Knowledge + Practice

CCNA Describe cloud concepts Questions

75 of 162 questions · Page 1/3 · Describe cloud concepts · Answers revealed

Practice these questions Domain overview All questions

1

MCQeasy

A cloud provider bills a customer monthly based on the precise number of gigabytes of storage used and the number of virtual machine hours consumed. Which essential cloud computing characteristic does this billing model demonstrate?

A.Measured service

B.Resource pooling

C.On-demand self-service

D.Broad network access

AnswerA

Measured service enables metering of resource usage and pay-as-you-go billing, as described in the scenario.

Why this answer

The billing model charges based on exact gigabytes of storage used and virtual machine hours consumed, which directly aligns with the 'measured service' characteristic. This means the cloud provider meters resource usage (e.g., storage IOPS, compute hours) and bills only for what is consumed, enabling pay-as-you-go pricing. Measured service relies on telemetry and monitoring systems (e.g., Azure Monitor, AWS CloudWatch) to track usage and generate invoices.

Exam trap

Microsoft often tests the distinction between 'measured service' (billing granularity) and 'on-demand self-service' (provisioning capability), leading candidates to confuse the ability to spin up resources instantly with how those resources are billed.

How to eliminate wrong answers

Option B is wrong because resource pooling refers to the provider's ability to serve multiple customers from shared physical resources (e.g., multi-tenancy), not how usage is billed. Option C is wrong because on-demand self-service allows users to provision resources without human interaction (e.g., via Azure Portal or CLI), but does not define the billing granularity. Option D is wrong because broad network access describes the ability to access resources over the network via standard protocols (e.g., HTTPS, SSH), not the metering or charging model.

Practice this question →

2

Multi-Selecthard

Which TWO cloud deployment models allow an organization to run some workloads on-premises and some in the public cloud?

Select 2 answers

A.Community cloud

B.Private cloud

C.Multi-cloud

D.Hybrid cloud

E.Public cloud

AnswersA, D

Community cloud is shared by several organizations with common concerns and can include on-premises components.

Why this answer

Options B and D are correct: hybrid cloud explicitly mixes on-premises and public cloud; community cloud is used by multiple organizations with shared concerns and can include on-premises resources. Option A (private cloud) is solely for one organization, typically on-premises or hosted. Option C (public cloud) is solely off-premises.

Option E (multi-cloud) uses multiple public clouds but not necessarily on-premises.

Practice this question →

3

MCQeasy

A company migrates its database to a cloud service where the provider manages the database engine, patching, backups, and replication. The customer only manages the data and schema. Which cloud service model is this?

A.Infrastructure as a Service (IaaS)

B.Platform as a Service (PaaS)

C.Software as a Service (SaaS)

D.On-premises

AnswerB

PaaS provides a managed platform where the provider handles the database engine, patches, backups, and replication; the customer focuses on data and schema.

Why this answer

Platform as a Service (PaaS) provides a managed hosting environment where the cloud provider handles the underlying infrastructure, including the database engine, operating system, patching, backups, and replication. The customer is responsible only for managing the data and schema, which aligns directly with the scenario described.

Exam trap

The trap here is that candidates often confuse PaaS with IaaS because both involve cloud-hosted databases, but the key differentiator is who manages the database engine and patching—PaaS offloads this entirely to the provider, while IaaS leaves it to the customer.

How to eliminate wrong answers

Option A is wrong because Infrastructure as a Service (IaaS) provides virtualized computing resources where the customer manages the operating system, database engine, patching, and backups, not just the data and schema. Option C is wrong because Software as a Service (SaaS) delivers a complete application managed entirely by the provider, where the customer typically does not manage the database schema or data directly. Option D is wrong because an on-premises deployment requires the customer to manage all aspects of the database, including hardware, engine, patching, backups, and replication, which contradicts the provider-managed model described.

Practice this question →

4

MCQmedium

A business stakeholder asks how Microsoft 365 can help them access cloud resources from laptops, tablets, and phones over the internet. Cloud concept or benefit best matches this requirement?

A.Sensitivity labels

B.Microsoft Planner

C.Data Loss Prevention (DLP)

D.Broad network access

AnswerD

Broad network access means cloud services are reachable over standard networks from different client platforms.

Why this answer

Broad network access is a core NIST cloud computing characteristic that enables resources to be accessed over the network by standard mechanisms (e.g., mobile phones, tablets, laptops, and workstations). This directly matches the stakeholder's requirement for accessing cloud resources from various devices over the internet, as Microsoft 365 leverages HTTPS and standard protocols to provide ubiquitous access.

Exam trap

The trap here is that candidates may confuse operational features (like sensitivity labels or DLP) with fundamental cloud characteristics, or incorrectly associate Microsoft Planner with cloud access, when the question specifically targets the NIST-defined cloud benefit of broad network access.

How to eliminate wrong answers

Option A is wrong because sensitivity labels are a Microsoft Information Protection (MIP) feature used to classify and protect data based on sensitivity, not to enable network access from multiple devices. Option B is wrong because Microsoft Planner is a task management and collaboration tool within Microsoft 365, not a cloud concept or benefit related to device accessibility. Option C is wrong because Data Loss Prevention (DLP) policies help prevent accidental sharing of sensitive information, but they do not address the ability to access cloud resources from laptops, tablets, and phones.

Practice this question →

5

MCQeasy

A company moves its on-premises servers to a cloud provider. The provider supplies the physical hardware, networking, and storage. The company installs and manages the operating system and applications on the virtual machines. Which cloud service model does this scenario represent?

A.Infrastructure as a Service (IaaS)

B.Platform as a Service (PaaS)

C.Software as a Service (SaaS)

D.Function as a Service (FaaS)

AnswerA

IaaS gives the customer control over the OS and applications while the provider manages the underlying hardware, storage, and networking.

Why this answer

This scenario describes Infrastructure as a Service (IaaS) because the cloud provider supplies the physical hardware, networking, and storage, while the customer retains full control over the operating system and applications. In IaaS, the provider manages the underlying infrastructure (e.g., hypervisor, physical servers, network switches), and the customer is responsible for the guest OS, middleware, and application stack. This aligns with the shared responsibility model where the customer handles OS patching, application configuration, and data management.

Exam trap

The trap here is that candidates confuse IaaS with PaaS because both involve virtual machines, but PaaS removes OS management — the key differentiator is who installs and patches the operating system.

How to eliminate wrong answers

Option B (PaaS) is wrong because PaaS abstracts the OS and runtime environment; the provider manages the OS, middleware, and runtime, while the customer only deploys code — here the customer installs and manages the OS. Option C (SaaS) is wrong because SaaS delivers fully managed applications accessed via a browser or API; the customer has no control over the underlying OS or infrastructure. Option D (FaaS) is wrong because FaaS (Function as a Service) is a serverless compute model where the provider manages all infrastructure and the customer only deploys individual functions triggered by events — it does not involve managing an OS or full applications.

Practice this question →

6

Drag & Dropmedium

Drag and drop the steps to create a new user account in Microsoft 365 admin center into the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

Why this order

Creating a user in M365 admin center requires signing in, navigating to active users, adding a user, entering details, and assigning licenses/roles.

Practice this question →

7

MCQmedium

A cloud provider offers a service where customers can provision virtual machines, storage, and networks on-demand through a web portal. The customer is responsible for patching the guest operating system. Which cloud service model best describes this offering?

A.Software as a Service (SaaS)

B.Platform as a Service (PaaS)

C.Infrastructure as a Service (IaaS)

D.Desktop as a Service (DaaS)

AnswerC

Correct. The customer provisions the VMs and is responsible for OS updates and patches, while the provider manages the underlying hardware.

Why this answer

The correct answer is C (Infrastructure as a Service) because the customer provisions fundamental compute, storage, and networking resources on-demand, and retains control over the guest OS, including patching. In IaaS, the provider manages only the physical infrastructure (hypervisor, networking, storage hardware), while the customer is responsible for the OS and applications, matching the scenario exactly.

Exam trap

The trap here is that candidates confuse PaaS with IaaS because both involve 'platform' or 'infrastructure' terms, but the key differentiator is who patches the guest OS — in PaaS, the provider patches it, while in IaaS, the customer does.

How to eliminate wrong answers

Option A is wrong because SaaS delivers fully managed applications (e.g., Office 365) where the provider handles all patching, including the OS, and the customer only uses the software via a browser or client. Option B is wrong because PaaS provides a managed platform (runtime, middleware, database) where the provider patches the underlying OS and runtime, and the customer only deploys code, not managing VMs or guest OS patches. Option D is wrong because DaaS delivers virtual desktops as a managed service, where the provider typically manages the guest OS image and patching, shifting OS responsibility away from the customer.

Practice this question →

8

MCQhard

A startup wants to build a custom application with minimal infrastructure management and only pay for the resources consumed. Which cloud service model should they choose?

A.Functions as a Service (FaaS)

B.Software as a Service (SaaS)

C.Infrastructure as a Service (IaaS)

D.Platform as a Service (PaaS)

AnswerD

PaaS provides a platform to build and deploy custom apps without managing infrastructure, with pay-as-you-go pricing.

Why this answer

Option B is correct because Platform as a Service (PaaS) allows you to deploy applications without managing underlying infrastructure, and you pay only for what you use. Option A (IaaS) requires you to manage VMs and still pay for allocated resources. Option C (SaaS) provides pre-built applications, not a platform for custom apps.

Option D (FaaS) is a subset of PaaS for event-driven functions, but PaaS is broader and more suitable for a custom app.

Practice this question →

9

MCQeasy

A company uses a cloud provider that charges them only for the actual storage and compute resources they consume each month. They can start or stop machines at any time and are billed precisely for what they use. Which cloud computing characteristic does this billing model demonstrate?

A.Rapid elasticity

B.On-demand self-service

C.Resource pooling

D.Measured service

AnswerD

Measured service means usage is metered, enabling pay-per-use billing. This scenario directly illustrates that characteristic.

Why this answer

The billing model described—paying only for actual storage and compute resources consumed, with the ability to start/stop machines at any time—directly demonstrates 'Measured service'. This characteristic, defined by NIST SP 800-145, means cloud systems automatically control and optimize resource usage by leveraging a metering capability at some level of abstraction appropriate to the type of service (e.g., storage, processing, bandwidth, active user accounts). Usage is monitored, controlled, and reported, providing transparency for both the provider and consumer.

Exam trap

The trap here is that candidates confuse 'Measured service' with 'On-demand self-service' because both involve user control, but measured service specifically addresses the metering and pay-per-use billing aspect, not the ability to provision without human interaction.

How to eliminate wrong answers

Option A is wrong because 'Rapid elasticity' refers to the ability to quickly scale resources up or down, often automatically, to match demand—not to the billing model based on consumption. Option B is wrong because 'On-demand self-service' means a consumer can unilaterally provision computing capabilities (like server time or network storage) without requiring human interaction with each service provider—it describes the provisioning mechanism, not the pay-per-use billing. Option C is wrong because 'Resource pooling' means the provider's computing resources are pooled to serve multiple consumers using a multi-tenant model, with physical and virtual resources dynamically assigned and reassigned according to consumer demand—it is about multi-tenancy and location independence, not billing granularity.

Practice this question →

10

MCQeasy

A development team wants to deploy a custom web application to the cloud. They want to upload their code and let the cloud provider handle server infrastructure, operating system updates, and automatic scaling. Which cloud service model best fits this requirement?

A.Infrastructure as a Service (IaaS)

B.Platform as a Service (PaaS)

C.Software as a Service (SaaS)

D.On-premises deployment

AnswerB

Correct. PaaS abstracts the underlying infrastructure, allowing developers to focus on code while the provider manages server, OS, and scaling.

