A cloud solutions architect needs to have consistency between production, staging, and development environments. Which of the following options will best achieve this goal?
A. Using Terraform templates with environment variables
B. Using Grafana in each environment
C. Using the ELK stack in each environment
D. Using Jenkins agents in different environments
Show Answer
Correct Answer: A
Explanation: Infrastructure as Code with Terraform enables the same infrastructure definitions to be reused across development, staging, and production, with environment-specific values supplied through variables. This provides consistent, repeatable environments. Grafana and the ELK stack are monitoring/logging tools, and Jenkins agents support CI/CD but do not by themselves ensure infrastructure consistency.
Question 29
A software development team would like to test a new feature that was added to the company’s production website. The team would like to allow access to only a small number of users and then, in a controlled way, slowly increase the number of users who have access to the feature. Which of the following best describes the deployment strategy the software development team should use?
A. In-place
B. Blue-green
C. Canary
D. Rolling
Show Answer
Correct Answer: C
Explanation: A canary deployment releases a new feature to a small subset of users first, then gradually increases exposure while monitoring for issues. This matches the described requirement. Blue-green switches between two full environments, rolling updates replace instances incrementally, and in-place updates modify the existing deployment directly.
Question 30
A cloud engineer wants to implement a monitoring solution to detect cryptojacking and other cryptomining malware on cloud instances. Which of the following metrics would most likely be used to identify the activity?
A. Disk I/O
B. Network packets
C. Average memory utilization
D. Percent of CPU utilization
Show Answer
Correct Answer: D
Explanation: Cryptomining malware primarily consumes CPU resources to perform hashing operations. Sustained, unusually high CPU utilization on instances that are not expected to run compute-intensive workloads is a common indicator of cryptojacking. While memory, disk I/O, and network activity may also change, CPU utilization is the most direct and widely used metric for detecting this behavior.
Question 31
A cloud solutions architect needs to design a solution that will collect a report and upload it to an object storage service every time a virtual machine is gracefully or non-gracefully stopped. Which of the following will best satisfy this requirement?
A. An event-driven architecture that will send a message when the VM shuts down to a log-collecting function that extracts and uploads the log directly from the storage volume
B. Creating a webhook that will trigger on VM shutdown API calls and upload the requested files from the volume attached to the VM into the object-defined storage service
C. An API of the object-defined storage service that will scrape the stopped VM disk and self-upload the required files as objects
D. A script embedded on the stopping VM's OS that will upload the logs on system shutdown
Show Answer
Correct Answer: A
Explanation: An event-driven approach tied to VM lifecycle events is the most robust because it works for both graceful and non-graceful stops. A function triggered by the stop event can mount or access the detached storage volume and collect the required report before uploading it to object storage. A shutdown script will not reliably run during non-graceful stops, a webhook based only on API calls misses many stop scenarios, and object storage services do not scrape VM disks themselves.
Question 32
Which of the following do developers use to keep track of changes made during software development projects?
A. Code drifting
B. Code control
C. Code testing
D. Code versioning
Show Answer
Correct Answer: D
Explanation: Developers use code versioning (version control) systems such as Git to track changes to source code over time, collaborate, and revert to earlier versions. The other options are not the standard term for this practice.
Question 33
For compliance purposes, a cloud developer at an insurance company needs to save all customer policies for more than ten years. Which of the following options is the most cost-efficient tier to save the data in the cloud?
A. Archive
B. Hot
C. Cold
D. Warm
Show Answer
Correct Answer: A
Explanation: Archive storage is designed for long-term retention of infrequently accessed data at the lowest storage cost. For compliance records that must be kept for more than 10 years and are rarely retrieved, Archive is the most cost-efficient option. Hot, Warm, and Cold tiers have higher storage costs and are intended for progressively more frequent access.
Question 34
A cloud engineer is implementing a deployment strategy with the following requirements:
• At least two environments for production and development must be supported.
• Changes in one environment must not impact the other environment.
• The highest possible availability must be achieved.
Which of the following deployment strategies should the engineer implement?
A. Rolling
B. Blue-green
C. In-place
D. Canary
Show Answer
Correct Answer: B
Explanation: Blue-green deployment maintains two separate, identical environments, allowing production and development (or current and new production versions) to remain isolated. Traffic can be switched between environments with minimal or no downtime, changes in one environment do not affect the other, and rollback is fast, providing the highest availability among the listed options.
Question 36
A critical security patch is required on a network load balancer in a public cloud. The organization has a major sales conference next week, and the Chief Executive Officer does not want any interruptions during the demonstration of an application behind the load balancer. Which of the following approaches should the cloud security engineer take?
A. Ask the management team to delay the conference
B. Apply the security patch after the event
C. Ask the upper management team to approve an emergency patch window
D. Apply the security patch immediately before the conference
Show Answer
Correct Answer: C
Explanation: A critical security patch should be handled through established change management with appropriate executive approval when it may affect a high-profile business event. Requesting an emergency maintenance window allows the organization to balance the security risk of delaying the patch against the operational risk of disrupting the conference. The other options either ignore governance, unnecessarily delay remediation, or increase the chance of disruption.
Question 37
An organization has been using an old version of an Apache Log4j software component in its critical software application. Which of the following should the organization use to calculate the severity of the risk from using this component?
A. CWE
B. CVSS
C. CWSS
D. CVE
Show Answer
Correct Answer: B
Explanation: CVSS (Common Vulnerability Scoring System) is used to calculate the severity of known vulnerabilities. CVE provides identifiers for vulnerabilities, CWE categorizes software weakness types, and CWSS scores the severity of software weaknesses rather than specific vulnerabilities like a known Log4j CVE.
Question 38
A cloud service provider requires users to migrate to a new type of VM within three months. Which of the following is the best justification for this requirement?
A. Security flaws need to be patched
B. Updates could affect the current state of the VMs
C. The cloud provider will be performing infrastructure maintenance
D. The equipment is reaching end of life and end of support
Show Answer
Correct Answer: D
Explanation: A forced migration to a new VM type over a defined period is most commonly driven by retirement of the underlying instance family or hardware platform. When infrastructure reaches end of life/end of support, providers deprecate older VM types and require customers to migrate. Security patching, routine maintenance, or updates alone do not typically require migration to a different VM type.
$19
Get all 182 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.