Cloud Digital Leader Fundamental cloud concepts — 50 Questions

Question 1

A company wants to use computing resources over the internet without managing physical servers. The cloud provider manages the underlying hardware and virtualization, while the company manages the operating system, middleware, and applications. Which cloud service model does this describe?

Accepted Answer

Infrastructure as a Service (IaaS). This scenario describes Infrastructure as a Service (IaaS) because the cloud provider manages the physical hardware and virtualization layer, while the customer retains control over the operating system, middleware, and applications. In IaaS, the provider offers virtualized computing resources (e.g., virtual machines, storage, networks) via APIs or dashboards, and the customer is responsible for OS patches, application configuration, and middleware management. This matches the given split of responsibilities exactly.

Answer

Software as a Service (SaaS)

Answer

Platform as a Service (PaaS)

Answer

Function as a Service (FaaS)

Question 2

A team uses Google Workspace (Gmail, Docs, Sheets) for their daily work. They do not manage any servers or software installation — Google maintains everything. Which cloud service model does Google Workspace represent?

Accepted Answer

Software as a Service (SaaS). Google Workspace is a classic example of Software as a Service (SaaS) because users access applications like Gmail, Docs, and Sheets via a web browser without managing the underlying infrastructure, operating systems, or software installations. Google handles all maintenance, security patching, and uptime, which aligns with the SaaS model where the provider delivers fully functional software over the internet. Unlike IaaS or PaaS, the end-user does not control the runtime environment or deploy custom code on the platform.

Answer

Infrastructure as a Service (IaaS)

Answer

Platform as a Service (PaaS)

Answer

Database as a Service (DBaaS)

Question 3

A hospital runs a patient records system that must remain on-premises due to strict regulatory data residency requirements. However, they also want to use cloud-based AI for diagnostic imaging analysis. Which cloud deployment model best describes their architecture?

Accepted Answer

Hybrid cloud — combining on-premises infrastructure with public cloud services.. The hospital must keep patient records on-premises to comply with data residency regulations, but wants to leverage cloud-based AI for diagnostic imaging. A hybrid cloud model combines on-premises infrastructure (for sensitive data) with public cloud services (for AI processing), allowing data to remain resident while compute-intensive tasks are offloaded. This matches the scenario exactly, as hybrid cloud enables workload distribution across private and public environments.

Answer

Public cloud — all workloads run in a provider's infrastructure.

Answer

Private cloud — all workloads run in the hospital's own infrastructure.

Answer

Multi-cloud — using multiple public cloud providers simultaneously.

Question 4

According to the NIST definition of cloud computing, which characteristic allows users to unilaterally provision computing resources such as server time and network storage without requiring human interaction with the service provider?

Accepted Answer

On-demand self-service. NIST's five essential characteristics of cloud computing are: on-demand self-service, broad network access, resource pooling, rapid elasticity, and measured service. 'On-demand self-service' specifically describes the ability for users to provision capabilities automatically without provider interaction — using a web console or API to spin up VMs, databases, or storage instantly, without calling a salesperson or waiting for manual provisioning.

Answer

Broad network access

Answer

Resource pooling

Answer

Measured service

Question 5

An organization runs its entire infrastructure on a single public cloud provider (Google Cloud). All applications, data, and services live in Google Cloud's infrastructure. Which deployment model describes this?

Accepted Answer

Public cloud. Option B is correct because the organization is using a single public cloud provider, Google Cloud, which delivers computing resources over the public internet on a pay-as-you-go basis. In a public cloud deployment, the infrastructure is owned and operated by the cloud provider and shared across multiple tenants, which matches the scenario where all applications, data, and services reside in Google Cloud's infrastructure.

Answer

Private cloud

Answer

Hybrid cloud

Answer

Community cloud

Question 6

What is virtualization in the context of cloud computing, and why is it fundamental to how cloud providers deliver services?