Why this answer

Platform as a Service (PaaS) is the correct choice because it provides a managed hosting environment where the development team can upload their custom web application code without managing the underlying server infrastructure, operating system updates, or scaling. Azure App Service, a PaaS offering, automatically handles OS patching, load balancing, and auto-scaling based on demand, aligning perfectly with the requirement to let the cloud provider handle these tasks.

Exam trap

The trap here is that candidates often confuse IaaS with PaaS, mistakenly thinking that IaaS also abstracts OS updates and scaling, but IaaS still requires the user to manage the OS and configure scaling manually, unlike PaaS which fully automates these responsibilities.

How to eliminate wrong answers

Option A is wrong because Infrastructure as a Service (IaaS) provides virtual machines, storage, and networks, but the team would still be responsible for managing the operating system, applying updates, and configuring scaling manually, which contradicts the requirement to offload these tasks. Option C is wrong because Software as a Service (SaaS) delivers fully managed applications (e.g., Office 365) that users access via a browser, not a platform for deploying custom code. Option D is wrong because on-premises deployment requires the team to own and manage all hardware, software, and updates locally, which is the opposite of letting the cloud provider handle infrastructure.

Practice this question →

11

MCQeasy

A cloud provider offers virtual machines, but customers must install, configure, and maintain the operating system and applications. Which cloud service model does this describe?

A.IaaS (Infrastructure as a Service)

B.PaaS (Platform as a Service)

C.SaaS (Software as a Service)

D.FaaS (Function as a Service)

AnswerA

IaaS provides virtualized infrastructure components; the customer controls the OS and applications, matching the described customer responsibility.

Why this answer

This scenario describes Infrastructure as a Service (IaaS), where the cloud provider supplies virtualized computing resources such as virtual machines, storage, and networking, but the customer retains full control over the operating system, middleware, and applications. In IaaS, the provider manages only the physical infrastructure (hypervisor, servers, storage, and network), while the customer is responsible for OS installation, configuration, patching, and application management. This aligns directly with the question's description of customer-managed OS and applications on provider-hosted VMs.

Exam trap

The trap here is that candidates often confuse IaaS with PaaS because both involve virtual machines, but PaaS (e.g., Azure App Service) hides the OS and runtime, whereas IaaS requires full customer OS management.

How to eliminate wrong answers

Option B (PaaS) is wrong because PaaS abstracts the underlying OS and runtime; the provider manages the OS, middleware, and runtime environment, so customers do not install or maintain the OS. Option C (SaaS) is wrong because SaaS delivers fully functional applications accessed via a web browser or API, with no customer control over the OS or underlying infrastructure. Option D (FaaS) is wrong because FaaS (Function as a Service) executes stateless code functions in response to events, with the provider managing all infrastructure including the OS, and customers only upload code without any OS-level access.

Practice this question →

12

MCQmedium

A hospital must store patient medical records on-premises to comply with strict data sovereignty regulations. However, they also want to use advanced analytics tools hosted on a public cloud platform. Which cloud deployment model best meets their needs?

A.Private cloud

B.Public cloud

C.Hybrid cloud

D.Community cloud

AnswerC

Hybrid cloud combines on-premises and public cloud resources, enabling the hospital to keep sensitive data on-site while using public cloud analytics.

Why this answer

Option C (Hybrid cloud) is correct because it allows the hospital to keep sensitive patient medical records on-premises to satisfy strict data sovereignty regulations, while leveraging public cloud services for advanced analytics. This model combines private and public cloud resources, enabling data to remain compliant without sacrificing access to cloud-hosted analytics tools.

Exam trap

The trap here is that candidates often choose Private cloud (Option A) thinking it is the only way to ensure data sovereignty, but they overlook the requirement for advanced analytics tools hosted on a public cloud, which Hybrid cloud uniquely satisfies.

How to eliminate wrong answers

Option A (Private cloud) is wrong because while it meets data sovereignty requirements, it does not provide access to public cloud-based advanced analytics tools, limiting the hospital's ability to use those services. Option B (Public cloud) is wrong because it would require storing patient data off-premises, violating data sovereignty regulations that mandate on-premises storage. Option D (Community cloud) is wrong because it is designed for multiple organizations with shared concerns (e.g., compliance), but it still typically involves off-premises infrastructure and does not inherently support a hybrid approach that keeps specific data on-premises while using public cloud analytics.

Practice this question →

13

Drag & Dropmedium

Drag and drop the steps to configure a Microsoft 365 group expiration policy in the Azure AD admin center into the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

Why this order

Group expiration policy is set in Azure AD under Groups > Expiration.

Practice this question →

14

MCQeasy

A company wants to provide its employees with access to email, calendar, and document editing tools through a web browser without installing any software. The provider manages all maintenance, updates, and security of the applications. Which cloud service model best describes this scenario?

A.Infrastructure as a Service (IaaS)

B.Platform as a Service (PaaS)

C.Software as a Service (SaaS)

D.Desktop as a Service (DaaS)

AnswerC

SaaS delivers fully functional applications over the internet, managed entirely by the provider. The customer only needs a browser to use them, which matches the scenario.

Why this answer

This scenario describes Software as a Service (SaaS) because the provider delivers fully functional applications—such as email, calendar, and document editing—over the web, with no local installation required. The provider handles all maintenance, updates, and security, which is the defining characteristic of SaaS. Examples include Microsoft 365 (Exchange Online, Outlook, Word Online) and Google Workspace.

Exam trap

The trap here is that candidates often confuse SaaS with PaaS because both involve managed services, but PaaS is for developers building custom applications, not for end users consuming ready-made applications like email and calendars.

How to eliminate wrong answers

Option A is wrong because Infrastructure as a Service (IaaS) provides virtualized computing resources (e.g., VMs, storage, networks) but requires the customer to install and manage their own operating systems and applications, not just use pre-built tools via a browser. Option B is wrong because Platform as a Service (PaaS) provides a runtime environment and development tools for building and deploying custom applications, not ready-to-use end-user applications like email and document editing. Option D is wrong because Desktop as a Service (DaaS) delivers a full virtual desktop environment (including OS and applications) to end users, but the scenario specifies accessing specific applications through a web browser without a full desktop experience, and DaaS typically requires a client or browser-based remote desktop connection, not just direct web access to individual apps.

Practice this question →

15

MCQmedium

A company deploys a custom application on a cloud platform where they manage the operating system and runtime environment, but the cloud provider manages the underlying physical infrastructure, storage, and networking. Which cloud service model is being used?

A.Infrastructure as a Service (IaaS)

B.Platform as a Service (PaaS)

C.Software as a Service (SaaS)

D.Function as a Service (FaaS)

AnswerA

In IaaS, the customer has control over the operating system, storage, and deployed applications, while the provider manages the underlying infrastructure.

Why this answer

The scenario describes a model where the customer manages the operating system and runtime environment, while the cloud provider handles the physical infrastructure, storage, and networking. This aligns precisely with Infrastructure as a Service (IaaS), as IaaS provides virtualized computing resources (e.g., virtual machines) where the customer retains control over the OS, middleware, and applications, but the provider manages the underlying hardware, hypervisor, and physical network.

Exam trap

The trap here is that candidates often confuse IaaS with PaaS because both involve deploying applications, but the key differentiator is who manages the OS and runtime—IaaS gives the customer full control over these layers, whereas PaaS abstracts them away entirely.

How to eliminate wrong answers

Option B (PaaS) is wrong because in PaaS, the provider manages not only the physical infrastructure but also the operating system and runtime environment, leaving the customer only to deploy and manage their application code and data. Option C (SaaS) is wrong because in SaaS, the provider manages the entire application stack, including the OS, runtime, and application, and the customer only uses the software via a web browser or API without any control over the underlying platform. Option D (FaaS) is wrong because FaaS is a subset of serverless computing where the customer only deploys individual functions (code snippets) and the provider dynamically manages the runtime and infrastructure, including the OS, scaling, and execution environment, which contradicts the customer managing the OS and runtime.

Practice this question →

16

MCQhard

Refer to the exhibit. A Contoso administrator configures a Conditional Access policy as shown. Users report they cannot access email on their Android phones using the default email app. What is the most likely cause?

A.The user is excluded from the policy.

B.The default Android email app uses legacy authentication.

C.The policy requires multi-factor authentication.

D.The policy does not apply to mobile devices.

AnswerB

The policy blocks legacy authentication clients.

Why this answer

Option B is correct because the policy blocks legacy authentication clients like the default Android email app. Option A is wrong because the policy does not require MFA. Option C is wrong because the user is not excluded.

Option D is wrong because the policy applies to all users.

Practice this question →

17

MCQeasy

A company wants to reduce hardware maintenance costs by moving to the cloud. They need to maintain full control over the operating system, applications, and security configurations, but do not want to manage physical servers or data center facilities. Which cloud service model should they choose?

A.Software as a Service (SaaS)

B.Platform as a Service (PaaS)

C.Infrastructure as a Service (IaaS)

D.On-premises

AnswerC

IaaS gives the user control over the operating system, applications, and security configurations while the cloud provider manages the physical hardware.

Why this answer

Infrastructure as a Service (IaaS) provides virtualized computing resources over the internet, allowing the company to deploy and manage their own operating systems, applications, and security configurations while offloading the physical hardware and data center management to the cloud provider. This model gives the highest level of control over the software stack without the burden of maintaining physical servers, aligning perfectly with the requirement to reduce hardware maintenance costs while retaining full administrative access.

Exam trap

The trap here is that candidates often confuse PaaS with IaaS because both are cloud models, but PaaS removes control over the OS and runtime environment, which is the critical distinction when the question explicitly requires maintaining full control over the operating system and security configurations.

How to eliminate wrong answers

Option A is wrong because Software as a Service (SaaS) delivers fully managed applications accessed via a web browser, where the customer has no control over the underlying operating system, runtime, or security configurations—contradicting the need for full control. Option B is wrong because Platform as a Service (PaaS) abstracts the operating system and middleware, providing a managed runtime environment for application development; the customer cannot control the OS or security configurations at the infrastructure level. Option D is wrong because on-premises deployment requires the company to own and manage physical servers and data center facilities, directly conflicting with the goal of reducing hardware maintenance costs.

Practice this question →

18

Matchingmedium

Match each Microsoft 365 subscription plan to its description.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

Web and mobile versions of Office apps with email and cloud services

Full desktop Office apps with email and cloud services

Includes security and device management in addition to Business Standard

Full desktop Office apps only, no email or cloud services

Why these pairings

These plans differ in features like desktop apps, email, and security.

Practice this question →

19

Multi-Selectmedium

Which TWO cloud benefits are most directly related to cost savings for an organization moving to Microsoft 365?

Select 2 answers

A.Consumption-based pricing

B.Self-service

C.Global scale

D.Hybrid capabilities

E.Reduced maintenance overhead

AnswersA, E

Only pay for what you use, reducing waste.

Why this answer

Options A and E are correct. Consumption-based pricing reduces upfront costs. Reduced maintenance overhead lowers operational costs.

Option B is wrong because global scale can increase costs. Option C is wrong because self-service may not directly save costs. Option D is wrong because hybrid capabilities may require additional investment.

Practice this question →

20

MCQeasy

Adatum Corporation is a small business with 50 employees. They use Microsoft 365 Business Basic and SharePoint Online for document management. Employees frequently share files with external partners via email attachments. The CEO wants to reduce the risk of data leaks and ensure that shared files are protected even after they are sent. Which Microsoft 365 solution should Adatum implement?

A.SharePoint external sharing settings

B.Data Loss Prevention (DLP) policies

C.Sensitivity labels

D.Microsoft Purview Message Encryption

AnswerD

Message Encryption encrypts email content and attachments, and allows control over forwarding and printing.

