CLO-002 · domain
Cloud Concepts
Cloud Concepts covers cloud service and deployment models, shared responsibility, and how workloads connect to and move between environments. Questions present a business or regulatory scenario and ask you to select the architecture, connectivity method, or provider commitment that satisfies it, so you must map requirements like privacy, control, and location to the correct cloud construct.
Focused practice
Practice Cloud Concepts questions
Scored sessions drawing only from this domain — pick a length below.
Start 20-question practice test →What this domain covers
What to know about Cloud Concepts
Be able to translate a scenario's privacy, control, and residency requirements into the right cloud connectivity, service model, and SLA terms. The single most important thing: know when traffic stays private versus crossing the public internet, and who controls encryption keys.
Choosing VPN or dedicated private connectivity to link on-premises networks to a cloud VPC.
Using VPC endpoints to reach provider services privately without traversing the public internet.
Evaluating provider SLAs for availability, support, and remedies before committing to migration.
Applying data residency and customer-managed encryption keys to meet regulatory requirements.
Watch out for
Common Cloud Concepts exam traps
- ▸Assuming a site-to-site VPN is fully private; it still rides the public internet unless dedicated connectivity is used.
- ▸Treating a VPC endpoint as internet-facing when its purpose is private access to services.
- ▸Confusing provider-managed encryption with customer-controlled keys, which changes who holds direct control.
Question index
All Cloud Concepts questions (84)
Click any question to see the full explanation, or start a practice session above.
A media company stores finished video masters in a public cloud object store. Legal requires that each object be retrievable even if a single facility is destroyed, and that any silent data corruption be detectable years later. The storage team wants the provider to handle replication and integrity verification without application changes. Which capability should the team verify is available from the provider?
Hard2A firm is deploying a web application across two different cloud providers to ensure business continuity. What is the most critical challenge they must overcome regarding data consistency?
Hard3You need to store audit logs that are immutable and cannot be deleted for a set period. Which feature should you enable?
Hard4Which THREE factors must be considered when estimating cloud costs?
Hard5What is the benefit of 'measured service' for a business?
Easy6Which technology is primarily used to isolate applications while sharing the same OS kernel?
Medium7A healthcare company must run a patient-portal workload that processes protected health information. The compliance team requires that the cloud provider supply independent audit reports and a contractual commitment for data handling, while the company retains full control of the guest operating system and application stack. Which cloud service model BEST satisfies these requirements?
Medium8A security administrator needs to ensure that all traffic between their on-premises data center and their cloud environment is encrypted and traverses a dedicated, private connection. What should they implement?
Medium9A retail company is planning to adopt a public cloud infrastructure. The IT director wants to understand the financial and operational benefits of the cloud. Which TWO of the following are key benefits of the public cloud model? (Choose two.)
Medium10Which THREE security controls are the responsibility of the cloud user under the Shared Responsibility Model?
Hard11A media company runs a video transcoding workload in a public cloud. The workload is latency-sensitive and must complete within strict deadlines, but the company wants to reduce compute costs during off-peak hours. Which cloud characteristic should the company leverage to meet these requirements?
Medium12What is the benefit of moving from an on-premises data center to a cloud provider?
Easy13What is the primary difference between vertical and horizontal scaling?
Medium14A company needs to store backups for compliance purposes for seven years. Access is rarely required. What is the most cost-effective storage class?
Hard15What does 'Multi-tenancy' in a public cloud mean?
Easy16A logistics company is choosing a deployment model for a new shipment-tracking platform. The platform must integrate tightly with internal warehouse systems that cannot be exposed to the public internet, yet the company wants the scalability and managed services of a public cloud for the customer-facing portal. Which deployment model best satisfies both needs?
Medium17Which cloud principle refers to the ability to pay for only the compute power you consume?
Easy18Which cloud characteristic allows an organization to rapidly increase resources during a spike in traffic and decrease them when traffic drops?
