume is incurring costs. What is the standard operational procedure to stop these charges?

Question 29mediummultiple choice

Read the full Management And Technical Operations explanation →

Which metric should you monitor to determine if your application's load balancer is struggling with concurrent user connections?

Question 30hardmultiple choice

Read the full Management And Technical Operations explanation →

A security audit requires that all database queries be logged and stored securely. Which feature should be enabled to meet this requirement in a relational database service?

Question 31mediummultiple choice

Read the full Management And Technical Operations explanation →

You have a microservices architecture. How can you effectively manage the deployment of configuration changes across hundreds of containers without manual intervention?

Question 32easymultiple choice

Read the full Management And Technical Operations explanation →

When a cloud service experiences a global outage, which document should you check to verify the current status of the provider's infrastructure?

Question 33easymultiple choice

Read the full Management And Technical Operations explanation →

What is the primary benefit of using a Managed Service (like RDS) over a self-managed database on a virtual machine?

Question 34hardmultiple choice

Read the full Management And Technical Operations explanation →

Your organization uses a 'Shared Responsibility Model'. Which of the following is typically the customer's responsibility in the cloud?

Question 35mediummultiple choice

Read the full Management And Technical Operations explanation →

You are tasked with automating a script that runs every night at 2 AM to clean up temporary files. Which service is most appropriate for triggering this task?

Question 36hardmultiple choice

Read the full Management And Technical Operations explanation →

You notice that the latency of your web application is increasing. You have determined the database is the bottleneck. What is the most effective way to improve read performance?

Question 37easymultiple choice

Read the full Management And Technical Operations explanation →

Which document is essential to review to understand the scope and limitations of a cloud provider's commitment to service uptime?

Question 38hardmultiple choice

Read the full Management And Technical Operations explanation →

You are migrating a legacy application to the cloud. The application requires an OS that is no longer supported by the provider. Which migration strategy is most appropriate?

Question 39mediummultiple choice

Read the full Management And Technical Operations explanation →

You need to ensure that all virtual machines follow a consistent naming convention and have specific tags for cost tracking. What service should you use to enforce this?

Question 40easymultiple choice

Read the full Management And Technical Operations explanation →

You want to receive an email alert whenever your monthly cloud spending exceeds $500. Which service should you configure?

Question 41mediummultiple choice

Read the full Management And Technical Operations explanation →

Which protocol is most commonly used for secure, encrypted remote management of Linux-based virtual machines in the cloud?

Question 42hardmultiple choice

Read the full Management And Technical Operations explanation →

You have a fleet of instances that need to automatically update their software patches. What is the best cloud-native approach to manage this?

Question 43easymultiple choice

Read the full Management And Technical Operations explanation →

An administrator is setting up a new cloud account. What is the first security best practice they should implement?

Question 44mediummulti select

Read the full Management And Technical Operations explanation →

Which TWO of the following are benefits of using a Content Delivery Network (CDN)?

Question 45hardmulti select

Read the full Management And Technical Operations explanation →

Which THREE actions are best practices for securing a cloud virtual machine?

Question 46easymulti select

Read the full Management And Technical Operations explanation →

Which TWO of the following are common cloud monitoring tasks?

Question 47mediummultiple choice

Read the full Management And Technical Operations explanation →

Your team needs to share a large, sensitive file with an external partner. What is the secure way to share this file in the cloud?

Question 48mediummultiple choice

Read the full Management And Technical Operations explanation →

A database is experiencing high I/O wait times. Which resource change is most appropriate?

Question 49hardmultiple choice

Read the full Management And Technical Operations explanation →

You are designing a high-availability architecture. Which configuration ensures that your application is resilient to the failure of an entire physical data center?

Question 50easymulti select

Read the full Management And Technical Operations explanation →

Which THREE factors are primary drivers for cloud cost management?

Question 51hardmulti select

Read the full Management And Technical Operations explanation →

Which TWO components are essential for a robust cloud disaster recovery plan?

Question 52mediummulti select

Read the full Management And Technical Operations explanation →

Which TWO of the following are benefits of using tags on cloud resources?