Why this answer

Option A is correct because Microsoft Purview Message Encryption allows encrypting emails and attachments, and can restrict actions like forwarding. Option B is wrong because SharePoint external sharing controls access to SharePoint, not email attachments. Option C is wrong because DLP policies prevent sharing but do not protect after sending.

Option D is wrong because sensitivity labels can be applied manually but do not automatically protect attachments in transit.

Practice this question →

21

MCQhard

WideWorldImporters (WWI) is a retail company with 2,000 employees using Microsoft 365 Business Premium. They have a mix of Windows 10 and Windows 11 devices managed by Microsoft Intune. WWI wants to deploy a new line-of-business (LOB) app to all devices. The app is a Win32 app packaged as an .intunewin file. The IT administrator needs to ensure the app is installed automatically on all devices within 24 hours. Which deployment method should the administrator use?

A.Use Azure AD Application Proxy to publish the app

B.Add the app as an available deployment for all users

C.Add the app as a required deployment for all devices

D.Publish the app to Microsoft Store for Business and sync with Intune

AnswerC

Required deployment forces automatic installation on targeted devices.

Why this answer

Option B is correct because Intune's Win32 app deployment with a required assignment ensures automatic installation. Option A is wrong because available deployment requires user action. Option C is wrong because Microsoft Store for Business is for store apps, not LOB Win32 apps.

Option D is wrong because Azure AD application proxy is for remote access, not deployment.

Practice this question →

22

MCQeasy

Which cloud computing characteristic allows users to be billed only for the resources they consume, such as processing power, storage, or bandwidth?

A.On-demand self-service

B.Broad network access

C.Measured service

D.Resource pooling

AnswerC

Measured service enables metering and billing based on actual usage, allowing pay-as-you-go pricing.

Why this answer

Measured service is the cloud computing characteristic that enables usage-based billing by monitoring, controlling, and reporting resource consumption (e.g., CPU hours, GB of storage, or data transfer) at a granular level. This metering capability allows providers to charge customers only for what they actually use, rather than a flat fee, and is typically implemented via telemetry and billing APIs.

Exam trap

The trap here is that candidates often confuse 'measured service' with 'resource pooling' because both involve dynamic allocation, but measured service specifically refers to the metering and billing aspect, not the multi-tenant sharing of resources.

How to eliminate wrong answers

Option A is wrong because on-demand self-service refers to a user's ability to provision computing resources automatically without requiring human interaction with the service provider, not to billing or consumption tracking. Option B is wrong because broad network access describes the availability of resources over the network via standard protocols (e.g., HTTP, HTTPS) from various devices, not the metering or charging mechanism. Option D is wrong because resource pooling involves the provider's multi-tenant model where physical and virtual resources are dynamically assigned and reassigned according to consumer demand, which supports scalability but does not directly enable per-consumption billing.

Practice this question →

23

MCQmedium

Refer to the exhibit. What is the purpose of the 'classification' property in this Microsoft Purview sensitivity label policy?

A.To set the retention period for the labeled content

B.To define encryption settings for the label

C.To specify the sensitivity level of the content

D.To define user permissions for accessing the content

AnswerC

Classification indicates the sensitivity level, which determines protection actions.

Why this answer

Option B is correct. The 'classification' property defines the sensitivity level of the content, such as 'Confidential'. It is used to apply appropriate protection actions.

Option A is incorrect because encryption is configured separately. Option C is incorrect because retention is set by 'retentionDays'. Option D is incorrect because user permissions are not defined here.

Practice this question →

24

MCQeasy

A company's CFO is pleased that they only pay for the compute and storage resources consumed each month, with no upfront hardware costs. This billing model is a direct result of which cloud computing characteristic?

A.On-demand self-service

B.Broad network access

C.Measured service

D.Resource pooling

AnswerC

Measured service is the cloud characteristic that provides metering and billing based on usage. This allows customers to pay only for what they consume, with no upfront costs.

Why this answer

The CFO's observation that the company only pays for consumed compute and storage resources with no upfront hardware costs directly reflects the 'measured service' characteristic of cloud computing. Measured service means cloud providers meter resource usage (e.g., CPU hours, GB-months of storage) and bill based on actual consumption, typically using a pay-as-you-go model. This eliminates the need for capital expenditure on hardware, as costs are operational and tied to usage metrics.

Exam trap

The trap here is that candidates often confuse 'measured service' with 'resource pooling' because both involve multi-tenancy and efficiency, but measured service is specifically about usage metering and billing, not the underlying resource sharing architecture.

How to eliminate wrong answers

Option A is wrong because on-demand self-service refers to a user's ability to provision resources automatically without requiring human interaction with the provider, not to the billing or cost model. Option B is wrong because broad network access describes the availability of resources over the network via standard protocols (e.g., HTTP, HTTPS) and accessed by various devices, not the consumption-based pricing. Option D is wrong because resource pooling involves the provider's multi-tenant model where physical and virtual resources are dynamically assigned to serve multiple customers, which enables efficiency but does not directly result in pay-per-use billing.

Practice this question →

25

MCQeasy

Your organization is using Microsoft 365 and wants to ensure that services remain accessible even if one datacenter experiences an outage. Which concept should they rely on?

A.Scalability

B.Disaster recovery

C.High availability

D.Elasticity

AnswerC

High availability uses redundancy to maintain service during failures.

Why this answer

Option A is correct because high availability ensures uptime through redundancy. Option B is wrong because disaster recovery focuses on restoring after major disaster. Option C is wrong because scalability is about handling load.

Option D is wrong because elasticity is about automatic scaling.

Practice this question →

26

MCQmedium

A department head asks which Microsoft 365 option should be used to access cloud resources from laptops, tablets, and phones over the internet. Cloud concept or benefit best matches this requirement?

A.Sensitivity labels

B.Microsoft Planner

C.Data Loss Prevention (DLP)

D.Broad network access

AnswerD

Broad network access means cloud services are reachable over standard networks from different client platforms.

Why this answer

Broad network access is a core NIST cloud characteristic that enables resources to be accessed over the internet by standard protocols (e.g., HTTPS, TLS) from a wide range of client devices such as laptops, tablets, and phones. This directly matches the requirement for accessing cloud resources from multiple device types over the internet.

Exam trap

The trap here is that candidates confuse operational features (like sensitivity labels or DLP) with foundational cloud characteristics, failing to recognize that 'broad network access' is the specific NIST-defined term for multi-device internet-based access.

How to eliminate wrong answers

Option A is wrong because sensitivity labels are a Microsoft Purview Information Protection feature used to classify and protect data based on sensitivity, not to enable network access from devices. Option B is wrong because Microsoft Planner is a task management and collaboration tool within Microsoft 365, not a cloud concept or benefit for device access. Option C is wrong because Data Loss Prevention (DLP) is a security policy mechanism to prevent unauthorized sharing of sensitive data, not a cloud characteristic for broad device connectivity.

Practice this question →

27

MCQeasy

A company uses a cloud provider that bills them based on the exact amount of storage and compute hours they consume each month. They can increase or decrease their usage at any time without signing a long-term contract. Which cloud computing characteristic is most directly demonstrated by the billing model?

A.Scalability

B.Elasticity

C.Measured service

D.On-demand self-service

AnswerC

Measured service enables pay-per-use billing by tracking resource consumption.

Why this answer

The billing model described—paying for exactly the amount of storage and compute hours consumed, with no long-term contract—directly demonstrates the measured service characteristic. Measured service means that cloud resource usage is metered, monitored, and reported, allowing providers to charge customers based on actual consumption (pay-as-you-go). This is a core attribute of cloud computing as defined by NIST SP 800-145, where usage is tracked and billed transparently.

Exam trap

The trap here is that candidates confuse elasticity (the ability to scale dynamically) with measured service (the metering and billing of that usage), because both involve variable resource consumption, but measured service is specifically about the tracking and charging mechanism.

How to eliminate wrong answers

Option A is wrong because scalability refers to the ability to handle increased workload by adding resources, not to the billing model itself. Option B is wrong because elasticity is the ability to automatically scale resources up or down in response to demand, which is a separate operational characteristic from how usage is measured and billed. Option D is wrong because on-demand self-service means a user can provision resources without human interaction with the provider, which is about provisioning capability, not the metering and billing mechanism.

Practice this question →

28

MCQmedium

A company wants monthly billing based on the number of Microsoft 365 users assigned licenses. Which cloud characteristic does this represent?

A.Fault tolerance

B.Resource pooling

C.Measured service

D.Rapid elasticity

AnswerC

Measured service means usage can be metered, monitored, and billed based on consumption or assigned service usage.

Why this answer

Measured service is a cloud characteristic where usage is metered and billed based on consumption. In this scenario, the company is billed monthly based on the number of Microsoft 365 users assigned licenses, which directly reflects metered usage of the service. This aligns with the pay-per-use model defined by NIST SP 800-145 for cloud computing.

Exam trap

The trap here is that candidates confuse 'measured service' with 'rapid elasticity' because both involve dynamic changes, but measured service is specifically about metering and billing, not about scaling resources.

How to eliminate wrong answers

Option A is wrong because fault tolerance refers to a system's ability to continue operating after a component failure, not to billing or usage metering. Option B is wrong because resource pooling describes the provider's multi-tenant model where physical and virtual resources are dynamically assigned to multiple customers, not the billing mechanism. Option D is wrong because rapid elasticity involves the ability to quickly scale resources up or down based on demand, which is unrelated to how usage is measured and billed.

Practice this question →

29

MCQeasy

A company wants to migrate their on-premises file servers to Microsoft 365. Which cloud service model describes this approach?

A.Platform as a Service (PaaS)

B.Software as a Service (SaaS)

C.Desktop as a Service (DaaS)

D.Infrastructure as a Service (IaaS)

AnswerD

IaaS provides virtualized computing resources like VMs and storage, suitable for migrating on-premises servers.

Why this answer

Option A is correct because IaaS provides virtualized computing resources over the internet, such as virtual machines and storage. Moving file servers to IaaS means they are still managed by the customer but hosted in the cloud. Option B (PaaS) is for application development and deployment without managing infrastructure, not file servers.

Option C (SaaS) provides ready-to-use software like Microsoft 365 apps, not infrastructure. Option D (DaaS) delivers virtual desktops, not file servers.

Practice this question →

30

MCQeasy

A company uses cloud resources and notices that their monthly bill is based on the exact amount of storage and compute hours they consumed. They did not pay for any fixed, unused capacity. Which cloud characteristic does this describe?

A.Rapid elasticity

B.Resource pooling

C.On-demand self-service

D.Measured service

AnswerD

Measured service enables the provider to track usage and bill customers based on consumption.

Why this answer

Measured service is the cloud characteristic that enables usage-based billing, where customers pay only for the resources they actually consume (e.g., storage GB-hours, compute vCPU-hours) without any upfront or fixed costs for idle capacity. This is implemented through metering capabilities at the hypervisor or resource provider level, which track consumption in granular units and feed into billing systems. The scenario explicitly describes paying for exact consumption, which aligns directly with the pay-per-use model of measured service.

Exam trap

The trap here is that candidates confuse 'measured service' with 'on-demand self-service' because both involve user-driven provisioning, but measured service specifically addresses the metering and billing aspect, not the provisioning mechanism.

How to eliminate wrong answers

Option A is wrong because rapid elasticity refers to the ability to automatically scale resources up or down quickly in response to demand, not to billing based on consumption. Option B is wrong because resource pooling describes the provider's ability to serve multiple tenants from a shared physical infrastructure using multi-tenancy, not the metering or billing mechanism. Option C is wrong because on-demand self-service allows users to provision resources without human interaction via a web portal or API, but it does not inherently describe how those resources are billed or that unused capacity is not charged.

Practice this question →

31

MCQhard

A global company must comply with data sovereignty laws that require customer data to be stored and processed within the country of origin. Which cloud concept should they evaluate?