Medium19A retail company wants to run its e-commerce application in the cloud but must ensure that a hardware failure in one data center does not take the storefront offline. The company's architects plan to deploy identical application stacks into multiple isolated locations within the same metropolitan area to achieve low-latency failover. Which cloud construct are they designing around?
Hard20A company is evaluating cloud service providers for a new application. The IT director wants to understand the financial and operational benefits of the cloud's measured service and pay-as-you-go model. Which TWO of the following are direct benefits of these characteristics? (Choose two.)
Medium21A company runs a web application on virtual machines in a public cloud. The application must remain available even if an entire data center loses power. The cloud provider offers regions and availability zones. Which deployment approach should the company use?
Medium22Which cloud service model would a company use if they want to manage their application code and data but leave the OS, runtime, and hardware management to the provider?
Easy23A company is evaluating the business value of moving its on-premises data center to a public cloud. Which TWO of the following are direct cloud economic benefits that the company should expect? (Choose two.)
Medium24Which THREE factors should a cloud architect consider when designing for high availability?
Hard25A healthcare company is migrating its patient records system to a cloud environment. The company must ensure that only authorized users can access the data and that the data is encrypted both at rest and in transit. The cloud provider offers encryption services, but the company wants to control the encryption keys. Which cloud concept best describes the company's need to manage its own encryption keys while using the provider's infrastructure?
Medium26Which cloud networking component allows an instance in a public subnet to communicate with the internet?
Medium27A small marketing agency wants to move its client relationship management (CRM) application to the cloud. The agency has no IT staff and wants to eliminate server maintenance, patching, and database administration. Which cloud service model should the agency choose?
Easy28A small accounting practice wants to move its email and document collaboration to the cloud. The staff has no server administration skills and wants the provider to manage patching, uptime, and the application itself, paying a per-user subscription. Which cloud service model is the practice seeking?
Easy29A small marketing agency wants to move its email and collaboration suite to the cloud. The agency has no IT staff and wants the vendor to manage servers, storage, and the application itself, while users simply log in through a browser. Which cloud service model BEST fits this requirement?
Easy30A company is adopting a public cloud model and wants to ensure its workloads benefit from the core characteristics of cloud computing. The IT director asks which characteristics are essential to the cloud model and should guide the migration. (Choose two.)
Medium31Your organization is experiencing high latency for end-users accessing a global web application. The static assets are currently stored in a single bucket in the US-East region. Which architectural change will most effectively reduce latency for international users?
Hard32An architect is designing a system that must survive a complete data center failure. What should be utilized?
Medium33Which THREE items should be included in a disaster recovery plan?
Hard34What is the purpose of a VPC Endpoint?
Hard35Which cloud characteristic allows a startup to automatically increase their compute resources during a marketing campaign and decrease them afterward without manual intervention?
Easy36An administrator needs to ensure that cloud resources are geographically separated to maintain availability during a regional disaster. Which feature should they configure?
Medium37Which cloud service model is best suited for end-users who want to use software via a browser?
Easy38Which TWO benefits are associated with cloud storage object versioning?
Medium39A financial services firm is migrating a legacy trading application to the cloud. The application requires sub-millisecond latency and cannot tolerate noisy neighbors. The firm also needs to comply with regulations that mandate dedicated physical hardware for certain workloads. Which cloud deployment model should the firm choose?
Hard40A logistics firm is evaluating whether to move its custom routing engine to a public cloud. The CIO wants to understand which characteristics are inherent to the public cloud model rather than benefits the firm must build itself. (Choose two.)
Medium41An administrator needs to securely manage access to cloud resources. Which service should be used to create groups, users, and roles?
Hard42A developer needs a storage solution for high-frequency trading logs that must be instantly accessible for analysis, with high IOPS, and low latency. Which storage type is most appropriate?
