An administrator needs to adhere to the following requirements when moving a customer’s data to the cloud:
The new service must be geographically dispersed.
The customer should have local access to data.
Legacy applications should be accessible.
Which of the following cloud deployment models is most suitable?
A. On-premises
B. Private
C. Hybrid
D. Public
Show Answer
Correct Answer: C
Explanation: A hybrid cloud combines on-premises infrastructure with public/private cloud services. It supports geographically dispersed cloud services while retaining local access to data and allowing legacy applications to continue running on-premises, satisfying all stated requirements.
Question 22
A company’s VMs that are created using the noncritical application tag are automatically shut down at 5:00 p.m. using a cronjob. Which of the following actions would allow a cloud engineer to stop all unresponsive instances with the least effort in case the automation fails?
A. Using the cloud audit logs for tagging and stopping events
B. Using the cloud provider web console to check and stop the instances
C. Using the cloud provider command line to stop the instances based on tags
D. Using a Bash script to shut down all instances
Show Answer
Correct Answer: C
Explanation: Using the cloud provider CLI to stop instances based on tags is the least-effort approach because it can filter all VMs with the noncritical application tag and stop them in a single command or simple invocation. Checking the web console is manual, audit logs do not perform remediation, and a Bash script to stop all instances is broader than necessary and risks affecting critical workloads.
Question 23
A cloud infrastructure administrator updated the IP tables to block incoming connections and outgoing responses to 104.225.110.203. Which of the following vulnerability management steps is this an example of?
A. Scanning scope
B. Remediation
C. Identification
D. Assessment
Show Answer
Correct Answer: B
Explanation: Blocking a malicious IP address by updating firewall (iptables) rules is a mitigation action taken after a threat or vulnerability has been identified. This is a remediation activity, not identification, assessment, or defining the scanning scope.
Question 24
A systems administrator is provisioning VMs according to the following requirements:
A VM instance needs to be present in at least two data centers.
During replication, the application hosted on the VM tolerates a maximum latency of one second.
When a VM is unavailable, failover must be immediate.
Which of the following replication methods will best meet these requirements?
A. Snapshot
B. Transactional
C. Live
D. Point-in-time
Show Answer
Correct Answer: C
Explanation: Live replication continuously replicates VM state/data to a secondary site with minimal delay, enabling immediate failover and meeting strict recovery objectives. Snapshot and point-in-time replication are interval-based and do not support immediate failover, while transactional replication is typically database-focused rather than full VM replication.
Question 25
A company operates a website that allows customers to upload, share, and retain full ownership of their photographs. Which of the following could affect image ownership as the website usage expands globally?
A. Sovereignty
B. Data classification
C. Litigation holds
D. Retention
Show Answer
Correct Answer: A
Explanation: Sovereignty is the best answer. As the service expands globally, image ownership and the rights associated with uploaded photographs can be affected by different countries' legal jurisdictions, including intellectual property, privacy, and data sovereignty laws. Data classification, litigation holds, and retention relate to data management and legal preservation rather than determining ownership across jurisdictions.
Question 26
Which of the following compute resources is the most optimal for running a single scripted task on a schedule?
A. Bare-metal server
B. Managed container
C. Virtual machine
D. Serverless function
Show Answer
Correct Answer: D
Explanation: A serverless function is the most suitable compute resource for a single scripted task that runs on a schedule. It integrates with scheduled triggers, requires no server management, scales automatically, and incurs cost only when the task executes. Bare-metal servers and virtual machines require ongoing provisioning and maintenance, while managed containers are better suited for containerized services or more complex workloads rather than a simple scheduled script.
Question 27
A healthcare organization must follow strict compliance requirements to ensure that PII is not leaked. The cloud administrator needs to ensure the cloud email system can support this requirement. Which of the following should the organization enable?
A. IPS
B. DLP
C. ACL
D. WAF
Show Answer
Correct Answer: B
Explanation: Data Loss Prevention (DLP) is the appropriate control for preventing sensitive information such as PII from leaving an organization's cloud email system. DLP policies inspect emails and attachments for sensitive data and can block, quarantine, or encrypt messages to help meet compliance requirements. IPS detects intrusions, ACLs control access, and a WAF protects web applications rather than email.
Question 28
A cloud solutions architect needs to have consistency between production, staging, and development environments. Which of the following options will best achieve this goal?
A. Using Terraform templates with environment variables
B. Using Grafana in each environment
C. Using the ELK stack in each environment
D. Using Jenkins agents in different environments
Show Answer
Correct Answer: A
Explanation: Infrastructure as Code with Terraform enables the same infrastructure definitions to be reused across development, staging, and production, with environment-specific values supplied through variables. This provides consistent, repeatable environments. Grafana and the ELK stack are monitoring/logging tools, and Jenkins agents support CI/CD but do not by themselves ensure infrastructure consistency.
Question 29
A software development team would like to test a new feature that was added to the company’s production website. The team would like to allow access to only a small number of users and then, in a controlled way, slowly increase the number of users who have access to the feature. Which of the following best describes the deployment strategy the software development team should use?
A. In-place
B. Blue-green
C. Canary
D. Rolling
Show Answer
Correct Answer: C
Explanation: A canary deployment releases a new feature to a small subset of users first, then gradually increases exposure while monitoring for issues. This matches the described requirement. Blue-green switches between two full environments, rolling updates replace instances incrementally, and in-place updates modify the existing deployment directly.
Question 30
A cloud engineer wants to implement a monitoring solution to detect cryptojacking and other cryptomining malware on cloud instances. Which of the following metrics would most likely be used to identify the activity?
A. Disk I/O
B. Network packets
C. Average memory utilization
D. Percent of CPU utilization
Show Answer
Correct Answer: D
Explanation: Cryptomining malware primarily consumes CPU resources to perform hashing operations. Sustained, unusually high CPU utilization on instances that are not expected to run compute-intensive workloads is a common indicator of cryptojacking. While memory, disk I/O, and network activity may also change, CPU utilization is the most direct and widely used metric for detecting this behavior.
$19
Get all 180 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.