Accepted Answer

Virtualization abstracts physical hardware into multiple isolated virtual machines, enabling many customers to share physical infrastructure efficiently and securely.. Virtualization is fundamental to cloud computing because it decouples the operating system and applications from the underlying physical hardware through a hypervisor (e.g., VMware ESXi, KVM, Hyper-V). This abstraction allows a single physical server to host multiple isolated virtual machines (VMs), each with its own guest OS, enabling cloud providers to achieve high resource utilization, multi-tenancy, and rapid provisioning. Without virtualization, providers would be limited to one OS per physical server, drastically reducing efficiency and scalability.

Answer

Virtualization is the process of converting physical servers into digital images for backup purposes.

Answer

Virtualization is a networking technique that routes internet traffic more efficiently.

Answer

Virtualization is a backup strategy where data is stored in multiple geographic locations.

Question 7

A company uses two different public cloud providers (AWS for their North American operations and Google Cloud for their European operations) to meet data residency requirements and avoid vendor lock-in. Which deployment model does this represent?

Accepted Answer

Multi-cloud. This scenario describes using two distinct public cloud providers (AWS and Google Cloud) to meet data residency and avoid vendor lock-in, which is the definition of a multi-cloud deployment model. Multi-cloud involves using multiple public cloud services from different vendors, as opposed to combining public and private infrastructure (hybrid cloud) or simply deploying across multiple regions within a single provider.

Answer

Hybrid cloud

Answer

Multi-region

Answer

Distributed cloud

Question 8

An organization wants to modernize its on-premises applications. The IT team identifies three types of applications: legacy apps that can only move with significant refactoring, custom-built apps that can be containerized and moved as-is, and applications that can be replaced entirely by SaaS solutions. This categorization approach is called what?

Accepted Answer

Application portfolio assessment using migration strategies (the 6 Rs framework). The scenario describes categorizing applications based on their migration path: legacy apps requiring refactoring, custom apps suitable for containerization, and apps replaceable by SaaS. This directly aligns with the '6 Rs' framework (Rehost, Replatform, Refactor, Repurchase, Retire, Retain) used in application portfolio assessment for cloud migration. Option B is correct because the 6 Rs provide a structured way to evaluate and classify each application's optimal migration strategy.

Answer

Disaster recovery planning

Answer

Capacity planning for on-premises servers

Answer

Software development lifecycle (SDLC) planning

Question 9

Which term describes the model where the cloud provider is responsible for the security of the cloud infrastructure, while the customer is responsible for security within their own cloud environment (data, applications, access management)?

Accepted Answer

Shared responsibility model. The shared responsibility model defines the division of security responsibilities between the cloud provider and the customer. Google secures the physical infrastructure, hardware, hypervisor, and core services. The customer secures what they put in the cloud: data classification, access control, application security, network configuration, and compliance. The boundary between provider and customer responsibility varies by service model (IaaS vs. PaaS vs. SaaS).

Answer

Zero trust security model

Answer

Defense in depth strategy

Answer

Identity federation model

Question 10

A company is planning a cloud migration and wants to understand the difference between 'lift and shift' and 'cloud-native' approaches. Which statement correctly distinguishes these two migration strategies?

Accepted Answer

Lift and shift moves applications to the cloud with minimal changes; cloud-native re-architects applications to leverage cloud-specific features and managed services.. Option B is correct because 'lift and shift' (rehosting) involves moving applications to the cloud with minimal or no changes, often using Infrastructure as a Service (IaaS) to replicate the on-premises environment. In contrast, 'cloud-native' (re-architecting) redesigns applications to use cloud-specific features like auto-scaling, managed databases, and serverless compute, fully leveraging the cloud's elasticity and pay-as-you-go model.

Answer

Lift and shift uses containers; cloud-native uses virtual machines.

Answer

Lift and shift is only possible for new applications; cloud-native is for existing applications.

Answer

Lift and shift costs more long-term; cloud-native costs more short-term due to licensing.

Question 11

What is the key difference between a virtual machine (VM) and a container in terms of how they package and run applications?

Accepted Answer

VMs include a full guest OS; containers share the host OS kernel and contain only the application and its dependencies.. The key difference is that a virtual machine (VM) includes a full guest operating system (OS) running on top of a hypervisor, which virtualizes the underlying hardware. In contrast, a container packages only the application and its dependencies (libraries, binaries, configuration files) and shares the host OS kernel via the container runtime (e.g., Docker, containerd). This makes containers lightweight and faster to start, as they avoid the overhead of a separate OS instance.

