Knowledge + Practice

CCNA Business Principles Of Cloud Environments Questions

15 of 90 questions · Page 2/2 · Business Principles Of Cloud Environments topic · Answers revealed

Practice these questions Exam hub All questions

76

MCQeasy

A startup needs to rapidly deploy a web application. Which cloud service model allows developers to deploy code without managing the underlying servers?

C.On-premises

E.None of the above

AnswerA

PaaS supplies a managed runtime, middleware, and deployment pipeline, so developers push code while the provider handles servers, patching, and scaling. This removes the infrastructure management burden the startup must avoid, unlike IaaS, which still requires operating-system administration.

Why this answer

PaaS (Platform as a Service) provides a managed runtime where developers deploy code without provisioning or managing servers, operating systems, or middleware. The provider handles the underlying infrastructure, patching, and scaling, letting the startup focus purely on application code — ideal for rapid web app deployment.

Exam trap

CLO-002 often tests the boundary between IaaS and PaaS — candidates pick IaaS thinking 'no servers' means virtual machines, but the key phrase is 'without managing the underlying servers,' which is PaaS.

How to eliminate wrong answers

Option B is wrong because IaaS provides raw virtual machines, storage, and networking — the customer still manages the OS, runtime, and patching, which is not 'without managing servers.' Option C is wrong because on-premises requires the organization to own and manage all hardware and software, the opposite of the question's requirement. Option D is wrong because SaaS delivers finished applications to end users, not a platform for developers to deploy their own code. Option E is wrong because PaaS is a valid answer, so 'none of the above' is incorrect.

Practice this question →

77

MCQeasy

A small business is considering moving its email and collaboration suite to a cloud-based service where the provider manages the application, including updates and security patches. The business will access the software via a web browser. Which cloud service model is being described?

A.Platform as a Service (PaaS)

B.Software as a Service (SaaS)

C.Function as a Service (FaaS)

D.Infrastructure as a Service (IaaS)

AnswerB

SaaS delivers a complete application over the internet, with the provider managing all underlying infrastructure, platforms, and application updates. The business simply accesses the software via a browser, exactly as described. This model eliminates the need for the business to handle any maintenance or patching, aligning perfectly with the scenario.

Why this answer

The scenario describes a fully managed application accessed via a browser, which is the definition of Software as a Service. In SaaS, the provider handles everything from infrastructure to application updates, and the customer simply uses the software. This contrasts with IaaS, PaaS, and FaaS, where the customer retains varying degrees of management responsibility.

Exam trap

The trap here is confusing the simplicity of SaaS with PaaS, which also abstracts infrastructure but requires the customer to manage the application.

Practice this question →

78

MCQhard

A startup is calculating the ROI for a migration project. They have calculated the Total Cost of Ownership (TCO) savings. What secondary financial factor must be included to accurately determine the overall ROI of the cloud adoption?

A.Current on-premises electricity costs

B.Projected marketing revenue

C.Initial migration and training costs

D.Cloud provider's stock price

AnswerC

Initial migration and training costs capture the one-off expenditure incurred before cloud benefits accrue, which TCO savings alone omit. ROI compares total benefits against total costs, so excluding these upfront outlays overstates returns. Including them satisfies the stem's requirement for a secondary financial factor beyond ongoing TCO savings.

Why this answer

To calculate ROI accurately for a cloud migration, you must include not only ongoing TCO savings but also the one-time costs required to realize those savings — specifically initial migration costs (data transfer, refactoring, tooling) and training costs for staff. These upfront investments reduce net benefit and therefore directly affect the ROI calculation.

Exam trap

CLO-002 often tests whether candidates remember that ROI requires both savings and investment — the trap is selecting an ongoing cost already captured in TCO instead of the one-time migration and training costs that must be added.

How to eliminate wrong answers

Option A is wrong because current on-premises electricity costs are already embedded in the TCO baseline being compared against; including them again would double-count. Option B is wrong because projected marketing revenue is unrelated to the cost side of the migration ROI and would conflate revenue growth with cost savings. Option D is wrong because a cloud provider's stock price has no bearing on the customer's migration economics and is not a financial input to ROI.

