scenario questions

A company is adopting a cloud governance framework to manage risk and compliance. Which TWO of the following are primary objectives of a cloud governance framework? (Choose two.)

A multinational corporation must ensure that customer data stored in its cloud environment remains within the borders of the country where it was collected, in accordance with local data sovereignty laws. Which cloud governance control should the corporation implement?

A business is analyzing the TCO for a cloud migration. Which item is considered a recurring 'OpEx' cost?

A company is conducting a risk assessment and needs to determine the impact of a potential cloud service provider outage. Which document provides the provider's commitment to uptime?

A media company stores finished video masters in a public cloud object store. Legal requires that each object be retrievable even if a single facility is destroyed, and that any silent data corruption be detectable years later. The storage team wants the provider to handle replication and integrity verification without application changes. Which capability should the team verify is available from the provider?

A firm is deploying a web application across two different cloud providers to ensure business continuity. What is the most critical challenge they must overcome regarding data consistency?

You need to store audit logs that are immutable and cannot be deleted for a set period. Which feature should you enable?

A firm wants to avoid over-provisioning infrastructure. What feature should they enable to adjust resource counts based on demand?

Which TWO items represent 'Cloud-native' architectural practices?

A security engineer is setting up a Web Application Firewall (WAF) to protect a public-facing application. Which feature is most effective against common SQL injection attacks?

A cloud engineer needs to deploy a set of resources on Microsoft Azure in a repeatable and consistent manner. The engineer wants to define the infrastructure as code and be able to deploy it multiple times without manual intervention. Which Azure service should the engineer use?

Which THREE factors must be considered when estimating cloud costs?

A company is using a cloud provider's infrastructure as a service (IaaS) offering. The security team must ensure that the operating system and applications on the virtual machines are patched and configured securely. According to the shared responsibility model, which party is responsible for these tasks?

What is the benefit of 'measured service' for a business?

Which cloud computing concept best describes the ability to add and remove resources based on traffic demands to maintain performance?

A company requires that all cloud logs be retained for seven years for legal compliance. Which service should they configure to ensure logs are moved to the cheapest storage class long-term?

Which technology is primarily used to isolate applications while sharing the same OS kernel?

An auditor requests evidence that an organization is managing cloud risks. Which document should the IT team provide as the primary evidence of risk mitigation strategies?

A healthcare organization stores electronic protected health information (ePHI) in a public cloud. An internal audit finds that a developer copied a production database snapshot to a personal cloud storage bucket to test a reporting script. The organization must demonstrate to auditors that such data handling is prevented and detectable going forward. Which control should be implemented FIRST to directly address this governance and compliance gap?

A healthcare company must run a patient-portal workload that processes protected health information. The compliance team requires that the cloud provider supply independent audit reports and a contractual commitment for data handling, while the company retains full control of the guest operating system and application stack. Which cloud service model BEST satisfies these requirements?

A company needs to store static website assets such as images and CSS files cheaply. Which service is appropriate?

What is the primary difference between a 'Reserved Instance' and a 'Spot Instance'?

To ensure that no single administrator has full control over the environment, which security practice should be implemented?

What is the primary advantage of 'High Availability' in cloud architecture?

A security administrator needs to ensure that all traffic between their on-premises data center and their cloud environment is encrypted and traverses a dedicated, private connection. What should they implement?

A retail company is migrating its order-processing application to the cloud. The application experiences unpredictable traffic spikes during flash sales, and the finance team wants to avoid paying for idle capacity. The IT manager proposes a cloud deployment model where the provider manages the infrastructure and the company pays only for what it consumes. Which cloud characteristic best describes this financial benefit?

A retail company is planning to adopt a public cloud infrastructure. The IT director wants to understand the financial and operational benefits of the cloud. Which TWO of the following are key benefits of the public cloud model? (Choose two.)

Which THREE security controls are the responsibility of the cloud user under the Shared Responsibility Model?

When evaluating cloud providers, what is the significance of the 'Region' concept?

Which document is essential for cloud vendor selection and outlines specific performance, security, and financial requirements?

Which THREE factors influence cloud resource scalability decisions?

Which THREE cloud service models require different levels of operational management from the customer?

Which TWO of the following are benefits of using tags on cloud resources?

A media company runs a video transcoding workload in a public cloud. The workload is latency-sensitive and must complete within strict deadlines, but the company wants to reduce compute costs during off-peak hours. Which cloud characteristic should the company leverage to meet these requirements?

Which of the following is an example of 'Infrastructure as Code'?

What is the benefit of moving from an on-premises data center to a cloud provider?

A financial services company is migrating to a public cloud. The compliance team requires that all data stored in the cloud be encrypted with keys that the company controls and can revoke at any time. Which key management approach should they implement?

What is the primary difference between vertical and horizontal scaling?

Which THREE items should be included in an incident response plan?

Your team needs to share a large, sensitive file with an external partner. What is the secure way to share this file in the cloud?

A company needs to store backups for compliance purposes for seven years. Access is rarely required. What is the most cost-effective storage class?

A healthcare company is migrating patient records to a public cloud. The compliance team requires that all data stored in the cloud be encrypted with keys that the company generates and controls, and that the cloud provider cannot access these keys. Which cloud service model should the company implement?

A financial services firm runs a regulated workload in a public cloud. Compliance requires that data at rest be encrypted with keys the firm controls and can rotate independently of the provider, and that an audit trail record every key usage. The firm wants to minimize operational overhead while retaining exclusive control of key material. Which approach best satisfies these requirements?

To meet compliance requirements, a firm must store log files for seven years in a read-only state. Which storage configuration provides this level of immutability?

A cloud engineer is configuring a lifecycle policy for an object storage bucket that holds compliance audit logs. Regulations require that logs be retained for seven years and that they cannot be altered or deleted during that period. Which combination of lifecycle actions should the engineer implement?

A small marketing agency is considering moving its customer relationship management (CRM) system to the cloud. The agency has a limited IT staff and wants to minimize upfront capital expenditure. The owner asks which cloud service model would allow the agency to use the CRM software without managing the underlying operating system, middleware, or runtime. Which model should be recommended?

What does 'Multi-tenancy' in a public cloud mean?

Which strategy minimizes 'vendor lock-in' when designing a cloud-native architecture?

A security audit requires that all database queries be logged and stored securely. Which feature should be enabled to meet this requirement in a relational database service?