Answer

VMs run on physical hardware; containers run in the cloud.

Answer

Containers are less secure than VMs because they share hardware.

Answer

VMs are only for Linux applications; containers support all operating systems.

Question 12

What does 'serverless computing' mean, and what does a developer NOT have to manage when using serverless services?

Accepted Answer

Serverless means developers don't provision or manage servers, OS, or scaling — they only write and deploy code.. Serverless computing is a cloud execution model where the cloud provider dynamically manages the allocation and provisioning of servers. The developer writes and deploys code (functions) without needing to provision, configure, or scale underlying servers, operating systems, or runtime environments. Option B correctly captures this: developers only write and deploy code, while the provider handles infrastructure management.

Answer

Serverless means no code is needed — the cloud provider writes the application logic automatically.

Answer

Serverless computing only works for batch jobs that run overnight.

Answer

Serverless is a type of on-premises architecture where servers are hidden from developers.

Question 13

A company's on-premises applications occasionally need more compute capacity than their own infrastructure can provide (during seasonal peaks). They want to use cloud resources to handle the overflow traffic while keeping base workloads on-premises. Which cloud architectural pattern describes this?

Accepted Answer

Cloud bursting — using cloud capacity to handle overflow when on-premises resources are exhausted.. Option B is correct because cloud bursting is the architectural pattern specifically designed to handle overflow traffic by dynamically provisioning cloud resources when on-premises capacity is exhausted. This allows the company to maintain base workloads on their own infrastructure while seamlessly scaling into the cloud during seasonal peaks, typically using orchestration tools like AWS Auto Scaling or Azure VM Scale Sets to burst into a virtual private cloud (VPC) or virtual network (VNet).

Answer

Cloud migration — moving workloads from on-premises to cloud permanently.

Answer

Multi-cloud — using multiple cloud providers for redundancy.

Answer

Disaster recovery — using cloud as a failover site when on-premises fails.

Question 14

What does 'high availability' mean in the context of cloud services, and how is it typically measured?

Accepted Answer

High availability means a system is operational for a very high percentage of time, typically measured as a percentage (e.g., 99.9% uptime).. High availability (HA) refers to a system's ability to remain operational and accessible for an exceptionally high proportion of time, minimizing downtime. It is typically quantified as a percentage of uptime over a defined period, such as 99.9% ('three nines'), which corresponds to approximately 8.76 hours of downtime per year. This metric is fundamental in cloud service level agreements (SLAs) to guarantee service continuity.

Answer

High availability means a system is fast — it responds to requests in under 100 milliseconds.

Answer

High availability means a system stores data in multiple geographic locations for disaster recovery.

Answer

High availability requires manual intervention to restart failed services within 30 minutes.

Question 15

What is the difference between RTO (Recovery Time Objective) and RPO (Recovery Point Objective) in disaster recovery planning?

Accepted Answer

RTO is the maximum acceptable downtime duration; RPO is the maximum acceptable data loss measured in time.. Option B is correct because RTO (Recovery Time Objective) defines the maximum acceptable duration of downtime after a disaster, while RPO (Recovery Point Objective) defines the maximum acceptable amount of data loss measured in time (e.g., the age of the last backup). These are key metrics in disaster recovery planning that directly influence the choice of backup frequency, replication strategy, and failover architecture in cloud environments like GCDL.

Answer

RTO is the time to back up data; RPO is the time to restore it.

Answer

RTO and RPO are both measured in bytes — the maximum data that can be lost during recovery.

Answer

RTO is the number of replicas required; RPO is the geographic distance between backup sites.

Question 16

A company's monolithic application is difficult to update because any change requires testing and redeploying the entire application, causing multi-hour downtime during updates. The team is considering a microservices architecture. What is the primary benefit of microservices in this context?