Practice this question →

79

Multi-Selecthard

Which THREE cloud management tools should be utilized to control costs?

Select 3 answers

A.Cost Explorer or similar visualization tool

B.Budgeting and forecasting alerts

C.A physical server monitoring camera

D.The company's external marketing agency

E.Resource tagging policies

AnswersA, B, E

Cost Explorer visualises historical spend and usage by service, account and tag, and produces forecasts, enabling identification of cost drivers. This satisfies the stem's requirement for a cloud management tool that controls costs through analysis and trend visibility.

Why this answer

Cost Explorer (A) is correct because it provides visualization and analysis of historical cloud spend by service, account, and tag, enabling teams to identify cost drivers and trends. Budgeting and forecasting alerts (B) are correct because they proactively notify stakeholders when actual or forecasted spend approaches or exceeds defined thresholds, allowing corrective action before overruns occur. Resource tagging policies (E) are correct because consistent tags (e.g., cost center, owner, environment) enable accurate cost allocation, chargeback, and filtering in billing reports, which is foundational to cost control.

Option C, a physical server monitoring camera, is irrelevant to cloud financial management since it addresses physical security, not billing or usage. Option D, the company's external marketing agency, does not manage cloud infrastructure or billing and therefore cannot control cloud costs.

Exam trap

CLO-002 often tests cost management tool recognition — candidates may select distractors that sound like monitoring or governance tools but are actually unrelated to cloud financial management, such as physical security cameras or marketing agencies.

Practice this question →

80

MCQhard

Which tool provides a 'Right-sizing' recommendation for an underutilized virtual machine?

A.IAM Policy Generator

B.CloudFront

C.Compute Optimizer

D.Network ACLs

AnswerC

Compute Optimizer analyses CloudWatch metrics such as CPU, memory and network utilisation over time, then applies machine learning to flag over-provisioned instances. This directly satisfies the stem's requirement for a right-sizing recommendation on an underutilised virtual machine, unlike tools that only report cost or inventory.

Why this answer

AWS Compute Optimizer analyzes CloudWatch metrics (CPU, memory, network, disk) over a lookback period and generates right-sizing recommendations for EC2 instances, Auto Scaling groups, EBS volumes, and Lambda functions. It flags over-provisioned resources so you can downsize instance types and reduce cost. This is exactly the 'right-sizing' capability described in the question.

Exam trap

CLO-002 often tests whether candidates confuse cost-optimization tools (Compute Optimizer, Cost Explorer, Trusted Advisor) with unrelated services like CloudFront or IAM, so memorize each tool's specific purpose.

How to eliminate wrong answers

Option A is wrong because the IAM Policy Generator only builds JSON permission policies for IAM identities — it has nothing to do with resource sizing. Option B is wrong because CloudFront is a global content delivery network (CDN) for caching and distributing content at edge locations, not a cost-optimization or sizing tool. Option D is wrong because Network ACLs are stateless subnet-level packet filters controlling inbound/outbound traffic — they have no role in resource utilization analysis.

Practice this question →

81

MCQmedium

A company is migrating to the cloud to scale for seasonal traffic spikes. Which cloud characteristic best addresses this business need?

A.Broad network access

B.Measured service

C.Elasticity

D.Resource pooling

AnswerC

Elasticity automatically provisions and de-provisions resources to match demand in real time, so capacity expands during seasonal peaks and contracts afterwards. This directly satisfies the requirement to scale for traffic spikes, unlike scalability, which only describes the capacity to grow without addressing dynamic, temporary demand.

Why this answer

Elasticity is the cloud characteristic that allows resources to automatically scale up or down based on demand, which directly addresses seasonal traffic spikes. It enables the company to provision additional capacity during peak periods and release it when demand drops, paying only for what is used. This matches the business need of scaling for variable traffic without over-provisioning.

Exam trap

CLO-002 often tests the distinction between elasticity (automatic scaling based on demand) and scalability (capacity to grow), as well as confusing elasticity with other characteristics like measured service or resource pooling.

How to eliminate wrong answers

Option A is wrong because broad network access refers to services being accessible over the network from various devices, not to scaling capacity. Option B is wrong because measured service refers to metering and billing based on usage, which is a billing model rather than a scaling mechanism. Option D is wrong because resource pooling refers to multi-tenant sharing of physical resources among customers, which enables efficiency but does not by itself provide automatic scaling for demand spikes.