A logistics company is choosing a deployment model for a new shipment-tracking platform. The platform must integrate tightly with internal warehouse systems that cannot be exposed to the public internet, yet the company wants the scalability and managed services of a public cloud for the customer-facing portal. Which deployment model best satisfies both needs?

A small business is adopting a public cloud for the first time. The owner wants to ensure that the cloud provider's security responsibilities are clearly understood and that the business knows what it must secure. Which document should the business review to understand the division of security responsibilities between the provider and the customer?

A multinational corporation is evaluating the total cost of ownership (TCO) for migrating its legacy on-premises applications to a public cloud. The finance team wants to identify which costs are typically eliminated or reduced when moving to the cloud. (Choose two.)

A healthcare organization is evaluating cloud deployment models for a new patient portal that must comply with HIPAA. The organization wants to share the infrastructure with other healthcare providers to reduce costs while ensuring strict security and compliance. Which cloud deployment model BEST meets these requirements?

An IT team is conducting a cost-benefit analysis. Which THREE of the following are considered 'hidden' or 'indirect' costs that must be accounted for when moving to the cloud?

Which cloud principle refers to the ability to pay for only the compute power you consume?

Which cloud characteristic allows an organization to rapidly increase resources during a spike in traffic and decrease them when traffic drops?

A financial services firm is migrating its customer relationship management (CRM) system to a public cloud. The CIO wants to ensure the migration aligns with the firm's risk appetite and regulatory obligations. Which action best demonstrates that the firm is applying proper cloud risk management?

Which cloud architectural practice helps minimize the impact of a total regional outage?

When performing a TCO analysis for migrating a legacy on-premises database to Azure SQL, which hidden cost is most likely to be overlooked?

A small business wants to move its customer relationship management system to a public cloud provider. The IT manager is concerned about the provider's ability to guarantee a specific level of uptime and to define remedies if that level is not met. Which document should the manager review to find the committed uptime percentage and any service credits?

A retail company wants to run its e-commerce application in the cloud but must ensure that a hardware failure in one data center does not take the storefront offline. The company's architects plan to deploy identical application stacks into multiple isolated locations within the same metropolitan area to achieve low-latency failover. Which cloud construct are they designing around?

A security analyst notices unauthorized changes to cloud infrastructure. Which service should be analyzed to identify which IAM user made the changes?

A financial services firm is planning to migrate its trading platform to the cloud. The CIO wants to ensure that the cloud environment can automatically adjust resources to handle sudden increases in trading volume without manual intervention, while maintaining performance. Which cloud characteristic is most critical to meet this requirement?

When conducting a cloud readiness assessment, what is the most important stakeholder to involve early in the process?

A company is comparing two cloud providers. Which contractual document should be reviewed to understand uptime guarantees and service credits?

A project manager is calculating the cloud adoption strategy using a 'Re-platform' approach. What is the expected outcome?

A developer needs to monitor real-time CPU utilization across a fleet of virtual machines in Azure. Which service should be used to capture and visualize these metrics?

Which THREE of the following are effective methods for mitigating risks associated with cloud adoption?

After a security incident, it is discovered that a S3 bucket was publicly accessible. Which feature should be used to prevent this from happening in the future?

A financial services company runs a regulated workload on a public cloud. The compliance team requires that all data stored in object storage be encrypted at rest using keys that the company generates and controls, and that key usage be independently auditable. The cloud provider's default encryption uses provider-managed keys. Which action should the cloud operations team take?

An organization is migrating to a public cloud but has a small amount of highly sensitive data that cannot reside in a public environment. Which strategy should they use?

A media company stores years of video assets in a public cloud object storage bucket. Auditors require that no object can be deleted or overwritten for seven years, even by a user with full administrative rights, to satisfy a regulatory retention rule. Which capability should the company implement?

A company is evaluating cloud service providers for a new application. The IT director wants to understand the financial and operational benefits of the cloud's measured service and pay-as-you-go model. Which TWO of the following are direct benefits of these characteristics? (Choose two.)

A company runs a web application on virtual machines in a public cloud. The application must remain available even if an entire data center loses power. The cloud provider offers regions and availability zones. Which deployment approach should the company use?

A regional healthcare provider is planning its first cloud migration. The CFO wants to understand how operational expenses will change after workloads move to a public cloud. Which statement accurately describes the financial shift the provider should expect?

Which cloud service model would a company use if they want to manage their application code and data but leave the OS, runtime, and hardware management to the provider?

A company is evaluating the business value of moving its on-premises data center to a public cloud. Which TWO of the following are direct cloud economic benefits that the company should expect? (Choose two.)

A company is moving from a 'Buy' to a 'Rent' model for software. Which model are they adopting?

Which TWO components are essential for a robust cloud disaster recovery plan?

Which THREE of the following are cloud security best practices?

Which TWO of the following are benefits of using a Content Delivery Network (CDN)?

Which THREE factors should a cloud architect consider when designing for high availability?

Which THREE of the following are characteristics of a 'Defense in Depth' security strategy?

An organization is subject to GDPR and needs to ensure that personal data stored in an Azure SQL Database is protected against unauthorized access. Which feature should be enabled to identify potential vulnerabilities and anomalies?

A company runs a production workload on Azure Kubernetes Service (AKS). The operations team must reduce the blast radius of a node failure and ensure that pod disruption budgets are respected during voluntary disruptions. Which two actions should the team take? (Choose two.)

A retailer's cloud architect is designing a strategy to avoid vendor lock-in for a containerized order-processing application. The application must be able to move between Amazon Elastic Kubernetes Service and Azure Kubernetes Service with minimal rework. Which approach best supports this goal?

An organization's security team wants to detect and respond to suspicious activities in its cloud environment, such as unusual API calls or unauthorized configuration changes. Which cloud-native capability should the team use to meet this requirement?

A mid-sized insurance company is planning to migrate its on-premises policy administration system to a public cloud. The CFO is concerned about the total cost of ownership (TCO) and asks the cloud team to identify which cost element is typically eliminated when moving to the cloud. Which of the following is MOST likely to be eliminated?

An enterprise is planning a multi-cloud strategy. What is the primary management risk associated with this approach?

A large enterprise is transitioning to a hybrid cloud architecture. The CIO mandates that the cloud adoption strategy must minimize vendor lock-in. Which architectural approach best achieves this requirement?

