Which of the following would a customer most likely be accountable for in a shared responsibility model?
A. Security of data in the data centers
B. Security in the cloud
C. Security of the application
D. Security of the cloud
Show Answer
Correct Answer: B
Explanation: In the shared responsibility model, the cloud provider is responsible for security of the cloud (the underlying infrastructure), while the customer is responsible for security in the cloud, including how they configure and secure their workloads, identities, applications, and data depending on the service model.
Question 52
An organization decides to migrate its software source code framework to microservices. Which of the following correctly describes this new approach?
A. Public cloud-managed services
B. Tightly coupled architecture
C. Private cloud-managed services
D. Loosely coupled architecture
Show Answer
Correct Answer: D
Explanation: Microservices architecture is composed of small, independently deployable services that communicate through well-defined interfaces. This design minimizes dependencies between services, making it a loosely coupled architecture. The cloud deployment model (public or private) is unrelated to the definition of microservices, and tightly coupled is the opposite of the intended design.
Question 53
A cloud service provider just launched a new serverless service that is compliant with all security regulations. A company deployed its code using the service, and the company’s application was hacked due to leaked credentials. Which of the following is responsible?
A. Customer
B. Cloud service provider
C. Hacker
D. Code repository
Show Answer
Correct Answer: A
Explanation: A cloud provider being compliant with security regulations and operating a serverless service fulfills its responsibility for security of the cloud. Leaked credentials used by the application's code fall under the customer's responsibility for security in the cloud, including credential management, application configuration, and secret handling. Therefore the customer is responsible for the breach caused by leaked credentials.
Question 54
Which of the following technologies can read the contents of a printed memo?
A. Document scanning
B. Sentiment analysis
C. Text recognition
D. Natural language processing
Show Answer
Correct Answer: C
Explanation: Text recognition (optical character recognition, OCR) is the technology that reads printed characters from a scanned image and converts them into machine-readable text. Document scanning only captures an image, while natural language processing and sentiment analysis operate on text after it has been recognized.
Question 55
A public cloud environment customer wants to encrypt the data it puts in the cloud. However, the CSP prohibits customer encryption keys. Which of the following principles is the CSP violating?
A. Data ownership
B. Data sovereignty
C. Data classification
D. Data retention
Show Answer
Correct Answer: A
Explanation: The CSP is violating the principle of data ownership. Data ownership includes the customer's right to control access to and protection of its data, including managing encryption keys. Prohibiting customer-managed encryption keys removes an important aspect of the customer's control over its own data. Data sovereignty concerns geographic/legal jurisdiction, data classification concerns labeling by sensitivity, and data retention concerns how long data is stored.
Question 56
A security engineer recently discovered a vulnerability in the operating system of the company VMs. The operations team reviews the issue and decides all VMs need to be updated from version 3.4.0 to 3.5.0. Which of the following best describes the type of update that will be applied?
A. Consistent
B. Patch
C. Minor
D. Ephemeral
Show Answer
Correct Answer: C
Explanation: Semantic versioning uses Major.Minor.Patch. Updating from 3.4.0 to 3.5.0 changes the minor version while the major version remains 3 and the patch version remains 0. Therefore this is a minor update, not a patch update.
Question 57
A system surpasses 75% to 80% of resource consumption. Which of the following scaling approaches is the most appropriate?
A. Trending
B. Manual
C. Load
D. Scheduled
Show Answer
Correct Answer: C
Explanation: Load-based scaling automatically adds or removes resources based on utilization or performance metrics. If resource consumption exceeds a threshold such as 75–80%, load-based policies trigger scaling, making this the appropriate approach. Trending is used for capacity planning, manual requires human intervention, and scheduled scaling is based on known time patterns rather than current utilization.
Question 58
A cloud engineer is developing an operating expense report that will be used to purchase various cloud billing models for virtual machine instances. The cloud billing model must meet the following requirements:
• The instance cannot be ephemeral.
• The minimum life cycle of the instance is expected to be five years.
• The software license is charged per physical CPU count.
Which of the following best meets these requirements?
A. Dedicated host
B. Spot instance
C. Pay-as-you-go
D. Resource metering
Show Answer
Correct Answer: A
Explanation: A dedicated host provides a non-ephemeral, long-lived physical server dedicated to a single customer and is appropriate when software licensing is based on physical CPU/socket/core visibility. Spot instances are ephemeral, pay-as-you-go is a pricing model rather than a host type and does not address the licensing requirement, and resource metering is only a usage tracking mechanism.
Question 59
A cloud engineer tries to deploy five new cloud instances using code. An error occurs, and the instances are not created. The configuration fails to run. The engineer then receives the following error message:
ERROR:Parse error on json line x in config
Given the following snippet from the config.json file:
{ "instance_count": 5,
"ssd_options" : ["100GB","200GB","300GB"],
"instance_region": apac,
"instance_code": 255,
"start_instance" : true
}
Which of the following oversights created the error in the configuration file?
A. Incorrect instance_count
B. Incorrect ssd_options
C. Missing quotations on instance_region
D. Missing trailing comma on start_instance
Show Answer
Correct Answer: C
Explanation: The JSON is invalid because the value for "instance_region" is a string but is not enclosed in double quotes. In JSON, string values must be quoted. The other fields are valid: the integer, boolean, array of strings, and the lack of a trailing comma after the last property are all acceptable.
Question 60
Two CVEs are discovered on servers in the company’s public cloud virtual network. The CVEs are listed as having an attack vector value of network and CVSS score of 9.0. Which of the following actions is the best way to mitigate the vulnerabilities?
A. Patching the operating systems
B. Upgrading the operating systems to the latest beta
C. Encrypting the operating system disks
D. Disabling unnecessary open ports
Show Answer
Correct Answer: A
Explanation: A network attack vector and CVSS 9.0 indicate a critical remotely exploitable vulnerability. The primary mitigation is to apply the vendor security patches that remediate the underlying CVEs. Upgrading to a beta OS is inappropriate, encrypting disks does not address remote exploitation, and disabling unnecessary open ports may reduce exposure but does not fix the vulnerability itself.
$19
Get all 180 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.