Practice this question →

82

MCQhard

An organization is migrating to a cloud environment and needs to maintain strict control over its encryption keys. Which service should they utilize?

A.Identity and Access Management (IAM)

B.Security Groups

C.Public Key Infrastructure (PKI)

D.Key Management Service (KMS)

AnswerD

Key Management Service provides centralised creation, rotation, and access control of encryption keys, letting the organisation retain strict key custody rather than handing control to the cloud provider. This directly satisfies the stem's constraint of maintaining strict control over encryption keys during cloud migration.

Why this answer

A Key Management Service (KMS) is purpose-built to create, store, rotate, and control access to cryptographic keys, giving the organization strict control over key lifecycle and usage. It provides centralized key management with audit logging and integration with cloud services for encryption at rest.

Exam trap

CLO-002 often tests the distinction between key management and certificate/identity management, so candidates who see 'encryption keys' and pick PKI confuse data-encryption keys with TLS certificates.

How to eliminate wrong answers

Option A is wrong because IAM manages identities and access permissions, not cryptographic key material or encryption operations. Option B is wrong because Security Groups are virtual firewalls controlling network traffic, unrelated to key management. Option C is wrong because Public Key Infrastructure (PKI) manages digital certificates and certificate authorities for identity and TLS, not the symmetric data-encryption keys used for cloud storage and services.

Practice this question →

83

MCQeasy

A small marketing agency is considering moving its project management software to a SaaS solution. The agency's IT manager wants to understand the financial implications. Which of the following best describes a key financial benefit of adopting SaaS compared to maintaining on-premises software?

A.Complete transfer of data security responsibility to the vendor

B.Conversion of capital expenses to operational expenses

C.Elimination of all software licensing costs

D.Guaranteed reduction in total cost of ownership

AnswerB

SaaS typically converts upfront capital expenditures (CapEx) for servers, licenses, and infrastructure into ongoing operational expenditures (OpEx) through subscription fees. This improves cash flow and reduces the need for large initial investments. The agency can budget monthly or annually, making financial planning easier and aligning costs with usage.

Why this answer

Moving to SaaS shifts costs from capital expenditures to operational expenditures. Instead of purchasing servers and licenses upfront, the agency pays a recurring subscription fee. This improves cash flow and allows for more predictable budgeting.

It also reduces the need for IT staff to maintain hardware and software, freeing resources for other tasks.

Exam trap

The trap here is assuming that SaaS eliminates licensing costs entirely, when it actually converts them into subscription fees.

Practice this question →

84

Multi-Selectmedium

A mid-sized company is evaluating a move to the public cloud. The IT director wants to identify TWO key business benefits that directly support the company's goal of accelerating time-to-market for new products. Which TWO benefits should the director highlight? (Choose two.)

Select 2 answers

A.Reduced capital expenditure on hardware

B.Increased control over physical security

C.Elastic scalability to handle demand spikes

D.Fixed monthly pricing for all services

E.Rapid provisioning of infrastructure and services

AnswersC, E

Elastic scalability enables applications to automatically scale resources up or down based on demand, ensuring performance during peak usage without manual intervention. This agility supports rapid experimentation and deployment of new features, as teams do not need to over-provision for worst-case scenarios. It directly contributes to faster time-to-market by removing infrastructure constraints.

Why this answer

Rapid provisioning and elastic scalability are two cloud benefits that directly accelerate time-to-market. Rapid provisioning lets teams start building immediately, while elasticity ensures applications can handle variable loads without delays. These capabilities reduce the time from concept to production, enabling faster product launches.

Other benefits like cost reduction or security are valuable but do not directly speed up product delivery.

Exam trap

The trap here is selecting financial or security benefits that are important but do not directly impact the speed of bringing new products to market.

Practice this question →

85

Multi-Selectmedium

Which TWO items are typically included in a cloud 'Cloud Adoption Strategy' document?