Which cloud operation task is primarily responsible for ensuring that the cloud environment adheres to corporate security and regulatory standards?

A company is implementing a 'Cloud-First' strategy. During the migration assessment, they identify that several applications require low-latency communication with on-premises legacy systems. Which cloud deployment model should they select?

A firm wants to ensure its cloud spend is aligned with specific business units. Which feature should they implement?

Which TWO of the following are common cloud monitoring tasks?

Which document is essential to review to understand the scope and limitations of a cloud provider's commitment to service uptime?

A multinational corporation must comply with GDPR, which requires that personal data of EU citizens not be transferred outside the EU without adequate safeguards. The company is using a cloud provider with data centers worldwide. Which cloud feature should they use to ensure compliance?

An enterprise is deploying a hybrid cloud model and must ensure that data moving between the on-premises data center and the cloud provider is encrypted. Which mechanism is most appropriate?

A startup is migrating its on-premises PostgreSQL database to Microsoft Azure. The team wants to minimize administrative overhead for patching, backups, and high availability while retaining control over database schema and query tuning. Which Azure service best fits these requirements?

A firm must perform a third-party security audit. What type of document should they obtain from the cloud provider to prove compliance with ISO 27001?

A healthcare organization is migrating patient records to a public cloud. The security team must ensure that only authorized applications can access the storage buckets containing this data, and that access is logged for audit purposes. Which combination of AWS features should they implement to meet these requirements?

What is the primary benefit of 'Elasticity' for an e-commerce company during a major sale?

A healthcare company is migrating its patient records system to a cloud environment. The company must ensure that only authorized users can access the data and that the data is encrypted both at rest and in transit. The cloud provider offers encryption services, but the company wants to control the encryption keys. Which cloud concept best describes the company's need to manage its own encryption keys while using the provider's infrastructure?

Which cloud networking component allows an instance in a public subnet to communicate with the internet?

A small marketing agency wants to move its client relationship management (CRM) application to the cloud. The agency has no IT staff and wants to eliminate server maintenance, patching, and database administration. Which cloud service model should the agency choose?

A small accounting practice wants to move its email and document collaboration to the cloud. The staff has no server administration skills and wants the provider to manage patching, uptime, and the application itself, paying a per-user subscription. Which cloud service model is the practice seeking?

A cloud operations team is preparing to migrate a business-critical workload to a public cloud provider. Leadership wants assurance that the provider's internal controls, security posture, and compliance status have been independently validated. Which TWO artifacts should the team request from the cloud provider to satisfy this due diligence? (Choose two.)

A cloud architect is designing a solution that must provide a recovery point objective (RPO) of 15 minutes and a recovery time objective (RTO) of 2 hours for a critical database. The database currently runs on a single virtual machine with nightly backups. Which change should the architect implement to meet these objectives?

A small marketing agency wants to move its email and collaboration suite to the cloud. The agency has no IT staff and wants the vendor to manage servers, storage, and the application itself, while users simply log in through a browser. Which cloud service model BEST fits this requirement?

Which TWO business benefits are primarily driven by cloud computing's 'Agility'?

A company is adopting a public cloud model and wants to ensure its workloads benefit from the core characteristics of cloud computing. The IT director asks which characteristics are essential to the cloud model and should guide the migration. (Choose two.)

A database is experiencing high I/O wait times. Which resource change is most appropriate?

A company is evaluating the financial implications of moving its on-premises data center to the cloud. The CFO wants to understand which costs are typically considered operational expenditures (OpEx) in a cloud model rather than capital expenditures (CapEx). (Choose two.)

A multinational corporation is deploying a multi-cloud strategy with workloads on two different cloud providers. The security team must ensure that identity and access management (IAM) policies are consistently enforced across both environments, and that a single compromise of one cloud's credentials does not grant access to the other. Which solution BEST addresses these requirements?

Which TWO of the following are essential components of a Cloud Security Policy?

When following the Shared Responsibility Model, which security aspect is the customer's responsibility in an IaaS environment?

Your organization is experiencing high latency for end-users accessing a global web application. The static assets are currently stored in a single bucket in the US-East region. Which architectural change will most effectively reduce latency for international users?

A company is adopting a multi-cloud strategy and needs to implement identity and access management (IAM) consistently across AWS, Azure, and Google Cloud. The security team wants to centralize user authentication and authorization to reduce administrative overhead and enforce uniform security policies. Which two approaches should they use to achieve centralized IAM across multiple clouds? (Choose two.)

A multinational corporation is planning a cloud migration and needs to ensure that its data remains within specific geographic boundaries for legal compliance. The company operates in the EU and must comply with GDPR, which requires that personal data of EU citizens be stored within the EU. Which cloud concept should the company prioritize when selecting a provider?

A financial services company is moving its transaction processing system to a public cloud. The compliance team requires that the cloud provider's security controls are independently validated, and that the company can continuously monitor the compliance status of its cloud resources. Which two actions should the company take to meet these requirements? (Choose two.)

A cloud operations team is preparing to migrate a legacy three-tier application to a public cloud. The team must ensure the new environment supports operational visibility and controlled change management after cutover. Which two actions should the team take? (Choose two.)

An architect is designing a system that must survive a complete data center failure. What should be utilized?

When evaluating a cloud service provider (CSP), which TWO of the following business-focused documentation should be requested to verify the vendor's reliability and security posture?

A cloud administrator is implementing a backup strategy for an Amazon RDS for MySQL database. The administrator must ensure point-in-time recovery and long-term retention beyond the maximum automated backup window. Which TWO actions should the administrator take? (Choose two.)

Which THREE regulatory or compliance frameworks might an enterprise need to audit a cloud provider for?

A healthcare organization stores electronic protected health information (ePHI) in a public cloud. The security team wants to continuously verify that the cloud provider's controls meet HIPAA requirements without conducting a new audit each quarter. Which action should the team take?

To comply with data sovereignty laws, a database must remain within a specific country's borders. Which architectural strategy ensures this?

Which THREE items are considered part of cloud resource maintenance?

A retail company is moving its customer relationship management (CRM) system to a public cloud provider under a shared responsibility model. The company's legal team needs to understand which compliance-related responsibility remains with the company rather than the cloud provider. Which of the following is the company's responsibility?

Which THREE items should be included in a disaster recovery plan?

