Download Cloud Computing Foundation Practice Exam Questions and more Exams Technology in PDF only on Docsity!
Exam
Question 1. Which of the following best describes the NIST definition of “on‑demand self‑service” in cloud computing? A) Users must request resources through a help‑desk ticket. B) Resources are provisioned automatically without human interaction. C) Resources are allocated only after a contract is signed. D) Users must manually install hardware on‑premises. Answer: B Explanation: On‑demand self‑service means a consumer can provision computing capabilities automatically, without needing provider personnel. Question 2. In the evolution of computing, which model directly preceded the modern cloud computing paradigm? A) Mainframe computing B) Client‑server computing C) Utility computing D) Grid computing Answer: C Explanation: Utility computing introduced the idea of paying for computing resources as a utility, a concept that paved the way for cloud services. Question 3. Which of the following is NOT one of the five essential characteristics of cloud computing defined by NIST? A) Broad network access B) Measured service C) Fixed pricing D) Rapid elasticity Answer: C
Exam
Explanation: Fixed pricing is not an essential characteristic; cloud services are typically measured and billed based on usage. Question 4. Which benefit of cloud computing is most directly associated with converting CapEx to OpEx? A) Improved security B) Faster time‑to‑market C) Cost reduction through pay‑as‑you‑go model D) Vendor lock‑in avoidance Answer: C Explanation: Paying for resources as an operational expense (OpEx) rather than investing in capital assets (CapEx) reduces upfront costs. Question 5. A major limitation of public clouds is the risk of: A) Unlimited scalability B) Vendor lock‑in C) Complete control over hardware D) Zero network latency Answer: B Explanation: Public clouds can lead to vendor lock‑in because migrating services and data to another provider may be complex. Question 6. In the IaaS service model, which layer does the consumer typically manage? A) Physical servers B: Virtual network infrastructure C) Operating system and above
Exam
B) Type 2 (hosted) C) Container‑based hypervisor D) Virtual machine monitor (VMM) only Answer: A Explanation: Type 1 hypervisors run directly on hardware, providing better performance and isolation. Question 10. Which of the following is a primary advantage of using a VPN to access cloud resources? A) Unlimited bandwidth B) Secure encrypted tunnel over public networks C) Automatic scaling of compute resources D) Elimination of all latency Answer: B Explanation: VPNs create encrypted tunnels, securing data transmitted over the public internet. Question 11. In the shared responsibility model for SaaS, which security task is primarily the provider’s responsibility? A) Managing user passwords B) Patching the underlying operating system C) Configuring application‑level access controls D) Backing up user‑generated data Answer: B Explanation: In SaaS, the provider manages the infrastructure and OS; the consumer focuses on data and access controls.
Exam
Question 12. Which compliance regulation specifically governs the protection of personal health information (PHI) in the United States? A) GDPR B) PCI‑DSS C) HIPAA D) SOX Answer: C Explanation: HIPAA sets standards for safeguarding PHI in the U.S. Question 13. Which of the following best describes “multi‑tenancy” in cloud environments? A) Each tenant has dedicated hardware. B) Multiple tenants share the same application instance while keeping data isolated. C) Tenants must install their own operating systems. D) Tenants cannot scale resources independently. Answer: B Explanation: Multi‑tenancy allows many customers to use the same application instance, with logical separation of data. Question 14. Which cloud service model would be most appropriate for a development team that wants to focus on coding without managing servers or runtime environments? A) IaaS B) PaaS C) SaaS D) DaaS (Desktop as a Service) Answer: B
Exam
D) Measurement is optional for all cloud providers. Answer: B Explanation: Measured service means that usage is tracked and reported, enabling pay‑as‑you‑go billing. Question 18. Which major cloud vendor offers the “EC2” service? A) Microsoft Azure B) Google Cloud Platform C) Amazon Web Services D) IBM Cloud Answer: C Explanation: Amazon EC2 (Elastic Compute Cloud) is an IaaS offering from AWS. Question 19. Which of the following best explains “vendor lock‑in” in cloud computing? A) The inability to scale resources quickly. B) Dependence on a single provider’s proprietary APIs and services, making migration difficult. C) The requirement to use open‑source software only. D) Having multiple providers for the same workload. Answer: B Explanation: Vendor lock‑in occurs when a customer relies heavily on a provider’s unique services, hindering easy migration. Question 20. Which of the following is a typical component of a cloud service level agreement (SLA)? A) Detailed source code of the provider’s platform. B) Commitment to specific uptime percentages (e.g., 99.9%).