Select 2 answers

A.Migration roadmap and timeline

B.The history of the telephone

C.List of office coffee brands

D.Business goals and success criteria

E.The personal email addresses of all employees

AnswersA, D

A Cloud Adoption Strategy document sequences the organisation's move to cloud, so the migration roadmap and timeline translate strategic goals into phased, dated workloads and milestones. This satisfies the requirement for actionable planning content rather than purely financial or architectural detail.

Why this answer

A cloud Cloud Adoption Strategy document typically includes a migration roadmap and timeline (A), because it must sequence workloads, define phases (assess, mobilize, migrate, modernize), and set milestones for moving to the cloud. It also includes business goals and success criteria (D), since the strategy must tie cloud adoption to measurable outcomes such as cost reduction, agility, or compliance targets. Options B, C, and E are irrelevant to cloud adoption planning: telephone history, office coffee brands, and employees' personal email addresses have no bearing on migration approach, governance, or success metrics.

Exam trap

CLO-002 often tests whether candidates can distinguish strategic business artifacts from operational or irrelevant details, so distractors like coffee brands or telephone history are inserted to see if you overthink simple scope questions.

Practice this question →

86

MCQeasy

Which cloud service model would best suit a company that needs complete control over the network configuration and operating system but wants to avoid physical server maintenance?

D.Serverless

AnswerC

IaaS provides virtualised compute, storage and networking where the customer controls the operating system and network configuration, while the provider handles physical hardware. PaaS and SaaS abstract away OS and network control, so they fail the control requirement.

Why this answer

IaaS provides virtualized computing resources over the internet, giving the customer control over the operating system, storage, and network configuration while the provider manages the physical infrastructure. This matches the requirement for complete control over network and OS without physical server maintenance.

Exam trap

The trap is confusing IaaS with PaaS; candidates may think PaaS offers OS control, but it does not—PaaS provides a runtime environment, not the underlying OS.

How to eliminate wrong answers

Option A is wrong because PaaS abstracts the underlying infrastructure, including the OS and network, so the customer does not have complete control over those layers. Option B is wrong because SaaS provides a fully managed application, offering no control over the OS or network. Option D is wrong because serverless (often considered part of PaaS or FaaS) abstracts even more, with the provider managing scaling and infrastructure, and the customer only deploys code.

Practice this question →

87

MCQhard

A global company needs to ensure compliance with GDPR. Which feature of a cloud provider is most critical for compliance?

A.Data residency controls

B.Auto-scaling groups

C.Multi-region replication

D.Public IP addresses

AnswerA

Data residency controls let the company pin where personal data is stored and processed, directly satisfying GDPR's restrictions on transferring EU personal data outside the European Economic Area. Without them, the provider could replicate or process data in jurisdictions that undermine lawful transfer mechanisms.

Why this answer

GDPR requires that personal data of EU residents be stored and processed under specific legal frameworks, and data residency controls let organizations pin data to specific geographic regions (e.g., EU-West) to satisfy these requirements. This is the most critical cloud feature for GDPR compliance because it directly addresses the regulation's data sovereignty and cross-border transfer rules. Without residency controls, data may be replicated or processed outside approved jurisdictions, creating legal exposure.

Exam trap

CLO-002 often tests the misconception that availability features like multi-region replication automatically satisfy compliance, when in fact replication can violate GDPR by moving personal data across jurisdictional boundaries without legal safeguards.

How to eliminate wrong answers

Option B is wrong because auto-scaling groups are a compute elasticity feature with no relationship to data sovereignty or regulatory compliance — they manage capacity, not data location. Option C is wrong because multi-region replication, while useful for availability, can actually VIOLATE GDPR if it replicates EU personal data to non-EU regions without appropriate safeguards (SCCs, adequacy decisions); it is a risk, not a compliance feature. Option D is wrong because public IP addresses are a networking construct for internet reachability and have no bearing on where data is stored or how it is governed under GDPR.

Practice this question →

88

Multi-Selecthard

Which THREE factors can lead to 'Cloud Sprawl' (unmanaged resource accumulation)?

Select 3 answers

A.Shadow IT usage

B.High internet speed

C.Over-hiring of IT personnel

D.Lack of centralized resource tagging

E.Failure to decommission development environments

AnswersA, D, E

Shadow IT means teams procure cloud resources outside IT governance, so instances and storage appear with no owner, budget or lifecycle oversight. This satisfies the stem's sprawl factor: unapproved provisioning bypasses the controls that would otherwise track and reclaim resources.