A.Data classification

B.Data sovereignty

C.Data encryption

D.Data residency

AnswerD

Data residency determines the physical location of data, crucial for complying with data sovereignty laws.

Why this answer

Option C is correct because data residency refers to the physical location where data is stored, which is critical for compliance with data sovereignty laws. Option A (Data encryption) protects data at rest and in transit but does not control location. Option B (Data sovereignty) is the concept that data is subject to the laws of the country where it is collected, but the question asks for the concept to evaluate, which is data residency.

Option D (Data classification) categorizes data sensitivity but doesn't address location.

Practice this question →

32

Multi-Selectmedium

A company plans to migrate its on-premises workloads to the cloud. They will use Virtual Machines (VMs) for their legacy applications and a serverless computing service for new microservices. The cloud provider will manage the physical hardware, but the company is responsible for patching the operating system of the VMs. Which two cloud service models are being used?

Select 2 answers

A.IaaS and PaaS

B.IaaS and SaaS

C.PaaS and SaaS

D.IaaS only

AnswersA, D

VMs are IaaS; serverless is PaaS.

Why this answer

The company uses Virtual Machines (VMs) for legacy applications, where it manages the OS patching while the cloud provider handles the physical hardware — this is Infrastructure as a Service (IaaS). For new microservices, it uses a serverless computing service, which is a form of Platform as a Service (PaaS) where the provider manages the runtime and scaling, and the company only deploys code. Therefore, the two models are IaaS and PaaS, making option A correct.

Exam trap

The trap here is that candidates confuse serverless computing with SaaS, thinking it is a fully managed software service, when in fact it is a PaaS model where the customer writes and deploys code, not consumes a pre-built application.

Practice this question →

33

MCQeasy

A financial services firm uses a public cloud provider for its customer-facing web application, but stores sensitive client data on its own on-premises servers. A secure VPN connection is used to transfer anonymized data from the public cloud to the on-premises environment for processing. Which cloud deployment model does this describe?

A.Public cloud

B.Private cloud

C.Hybrid cloud

D.Community cloud

AnswerC

Correct. Hybrid cloud integrates public and private cloud environments, often connected via VPN, allowing workloads to move between them.

Why this answer

This scenario describes a hybrid cloud because it combines a public cloud provider for the customer-facing web application with an on-premises private cloud for sensitive client data, connected via a secure VPN. The hybrid cloud model enables organizations to leverage the scalability and cost-efficiency of public cloud resources while maintaining strict control over sensitive data in a private environment. The use of a VPN to transfer anonymized data between the two environments is a key characteristic of hybrid cloud architecture, as it ensures secure communication across the boundary.

Exam trap

The trap here is that candidates may incorrectly choose 'Public cloud' because they focus on the customer-facing web application being hosted there, ignoring the on-premises storage of sensitive data, which is the defining characteristic of a hybrid deployment.

How to eliminate wrong answers

Option A is wrong because a public cloud model would have all resources, including sensitive client data, hosted and managed by the third-party cloud provider, not stored on-premises. Option B is wrong because a private cloud model would have all resources, including the web application, hosted on-premises or in a dedicated environment, not using a public cloud provider. Option D is wrong because a community cloud is shared by several organizations with common concerns (e.g., compliance or security requirements), but this scenario involves only one firm using both public and private infrastructure, not a multi-tenant community.

Practice this question →

34

MCQmedium

A tenant administrator is advising a department that wants to use Microsoft 365 and another public cloud provider for different workloads. Cloud concept or benefit best matches this requirement?

A.Microsoft Planner

B.Sensitivity labels

C.Multi-cloud

D.Data Loss Prevention (DLP)

AnswerC

Multi-cloud means using cloud services from more than one public cloud provider.

Why this answer

C is correct because multi-cloud refers to using multiple public cloud providers (e.g., Microsoft 365 and another provider like AWS or Google Cloud) for different workloads, which directly matches the requirement. This allows the organization to avoid vendor lock-in, optimize costs, and leverage best-of-breed services across clouds.

Exam trap

The trap here is that candidates may confuse multi-cloud with hybrid cloud (which combines public and private cloud) or think a specific Microsoft tool (like Planner) is the answer, when the question explicitly asks for a cloud concept or benefit.

How to eliminate wrong answers

Option A is wrong because Microsoft Planner is a task management and planning tool within Microsoft 365, not a cloud concept or benefit for using multiple cloud providers. Option B is wrong because sensitivity labels are a Microsoft Purview Information Protection feature used to classify and protect data, not a cloud deployment model. Option D is wrong because Data Loss Prevention (DLP) is a security policy mechanism to prevent unauthorized data sharing, not a cloud concept for multi-cloud usage.

Practice this question →

35

Multi-Selectmedium

Which three of the following correctly describe the shared responsibility model in Microsoft 365? (Choose three.)

Select 3 answers

.Microsoft is responsible for the physical security of its datacenters.

.The customer is responsible for managing user identities and access.

.Microsoft is responsible for maintaining the underlying network infrastructure.

.The customer is responsible for patching the operating system of Exchange Online servers.

.Microsoft is responsible for ensuring customer data is backed up in all scenarios.

.The customer is responsible for physical security of client devices used to access Microsoft 365.

Why this answer

The shared responsibility model delineates security and compliance obligations between Microsoft and the customer. Microsoft is responsible for the physical security of its datacenters, including access controls, surveillance, and environmental protections. The customer is responsible for managing user identities and access, such as configuring Azure Active Directory, enforcing multi-factor authentication, and controlling permissions.

Microsoft is responsible for maintaining the underlying network infrastructure, including the physical network hardware, routing, and connectivity within its datacenters and between regions.

Exam trap

The trap here is that candidates often assume Microsoft handles all security aspects, including data backup and OS patching for SaaS, but the model explicitly assigns data protection and identity management to the customer, while Microsoft only guarantees infrastructure uptime and physical security.

Practice this question →

36

MCQeasy

A business needs staff to access Microsoft 365 services from different locations using only an internet connection. Which cloud benefit is being used?

A.Capital expenditure spending

B.Manual provisioning

C.Broad network access

D.Server virtualization only

AnswerC

Broad network access means services are available over the network from many client types and locations.

Why this answer

Broad network access is a core characteristic of cloud computing defined by NIST SP 800-145. It means that resources are available over the network and can be accessed by standard client platforms (e.g., laptops, tablets, smartphones) using only an internet connection, without requiring a dedicated private link or on-premises hardware. In this scenario, staff accessing Microsoft 365 from different locations via the internet directly demonstrates broad network access.

Exam trap

The trap here is that candidates confuse 'broad network access' with 'server virtualization' or 'CapEx spending,' because they think cloud benefits are about hardware consolidation or cost models, rather than the fundamental characteristic of network-based, ubiquitous access.

How to eliminate wrong answers

Option A is wrong because capital expenditure (CapEx) spending refers to upfront investment in physical infrastructure (e.g., servers, data centers), which is the opposite of the cloud's operational expenditure (OpEx) model; the question describes accessing services via the internet, not a financial model. Option B is wrong because manual provisioning involves human intervention to set up resources, whereas cloud services like Microsoft 365 are self-service and automatically provisioned; the scenario focuses on access, not provisioning. Option D is wrong because server virtualization is a technology that enables multiple virtual machines on a single physical server, but it is not a cloud benefit itself and does not describe the ability to access services from anywhere via the internet; broad network access is the correct benefit.

Practice this question →

37

MCQhard

An organization uses Microsoft 365 E5 licenses. Users report that Microsoft 365 Apps for enterprise (e.g., Word, Excel) are slow to open. The IT team considers deploying a cloud-based solution to improve performance. Which cloud service model should they use?

A.Platform as a Service (PaaS)

B.Software as a Service (SaaS)

C.Infrastructure as a Service (IaaS)

D.Function as a Service (FaaS)

AnswerB

SaaS delivers Microsoft 365 Apps via the cloud, optimized for performance and reduced local load.

Why this answer

Option D is correct because SaaS (Software as a Service) provides ready-to-use applications like Microsoft 365 Apps via the cloud, reducing local processing requirements. Option A is wrong because IaaS would require managing virtual machines and installing software. Option B is wrong because PaaS is for application development, not end-user apps.

Option C is wrong because FaaS is for event-driven functions, not desktop applications.

Practice this question →

38

MCQmedium

A company runs a custom application on a cloud provider's infrastructure. The provider manages the physical servers, networking, and storage, but the company installs, configures, and patches the operating system and application. Which cloud service model is this?

A.Software as a Service (SaaS)

B.Platform as a Service (PaaS)

C.Infrastructure as a Service (IaaS)

D.Function as a Service (FaaS)

AnswerC

Correct. The customer has control over the OS, storage, and deployed applications, while the provider manages the physical infrastructure.

Why this answer

This scenario describes Infrastructure as a Service (IaaS) because the cloud provider manages the underlying physical infrastructure (servers, networking, storage), while the customer retains control over the operating system, middleware, and application. In IaaS, the customer is responsible for OS patching, configuration, and application management, which matches the given responsibilities.

Exam trap

The trap here is confusing IaaS with PaaS because both involve deploying applications, but the key differentiator is OS-level control and patching responsibility—IaaS gives you full OS access, while PaaS abstracts it away.

How to eliminate wrong answers

Option A is wrong because Software as a Service (SaaS) delivers a fully managed application to end users, where the provider handles everything including the OS and application, and the customer does not install or patch the OS. Option B is wrong because Platform as a Service (PaaS) provides a managed runtime environment where the provider manages the OS and middleware, and the customer only deploys code, not the OS or its patches. Option D is wrong because Function as a Service (FaaS) is an event-driven compute model where the provider manages the entire infrastructure and the customer only uploads individual functions, with no OS-level access or patching responsibility.

Practice this question →

39

MCQmedium

A development team uses a cloud service to run applications where the provider manages the runtime environment, operating system, and middleware. The team only writes and uploads code. Which service model are they using?

A.IaaS (Infrastructure as a Service)

B.PaaS (Platform as a Service)

C.SaaS (Software as a Service)

D.FaaS (Function as a Service)

AnswerB

PaaS abstracts the underlying platform, so the provider handles the OS, runtime, and middleware, enabling developers to deploy applications without managing infrastructure.

Why this answer

The scenario describes the team writing and uploading code while the provider manages the runtime environment, operating system, and middleware. This is the defining characteristic of Platform as a Service (PaaS), where the cloud provider abstracts the underlying infrastructure and platform layers, allowing developers to focus solely on application code. In PaaS, the provider handles OS patching, runtime updates, and middleware configuration, which matches the description exactly.

Exam trap

The trap here is that candidates often confuse PaaS with IaaS because both involve deploying applications, but the key differentiator is who manages the runtime and middleware — PaaS abstracts them away, while IaaS requires the user to manage them.

How to eliminate wrong answers

Option A (IaaS) is wrong because IaaS provides virtualized computing resources (e.g., VMs, storage, networks) but the user is responsible for managing the runtime environment, operating system, and middleware; the team would need to install and configure these themselves, not just upload code. Option C (SaaS) is wrong because SaaS delivers fully functional software applications over the internet (e.g., Office 365, Salesforce) where users consume the application without writing or uploading code; the team in the question is actively developing and uploading code. Option D (FaaS) is wrong because FaaS (Function as a Service) is a subset of serverless computing where developers upload individual functions that are executed in response to events, but the provider still manages the runtime environment; however, the question specifies the team runs 'applications' and manages the 'runtime environment, operating system, and middleware' at a higher abstraction level than individual functions, and FaaS typically involves event-driven, stateless functions rather than full application hosting.