A cloud operations team is reviewing its security posture for a newly deployed web application in a public cloud. The team must implement measures to protect the application from common web-based attacks and ensure compliance with the Payment Card Industry Data Security Standard (PCI DSS). Which TWO of the following are the MOST appropriate security controls to implement? (Choose two.)

An company is performing a cloud migration. What is the primary purpose of a 'Cloud Center of Excellence' (CCoE)?

An administrator needs to ensure that only authorized traffic enters a private subnet. Which network component should be configured as a first line of defense?

An administrator needs to implement a centralized logging solution for multiple cloud accounts. Which service allows for aggregating security logs into a single security account?

A retail company is evaluating a move to cloud-based analytics. The CFO asks the cloud team to quantify the benefit of avoiding a large upfront data-center expansion. Which financial metric best captures this specific advantage?

A financial services firm is using a public cloud provider. An auditor requests evidence that the provider's physical data centers have adequate controls for access, environmental monitoring, and power redundancy. Which document should the firm provide to the auditor?

Which THREE actions are best practices for securing a cloud virtual machine?

A healthcare company is migrating its patient portal to a public cloud. The compliance team requires that the cloud provider's data centers be independently audited against SOC 2 Type II and ISO 27001. Which action should the company take FIRST to meet this requirement?

What is the purpose of a VPC Endpoint?

Which cloud characteristic allows a startup to automatically increase their compute resources during a marketing campaign and decrease them afterward without manual intervention?

A retail company wants to adopt cloud services but is concerned about unpredictable monthly bills. They need a financial model where they pay only for the resources consumed, with no upfront commitment. Which cloud billing model should they choose?

An administrator needs to ensure that cloud resources are geographically separated to maintain availability during a regional disaster. Which feature should they configure?

You have a fleet of instances that need to automatically update their software patches. What is the best cloud-native approach to manage this?

A cloud operations team wants to receive alerts before their monthly cloud spend exceeds the approved budget for the production subscription. They already use Azure Cost Management and want an automated notification when actual or forecasted costs cross a defined threshold. What should they configure?

You notice that the latency of your web application is increasing. You have determined the database is the bottleneck. What is the most effective way to improve read performance?

Which cloud service model is best suited for end-users who want to use software via a browser?

A retail company wants to forecast monthly cloud expenses for a new e-commerce platform. The finance team needs to distinguish costs that scale directly with customer traffic from fixed monthly fees. Which cloud billing concept should they use to categorize these costs?

Which THREE of the following are valid reasons for establishing a Cloud Center of Excellence (CCoE)?

A retail company plans to migrate its e-commerce platform to AWS. The CFO wants to understand the total cost of ownership (TCO) for the first three years. The IT team provides estimates for compute, storage, and network costs but omits the cost of retraining staff and potential downtime during migration. Which additional cost category should be included to make the TCO analysis more accurate?

A cloud architect needs to ensure that all cloud resources are tagged with an 'Owner' and 'Environment' tag for governance. Which service helps automate the detection and remediation of non-compliant resources?

Which TWO benefits are associated with cloud storage object versioning?

A system administrator needs to automatically replace unhealthy EC2 instances in an AWS Auto Scaling group. Which component must be configured?

An organization is calculating the cost of cloud vs. on-premises. What is the benefit of 'economies of scale' provided by the cloud vendor?

A small business is considering moving its email and file sharing to a cloud-based productivity suite. The owner is concerned about vendor lock-in and wants to understand the exit strategy. Which factor is most important to evaluate before signing the contract?

A retail company is preparing a business case for migrating its e-commerce platform to a public cloud. The CFO is concerned about unpredictable monthly costs and wants to ensure the company can plan its budget effectively. The IT team has analyzed the workload and determined that usage is steady and predictable, with minimal seasonal spikes. Which cloud pricing model should the team recommend to address the CFO's concern?

A financial services firm runs a payment API on Amazon EC2 instances behind an Application Load Balancer. The security team mandates that all incoming traffic be inspected for SQL injection and cross-site scripting before reaching the application, without modifying the application code. Which AWS service should the cloud operations team implement to meet this requirement?

A company is deploying a new web application on AWS. The security team requires that all data stored in Amazon S3 be encrypted at rest. The operations team wants to minimize management overhead while ensuring compliance. Which S3 encryption option should they choose?

A firm needs to ensure they pay only for the compute cycles used by their batch processing job. Which pricing model is most cost-effective?

When a data breach occurs in a cloud environment, who is responsible for notifying the regulatory authorities?

An organization is conducting a cost-benefit analysis for moving data storage to the cloud. They find that the cloud provider offers a 'Tiered Storage' model. What is the primary business benefit of this feature?

An IT manager is reviewing the monthly cloud invoice and notices high costs associated with 'Egress'. What does this cost component represent in a business context?

A small marketing firm wants to verify that a cloud provider's security controls are independently validated before signing a contract. The firm's auditor requests evidence that the provider has undergone an independent examination of its controls relevant to security, availability, and confidentiality. Which of the following should the firm request from the provider?

Which THREE of the following are common benefits of adopting a Cloud Governance framework?

A financial services firm is migrating a legacy trading application to the cloud. The application requires sub-millisecond latency and cannot tolerate noisy neighbors. The firm also needs to comply with regulations that mandate dedicated physical hardware for certain workloads. Which cloud deployment model should the firm choose?

A company is migrating its customer relationship management (CRM) system to the cloud. The CIO wants to ensure that the cloud provider's security controls meet the company's compliance requirements. Which document should the company request from the cloud provider to verify compliance?

A project manager is reviewing cloud resource usage to ensure compliance with a budget governance policy. Which cloud service dashboard provides the most direct view of current resource costs and budget alerts?

Which THREE of the following tools or methods are used to secure data in transit in the cloud?

A cloud operations team is implementing a governance strategy to manage risk across multiple business units using different public cloud providers. The governance board wants to establish controls that provide centralized visibility and consistent policy enforcement. Which two of the following should the team implement? (Choose two.)

Which THREE types of costs should be included in a thorough TCO analysis for cloud migration?

Which TWO of the following are key considerations for cloud operational compliance?

An organization is migrating to the cloud and decides to use 'Reserved Instances'. What is the main business benefit?

You are tasked with automating a script that runs every night at 2 AM to clean up temporary files. Which service is most appropriate for triggering this task?