Why this answer

Cloud sprawl occurs when unmanaged resources accumulate, and option A (Shadow IT usage) is correct because business units provisioning cloud services outside IT governance create untracked instances, storage, and accounts that no one centrally manages or monitors. Option D (Lack of centralized resource tagging) is correct because without a consistent tagging policy (e.g., mandatory tags for owner, cost center, environment, and expiration), organizations cannot inventory, attribute costs, or identify orphaned resources, so unused assets silently pile up. Option E (Failure to decommission development environments) is correct because dev/test sandboxes, proof-of-concept VMs, and temporary databases are frequently left running after a project ends, directly producing idle, billable resource accumulation.

Option B (High internet speed) is not a cause of sprawl; faster connectivity may ease provisioning but does not itself create unmanaged resources. Option C (Over-hiring of IT personnel) is unrelated, since headcount growth does not inherently generate ungoverned cloud resources and could even improve oversight.

Exam trap

CLO-002 often tests whether candidates can identify governance and lifecycle failures as sprawl causes, so distractors like internet speed or headcount are inserted to see if you conflate unrelated factors.

Practice this question →

89

MCQhard

An organization is evaluating the 'Total Cost of Ownership' of a cloud migration. What is a 'Hidden' administrative cost?

A.Employee retraining and upskilling

B.Cloud service provider fees

C.Internet bandwidth cost

D.Cloud storage costs

AnswerA

Retraining and upskilling staff is a hidden administrative cost because it rarely appears in initial migration budgets, yet it is unavoidable when teams must learn new cloud tooling, revised operational processes and changed role responsibilities, consuming both training spend and productivity.

Why this answer

Hidden administrative costs in cloud TCO often include training and upskilling of staff to manage new cloud technologies, which is not always obvious in initial cost estimates. These costs are considered 'hidden' because they are indirect and often overlooked.

Exam trap

The trap is selecting a direct cost like bandwidth or storage as 'hidden' when the question specifically asks for administrative hidden costs; training is a classic hidden administrative cost.

How to eliminate wrong answers

Option B is wrong because cloud service provider fees are a direct, visible cost, not hidden. Option C is wrong because internet bandwidth cost is typically a direct operational cost that is accounted for in TCO, though it can be variable. Option D is wrong because cloud storage costs are also direct and visible, usually itemized in billing.

Practice this question →

90

Multi-Selectmedium

Which TWO criteria are essential when selecting a cloud vendor for an enterprise?

Select 2 answers

A.Availability of free trial gifts

B.The number of employees at the cloud company

C.The physical location of the cloud company's headquarters

D.Compliance and regulatory certifications

E.Service Level Agreement (SLA) guarantees

AnswersD, E

Compliance and regulatory certifications evidence that a provider meets mandated standards such as ISO 27001, SOC 2 or GDPR. For an enterprise, this satisfies the due-diligence constraint, since unverified vendors expose the organisation to legal penalties and audit failures.

Why this answer

Option D is correct because compliance and regulatory certifications (for example ISO/IEC 27001, SOC 2, PCI DSS, HIPAA, or GDPR alignment) are essential to verify that the vendor meets the legal, industry, and data-protection obligations the enterprise must satisfy. Option E is correct because the Service Level Agreement defines measurable guarantees such as uptime percentage, latency, RTO/RPO, and remediation or credits, which directly determine whether the cloud service can meet the enterprise's availability and performance requirements. Options A, B, and C are not essential selection criteria: free trial gifts have no bearing on production suitability, the number of employees does not indicate service quality or compliance, and the headquarters location alone does not establish where data is stored or processed, which is what actually matters for regulatory and latency concerns.

Exam trap

CLO-002 often tests the confusion between superficial vendor attributes (e.g., free trials, headquarters location) and substantive criteria like compliance certifications and SLA guarantees that impact enterprise risk and legal obligations.

Practice this question →

← PreviousPage 2 of 2 · 90 questions total

Ready to test yourself?

Try a timed practice session using only Business Principles Of Cloud Environments questions.

Start 20-question session