Medium43A startup wants to deploy a new web application but has a small operations team with limited expertise in patching operating systems and managing runtime environments. The team is comfortable configuring web server settings and deploying application code. Which cloud service model should they choose to minimize operational overhead while retaining control over the application environment?
Easy44A financial services company is evaluating a public cloud provider. The company must ensure that its data is encrypted at rest and in transit, and that only authorized employees can access it. The provider offers encryption and identity management services. Under the shared responsibility model, which statement is correct?
Medium45A retail company runs its e-commerce platform on a public cloud. During a flash sale, traffic spikes from 500 to 20,000 concurrent users within minutes. The operations team wants the environment to automatically add and remove server instances based on CPU utilization without manual intervention. Which cloud characteristic should they rely on to meet this requirement?
Medium46Which cloud service model provides a platform for developers to deploy applications without managing the underlying infrastructure?
Medium47You are troubleshooting a connectivity issue where an application in a private subnet cannot reach the internet to download updates. Which component is missing?
Hard48A company is migrating a latency-sensitive trading application to the cloud. The application must remain available even if an entire data center suffers a power outage, and it must be able to fail over automatically with minimal downtime. Which deployment approach best meets these requirements?
Hard49A retail company wants to ensure its online store remains available even if an entire cloud region fails. The company is willing to pay for duplicate resources in a second region and wants automatic failover. Which design approach should the company implement?
Medium50Which TWO advantages does a public cloud provide for a small business?
Medium51A retail company runs a legacy inventory application on physical servers in its own data center. The CIO wants to keep the application unchanged but gain cloud elasticity for seasonal peaks, and legal requires that all customer data remain on company-owned hardware. Which cloud deployment consideration does this scenario illustrate?
Medium52A small graphic design firm wants to move its project files to a cloud service so designers can access them from any device. The company has no IT staff and wants to avoid managing servers or installing software locally. Which cloud service model should the firm choose?
Easy53You need to allow temporary access to a file stored in a private bucket for a third party. What is the most secure method?
Hard54A media company runs a video transcoding workload that is idle most of the day but must process large batches quickly when new content arrives. The company wants to minimize cost while accepting that interruptions can occur. Which cloud characteristic or purchasing option should the company use?
Hard55When using an Auto Scaling group, what metric is most commonly used to trigger an increase in server instances?
Medium56A developer needs a serverless environment to run event-driven code. What should they choose?
Medium57A hospital is migrating patient records to a cloud environment. The compliance officer insists that the hospital retain control over encryption keys so that the cloud provider cannot read the data at rest. Which capability should the hospital require from the provider?
Medium58A company is evaluating the financial implications of moving from on-premises infrastructure to a public cloud. The CFO wants to understand which cost factors are typically eliminated or reduced when using a public cloud. (Choose two.)
Medium59A hospital is evaluating whether a cloud-based medical imaging archive meets the essential characteristics of cloud computing as defined by NIST. The vendor claims the archive is cloud-based, but the hospital's auditors want evidence of the defining traits. Which two characteristics must the auditors confirm are present? (Choose two.)
Hard60An organization needs to extend its on-premises data center to a VPC while ensuring private connectivity that avoids the public internet. Which connectivity option is best?
Hard61A healthcare company is designing a new patient portal. Regulatory requirements mandate that patient data must remain within a specific country's borders and that the company must have direct control over the encryption keys used to protect the data at rest. The company wants to use a public cloud provider. Which combination of cloud characteristics and controls should the company implement to meet these requirements?
Medium62A retail company experiences a sudden spike in online orders during a flash sale, causing its on-premises web servers to become overwhelmed and the site to slow down. The company wants to avoid this problem in the future without permanently adding hardware. Which cloud characteristic directly addresses this need?
Medium63A company is planning to migrate its on-premises workloads to a public cloud. The IT director asks which factors are key considerations when evaluating the cloud provider's service level agreement (SLA). (Choose two.)
Medium64An application requires a database that can handle unstructured data and scale horizontally. Which database type is best?