A healthcare organization stores electronic protected health information (ePHI) in a public cloud. The security team must ensure that only authorized users can access the data and that all access is logged for audit purposes. Which cloud security control should be implemented to meet these requirements?

A logistics firm is evaluating whether to move its custom routing engine to a public cloud. The CIO wants to understand which characteristics are inherent to the public cloud model rather than benefits the firm must build itself. (Choose two.)

Which TWO of the following are key responsibilities of a Cloud Governance Committee?

An administrator needs to securely manage access to cloud resources. Which service should be used to create groups, users, and roles?

A business is analyzing cloud provider pricing. What is 'Metering' in this context?

Which TWO factors should be considered when conducting a cost-benefit analysis for cloud adoption?

A developer needs a storage solution for high-frequency trading logs that must be instantly accessible for analysis, with high IOPS, and low latency. Which storage type is most appropriate?

A retail company is comparing the total cost of running its e-commerce platform on-premises versus on a public cloud. The finance team wants to ensure the comparison includes costs that are often overlooked when only hardware and software license fees are considered. Which cost category should be added to make the comparison accurate?

A healthcare organization is evaluating a move to the cloud for its electronic health record (EHR) system. The CIO is concerned about regulatory compliance, data sovereignty, and the ability to audit provider operations. The organization must ensure that the cloud provider meets strict healthcare regulations. Which two factors should be prioritized during the provider evaluation? (Choose two.)

A media company stores millions of video files in a public cloud object storage bucket. Legal hold requirements mandate that specific files be retained for seven years and that no user, including administrators, can delete or overwrite them during that period. The company wants to enforce this at the storage layer without relying on application logic. Which capability should be implemented?

A company requires a private cloud solution for strict regulatory data isolation. Which deployment model should they choose?

A financial services firm is preparing to move a regulated workload to a public cloud. The compliance officer requires evidence that the provider's controls are independently assessed and that the firm can retrieve its data in a usable format if it leaves the provider. Which TWO provider artifacts should the firm obtain? (Choose two.)

A healthcare startup stores patient records in a public cloud. The security team wants to ensure that data cannot be read if the underlying storage media is physically stolen from the provider's data center. Which control should they verify is enabled?

A university's research department wants to store and analyze sensitive genomic data. The data must remain on infrastructure dedicated to a specific group of accredited universities that share common compliance requirements. Which cloud deployment model best fits this need?

A logistics company runs its dispatch platform in a public cloud. Management asks the cloud team to identify the factor that most directly determines whether the company can move that platform to a different cloud provider later. Which consideration should the team evaluate first?

A startup wants to reduce the risk of losing data stored in a cloud object storage bucket. The team needs a governance control that protects against accidental deletion by an authorized user. Which action should the team take?

A startup wants to deploy a new web application but has a small operations team with limited expertise in patching operating systems and managing runtime environments. The team is comfortable configuring web server settings and deploying application code. Which cloud service model should they choose to minimize operational overhead while retaining control over the application environment?

A startup deploys a web application on a public cloud. The operations team wants to be notified automatically when average CPU utilization on the application servers exceeds 80 percent for five consecutive minutes, without manually checking dashboards. Which capability should the team configure?

A compliance officer needs to generate a report showing all instances that are not compliant with a standard CIS benchmark. Which service should be used?

Which TWO of the following are common cloud deployment patterns?

A financial services company is evaluating a public cloud provider. The company must ensure that its data is encrypted at rest and in transit, and that only authorized employees can access it. The provider offers encryption and identity management services. Under the shared responsibility model, which statement is correct?

A company is preparing a change management process for its cloud environment. The operations lead wants to ensure that changes to production workloads are traceable, reversible, and reviewed before deployment. Which TWO practices best support these goals? (Choose two.)

A multinational corporation is evaluating cloud vendors for compliance with international data residency laws. Which selection criterion is most critical to ensure legal compliance during vendor selection?

A retail company runs its e-commerce platform on a public cloud. During a flash sale, traffic spikes from 500 to 20,000 concurrent users within minutes. The operations team wants the environment to automatically add and remove server instances based on CPU utilization without manual intervention. Which cloud characteristic should they rely on to meet this requirement?

An organization is evaluating cloud providers based on 'Shared Responsibility Model' documentation. What does the cloud provider typically remain responsible for?

To ensure that all virtual machines in a cloud environment comply with corporate security standards (e.g., specific OS versions), which tool should be used to enforce configuration policies automatically?

A cloud operations team needs to ensure that the production environment can be rebuilt identically after a region-wide failure. The team already stores nightly database backups in an object storage bucket in a second region. Which additional artifact is MOST critical to include in the recovery plan to guarantee the application tier can be redeployed consistently?

Which THREE of the following are primary business drivers for adopting a cloud computing model?

A cloud governance team is drafting controls to reduce the risk of misconfiguration in a multi-account environment. Which two practices best support continuous compliance monitoring? (Choose two.)

Which cloud service model provides a platform for developers to deploy applications without managing the underlying infrastructure?

A healthcare organization is migrating patient records to a public cloud. The compliance officer insists that data must remain within the country and that the provider must undergo regular independent audits. Which cloud characteristic should the organization verify FIRST to meet these requirements?

You are troubleshooting a connectivity issue where an application in a private subnet cannot reach the internet to download updates. Which component is missing?

A developer needs to update a database schema without losing any existing data. Which concept is essential for this operational task?

A company is migrating a latency-sensitive trading application to the cloud. The application must remain available even if an entire data center suffers a power outage, and it must be able to fail over automatically with minimal downtime. Which deployment approach best meets these requirements?

A retail company wants to ensure its online store remains available even if an entire cloud region fails. The company is willing to pay for duplicate resources in a second region and wants automatic failover. Which design approach should the company implement?

Which protocol is most commonly used for secure, encrypted remote management of Linux-based virtual machines in the cloud?

A healthcare company is evaluating a move to cloud-based collaboration tools. The IT director must present a business case that addresses both financial and non-financial factors. Which two factors should be included in the business case to demonstrate the full value of the migration? (Choose two.)

A company is deploying a new cloud-native application that must comply with GDPR. The application will process personal data of EU citizens. Which cloud governance practice is most important to implement to ensure data protection and privacy?

An organization wants to implement an Identity Provider (IdP) to allow employees to use their corporate credentials for cloud logins. Which protocol is typically used for this purpose?