Practice this question →

40

MCQmedium

During a Microsoft 365 planning workshop, keep a workload on-premises while using Microsoft cloud collaboration services. Cloud concept or benefit best matches this requirement?

A.Hybrid cloud

B.Sensitivity labels

C.Microsoft Planner

D.Data Loss Prevention (DLP)

AnswerA

Hybrid cloud combines on-premises or private resources with public cloud services.

Why this answer

A hybrid cloud model is the correct answer because it explicitly describes a scenario where an organization keeps certain workloads on-premises while integrating with Microsoft cloud collaboration services like Microsoft 365. This allows for a unified management plane, identity federation via Azure AD Connect, and seamless data synchronization between on-premises infrastructure and cloud services such as Exchange Online, SharePoint Online, or Teams.

Exam trap

The trap here is that candidates may confuse a specific Microsoft 365 feature (like sensitivity labels or DLP) with a cloud deployment model, failing to recognize that 'hybrid cloud' is the architectural concept that directly addresses the requirement of mixing on-premises and cloud services.

How to eliminate wrong answers

Option B is wrong because sensitivity labels are a Microsoft 365 compliance feature used to classify and protect data based on sensitivity, not a cloud deployment model that enables hybrid connectivity. Option C is wrong because Microsoft Planner is a task management application within Microsoft 365, not a cloud concept or benefit that supports keeping workloads on-premises. Option D is wrong because Data Loss Prevention (DLP) is a policy-based security feature to prevent unauthorized sharing of sensitive data, not a cloud architecture that allows hybrid workloads.

Practice this question →

41

MCQeasy

During requirements gathering, an IT manager says the organization must let users provision resources from a portal without provider interaction. Cloud concept or benefit best matches this requirement?

A.On-demand self-service

B.Data Loss Prevention (DLP)

C.Microsoft Planner

D.Sensitivity labels

AnswerA

On-demand self-service allows consumers to provision resources automatically when needed.

Why this answer

On-demand self-service is a core NIST-defined characteristic of cloud computing that allows users to provision computing resources—such as virtual machines, storage, or network capacity—automatically through a web portal or API without requiring human interaction from the service provider. This directly matches the IT manager's requirement for users to provision resources from a portal without provider interaction, making option A correct.

Exam trap

The trap here is that candidates may confuse a specific Microsoft 365 feature (like Planner or sensitivity labels) with a fundamental cloud computing characteristic, or mistakenly think DLP is a provisioning mechanism, when the question explicitly tests the NIST definition of on-demand self-service.

How to eliminate wrong answers

Option B is wrong because Data Loss Prevention (DLP) is a security policy and technology used to prevent sensitive data from being leaked or shared inappropriately, not a cloud concept for self-service resource provisioning. Option C is wrong because Microsoft Planner is a task management and planning application within Microsoft 365, not a cloud computing characteristic or benefit related to provisioning resources without provider interaction. Option D is wrong because sensitivity labels are classification and protection mechanisms applied to documents and emails to enforce access controls and encryption, not a cloud concept for automated resource provisioning.

Practice this question →

42

MCQhard

A company migrates its database to Azure SQL Database (PaaS). According to the shared responsibility model, which of the following is the customer's responsibility?

A.Managing user access and authentication

B.Patching the operating system of the database server

C.Maintaining the physical infrastructure

D.Managing the virtualization layer

AnswerA

In PaaS, the customer is responsible for their data, including who has access and authentication.

Why this answer

In the shared responsibility model for Azure SQL Database (PaaS), the customer is responsible for managing user access and authentication because the customer controls who can connect to the database and what permissions they have. Microsoft manages the underlying infrastructure, including the operating system, physical hardware, and virtualization layer, while the customer must secure data access through Azure Active Directory or SQL authentication, configure firewall rules, and manage logins and users.

Exam trap

The trap here is that candidates often assume patching or infrastructure maintenance is shared in PaaS, but Microsoft fully manages the OS and physical layers, while the customer's responsibility is strictly limited to data, access, and application-level security.

How to eliminate wrong answers

Option B is wrong because patching the operating system of the database server is the responsibility of Microsoft, not the customer, as Azure SQL Database is a PaaS service where Microsoft handles OS-level updates and security patches. Option C is wrong because maintaining the physical infrastructure, such as servers, storage, and networking hardware, is entirely managed by Microsoft in the cloud model. Option D is wrong because managing the virtualization layer, including hypervisors and virtual machine orchestration, is also Microsoft's responsibility in a PaaS offering like Azure SQL Database.

Practice this question →

43

MCQeasy

A small business wants to use email and collaboration software without maintaining servers, databases, or application updates. Which cloud service model best describes Microsoft 365?

A.Infrastructure as a Service (IaaS)

B.Platform as a Service (PaaS)

C.Software as a Service (SaaS)

D.On-premises hosting

AnswerC

Microsoft 365 delivers complete cloud-hosted applications that Microsoft operates and updates.

Why this answer

Microsoft 365 is a cloud-based suite that provides email (Exchange Online) and collaboration tools (Teams, SharePoint) as ready-to-use applications. This aligns with the SaaS model, where the provider manages the underlying infrastructure, platform, and software updates, allowing the customer to simply use the software without server maintenance.

Exam trap

The trap here is that candidates often confuse PaaS with SaaS because both are 'platforms' in a broad sense, but PaaS is for developers building apps (e.g., Azure App Service), while SaaS delivers finished applications like Microsoft 365.

How to eliminate wrong answers

Option A is wrong because IaaS provides virtualized computing resources (VMs, storage, networking) where the customer must still manage the OS, applications, and updates, which contradicts the 'without maintaining servers' requirement. Option B is wrong because PaaS offers a development platform (runtime, database, middleware) for building custom applications, not ready-to-use email and collaboration software like Microsoft 365. Option D is wrong because on-premises hosting requires the customer to own and maintain all hardware, software, and updates locally, which is the opposite of the cloud-based, no-maintenance model described.

Practice this question →

44

MCQmedium

A service owner is comparing Microsoft 365 capabilities and needs to understand which security tasks Microsoft handles and which remain with the customer. Cloud concept or benefit best matches this requirement?

A.Microsoft Planner

B.Data Loss Prevention (DLP)

C.Sensitivity labels

D.Shared responsibility model

AnswerD

The shared responsibility model explains provider and customer responsibilities in cloud services.

Why this answer

The shared responsibility model defines which security tasks are handled by Microsoft (e.g., physical security, hypervisor patching) and which remain with the customer (e.g., user access management, data classification). This directly matches the service owner's need to understand the division of security responsibilities in Microsoft 365.

Exam trap

The trap here is that candidates may confuse specific security features (like DLP or sensitivity labels) with the overarching responsibility framework, failing to recognize that the shared responsibility model is the foundational concept that explains the division of security tasks.

How to eliminate wrong answers

Option A is wrong because Microsoft Planner is a task management and collaboration tool, not a security concept that defines responsibility boundaries. Option B is wrong because Data Loss Prevention (DLP) is a specific security feature that helps prevent data leaks, but it does not describe the overarching model of shared security responsibilities. Option C is wrong because sensitivity labels are used to classify and protect data based on policies, but they are a tool within the customer's responsibilities, not the model that explains which tasks Microsoft handles versus the customer.

Practice this question →

45

MCQmedium

A help desk lead is documenting the correct Microsoft 365 approach to keep a workload on-premises while using Microsoft cloud collaboration services. Cloud concept or benefit best matches this requirement?

A.Hybrid cloud

B.Sensitivity labels

C.Microsoft Planner

D.Data Loss Prevention (DLP)

AnswerA

Hybrid cloud combines on-premises or private resources with public cloud services.

Why this answer

A hybrid cloud model is the correct approach because it allows an organization to keep a specific workload on-premises while leveraging Microsoft cloud collaboration services (such as Exchange Online, SharePoint Online, or Teams). This is achieved through integration technologies like Azure AD Connect for identity synchronization and Exchange Hybrid Configuration Wizard for mail routing, enabling a seamless coexistence between on-premises and cloud environments.

Exam trap

The trap here is that candidates confuse a specific Microsoft 365 service or feature (like Planner or DLP) with a cloud deployment model, failing to recognize that 'hybrid cloud' is the architectural concept that directly addresses the requirement of keeping a workload on-premises while using cloud services.

How to eliminate wrong answers

Option B (Sensitivity labels) is wrong because sensitivity labels are a Microsoft Information Protection feature used to classify and protect data based on sensitivity, not to architect a hybrid deployment where workloads remain on-premises. Option C (Microsoft Planner) is wrong because Planner is a cloud-based task management tool within Microsoft 365, not a concept or benefit that describes keeping workloads on-premises while using cloud services. Option D (Data Loss Prevention) is wrong because DLP is a security policy mechanism to prevent unauthorized sharing of sensitive data, not a cloud deployment model that supports hybrid scenarios.

Practice this question →

46

Multi-Selecthard

Which TWO scenarios are best suited for a hybrid cloud deployment?

Select 2 answers

A.Extending on-premises Active Directory to Microsoft Entra ID

B.Using cloud bursting to handle peak load for an on-premises application

C.Storing archival data that is rarely accessed

D.Hosting a public-facing website with high traffic

E.Running a legacy application that requires physical hardware

AnswersA, B

Hybrid identity solutions connect on-premises AD to cloud.

Why this answer

Options A and D are correct. Hybrid cloud is ideal for connecting on-premises resources to public cloud, such as extending on-premises Active Directory to Azure AD (now Microsoft Entra ID) and using cloud bursting for extra capacity. Option B (Running a legacy app that requires physical hardware) is not cloud-friendly.

Option C (Hosting a public website) can be done in public cloud alone. Option E (Storing archival data) can be done in public cloud alone.

Practice this question →

47

MCQeasy

A department head asks which Microsoft 365 option should be used to meter compute and storage usage for consumption-based billing. Cloud concept or benefit best matches this requirement?

A.Sensitivity labels

B.Microsoft Planner

C.Data Loss Prevention (DLP)

D.Measured service

AnswerD

Measured service tracks usage so customers can be charged according to consumption.

Why this answer

Measured service is a core cloud computing concept where resource usage (compute, storage, network) is metered and billed based on actual consumption. In Microsoft 365, this aligns with consumption-based billing models like pay-as-you-go for Azure services or per-user licensing adjustments, enabling cost transparency and optimization.

Exam trap

The trap here is that candidates confuse operational tools (like DLP or Planner) with cloud service models, failing to recognize that 'measured service' is a fundamental characteristic of cloud computing defined by NIST SP 800-145, not a specific Microsoft 365 feature.

How to eliminate wrong answers

Option A is wrong because sensitivity labels are used for classification and protection of data (e.g., encryption, marking) and have no role in metering compute or storage usage. Option B is wrong because Microsoft Planner is a task management and collaboration tool for organizing work, not a billing or metering mechanism. Option C is wrong because Data Loss Prevention (DLP) policies prevent unauthorized sharing of sensitive data and do not track or bill for resource consumption.

Practice this question →

48

MCQeasy

A company wants to use a cloud service where they can develop and run applications without managing the underlying infrastructure, including servers, operating systems, or storage. They only need to upload their code and the provider handles scaling and availability. Which cloud service model best describes this approach?

A.Infrastructure as a Service (IaaS)

B.Platform as a Service (PaaS)

C.Software as a Service (SaaS)

D.On-premises deployment

AnswerB

Correct. PaaS abstracts the infrastructure, allowing developers to focus on code while the provider handles scaling, patching, and availability.

Why this answer

Platform as a Service (PaaS) provides a managed hosting environment where developers can deploy applications without worrying about the underlying infrastructure. The provider automatically handles server provisioning, OS patching, storage management, and scaling based on demand. In this scenario, the company only needs to upload code, which is the defining characteristic of PaaS.