Question 53hardmulti select

Read the full Management And Technical Operations explanation →

Which THREE items should be included in an incident response plan?

Question 54easymulti select

Read the full Management And Technical Operations explanation →

Which TWO things should be checked when a cloud service is exceeding its budget?

Question 55mediummulti select

Read the full Management And Technical Operations explanation →

Which THREE services are typically involved in cloud infrastructure automation?

Question 56mediummulti select

Read the full Management And Technical Operations explanation →

Which THREE factors influence cloud resource scalability decisions?

Question 57easymulti select

Read the full Management And Technical Operations explanation →

Which THREE cloud service models require different levels of operational management from the customer?

Question 58easymulti select

Read the full Management And Technical Operations explanation →

Which THREE items are considered part of cloud resource maintenance?

Question 59mediummulti select

Read the full Management And Technical Operations explanation →

Which TWO of the following are common cloud deployment patterns?

Question 60hardmulti select

Read the full Management And Technical Operations explanation →

Which TWO of the following are key considerations for cloud operational compliance?

Question 61mediummulti select

Read the full Management And Technical Operations explanation →

Which THREE of the following are necessary to manage multi-cloud deployments effectively?

Question 62mediummultiple choice

Read the full Management And Technical Operations explanation →

A company runs a stateless web application on a fleet of cloud virtual machines behind a load balancer in a single region. The operations team wants to survive the loss of an entire availability zone with minimal manual intervention, while keeping the recovery time objective as low as possible. Which approach best meets these requirements?

Question 63mediummultiple choice

Read the full Management And Technical Operations explanation →

A cloud operations team needs to ensure that the production environment can be rebuilt identically after a region-wide failure. The team already stores nightly database backups in an object storage bucket in a second region. Which additional artifact is MOST critical to include in the recovery plan to guarantee the application tier can be redeployed consistently?

Question 64mediummultiple choice

Read the full Management And Technical Operations explanation →

A cloud operations team wants to automatically remediate an EC2 instance that has been running with CPU utilization below 5% for 14 consecutive days. The team needs the remediation to trigger without manual intervention and to notify a Slack channel. Which AWS service should be used to orchestrate this workflow?

Question 65mediummultiple choice

Read the full Management And Technical Operations explanation →

A company's cloud administrator needs to reduce the cost of a fleet of Amazon EC2 instances that run a stateless web application. The workload can tolerate interruptions but must be highly available. Which AWS purchasing option should the administrator select to achieve the LOWEST cost while meeting these requirements?

Question 66hardmultiple choice

Read the full Management And Technical Operations explanation →

A financial services firm runs a regulated workload in a public cloud. Compliance requires that data at rest be encrypted with keys the firm controls and can rotate independently of the provider, and that an audit trail record every key usage. The firm wants to minimize operational overhead while retaining exclusive control of key material. Which approach best satisfies these requirements?

Question 67hardmulti select

Study the full AAA explanation →

A company runs a production workload on Azure Kubernetes Service (AKS). The operations team must reduce the blast radius of a node failure and ensure that pod disruption budgets are respected during voluntary disruptions. Which two actions should the team take? (Choose two.)

Question 68easymultiple choice

Review the full routing breakdown →

A cloud engineer is designing a solution on Microsoft Azure that must distribute incoming HTTP traffic across a set of virtual machines in a single region, provide URL-based routing, and support TLS termination. Which Azure service should the engineer use?

Question 69hardmultiple choice

Read the full Management And Technical Operations explanation →

A cloud engineer is configuring a lifecycle policy for an object storage bucket that holds compliance audit logs. Regulations require that logs be retained for seven years and that they cannot be altered or deleted during that period. Which combination of lifecycle actions should the engineer implement?

Question 70mediummultiple choice

Read the full Management And Technical Operations explanation →

A financial services company runs a regulated workload on a public cloud. The compliance team requires that all data stored in object storage be encrypted at rest using keys that the company generates and controls, and that key usage be independently auditable. The cloud provider's default encryption uses provider-managed keys. Which action should the cloud operations team take?