A cloud engineer is designing a solution on Microsoft Azure that must distribute incoming HTTP traffic across a set of virtual machines in a single region, provide URL-based routing, and support TLS termination. Which Azure service should the engineer use?

Which TWO advantages does a public cloud provide for a small business?

A financial services firm is migrating its on-premises data warehouse to a cloud provider. The firm must comply with regulations that require data to remain within the country. The cloud provider offers multiple regions and availability zones. Which of the following should the firm implement to meet the regulatory requirement while ensuring high availability?

A retail company runs a legacy inventory application on physical servers in its own data center. The CIO wants to keep the application unchanged but gain cloud elasticity for seasonal peaks, and legal requires that all customer data remain on company-owned hardware. Which cloud deployment consideration does this scenario illustrate?

A company runs a stateless web application on a fleet of cloud virtual machines behind a load balancer in a single region. The operations team wants to survive the loss of an entire availability zone with minimal manual intervention, while keeping the recovery time objective as low as possible. Which approach best meets these requirements?

A retail company wants to move its customer-facing web application to the public cloud. The CIO is concerned about unpredictable monthly costs and wants to ensure the finance team can forecast expenses accurately. The application experiences steady traffic during business hours but spikes during seasonal sales. Which cloud pricing model should the company adopt to best balance cost predictability and scalability?

A small graphic design firm wants to move its project files to a cloud service so designers can access them from any device. The company has no IT staff and wants to avoid managing servers or installing software locally. Which cloud service model should the firm choose?

You need to allow temporary access to a file stored in a private bucket for a third party. What is the most secure method?

Which TWO financial models are typical for cloud resource billing?

A media company runs a video transcoding workload that is idle most of the day but must process large batches quickly when new content arrives. The company wants to minimize cost while accepting that interruptions can occur. Which cloud characteristic or purchasing option should the company use?

Which TWO factors contribute to the risk of 'Vendor Lock-in'?

When using an Auto Scaling group, what metric is most commonly used to trigger an increase in server instances?

A developer needs a serverless environment to run event-driven code. What should they choose?

A company wants to ensure that its cloud resources are tagged correctly for cost allocation and compliance. Which cloud governance practice should they implement to enforce tagging standards?

A financial services company is using a public cloud to host a web application. The security team wants to ensure that all data stored in the cloud is encrypted at rest using keys that the company controls and can rotate independently. Which cloud service or feature should they implement to meet this requirement?

A healthcare organization is migrating its patient records system to the cloud. The system stores protected health information (PHI) and must comply with HIPAA regulations. The organization's legal team is concerned about data sovereignty and wants to ensure that data remains within the United States. Which cloud characteristic should the organization verify with the cloud provider to address this concern?

You are designing a high-availability architecture. Which configuration ensures that your application is resilient to the failure of an entire physical data center?

A financial services firm is evaluating a move to Microsoft Azure. The CIO is concerned about vendor lock-in and wants to ensure the ability to move workloads between cloud providers in the future. Which factor should be prioritized in the cloud strategy to mitigate lock-in?

A media streaming company wants to reduce the risk of a single cloud provider outage taking its service offline. Leadership proposes running the primary platform with one provider and a warm standby with a second provider. Which business consideration most directly justifies the added complexity and cost of this arrangement?

A national retailer is building a business case for migrating its e-commerce platform to a public cloud. The finance team wants the analysis to capture the full economic picture across the entire lifecycle. Which TWO cost categories must be included in a complete total cost of ownership (TCO) comparison? (Choose two.)

A hospital is migrating patient records to a cloud environment. The compliance officer insists that the hospital retain control over encryption keys so that the cloud provider cannot read the data at rest. Which capability should the hospital require from the provider?

Which THREE items are generally included in a cloud provider's 'Service Level Agreement' (SLA)?

A company is evaluating the risk of moving to the cloud. Which business driver is most relevant to 'Agility' in a cloud adoption context?

Which TWO of the following are benefits of using Infrastructure as Code (IaC) for compliance?

A company is assessing the business value of migrating its legacy order-processing system to the cloud. The system is critical and has frequent code changes. Which cloud characteristic directly supports faster deployment of new features?

A company is evaluating the financial implications of moving from on-premises infrastructure to a public cloud. The CFO wants to understand which cost factors are typically eliminated or reduced when using a public cloud. (Choose two.)

You have a microservices architecture. How can you effectively manage the deployment of configuration changes across hundreds of containers without manual intervention?

You are notified that an unused storage volume is incurring costs. What is the standard operational procedure to stop these charges?

Which metric should you monitor to determine if your application's load balancer is struggling with concurrent user connections?

Which THREE services are typically involved in cloud infrastructure automation?

A healthcare company is migrating its electronic health records (EHR) system to the cloud. The company must ensure compliance with HIPAA regulations. Which of the following is the primary responsibility of the company under the shared responsibility model when using an IaaS cloud provider?

Your organization uses a 'Shared Responsibility Model'. Which of the following is typically the customer's responsibility in the cloud?

A hospital is evaluating whether a cloud-based medical imaging archive meets the essential characteristics of cloud computing as defined by NIST. The vendor claims the archive is cloud-based, but the hospital's auditors want evidence of the defining traits. Which two characteristics must the auditors confirm are present? (Choose two.)

A company's cloud administrator needs to reduce the cost of a fleet of Amazon EC2 instances that run a stateless web application. The workload can tolerate interruptions but must be highly available. Which AWS purchasing option should the administrator select to achieve the LOWEST cost while meeting these requirements?

A multinational corporation must ensure that its cloud-based financial application complies with GDPR. The application processes personal data of EU citizens. The company wants to verify that the cloud provider's data processing agreement (DPA) includes the required GDPR clauses. Which document should the company request from the cloud provider to confirm compliance with GDPR data processing requirements?

A company is migrating sensitive financial data to AWS and needs to ensure that all data is encrypted at rest using customer-managed keys. Which service should the administrator configure to manage these keys while maintaining audit logs for compliance?

Which TWO advantages does a 'Community Cloud' offer over a 'Public Cloud'?

A company runs a production workload across two public cloud providers. The security team requires that a single set of identity policies govern access to resources in both environments, and that a terminated employee lose access everywhere within minutes. Which approach should the company adopt?

An organization needs to extend its on-premises data center to a VPC while ensuring private connectivity that avoids the public internet. Which connectivity option is best?

Which TWO cloud service models are most appropriate for a developer who wants to focus solely on code?