Exam trap

The trap here is that candidates confuse PaaS with IaaS because both involve deploying applications, but IaaS requires manual OS and runtime management, whereas PaaS abstracts all infrastructure away.

How to eliminate wrong answers

Option A is wrong because Infrastructure as a Service (IaaS) still requires the user to manage the operating system, middleware, and runtime; the provider only supplies virtualized hardware like compute, storage, and networking. Option C is wrong because Software as a Service (SaaS) delivers fully functional applications to end users over the internet, not a platform for developing and running custom code. Option D is wrong because on-premises deployment means the company owns and manages all hardware and software locally, which is the opposite of a cloud service where the provider handles infrastructure.

Practice this question →

49

MCQeasy

Which cloud computing characteristic allows a company to access resources like storage and databases from any device with an internet connection without needing to manage the physical infrastructure?

A.Rapid elasticity

B.Measured service

C.Broad network access

D.Resource pooling

AnswerC

Broad network access ensures resources are available over the network from any device with internet connectivity.

Why this answer

Broad network access is the correct answer because it describes the ability to access cloud resources (such as storage and databases) over the network via standard protocols (e.g., HTTP/HTTPS, SMB, NFS) from any device (laptop, smartphone, tablet) with an internet connection, without requiring the customer to manage the underlying physical infrastructure. This characteristic is defined by NIST SP 800-145 as 'capabilities are available over the network and accessed through standard mechanisms that promote use by heterogeneous thin or thick client platforms.'

Exam trap

The trap here is that candidates often confuse 'broad network access' with 'resource pooling' because both involve multi-device scenarios, but resource pooling is about the provider's internal multi-tenant architecture, not the customer's ability to connect from any device.

How to eliminate wrong answers

Option A is wrong because rapid elasticity refers to the ability to automatically scale resources up or down quickly in response to demand, not to the network-based accessibility from any device. Option B is wrong because measured service involves metering and monitoring resource usage for billing and optimization (e.g., pay-per-use), not the capability to access resources from any device. Option D is wrong because resource pooling means the provider's computing resources are pooled to serve multiple customers using a multi-tenant model, with physical and virtual resources dynamically assigned and reassigned according to consumer demand; it does not describe device-independent network access.

Practice this question →

50

MCQmedium

A company wants to deploy a cloud solution where they have the maximum control over the operating system, installed software, and security configurations, but they do not want to manage physical servers or data center facilities. Which cloud service model best meets this requirement?

A.Infrastructure as a Service (IaaS)

B.Platform as a Service (PaaS)

C.Software as a Service (SaaS)

D.Hybrid cloud

AnswerA

IaaS gives the customer full control over the OS and applications while the provider manages the hardware.

Why this answer

Infrastructure as a Service (IaaS) provides virtualized computing resources over the internet, giving the customer full administrative control over the operating system, installed software, and security configurations (e.g., firewall rules, patch management) while the cloud provider manages the physical servers, storage, and networking hardware. This model aligns with the requirement for maximum control without managing physical infrastructure.

Exam trap

The trap here is that candidates often confuse the deployment model (Hybrid cloud) with the service model, or they assume PaaS offers more control than it actually does because they overlook the provider-managed OS layer in PaaS.

How to eliminate wrong answers

Option B (PaaS) is wrong because it abstracts the underlying OS and runtime environment, limiting the customer's control over OS-level configurations, installed software, and security settings—the provider manages the OS and middleware. Option C (SaaS) is wrong because the customer has no control over the OS, software stack, or security configurations; they only use the application as provided. Option D (Hybrid cloud) is wrong because it is a deployment model (combining public and private clouds), not a service model, and does not inherently grant maximum control over OS and software—it describes where resources are located, not the level of control.

Practice this question →

51

MCQeasy

A company uses a cloud service where they can provision virtual machines, install any operating system, and manage all software on those machines. The cloud provider is responsible for the physical hardware, data center security, and network infrastructure. Which cloud service model does this represent?

A.IaaS (Infrastructure as a Service)

B.PaaS (Platform as a Service)

C.SaaS (Software as a Service)

D.FaaS (Function as a Service)

AnswerA

IaaS gives the customer flexibility to manage OS and software while the provider handles hardware and networking.

Why this answer

This scenario describes Infrastructure as a Service (IaaS) because the customer has full control over virtual machines, including the operating system and all installed software, while the cloud provider manages the underlying physical hardware, data center security, and network infrastructure. In IaaS, the provider offers virtualized computing resources over the internet, and the customer is responsible for everything above the hypervisor layer, such as OS patches, application configuration, and middleware.

Exam trap

The trap here is that candidates often confuse IaaS with PaaS because both involve virtual machines, but the key differentiator is whether the customer manages the operating system and software stack (IaaS) or the provider manages them (PaaS).

How to eliminate wrong answers

Option B is wrong because PaaS (Platform as a Service) provides a managed platform where the provider handles the runtime, middleware, and OS, and the customer only deploys code; the customer cannot install or manage an arbitrary operating system on virtual machines. Option C is wrong because SaaS (Software as a Service) delivers fully managed applications accessed via a web browser or client, with no customer control over the underlying infrastructure, OS, or virtual machines. Option D is wrong because FaaS (Function as a Service) is a serverless compute model where customers deploy individual functions that execute in response to events, and they have no visibility or control over virtual machines or operating systems.

Practice this question →

52

MCQeasy

A company's e-commerce website experiences a sudden surge in traffic during a promotional event. The cloud infrastructure automatically adds additional virtual servers to handle the load and removes them when traffic subsides, without any manual intervention from the IT team. Which cloud computing characteristic does this demonstrate?

A.Rapid elasticity

B.On-demand self-service

C.Resource pooling

D.Measured service

AnswerA

Correct. Rapid elasticity allows automatic scaling of resources to meet fluctuating demand, as described in the scenario.

Why this answer

The scenario describes the cloud infrastructure automatically scaling virtual servers up and down in response to traffic changes, which is the defining characteristic of rapid elasticity. This capability allows resources to be provisioned and released elastically, often automatically, to match demand at any given time, as defined by NIST SP 800-145.

Exam trap

The trap here is that candidates confuse 'on-demand self-service' (manual provisioning by a user) with 'rapid elasticity' (automatic scaling by the cloud platform), but the key differentiator is the lack of manual intervention in the scenario.

How to eliminate wrong answers

Option B is wrong because on-demand self-service refers to a user's ability to provision computing resources (e.g., spinning up a VM) without human interaction with the provider, not the automatic scaling of resources based on load. Option C is wrong because resource pooling describes the provider's multi-tenant model where physical and virtual resources are dynamically assigned to serve multiple customers, not the automatic scaling behavior. Option D is wrong because measured service involves metering and reporting resource usage for billing and optimization (e.g., pay-per-use), not the automatic addition or removal of servers in response to demand.

Practice this question →

53

MCQhard

A company is deploying a cloud solution where they have the ability to quickly scale up resources during peak demand and scale down during off-peak hours, paying only for what they use. They also need the provider to automatically manage the underlying platform, including patching the operating system. Which combination of cloud characteristics and service model best describes this scenario?

A.Elasticity and PaaS

B.Scalability and IaaS

C.Rapid elasticity and SaaS

D.Measured service and PaaS

AnswerA

Elasticity allows rapid scaling based on demand; PaaS manages the OS and platform, matching the provider responsibilities described.

Why this answer

Option A is correct because the scenario describes elasticity (the ability to scale resources up and down automatically based on demand) and Platform as a Service (PaaS), where the provider manages the underlying platform, including OS patching. Elasticity is a key cloud characteristic that enables dynamic scaling, and PaaS abstracts infrastructure management, aligning perfectly with the requirement for automatic platform maintenance.

Exam trap

The trap here is confusing scalability (a general capability) with elasticity (dynamic, automated scaling), and assuming IaaS includes platform management like patching, which it does not—IaaS only provides virtual machines where the customer handles the OS.

How to eliminate wrong answers

Option B is wrong because IaaS (Infrastructure as a Service) does not include automatic OS patching; the customer is responsible for managing the operating system and middleware. Option C is wrong because SaaS (Software as a Service) delivers fully managed applications, not a platform for deploying custom code, and the scenario requires platform-level control, not just application usage. Option D is wrong because measured service (metering and billing) is a cloud characteristic that applies to all service models, but it does not describe the automatic scaling or platform management mentioned in the scenario.

Practice this question →

54

MCQmedium

Which cloud deployment model provides the highest level of control over resources and infrastructure?

A.Public cloud

B.Private cloud

C.Hybrid cloud

D.Community cloud

AnswerB

Private cloud is dedicated to a single organization, offering full control over the infrastructure, networking, and security.

Why this answer

The private cloud deployment model provides the highest level of control over resources and infrastructure because it is dedicated to a single organization, allowing full customization of hardware, networking, and security policies. Unlike public or hybrid models, the organization retains exclusive administrative access and can enforce strict compliance requirements without sharing underlying physical resources with other tenants.

Exam trap

The trap here is that candidates often confuse 'control' with 'scalability' or 'cost efficiency,' assuming hybrid cloud offers the best of both worlds, but the question specifically asks for the highest level of control, which only a private cloud provides due to its single-tenant, fully customizable nature.

How to eliminate wrong answers

Option A is wrong because the public cloud model shares infrastructure across multiple tenants via a multi-tenant architecture, limiting control over underlying hardware and network configurations. Option C is wrong because the hybrid cloud model combines public and private clouds, but the public cloud portion inherently reduces overall control due to shared infrastructure and provider-managed services. Option D is wrong because the community cloud model is shared among several organizations with common concerns, which dilutes individual control compared to a dedicated private cloud.

Practice this question →

55

MCQeasy

A cloud provider uses a multi-tenant model where physical and virtual resources are dynamically assigned and reassigned according to consumer demand. This is an example of which cloud computing characteristic?

A.Rapid elasticity

B.Resource pooling

C.On-demand self-service

D.Measured service

AnswerB

Resource pooling allows the provider to serve multiple customers using a shared pool of resources, which are dynamically allocated.

Why this answer

Resource pooling is the correct answer because the multi-tenant model described involves the cloud provider pooling physical and virtual resources (e.g., compute, storage, network) to serve multiple consumers, with resources dynamically assigned and reassigned based on demand. This is a core characteristic of cloud computing as defined by NIST SP 800-145, where the provider's resources are pooled to achieve economies of scale while maintaining logical isolation between tenants.

Exam trap

The trap here is that candidates often confuse resource pooling with rapid elasticity because both involve dynamic resource assignment, but resource pooling specifically focuses on the multi-tenant sharing of a provider's resource pool, not the speed or automation of scaling.

How to eliminate wrong answers

Option A is wrong because rapid elasticity refers to the ability to quickly scale resources up or down, often automatically, to meet demand, not the pooling of resources across multiple tenants. Option C is wrong because on-demand self-service allows a consumer to provision computing capabilities unilaterally without requiring human interaction with the provider, which is a separate characteristic from resource pooling. Option D is wrong because measured service involves metering and monitoring resource usage (e.g., CPU hours, bandwidth) for billing and optimization, not the dynamic assignment of pooled resources to tenants.

Practice this question →

56

MCQmedium

A tenant administrator is advising a department that wants to deploy application code without maintaining the operating system or runtime platform. Cloud concept or benefit best matches this requirement?

A.Private cloud

B.Platform as a Service (PaaS)

C.Infrastructure as a Service (IaaS)

D.Software as a Service (SaaS)

AnswerB

PaaS lets developers focus on code while the provider manages the platform, runtime, and underlying infrastructure.

Why this answer

PaaS lets developers focus on code while the provider manages the platform, runtime, and underlying infrastructure.

Exam trap

Candidates might confuse PaaS with IaaS, forgetting that IaaS still requires the user to manage the operating system.