Accepted Answer

Each service can be updated and deployed independently, enabling teams to release changes faster with lower risk and without full-application downtime.. Microservices architecture decomposes a monolithic application into small, independently deployable services. Each service can be updated, scaled, and deployed without affecting other services. This eliminates the 'entire-application-redeploy' problem — updating the payment service doesn't require redeploying the catalog or user management services. Cloud platforms support microservices with containers (GKE), serverless functions (Cloud Run), and managed messaging (Pub/Sub) for service communication.

Answer

Microservices always cost less than monolithic applications to run.

Answer

Microservices eliminate the need for testing because each service is small enough to be bug-free.

Answer

Microservices allow applications to run on any hardware without modification.

Question 17

What is horizontal scaling, and how does it differ from vertical scaling?

Accepted Answer

Horizontal scaling adds more instances to distribute load; vertical scaling increases the size of existing instances.. Horizontal scaling (scale-out) adds more instances (e.g., additional virtual machines or containers) to distribute the workload across multiple nodes, improving fault tolerance and capacity. Vertical scaling (scale-up) increases the resources (CPU, RAM, storage) of an existing instance, often hitting hardware limits and requiring downtime. Option B correctly captures this distinction.

Answer

Horizontal scaling adds CPU/memory to existing servers; vertical scaling adds more servers.

Answer

Horizontal scaling is for databases only; vertical scaling is for web servers.

Answer

Horizontal scaling requires application downtime; vertical scaling is always online.

Question 18

What is an API (Application Programming Interface), and why is it fundamental to cloud services and digital transformation?

Accepted Answer

An API is a standardized interface that allows software components to communicate, enabling programmatic access to cloud services and digital ecosystem integration.. Option B is correct because an API is a standardized interface (often RESTful, using HTTP methods like GET, POST, PUT, DELETE) that enables software components to communicate and exchange data. In cloud services, APIs are fundamental because they allow programmatic access to resources (e.g., AWS EC2, Azure VMs) without manual intervention, forming the backbone of automation, orchestration, and integration in digital transformation initiatives.

Answer

An API is a type of database that stores application settings.

Answer

An API is a security protocol that encrypts data between applications.

Answer

APIs are only used by large technology companies and are too complex for small businesses.

Question 19

A company is evaluating whether to use a public cloud (Google Cloud), a private cloud (on-premises VMware), or a managed private cloud (hosted single-tenant environment). Which scenario is the strongest argument for choosing a managed private cloud over a public cloud?

Accepted Answer

The company has regulatory requirements that mandate physically dedicated (single-tenant) infrastructure or strict hardware-level isolation.. Option B is correct because a managed private cloud (hosted single-tenant) provides physically dedicated infrastructure that ensures hardware-level isolation, which is often required by strict regulatory standards such as HIPAA, PCI-DSS, or FedRAMP. Public clouds like Google Cloud typically use multi-tenant architectures where multiple customers share the same physical hardware, which may not satisfy these compliance mandates. The key differentiator is the guarantee of dedicated physical resources, not just logical isolation.

Answer

The company wants to pay less for cloud services.

Answer

The company wants the fastest possible internet speeds for their applications.

Answer

The company has fewer than 10 employees and doesn't need multi-tenant scale.

Question 20

What is DevOps, and how does cloud adoption reinforce DevOps practices?

Accepted Answer

DevOps is a culture of collaboration between development and operations teams, reinforced by cloud's managed CI/CD, infrastructure-as-code, and on-demand environments.. DevOps is a cultural and technical movement that emphasizes collaboration, automation, and integration between software development (Dev) and IT operations (Ops) teams. Cloud adoption reinforces DevOps by providing managed CI/CD services (e.g., AWS CodePipeline, Azure DevOps), infrastructure-as-code tools (e.g., Terraform, AWS CloudFormation), and on-demand environments that enable rapid provisioning, testing, and deployment. This synergy reduces manual overhead and accelerates the software delivery lifecycle.

Answer

DevOps is a specific programming language designed for cloud applications.

Answer

DevOps means developers take over all IT operations responsibilities, eliminating operations teams.

Answer

DevOps is only applicable to software startups — traditional enterprises use ITIL for operations.