A cloud architect is choosing between IaaS and SaaS for a new CRM system. What is the primary business advantage of selecting SaaS?

A healthcare company is designing a new patient portal. Regulatory requirements mandate that patient data must remain within a specific country's borders and that the company must have direct control over the encryption keys used to protect the data at rest. The company wants to use a public cloud provider. Which combination of cloud characteristics and controls should the company implement to meet these requirements?

A retail company experiences a sudden spike in online orders during a flash sale, causing its on-premises web servers to become overwhelmed and the site to slow down. The company wants to avoid this problem in the future without permanently adding hardware. Which cloud characteristic directly addresses this need?

A company is planning to migrate its on-premises workloads to a public cloud. The IT director asks which factors are key considerations when evaluating the cloud provider's service level agreement (SLA). (Choose two.)

You need to ensure that all virtual machines follow a consistent naming convention and have specific tags for cost tracking. What service should you use to enforce this?

A financial services firm runs regulated workloads on AWS. An auditor requires proof that data stored in Amazon S3 is encrypted at rest with keys the firm controls, that key usage is logged, and that keys can be rotated on a defined schedule. Which combination of AWS services and features satisfies these requirements?

A startup needs to rapidly deploy a web application. Which cloud service model allows developers to deploy code without managing the underlying servers?

An application requires a database that can handle unstructured data and scale horizontally. Which database type is best?

Which TWO of the following are key steps in a Cloud Incident Response process?

A small business wants to ensure that its cloud resources are tagged with cost center and owner information so that monthly invoices can be allocated correctly. Which cloud governance practice should the business implement?

A small business is considering moving its email and collaboration suite to a cloud-based service where the provider manages the application, including updates and security patches. The business will access the software via a web browser. Which cloud service model is being described?

Which TWO of the following are common threats to cloud-based data integrity?

A company is migrating an on-premises database to a public cloud. The database requires low latency and high IOPS. Which storage type should the architect select?

A multinational enterprise is migrating a latency-sensitive trading application to a public cloud. The architecture team must select deployment characteristics that minimize network round-trip time for users in multiple regions while maintaining high availability. Which TWO characteristics should the team prioritize? (Choose two.)

Which THREE of the following represent common compliance risks in a cloud environment?

A financial services firm is adopting a public cloud and must decide how to handle privileged access to the cloud management console. The security policy requires that no single administrator can both modify production workloads and delete audit logs. Which approach best satisfies this requirement?

What is the primary risk mitigation strategy when storing data in a single availability zone?

A startup is calculating the ROI for a migration project. They have calculated the Total Cost of Ownership (TCO) savings. What secondary financial factor must be included to accurately determine the overall ROI of the cloud adoption?

Which THREE cloud management tools should be utilized to control costs?

Which TWO things should be checked when a cloud service is exceeding its budget?

Which THREE factors are primary drivers for cloud cost management?

A company is migrating its on-premises workloads to a public cloud. The IT director is concerned about the security of data at rest and in transit. Which of the following is the cloud provider's responsibility under the shared responsibility model?

Which tool provides a 'Right-sizing' recommendation for an underutilized virtual machine?

A regional accounting firm runs a legacy payroll application on a physical server in its office. The server is aging, and the firm wants to move the application to a cloud provider without modifying the application or its operating system. The firm also wants to keep full administrative control over the OS, patching, and runtime configuration. Which cloud service model best fits these requirements?

A company is migrating to the cloud to scale for seasonal traffic spikes. Which cloud characteristic best addresses this business need?

A company is adopting a public cloud model and needs to ensure that its data is stored only in specific geographic regions to comply with local data protection laws. Which cloud governance practice should the company implement?

A cloud operations team needs to ensure that a critical application running on Google Cloud can automatically recover from a zone failure without manual intervention. The application is deployed on Compute Engine instances managed by an instance group. Which feature should the team configure?

To ensure that all data is encrypted before being sent to the cloud, which encryption method should the organization employ?

A company runs a three-tier application in AWS. During peak hours, users report slow page loads. CloudWatch metrics show the application load balancer is healthy, the web tier CPU is at 40 percent, and the database read replica latency is 20 ms, but the application tier shows high request queue depth and steady CPU near 95 percent. The team wants the fastest operational fix that preserves availability. What should they do?

An organization is migrating to a cloud environment and needs to maintain strict control over its encryption keys. Which service should they utilize?

A media company is comparing total cost of ownership for running a video transcoding workload on-premises versus in the public cloud. The finance team wants to identify costs that are characteristic of the cloud consumption model but are often overlooked. Which TWO factors should the team include? (Choose two.)

A small marketing agency is considering moving its project management software to a SaaS solution. The agency's IT manager wants to understand the financial implications. Which of the following best describes a key financial benefit of adopting SaaS compared to maintaining on-premises software?

When a cloud service experiences a global outage, which document should you check to verify the current status of the provider's infrastructure?

A mid-sized company is evaluating a move to the public cloud. The IT director wants to identify TWO key business benefits that directly support the company's goal of accelerating time-to-market for new products. Which TWO benefits should the director highlight? (Choose two.)

A cloud operations team is implementing a cost optimization strategy for their Google Cloud environment. They want to reduce spend on Compute Engine instances without affecting performance. Which TWO actions should they take? (Choose two.)

An administrator is setting up a new cloud account. What is the first security best practice they should implement?

A company requires a highly available database that replicates data synchronously across availability zones. Which setting should be chosen?

A multinational retailer must keep customer records in the country where they were collected. The company uses a cloud provider with regions in North America, Europe, and Asia. Which configuration most directly enforces this data residency requirement?

Which TWO items are typically included in a cloud 'Cloud Adoption Strategy' document?

Which THREE of the following are necessary to manage multi-cloud deployments effectively?

Which cloud service model would best suit a company that needs complete control over the network configuration and operating system but wants to avoid physical server maintenance?

A cloud operations team wants to automatically remediate an EC2 instance that has been running with CPU utilization below 5% for 14 consecutive days. The team needs the remediation to trigger without manual intervention and to notify a Slack channel. Which AWS service should be used to orchestrate this workflow?

What is the primary benefit of using a Managed Service (like RDS) over a self-managed database on a virtual machine?

A company uses a hybrid cloud. They need to move a database workload to the cloud that has strict regulatory requirements. Which deployment model is most appropriate?