Question 71easymultiple choice

Read the full Management And Technical Operations explanation →

A startup is deploying a new web application on a public cloud. The team wants to minimize the attack surface of the web tier by allowing only HTTP and HTTPS traffic from the internet while blocking all other inbound ports. Which cloud construct should the team configure to enforce this network-level restriction?

Question 72easymultiple choice

Read the full Management And Technical Operations explanation →

A financial services company must store monthly compliance reports in Amazon S3 for seven years. The reports are accessed only during the first 30 days after creation and must be retained even if accidentally deleted. Which S3 feature should be enabled to prevent deletion during the retention period?

Question 73easymultiple choice

Read the full Management And Technical Operations explanation →

A cloud operations team wants to receive alerts before their monthly cloud spend exceeds the approved budget for the production subscription. They already use Azure Cost Management and want an automated notification when actual or forecasted costs cross a defined threshold. What should they configure?

Question 74mediummultiple choice

Read the full Management And Technical Operations explanation →

A cloud operations team needs to ensure that a critical application running on Google Cloud can automatically recover from a zone failure without manual intervention. The application is deployed on Compute Engine instances managed by an instance group. Which feature should the team configure?

Question 75easymultiple choice

Read the full Management And Technical Operations explanation →

A startup deploys a web application on a public cloud. The operations team wants to be notified automatically when average CPU utilization on the application servers exceeds 80 percent for five consecutive minutes, without manually checking dashboards. Which capability should the team configure?

Question 76hardmultiple choice

Read the full Management And Technical Operations explanation →

A cloud architect is designing a solution that must provide a recovery point objective (RPO) of 15 minutes and a recovery time objective (RTO) of 2 hours for a critical database. The database currently runs on a single virtual machine with nightly backups. Which change should the architect implement to meet these objectives?

Question 77mediummultiple choice

Read the full Management And Technical Operations explanation →

A DevOps team manages a Google Cloud environment with many projects. They need a centralized view of all audit logs and the ability to create log-based metrics that alert on suspicious IAM changes across all projects. Which Google Cloud service should they use?

Question 78mediummultiple choice

Read the full Management And Technical Operations explanation →

A company runs a three-tier application in AWS. During peak hours, users report slow page loads. CloudWatch metrics show the application load balancer is healthy, the web tier CPU is at 40 percent, and the database read replica latency is 20 ms, but the application tier shows high request queue depth and steady CPU near 95 percent. The team wants the fastest operational fix that preserves availability. What should they do?

Question 79mediummultiple choice

Read the full Management And Technical Operations explanation →

A media company stores millions of video files in a public cloud object storage bucket. Legal hold requirements mandate that specific files be retained for seven years and that no user, including administrators, can delete or overwrite them during that period. The company wants to enforce this at the storage layer without relying on application logic. Which capability should be implemented?

Question 80easymultiple choice

Read the full Management And Technical Operations explanation →

A small business wants to move its customer relationship management system to a public cloud provider. The IT manager is concerned about the provider's ability to guarantee a specific level of uptime and to define remedies if that level is not met. Which document should the manager review to find the committed uptime percentage and any service credits?

Question 81hardmulti select

Read the full Management And Technical Operations explanation →

A cloud administrator is implementing a backup strategy for an Amazon RDS for MySQL database. The administrator must ensure point-in-time recovery and long-term retention beyond the maximum automated backup window. Which TWO actions should the administrator take? (Choose two.)

Question 82hardmulti select

Read the full Management And Technical Operations explanation →

A multinational enterprise is migrating a latency-sensitive trading application to a public cloud. The architecture team must select deployment characteristics that minimize network round-trip time for users in multiple regions while maintaining high availability. Which TWO characteristics should the team prioritize? (Choose two.)

Question 83mediummultiple choice

Read the full Management And Technical Operations explanation →

A cloud engineer needs to deploy a set of resources on Microsoft Azure in a repeatable and consistent manner. The engineer wants to define the infrastructure as code and be able to deploy it multiple times without manual intervention. Which Azure service should the engineer use?

