A cloud solutions architect needs to design a solution that will collect a report and upload it to an object storage service every time a virtual machine is gracefully or non-gracefully stopped. Which of the following will best satisfy this requirement?
A. An event-driven architecture that will send a message when the VM shuts down to a log-collecting function that extracts and uploads the log directly from the storage volume
B. Creating a webhook that will trigger on VM shutdown API calls and upload the requested files from the volume attached to the VM into the object-defined storage service
C. An API of the object-defined storage service that will scrape the stopped VM disk and self-upload the required files as objects
D. A script embedded on the stopping VM's OS that will upload the logs on system shutdown
Show Answer
Correct Answer: A
Explanation: An event-driven approach tied to VM lifecycle events is the most robust because it works for both graceful and non-graceful stops. A function triggered by the stop event can mount or access the detached storage volume and collect the required report before uploading it to object storage. A shutdown script will not reliably run during non-graceful stops, a webhook based only on API calls misses many stop scenarios, and object storage services do not scrape VM disks themselves.
Question 32
Which of the following do developers use to keep track of changes made during software development projects?
A. Code drifting
B. Code control
C. Code testing
D. Code versioning
Show Answer
Correct Answer: D
Explanation: Developers use code versioning (version control) systems such as Git to track changes to source code over time, collaborate, and revert to earlier versions. The other options are not the standard term for this practice.
Question 33
For compliance purposes, a cloud developer at an insurance company needs to save all customer policies for more than ten years. Which of the following options is the most cost-efficient tier to save the data in the cloud?
A. Archive
B. Hot
C. Cold
D. Warm
Show Answer
Correct Answer: A
Explanation: Archive storage is designed for long-term retention of infrequently accessed data at the lowest storage cost. For compliance records that must be kept for more than 10 years and are rarely retrieved, Archive is the most cost-efficient option. Hot, Warm, and Cold tiers have higher storage costs and are intended for progressively more frequent access.
Question 34
A cloud engineer is implementing a deployment strategy with the following requirements:
• At least two environments for production and development must be supported.
• Changes in one environment must not impact the other environment.
• The highest possible availability must be achieved.
Which of the following deployment strategies should the engineer implement?
A. Rolling
B. Blue-green
C. In-place
D. Canary
Show Answer
Correct Answer: B
Explanation: Blue-green deployment maintains two separate, identical environments, allowing production and development (or current and new production versions) to remain isolated. Traffic can be switched between environments with minimal or no downtime, changes in one environment do not affect the other, and rollback is fast, providing the highest availability among the listed options.
Question 35
A cloud engineer is troubleshooting a connectivity issue. The application server with IP 192.168.1.10 in one subnet is not connecting to the MySQL database server with IP 192.168.2.20 in a different subnet. The cloud engineer reviews the following information:
Which of the following should the cloud engineer address to fix the communication issue?
A. The Application Server Stateful Firewall
B. The Application Server Subnet Routing Table
C. The MySQL Server Stateful Firewall
D. The MySQL Server Subnet Routing Table
Show Answer
Correct Answer: B
Explanation: Communication between different subnets requires correct routing. If the application subnet's routing table lacks a route to the 192.168.2.0/24 network, traffic from 192.168.1.10 will never reach the database subnet regardless of firewall settings. The issue to address is the application server subnet routing table.
Question 36
A critical security patch is required on a network load balancer in a public cloud. The organization has a major sales conference next week, and the Chief Executive Officer does not want any interruptions during the demonstration of an application behind the load balancer. Which of the following approaches should the cloud security engineer take?
A. Ask the management team to delay the conference
B. Apply the security patch after the event
C. Ask the upper management team to approve an emergency patch window
D. Apply the security patch immediately before the conference
Show Answer
Correct Answer: C
Explanation: A critical security patch should be handled through established change management with appropriate executive approval when it may affect a high-profile business event. Requesting an emergency maintenance window allows the organization to balance the security risk of delaying the patch against the operational risk of disrupting the conference. The other options either ignore governance, unnecessarily delay remediation, or increase the chance of disruption.
Question 37
An organization has been using an old version of an Apache Log4j software component in its critical software application. Which of the following should the organization use to calculate the severity of the risk from using this component?
A. CWE
B. CVSS
C. CWSS
D. CVE
Show Answer
Correct Answer: B
Explanation: CVSS (Common Vulnerability Scoring System) is used to calculate the severity of known vulnerabilities. CVE provides identifiers for vulnerabilities, CWE categorizes software weakness types, and CWSS scores the severity of software weaknesses rather than specific vulnerabilities like a known Log4j CVE.
Question 38
A cloud service provider requires users to migrate to a new type of VM within three months. Which of the following is the best justification for this requirement?
A. Security flaws need to be patched
B. Updates could affect the current state of the VMs
C. The cloud provider will be performing infrastructure maintenance
D. The equipment is reaching end of life and end of support
Show Answer
Correct Answer: D
Explanation: A forced migration to a new VM type over a defined period is most commonly driven by retirement of the underlying instance family or hardware platform. When infrastructure reaches end of life/end of support, providers deprecate older VM types and require customers to migrate. Security patching, routine maintenance, or updates alone do not typically require migration to a different VM type.
Question 39
A cloud developer receives a security vulnerability scan report and needs to analyze and record the true positives. Which of the following vulnerability management steps is this an example of?
A. Assessment
B. Identification
C. Scanning scope
D. Remediation
Show Answer
Correct Answer: A
Explanation: Analyzing vulnerability scan results, validating which findings are true positives, and recording them is part of the assessment phase of vulnerability management. Identification/discovery is the initial finding of assets or potential issues, scanning scope defines what is scanned, and remediation is the process of fixing validated vulnerabilities.
Question 40
A cloud engineer is receiving multiple alerts from the infrastructure monitoring agent. The alerts state that all the VMs in the public subnet are at 100% CPU utilization. However, when the engineer checks the network utilization of the VMs, the network throughput is at normal levels. Which of the following is the most likely cause of this issue?
A. Ransomware
B. Cryptojacking
C. DDoS
D. Zombie instances
Show Answer
Correct Answer: B
Explanation: Sustained 100% CPU utilization across VMs with normal network throughput is most consistent with cryptojacking. Cryptocurrency mining is CPU-intensive but typically does not generate unusually high network traffic. A DDoS attack would generally increase network utilization, ransomware is more associated with file encryption and disk activity, and zombie instances are compromised hosts used in botnets rather than specifically causing constant max CPU with normal network throughput.
$19
Get all 180 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.