A retail company is using a public cloud provider. The IT manager wants to understand how the cloud provider's use of shared physical resources affects the company's data. Which cloud characteristic ensures that the provider's other customers cannot access the retail company's data?

A cloud administrator is tasked with reducing idle resource costs in AWS. Which tool should be configured to provide specific rightsizing recommendations for EC2 instances based on historical utilization data?

A financial services company is designing a cloud architecture that must remain operational even if an entire cloud provider region becomes unavailable. The company wants to avoid a single point of failure and is willing to accept some additional cost and complexity. Which design approach BEST meets this requirement?

You are migrating a legacy application to the cloud. The application requires an OS that is no longer supported by the provider. Which migration strategy is most appropriate?

You are managing a multi-cloud environment using Terraform. You need to ensure that the infrastructure state is locked to prevent concurrent modifications during CI/CD pipeline runs. Which backend component should you implement to achieve state locking?

A company is using a SaaS application for email. Which part of the security responsibility remains with the company?

A retail company is migrating its e-commerce platform to a public cloud. The security team must decide how to handle encryption keys for data at rest in the cloud provider's object storage. The compliance officer requires that the company retain full control over key lifecycle management, including rotation and revocation, without the cloud provider being able to access the keys. Which approach BEST meets these requirements?

A global company needs to ensure compliance with GDPR. Which feature of a cloud provider is most critical for compliance?

You are utilizing Infrastructure as Code (IaC) templates. You notice that a specific resource update is causing service downtime. Which deployment pattern should you adopt to verify updates in a controlled environment before rolling out to production?

An organization runs a containerized e-commerce platform on a managed Kubernetes service. During a flash sale, response times degrade sharply. Metrics show the application pods are healthy and the database is not saturated, but the cluster reports that some nodes cannot schedule new pods because of resource pressure. The team must add capacity automatically when pod demand rises and remove it when demand falls. Which action should the team take?

Which THREE are key characteristics of cloud computing?

A software company is evaluating a cloud provider for a new application that will process payment card data. The security team must confirm that the provider's environment supports the company's PCI DSS obligations. Which of the following should the team verify first?

A startup is deploying a new web application on a public cloud. The team wants to minimize the attack surface of the web tier by allowing only HTTP and HTTPS traffic from the internet while blocking all other inbound ports. Which cloud construct should the team configure to enforce this network-level restriction?

A small marketing agency wants to move its customer relationship management (CRM) system to the cloud. The agency has limited IT staff and wants the provider to manage the operating system, middleware, and runtime, while the agency only manages its custom CRM application and data. Which cloud service model best fits this requirement?

Which of the following represents a major benefit of cloud computing where resources are shared among multiple customers?

Which IAM entity should be created to delegate temporary access to a third-party service provider without sharing long-term credentials?

A software development team is using a cloud-based platform that provides a runtime environment, middleware, and database services. The team can deploy their code without managing the underlying operating system or servers. However, they are responsible for configuring the application and its data. Which cloud service model is the team using?

A company is preparing for a cloud migration and needs to ensure compliance with the General Data Protection Regulation (GDPR). The compliance team has identified several requirements. Which TWO of the following are the company's responsibilities under the shared responsibility model when using a public cloud? (Choose two.)

A DevOps team manages a Google Cloud environment with many projects. They need a centralized view of all audit logs and the ability to create log-based metrics that alert on suspicious IAM changes across all projects. Which Google Cloud service should they use?

You want to receive an email alert whenever your monthly cloud spending exceeds $500. Which service should you configure?

A startup wants to give its data scientists on-demand access to GPU-backed virtual machines for experiments. Usage will be sporadic, and the company wants to pay only for the time the machines run. Which cloud characteristic is the company primarily relying on?

A cloud architect is defining a security group for a web server. To adhere to the principle of least privilege, which inbound rule should be configured to allow only standard HTTPS traffic?

A small marketing agency wants to move its client project files to a cloud storage solution. The agency has unpredictable storage needs, wants to avoid purchasing hardware, and requires access from Windows, macOS, and mobile devices. Which cloud characteristic best describes the agency's ability to provision storage on demand without human intervention from the provider?

A cloud engineer must ensure that an Amazon S3 bucket used for regulatory archives cannot have objects deleted or overwritten by any user, including the root account, for a fixed retention period of seven years. Which combination of settings should the engineer configure?

Which THREE factors can lead to 'Cloud Sprawl' (unmanaged resource accumulation)?

A healthcare company is migrating a patient records system to the cloud. The system must comply with strict data residency regulations that require all patient data to remain within the country. The company also wants to minimize latency for local users. Which cloud deployment model is MOST appropriate?

Which TWO scenarios are appropriate for using a load balancer?

A company is moving from a capital expenditure model to an operational expenditure model. What is the primary benefit?

An organization is evaluating the 'Total Cost of Ownership' of a cloud migration. What is a 'Hidden' administrative cost?

You are managing a fleet of cloud servers and notice that CPU usage is consistently at 95% during peak hours. What operational action should you take to restore performance?

A startup is looking for a cloud deployment model where they pay only for resources used and share underlying hardware with other tenants. What model is this?

Which TWO criteria are essential when selecting a cloud vendor for an enterprise?

An application is suffering from high latency for users across the globe. Which service can help cache content closer to the users?

A financial services company is migrating its on-premises application to a public cloud. The security team must ensure that the cloud provider's employees cannot access the company's data, even though the provider manages the underlying infrastructure. Which cloud security mechanism should be implemented to achieve this?

You are implementing a disaster recovery strategy. You need to ensure that database backups are stored in a different geographic region than the primary production database. What is this concept known as in cloud management?

When evaluating a cloud-based database service, which TWO of the following are key benefits compared to self-managed databases?

A financial services company must store monthly compliance reports in Amazon S3 for seven years. The reports are accessed only during the first 30 days after creation and must be retained even if accidentally deleted. Which S3 feature should be enabled to prevent deletion during the retention period?

A financial services firm is evaluating a cloud provider for a new analytics platform. The firm's auditors require proof that the provider undergoes independent security assessments and that the firm can review those results before signing. Which cloud concept should the firm examine?

A multinational corporation stores personal data of European Union residents in a public cloud. The legal team must ensure the company can lawfully transfer that data to a cloud region outside the EU while meeting GDPR requirements. Which of the following is the most appropriate mechanism to rely on?