Practice this question →

57

MCQmedium

A cloud provider serves thousands of customers using the same physical hardware. Each customer's data and applications are isolated from one another through virtualization. The provider can dynamically allocate resources to customers based on demand. Which cloud characteristic does this describe?

A.Resource pooling

B.On-demand self-service

C.Rapid elasticity

D.Measured service

AnswerA

Correct. Resource pooling allows the provider to aggregate physical resources and serve multiple tenants (multi-tenancy).

Why this answer

This scenario describes resource pooling, where the cloud provider's computing resources (e.g., storage, processing, memory, network bandwidth) are pooled to serve multiple customers using a multi-tenant model. Virtualization isolates each customer's data and applications, while physical and virtual resources are dynamically assigned and reassigned according to consumer demand. This is a core characteristic of cloud computing as defined by NIST SP 800-145.

Exam trap

The trap here is that candidates often confuse 'resource pooling' with 'rapid elasticity' because both involve dynamic allocation, but resource pooling is about the multi-tenant sharing of physical infrastructure, while elasticity is about the speed and automation of scaling resources up or down.

How to eliminate wrong answers

Option B (On-demand self-service) is wrong because that characteristic describes a user's ability to provision computing capabilities automatically without requiring human interaction with the service provider, not the sharing of physical hardware. Option C (Rapid elasticity) is wrong because elasticity refers to the ability to scale resources up or down quickly and automatically in response to demand, not the underlying pooling of resources across tenants. Option D (Measured service) is wrong because measured service involves metering and monitoring resource usage for billing and optimization, not the isolation and dynamic allocation of shared physical hardware.

Practice this question →

58

MCQmedium

While preparing a Microsoft 365 adoption plan, a consultant is asked to use provider-managed infrastructure shared by multiple customers. Cloud concept or benefit best matches this requirement?

A.Public cloud

B.Data Loss Prevention (DLP)

C.Sensitivity labels

D.Microsoft Planner

AnswerA

Public cloud services run on provider-managed shared infrastructure with logical separation between customers.

Why this answer

The requirement for provider-managed infrastructure shared by multiple customers directly maps to the public cloud deployment model. In a public cloud, the cloud provider owns and manages the physical hardware, software, and supporting infrastructure, which is shared across multiple tenants (multi-tenancy). This is the core definition of public cloud as opposed to private or hybrid models.

Exam trap

The trap here is that candidates may confuse a specific Microsoft 365 feature (like DLP or sensitivity labels) with a cloud deployment model, failing to recognize that the question is asking about the fundamental cloud concept of shared, provider-managed infrastructure, not a security or productivity tool.

How to eliminate wrong answers

Option B is wrong because Data Loss Prevention (DLP) is a security policy feature within Microsoft 365 that helps prevent sensitive information from being shared or leaked; it does not describe a cloud deployment model or infrastructure sharing concept. Option C is wrong because sensitivity labels are classification and protection tools applied to documents and emails to enforce access controls and encryption; they are not a cloud concept related to shared infrastructure. Option D is wrong because Microsoft Planner is a task management and collaboration application within Microsoft 365; it is a specific service, not a cloud concept or benefit describing how infrastructure is deployed or shared.

Practice this question →

59

MCQeasy

Which characteristic of cloud computing allows a user to provision resources automatically without requiring human interaction with the service provider?

A.Rapid elasticity

B.Resource pooling

C.On-demand self-service

D.Measured service

AnswerC

On-demand self-service allows users to automatically get resources as needed without manual intervention.

Why this answer

Option C is correct because on-demand self-service is a fundamental characteristic of cloud computing defined by NIST (SP 800-145) that allows a user to unilaterally provision computing capabilities, such as server time and network storage, as needed automatically without requiring human interaction with each service provider. This is typically implemented through a web portal or API (e.g., AWS Console, Azure Portal, or RESTful APIs) that enables instant resource creation and configuration.

Exam trap

The trap here is that candidates often confuse 'rapid elasticity' with 'on-demand self-service' because both involve automation, but rapid elasticity focuses on scaling existing resources while on-demand self-service is about the initial provisioning without human intervention.

How to eliminate wrong answers

Option A is wrong because rapid elasticity refers to the ability to scale resources up or down quickly and automatically in response to demand, not to the initial provisioning without human interaction. Option B is wrong because resource pooling describes the provider's multi-tenant model where physical and virtual resources are dynamically assigned and reassigned according to consumer demand, not the user's ability to self-provision. Option D is wrong because measured service involves metering and monitoring resource usage (e.g., CPU hours, bandwidth, storage) for billing and optimization, not the automated provisioning process.

Practice this question →

60

Multi-Selectmedium

Which THREE are benefits of using cloud services compared to on-premises infrastructure?

Select 3 answers

A.Limited scalability due to resource constraints

B.Elasticity to scale resources up or down automatically

C.High availability through redundant infrastructure

D.Built-in disaster recovery capabilities

E.Capital expenditure (CapEx) is eliminated

AnswersB, C, D

Cloud resources can be scaled automatically based on demand.

Why this answer

Options A, B, and D are correct. Cloud provides high availability, elasticity, and disaster recovery capabilities. Option C (Capital expenditure reduction) is also a benefit, but the question asks for benefits; however, note that cloud shifts capex to opex, so it reduces capital expenditure.

But we need to select exactly three. Option E (Limited scalability) is false; cloud offers scalable resources.

Practice this question →

61

MCQeasy

Which cloud characteristic allows an organization to increase or decrease computing resources quickly based on demand, without requiring manual intervention?

A.Measured service

B.Rapid elasticity

C.Resource pooling

D.Broad network access

AnswerB

Rapid elasticity allows resources to be provisioned and released quickly, often automatically, to scale with demand.

Why this answer

Rapid elasticity is the cloud characteristic that enables automatic, on-demand scaling of computing resources (such as virtual machines, storage, or network bandwidth) in response to fluctuating workload demands, without requiring manual provisioning or de-provisioning. This is a core feature of cloud computing defined by NIST SP 800-145, allowing resources to scale out (increase) or scale in (decrease) dynamically, often using orchestration tools like Azure Autoscale or AWS Auto Scaling. The key distinction is that the scaling happens quickly and automatically, based on predefined rules or metrics like CPU utilization or request count.

Exam trap

The trap here is that candidates often confuse 'rapid elasticity' with 'resource pooling' because both involve dynamic allocation, but resource pooling is about sharing resources among multiple tenants, not about automatically scaling a single tenant's resources on demand.

How to eliminate wrong answers

Option A (Measured service) is wrong because it refers to the metering and billing of cloud resource usage (e.g., pay-per-use or consumption-based pricing), not the ability to scale resources up or down automatically. Option C (Resource pooling) is wrong because it describes the multi-tenant model where provider resources are pooled to serve multiple customers, with physical and virtual resources dynamically assigned and reassigned according to demand, but it does not inherently provide automatic scaling of individual customer resources. Option D (Broad network access) is wrong because it defines the capability for resources to be accessed over the network via standard protocols (e.g., HTTPS, SSH) from a wide range of devices (e.g., laptops, smartphones), not the ability to adjust resource capacity on demand.

Practice this question →

62

MCQeasy

Which cloud deployment model exclusively uses resources that are owned and managed by a single organization, and is often chosen for its high level of control and compliance?

A.Public cloud

B.Private cloud

C.Hybrid cloud

D.Community cloud

AnswerB

Private cloud provides exclusive use to a single organization, offering full control and compliance adherence.

Why this answer

The private cloud deployment model is correct because it is defined as a cloud infrastructure that is provisioned for exclusive use by a single organization. This model provides the highest level of control over data, security, and compliance, as the organization owns and manages the underlying hardware and software, often within its own data center or via a dedicated hosted environment.

Exam trap

The trap here is that candidates often confuse 'private cloud' with 'on-premises infrastructure' and may incorrectly select 'hybrid cloud' thinking it offers the same control, but the question specifically asks for a model that exclusively uses resources owned by a single organization, which is the defining characteristic of a private cloud.

How to eliminate wrong answers

Option A is wrong because the public cloud model uses resources owned and operated by a third-party cloud service provider (e.g., Microsoft Azure, AWS, Google Cloud) and is shared across multiple tenants, offering less control and compliance isolation. Option C is wrong because the hybrid cloud model combines both public and private clouds, allowing data and applications to be shared between them, which does not exclusively use resources owned by a single organization. Option D is wrong because the community cloud model is shared by several organizations with common concerns (e.g., compliance, security, policy), not exclusively owned and managed by a single organization.

Practice this question →

63

MCQeasy

A user wants to access company email and documents from any device, anywhere. Which cloud model is Microsoft 365?

A.Platform as a Service (PaaS)

B.Software as a Service (SaaS)

C.Infrastructure as a Service (IaaS)

D.Desktop as a Service (DaaS)

AnswerB

Microsoft 365 is SaaS, providing subscription-based access to email, documents, and collaboration tools.

Why this answer

Option C is correct because Microsoft 365 is a Software as a Service (SaaS) offering where users subscribe to software like Exchange Online and SharePoint Online. Option A (IaaS) provides infrastructure like VMs. Option B (PaaS) provides development platforms.

Option D (DaaS) provides virtual desktops.

Practice this question →

64

MCQmedium

A business stakeholder asks how Microsoft 365 can help them identify what remains a customer responsibility in Microsoft 365. Cloud concept or benefit best matches this requirement?

A.Microsoft Planner

B.Data Loss Prevention (DLP)

C.Sensitivity labels

D.Managing users, permissions, and data governance

AnswerD

Microsoft operates the service, but customers manage identities, permissions, content, and governance choices.

Why this answer

Option D is correct because the question asks which cloud concept or benefit helps identify customer responsibilities in Microsoft 365. Managing users, permissions, and data governance directly aligns with the shared responsibility model, where the customer is always responsible for their own data, user identities, and access policies. This option encapsulates the customer's duty to control who has access and how data is governed, which is a core cloud concept.

Exam trap

The trap here is that candidates often confuse specific security features (like DLP or sensitivity labels) with the broader cloud concept of customer responsibility, which is defined by the shared responsibility model rather than any single tool.

How to eliminate wrong answers

Option A is wrong because Microsoft Planner is a task management and project planning tool, not a concept or benefit that defines customer responsibilities in the cloud. Option B is wrong because Data Loss Prevention (DLP) is a security feature that helps protect sensitive data from being shared inappropriately, but it does not define the customer's overall responsibility scope in the shared responsibility model. Option C is wrong because sensitivity labels are used to classify and protect data based on its sensitivity, but they are a tool for implementing governance, not the underlying concept that identifies what remains a customer responsibility.

Practice this question →

65

MCQmedium

An administrator is reviewing a request from users who need to avoid overprovisioning for a seasonal workload. Cloud concept or benefit best matches this requirement?

A.Data Loss Prevention (DLP)

B.Sensitivity labels

C.Microsoft Planner

D.Rapid elasticity

AnswerD

Rapid elasticity allows capacity to increase during peaks and reduce when demand falls.

Why this answer

Rapid elasticity is a core cloud computing characteristic defined by NIST (SP 800-145) that allows resources to scale out and in automatically based on demand. For a seasonal workload, this means the cloud can provision additional compute or storage capacity during peak periods and release it when demand drops, preventing overprovisioning and optimizing costs.

Exam trap

The trap here is that candidates confuse operational tools (like Planner) or security features (like DLP and sensitivity labels) with core cloud architectural benefits, failing to recognize that rapid elasticity is the specific NIST-defined characteristic that directly addresses overprovisioning for variable workloads.