Question 84hardmultiple choice

Read the full Management And Technical Operations explanation →

An organization runs a containerized e-commerce platform on a managed Kubernetes service. During a flash sale, response times degrade sharply. Metrics show the application pods are healthy and the database is not saturated, but the cluster reports that some nodes cannot schedule new pods because of resource pressure. The team must add capacity automatically when pod demand rises and remove it when demand falls. Which action should the team take?

Question 85mediummulti select

Read the full Management And Technical Operations explanation →

A financial services firm is preparing to move a regulated workload to a public cloud. The compliance officer requires evidence that the provider's controls are independently assessed and that the firm can retrieve its data in a usable format if it leaves the provider. Which TWO provider artifacts should the firm obtain? (Choose two.)

Question 86mediummulti select

Read the full Management And Technical Operations explanation →

A cloud operations team is preparing to migrate a legacy three-tier application to a public cloud. The team must ensure the new environment supports operational visibility and controlled change management after cutover. Which two actions should the team take? (Choose two.)

Question 87hardmultiple choice

Read the full Management And Technical Operations explanation →

A media company stores years of video assets in a public cloud object storage bucket. Auditors require that no object can be deleted or overwritten for seven years, even by a user with full administrative rights, to satisfy a regulatory retention rule. Which capability should the company implement?

Question 88hardmultiple choice

Read the full Management And Technical Operations explanation →

A financial services firm runs regulated workloads on AWS. An auditor requires proof that data stored in Amazon S3 is encrypted at rest with keys the firm controls, that key usage is logged, and that keys can be rotated on a defined schedule. Which combination of AWS services and features satisfies these requirements?

Question 89mediummultiple choice

Read the full Management And Technical Operations explanation →

A company runs a production workload across two public cloud providers. The security team requires that a single set of identity policies govern access to resources in both environments, and that a terminated employee lose access everywhere within minutes. Which approach should the company adopt?

Question 90mediummulti select

Read the full Management And Technical Operations explanation →

A company is preparing a change management process for its cloud environment. The operations lead wants to ensure that changes to production workloads are traceable, reversible, and reviewed before deployment. Which TWO practices best support these goals? (Choose two.)

Question 91mediummultiple choice

Read the full Management And Technical Operations explanation →

A financial services firm runs a payment API on Amazon EC2 instances behind an Application Load Balancer. The security team mandates that all incoming traffic be inspected for SQL injection and cross-site scripting before reaching the application, without modifying the application code. Which AWS service should the cloud operations team implement to meet this requirement?

Question 92easymultiple choice

Read the full Management And Technical Operations explanation →

A startup is migrating its on-premises PostgreSQL database to Microsoft Azure. The team wants to minimize administrative overhead for patching, backups, and high availability while retaining control over database schema and query tuning. Which Azure service best fits these requirements?

Question 93hardmultiple choice

Read the full Management And Technical Operations explanation →

A cloud engineer must ensure that an Amazon S3 bucket used for regulatory archives cannot have objects deleted or overwritten by any user, including the root account, for a fixed retention period of seven years. Which combination of settings should the engineer configure?

Question 94mediummulti select

Read the full Management And Technical Operations explanation →

A cloud operations team is preparing to migrate a business-critical workload to a public cloud provider. Leadership wants assurance that the provider's internal controls, security posture, and compliance status have been independently validated. Which TWO artifacts should the team request from the cloud provider to satisfy this due diligence? (Choose two.)

Question 95mediummulti select

Read the full Management And Technical Operations explanation →

A cloud operations team is implementing a cost optimization strategy for their Google Cloud environment. They want to reduce spend on Compute Engine instances without affecting performance. Which TWO actions should they take? (Choose two.)

Question 96hardmultiple choice

Read the full Management And Technical Operations explanation →

A retailer's cloud architect is designing a strategy to avoid vendor lock-in for a containerized order-processing application. The application must be able to move between Amazon Elastic Kubernetes Service and Azure Kubernetes Service with minimal rework. Which approach best supports this goal?

Question 97easymultiple choice

Read the full Management And Technical Operations explanation →

A company is deploying a new web application on AWS. The security team requires that all data stored in Amazon S3 be encrypted at rest. The operations team wants to minimize management overhead while ensuring compliance. Which S3 encryption option should they choose?