Medium65A company is migrating an on-premises database to a public cloud. The database requires low latency and high IOPS. Which storage type should the architect select?
Medium66A regional accounting firm runs a legacy payroll application on a physical server in its office. The server is aging, and the firm wants to move the application to a cloud provider without modifying the application or its operating system. The firm also wants to keep full administrative control over the OS, patching, and runtime configuration. Which cloud service model best fits these requirements?
Medium67A media company is comparing total cost of ownership for running a video transcoding workload on-premises versus in the public cloud. The finance team wants to identify costs that are characteristic of the cloud consumption model but are often overlooked. Which TWO factors should the team include? (Choose two.)
Hard68A company requires a highly available database that replicates data synchronously across availability zones. Which setting should be chosen?
Medium69A company uses a hybrid cloud. They need to move a database workload to the cloud that has strict regulatory requirements. Which deployment model is most appropriate?
Hard70A retail company is using a public cloud provider. The IT manager wants to understand how the cloud provider's use of shared physical resources affects the company's data. Which cloud characteristic ensures that the provider's other customers cannot access the retail company's data?
Medium71A financial services company is designing a cloud architecture that must remain operational even if an entire cloud provider region becomes unavailable. The company wants to avoid a single point of failure and is willing to accept some additional cost and complexity. Which design approach BEST meets this requirement?
Medium72Which THREE are key characteristics of cloud computing?
Hard73A small marketing agency wants to move its customer relationship management (CRM) system to the cloud. The agency has limited IT staff and wants the provider to manage the operating system, middleware, and runtime, while the agency only manages its custom CRM application and data. Which cloud service model best fits this requirement?
Easy74Which of the following represents a major benefit of cloud computing where resources are shared among multiple customers?
Easy75A software development team is using a cloud-based platform that provides a runtime environment, middleware, and database services. The team can deploy their code without managing the underlying operating system or servers. However, they are responsible for configuring the application and its data. Which cloud service model is the team using?
Medium76A startup wants to give its data scientists on-demand access to GPU-backed virtual machines for experiments. Usage will be sporadic, and the company wants to pay only for the time the machines run. Which cloud characteristic is the company primarily relying on?
Easy77A small marketing agency wants to move its client project files to a cloud storage solution. The agency has unpredictable storage needs, wants to avoid purchasing hardware, and requires access from Windows, macOS, and mobile devices. Which cloud characteristic best describes the agency's ability to provision storage on demand without human intervention from the provider?
Easy78A healthcare company is migrating a patient records system to the cloud. The system must comply with strict data residency regulations that require all patient data to remain within the country. The company also wants to minimize latency for local users. Which cloud deployment model is MOST appropriate?
Hard79Which TWO scenarios are appropriate for using a load balancer?
Medium80A company is moving from a capital expenditure model to an operational expenditure model. What is the primary benefit?
Medium81A startup is looking for a cloud deployment model where they pay only for resources used and share underlying hardware with other tenants. What model is this?
Easy82An application is suffering from high latency for users across the globe. Which service can help cache content closer to the users?
Hard83When evaluating a cloud-based database service, which TWO of the following are key benefits compared to self-managed databases?
Medium84A financial services firm is evaluating a cloud provider for a new analytics platform. The firm's auditors require proof that the provider undergoes independent security assessments and that the firm can review those results before signing. Which cloud concept should the firm examine?
MediumOther domains
All CLO-002 exam domains
Frequently asked questions
- What does the Cloud Concepts domain cover on the CLO-002 exam?
- Be able to translate a scenario's privacy, control, and residency requirements into the right cloud connectivity, service model, and SLA terms. The single most important thing: know when traffic stays private versus crossing the public internet, and who controls encryption keys.
- How many questions are in this domain?
- This page lists all 84 Cloud Concepts questions in the CLO-002 question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
- What is the best way to practise this domain?
- Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
- Can I practise only Cloud Concepts questions?
- Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.