Exam
C) Guarantees of zero security incidents. D) Requirement for the customer to purchase hardware. Answer: B Explanation: SLAs commonly define performance metrics such as uptime, response times, and penalties for non‑compliance. Question 21. What does “server virtualization” primarily enable? A) Running multiple operating systems on a single physical server. B) Converting physical servers into network devices. C) Eliminating the need for storage. D) Providing unlimited bandwidth. Answer: A Explanation: Server virtualization allows multiple virtual machines, each with its own OS, to run on a single physical host. Question 22. Which of the following best describes a “private cloud”? A) A cloud service offered to the general public over the internet. B) Cloud infrastructure dedicated to a single organization, either on‑premises or hosted. C) A shared cloud among multiple organizations with common interests. D) A cloud that automatically scales without any user control. Answer: B Explanation: Private clouds are exclusive to one organization, providing greater control and security. Question 23. Which of the following is a primary driver for organizations adopting cloud computing?
Exam
Question 26. Which of the following is an example of “shadow IT”? A) An IT department deploying a new server approved by management. B) Employees using a personal Dropbox account to store company files without approval. C) A vendor providing a cloud migration plan. D) A company’s official cloud‑based CRM system. Answer: B Explanation: Shadow IT refers to unsanctioned use of IT resources, such as personal cloud storage for corporate data. Question 27. Which of the following best describes the role of “identity federation” in cloud environments? A) Storing user passwords in multiple locations. B) Allowing users to authenticate with one identity provider to access multiple services. C) Replicating data across regions for redundancy. D) Encrypting data at rest only. Answer: B Explanation: Identity federation enables single sign‑on across different services using a trusted identity provider. Question 28. A company wants to run a big‑data analytics workload that requires massive parallel processing. Which cloud characteristic is most critical? A) Broad network access B) Rapid elasticity C) Measured service D) On‑demand self‑service
Exam
Answer: B Explanation: Big‑data analytics often need to scale compute resources up and down quickly, making rapid elasticity essential. Question 29. Which of the following best illustrates “platform as a service (PaaS)”? A) Renting virtual machines and configuring the OS yourself. B) Using a fully managed email service accessed via a web browser. C) Deploying an application to a managed runtime environment where the provider handles scaling and runtime updates. D) Purchasing a physical server and installing software locally. Answer: C Explanation: PaaS provides a managed platform for developers to deploy applications without handling underlying infrastructure. Question 30. Which of the following is a key component of the Cloud Controls Matrix (CCM) from the Cloud Security Alliance? A) Detailed pricing models for cloud services. B) A set of security control objectives mapped to cloud service models. C) Templates for writing source code. D) Guidelines for hardware procurement. Answer: B Explanation: The CCM provides a framework of security controls aligned with cloud service models to aid compliance assessments. Question 31. Which of the following statements about “elastic load balancing” is true? A) It requires manual configuration for each new server. B) It automatically distributes incoming traffic across multiple instances based on demand.
Exam
A) The provider supplies raw compute, storage, and networking resources. B) The provider offers a complete application accessed over the internet, with no infrastructure management needed by the consumer. C) The consumer builds and maintains the operating system. D) The consumer must install the software on local machines. Answer: B Explanation: SaaS delivers fully functional applications over the internet; the consumer only uses the software. Question 35. Which of the following is a common technique for ensuring data durability in cloud storage services? A) Storing data on a single physical disk. B) Replicating data across multiple geographic zones. C) Using volatile memory only. D) Compressing data without redundancy. Answer: B Explanation: Replication across zones or regions protects against hardware failures and ensures durability. Question 36. Which of the following is a primary reason for organizations to adopt a multi‑cloud strategy? A) To increase vendor lock‑in. B) To avoid any network connectivity. C) To mitigate risk and avoid reliance on a single provider. D) To eliminate the need for security controls. Answer: C
Exam