How to eliminate wrong answers

Option A is wrong because Data Loss Prevention (DLP) is a security feature in Microsoft Purview that monitors and protects sensitive data from unauthorized sharing or leakage, not a mechanism for scaling resources. Option B is wrong because sensitivity labels are classification and protection controls applied to documents and emails to enforce encryption or access restrictions, unrelated to workload elasticity. Option C is wrong because Microsoft Planner is a task management and collaboration tool within Microsoft 365, not a cloud infrastructure feature for dynamic resource allocation.

Practice this question →

66

Multi-Selectmedium

Which of the following are key characteristics of cloud computing as defined by the National Institute of Standards and Technology (NIST)? (Choose all that apply. There are four correct answers.)

Select 4 answers

.On-demand self-service

.Broad network access

.Resource pooling

.Rapid elasticity

.Fixed, non-scalable capacity

.Locally installed software only

Why this answer

The NIST SP 800-145 definition identifies five essential characteristics of cloud computing: on-demand self-service, broad network access, resource pooling, rapid elasticity, and measured service. On-demand self-service allows users to provision computing capabilities automatically without requiring human interaction with each service provider. Broad network access means capabilities are available over the network and accessed through standard mechanisms (e.g., mobile phones, laptops, workstations).

Resource pooling enables the provider's computing resources to serve multiple consumers using a multi-tenant model, with physical and virtual resources dynamically assigned and reassigned according to consumer demand. Rapid elasticity allows capabilities to be elastically provisioned and released, in some cases automatically, to scale rapidly outward and inward commensurate with demand.

Exam trap

Microsoft often tests that candidates confuse 'measured service' (the fifth NIST characteristic) as one of the four correct answers, but the question explicitly asks for four correct answers and omits measured service, so the trap is to include it or to incorrectly select 'Fixed, non-scalable capacity' as a valid characteristic.

Practice this question →

67

MCQeasy

A cloud user can access their files from a work desktop, a personal laptop at home, and a mobile phone while traveling. Which essential characteristic of cloud computing does this scenario best illustrate?

A.On-demand self-service

B.Broad network access

C.Resource pooling

D.Rapid elasticity

AnswerB

Broad network access describes the ability to access cloud services from a wide range of devices over the network.

Why this answer

Broad network access is the correct answer because it describes the ability to access cloud resources from diverse client platforms (work desktop, personal laptop, mobile phone) over the network using standard protocols such as HTTPS, SSH, or VPN. This characteristic ensures that services are available from any location with internet connectivity, not just from a single device or network.

Exam trap

The trap here is that candidates confuse 'access from multiple devices' with 'on-demand self-service' because both involve user-initiated actions, but on-demand self-service specifically means provisioning resources without provider intervention, not multi-device connectivity.

How to eliminate wrong answers

Option A is wrong because on-demand self-service refers to a user provisioning compute resources automatically without requiring human interaction with the cloud provider, not the ability to access files from multiple devices. Option C is wrong because resource pooling describes the provider's multi-tenant model where physical and virtual resources are dynamically assigned to serve multiple consumers, not the user's multi-device access. Option D is wrong because rapid elasticity focuses on the ability to scale resources up or down quickly based on demand, such as adding virtual machines during a traffic spike, not the user's ability to connect from different endpoints.

Practice this question →

68

MCQmedium

A company uses Microsoft 365 and wants to enable their sales team to draft emails using AI suggestions based on CRM data. Which capability should they use?

A.Microsoft Viva Sales

B.Microsoft Copilot for Sales

C.Dynamics 365 Sales

D.Microsoft Copilot for Microsoft 365

AnswerB

Copilot for Sales uses AI to draft emails and provide suggestions based on CRM data.

Why this answer

Option A is correct because Copilot for Sales integrates AI to help draft emails and summarize CRM data. Option B (Copilot for Microsoft 365) is a general AI assistant across Office apps but may not have CRM-specific integration. Option C (Microsoft Viva Sales) provides sales insights but not AI email drafting.

Option D (Dynamics 365 Sales) is a full CRM platform, not an AI email drafting tool.

Practice this question →

69

MCQmedium

A company wants to reduce capital expenditure on hardware and shift to an operational expense model for IT resources. Which cloud characteristic enables this?

A.On-demand self-service

B.Broad network access

C.Resource pooling

D.Measured service

AnswerD

Measured service enables pay-per-use billing, shifting from capital expenditure to operational expenditure.

Why this answer

Option B is correct because measured service allows cloud providers to meter usage and bill based on consumption, turning capex into opex. Option A (On-demand self-service) lets users provision resources without human interaction. Option C (Resource pooling) enables multi-tenancy.

Option D (Broad network access) ensures accessibility.

Practice this question →

70

Multi-Selectmedium

A company is evaluating a move to the cloud. Which three of the following are advantages of using a public cloud model compared to a private cloud? (Choose three.)

Select 3 answers

.No capital expenditure for hardware

.Elastic scaling of resources on demand

.Provider-managed infrastructure maintenance

.Full control over physical security of data centers

.Guaranteed data residency in a specific geographic location

.Lower total cost for all long-term workloads

Why this answer

In a public cloud model, the cloud provider owns and manages the physical hardware, eliminating the need for the customer to make capital expenditures (CapEx) on servers, storage, and networking equipment. Public clouds offer elastic scaling, allowing resources like virtual machines or containers to be automatically provisioned or deprovisioned based on real-time demand, which is a core benefit of cloud computing. Provider-managed infrastructure maintenance means the cloud vendor handles all hardware patching, firmware updates, and physical security, offloading these operational responsibilities from the customer.

Exam trap

Microsoft often tests the misconception that public cloud always reduces costs for all workloads, but the trap is that long-term, predictable workloads can be more expensive in public cloud due to ongoing operational costs and lack of reserved instance optimization, while private cloud may offer lower TCO for such scenarios.

Practice this question →

71

MCQmedium

Your organization is deploying Microsoft 365 and wants to ensure data is stored within a specific geographic region to comply with regulatory requirements. Which concept describes the ability to choose data residency?

A.Latency

B.Data sovereignty

C.Compliance

D.Data residency

AnswerD

Data residency is the physical location where data is stored.

Why this answer

Option D is correct because data residency refers to the physical location of data storage. Option A is wrong because sovereignty is about legal jurisdiction. Option B is wrong because compliance is about meeting standards.

Option C is wrong because latency is about network delay.

Practice this question →

72

MCQeasy

A company uses a cloud provider that offers compute power as a service. The provider manages the physical servers, storage, and networking, but the company has full control over the operating system, applications, and configurations. Which cloud service model is being used?

A.Software as a Service (SaaS)

B.Platform as a Service (PaaS)

C.Infrastructure as a Service (IaaS)

D.Function as a Service (FaaS)

AnswerC

IaaS provides virtual machines and storage; the customer manages the OS, applications, and configurations while the provider handles the physical infrastructure.

Why this answer

The scenario describes Infrastructure as a Service (IaaS), where the cloud provider manages the underlying physical infrastructure (servers, storage, networking), but the customer retains full control over the operating system, applications, and configurations. This aligns with the IaaS model as defined by NIST SP 800-145, which provides virtualized computing resources over the internet.

Exam trap

The trap here is that candidates often confuse PaaS with IaaS because both involve deploying applications, but PaaS removes OS control, while IaaS explicitly grants it, and the question's phrase 'full control over the operating system' is the critical differentiator.

How to eliminate wrong answers

Option A is wrong because Software as a Service (SaaS) provides a complete application managed by the provider, where the customer has no control over the operating system or underlying infrastructure, only the application data. Option B is wrong because Platform as a Service (PaaS) abstracts the operating system and runtime environment, giving the customer control only over deployed applications and configuration settings, not the OS itself. Option D is wrong because Function as a Service (FaaS) is a serverless computing model where the provider manages all infrastructure and the customer only deploys individual functions, with no control over the OS or runtime environment.

Practice this question →

73

MCQmedium

A help desk lead is documenting the correct Microsoft 365 approach to increase from 100 to 2,000 users without buying new mail servers. Cloud concept or benefit best matches this requirement?

A.Data Loss Prevention (DLP)

B.Sensitivity labels

C.Microsoft Planner

D.Scalability

AnswerD

Scalability allows services to grow or shrink as requirements change.

Why this answer

Scalability is the correct answer because it refers to the ability of a cloud service like Microsoft 365 to dynamically allocate resources to accommodate growth from 100 to 2,000 users without requiring the purchase or provisioning of additional on-premises mail servers. Microsoft 365's multi-tenant architecture and elastic infrastructure automatically handle user load increases, making scalability the cloud concept that directly matches this requirement.

Exam trap

The trap here is that candidates may confuse operational features like DLP or Sensitivity labels with cloud benefits, failing to recognize that scalability is the specific cloud concept that directly addresses the ability to grow user counts without hardware investment.

How to eliminate wrong answers

Option A is wrong because Data Loss Prevention (DLP) is a security feature that helps prevent sensitive information from being shared or leaked, not a mechanism for scaling user capacity. Option B is wrong because Sensitivity labels are classification and protection tools for data governance, not related to increasing user counts or infrastructure scaling. Option C is wrong because Microsoft Planner is a task management and collaboration tool, not a cloud concept or benefit that addresses user capacity growth.

Practice this question →

74

Multi-Selectmedium

Which three of the following are characteristics of cloud computing as defined by the National Institute of Standards and Technology (NIST)? (Choose three.)

Select 3 answers

.On-demand self-service

.Broad network access

.Resource pooling

.Dedicated hardware per tenant

.Fixed pricing models

.Limited scalability

Why this answer

NIST SP 800-145 defines cloud computing by five essential characteristics. On-demand self-service allows a consumer to provision computing capabilities automatically without requiring human interaction with each service provider. Broad network access means capabilities are available over the network and accessed through standard mechanisms (e.g., mobile phones, tablets, laptops, and workstations).

Resource pooling enables the provider's computing resources to serve multiple consumers using a multi-tenant model, with different physical and virtual resources dynamically assigned and reassigned according to consumer demand.

Exam trap

Microsoft often tests the exact NIST definition by including plausible-sounding but non-NIST characteristics like 'dedicated hardware per tenant' or 'fixed pricing models,' which candidates mistakenly associate with cloud computing because they are common in traditional on-premises or managed hosting environments.

Practice this question →

75

MCQeasy

A company uses a cloud service where they can rent virtual machines and storage. They have full control over the operating system and applications, while the provider manages the physical hardware. Which cloud service model is being used?

A.Infrastructure as a Service (IaaS)

B.Platform as a Service (PaaS)

C.Software as a Service (SaaS)

D.On-premises deployment

AnswerA

IaaS offers virtual machines, storage, and networking; the user controls the OS and apps, the provider manages the physical hardware.

Why this answer

This scenario describes Infrastructure as a Service (IaaS) because the company rents virtual machines and storage, retains full control over the operating system and applications, while the cloud provider manages the underlying physical hardware. In IaaS, the provider abstracts the physical infrastructure (servers, networking, storage) and delivers it as on-demand virtualized resources, which aligns with the customer's responsibility for OS and app configuration.

Exam trap

The trap here is that candidates confuse IaaS with PaaS because both involve cloud-hosted resources, but the key differentiator is control over the operating system—IaaS gives OS control, PaaS does not.

How to eliminate wrong answers

Option B (PaaS) is wrong because PaaS abstracts the operating system and runtime environment, providing a platform for application development and deployment where the customer does not manage the OS or middleware; here the customer has full OS control. Option C (SaaS) is wrong because SaaS delivers fully functional applications over the internet, with no customer control over the underlying OS or infrastructure—the customer only uses the software. Option D (On-premises deployment) is wrong because on-premises means the company owns and manages all hardware and software locally, not renting virtualized resources from a cloud provider.

Practice this question →

Page 1 of 3 · 162 questions totalNext →

Ready to test yourself?

Try a timed practice session using only Describe cloud concepts questions.

Start 20-question session