Explanation: Multi‑cloud reduces dependency on one vendor, improving resilience and flexibility. Question 37. Which of the following statements about “Infrastructure as Code (IaC)” is correct? A) IaC requires manual configuration of each server. B) IaC uses declarative scripts to provision and manage cloud resources automatically. C) IaC is only applicable to on‑premises data centers. D) IaC cannot be version‑controlled. Answer: B Explanation: IaC enables automated, repeatable provisioning of infrastructure through code, often managed in version control. Question 38. In the context of cloud governance, which activity is essential for ensuring compliance with regulatory standards? A) Ignoring audit logs. B) Regularly reviewing and updating policies, and conducting audits. C) Disabling encryption to improve performance. D) Allowing unrestricted root access to all users. Answer: B Explanation: Governance involves policy enforcement, periodic audits, and continuous monitoring to meet compliance. Question 39. Which of the following cloud service models typically gives the consumer the most control over the underlying infrastructure? A) SaaS B) PaaS
Exam
A) Manually adding more servers during peak hours. B) Automatically adjusting compute resources based on predefined metrics like CPU utilization. C) Scaling only storage resources, never compute. D) Requiring a change‑request ticket for each scaling event. Answer: B Explanation: Auto‑scaling monitors metrics and dynamically adds or removes resources to match demand. Question 43. In cloud computing, what does “latency” refer to? A) The amount of data stored. B) The time delay between a request and its response. C) The total cost of a service. D) The number of users accessing the service. Answer: B Explanation: Latency measures the delay between sending a request and receiving a response, affecting performance. Question 44. Which of the following is an example of a “Platform as a Service” offering from Microsoft Azure? A) Azure Virtual Machines B) Azure SQL Database (managed service) C) Azure Active Directory (identity service) D) Azure Blob Storage Answer: B Explanation: Azure SQL Database is a managed relational database service, fitting the PaaS model.
Exam
Question 45. Which of the following statements about “cloud elasticity” is false? A) Elasticity allows resources to be added quickly when demand spikes. B) Elasticity requires permanent over‑provisioning of resources. C) Elasticity can reduce costs by releasing unused resources. D) Elasticity is a core characteristic defined by NIST. Answer: B Explanation: Elasticity eliminates the need for permanent over‑provisioning by scaling resources dynamically. Question 46. Which of the following best illustrates “pay‑as‑you‑go” pricing? A) Paying a fixed annual license fee regardless of usage. B) Paying only for the compute hours, storage GB, and data transferred that you actually consume. C) Paying a large upfront fee for a perpetual license. D) Paying for a reserved instance regardless of actual consumption. Answer: B Explanation: Pay‑as‑you‑go charges customers based on actual resource consumption. Question 47. Which of the following is a primary function of a “cloud access security broker (CASB)”? A) Provide physical security for data centers. B) Enforce security policies between cloud service users and cloud providers. C) Replace the need for firewalls. D) Manage on‑premises hardware inventory. Answer: B
Exam
C) Multi‑cloud D) Federated cloud Answer: B Explanation: A hybrid cloud integrates private and public cloud environments, allowing data and applications to move between them. Question 51. Which of the following best defines “data sovereignty”? A) The right to delete data at any time. B) The concept that data is subject to the laws of the country where it is physically stored. C) The ability to encrypt data without a key. D) Storing data only on local servers. Answer: B Explanation: Data sovereignty dictates that data is governed by the jurisdiction of its storage location. Question 52. Which of the following is a primary reason to use a “cloud‑native” application architecture? A) To avoid using containers. B) To leverage microservices, elasticity, and automated deployment for better scalability. C) To require manual scaling of resources. D) To depend on monolithic codebases. Answer: B Explanation: Cloud‑native designs use microservices, containers, and automation to fully exploit cloud capabilities. Question 53. Which of the following best illustrates “service level objective (SLO)”?
Exam
A) The exact hardware specification of a server. B) A target metric (e.g., 99.9% latency ≤ 200 ms) defined within an SLA. C) The total cost of the service. D) The branding of the cloud provider. Answer: B Explanation: An SLO is a specific measurable goal within an SLA, such as latency or availability thresholds. Question 54. Which of the following is a key benefit of using “object storage” in the cloud? A) Fixed block size for all files. B) Unlimited scalability and metadata tagging for each object. C) Requirement for a traditional file system hierarchy. D) Only suitable for small files under 1 KB. Answer: B Explanation: Object storage provides virtually unlimited capacity and allows each object to have associated metadata. Question 55. Which of the following statements about “cloud bursting” is correct? A) It is a technique where workloads permanently move to a public cloud. B) It allows an application to offload excess load to a public cloud during peak demand while remaining primarily on a private cloud. C) It eliminates the need for any private infrastructure. D) It only applies to storage services. Answer: B Explanation: Cloud bursting temporarily expands capacity to a public cloud when private resources are insufficient.
