A cloud developer resigned from an organization and gave a two-week notice. Within the first week since the developer resigned, a security analyst identifies large volumes of file downloads to the developer’s laptop from the source code repository. Which of the following security controls would be the best way to mitigate the organization’s risk of data loss?
A. Implementing a policy to stop cloud developers from sharing passwords
B. Preventing cloud developers from accessing the source code repository
C. Updating outbound firewall rules to block the cloud developer’s IP address
D. Blocking internet access for employees that resign from the organization
E. Prohibiting files on the local drive from being transferred to USB drives
Show Answer
Correct Answer: B
Explanation: The primary risk is insider data exfiltration after resignation. The most effective mitigation is to immediately revoke or restrict the developer’s access to the sensitive resource—the source code repository—following least-privilege and off‑boarding best practices. This directly stops further downloads at the source, whereas firewall or internet blocks are indirect, brittle, and can be bypassed, and the other options do not address the current risk.
Question 41
Users report that in-house developed software has performance issues and behaves in unexpected ways following a recent update. The developers investigate and find buffer overflows and broken authentications. Which of the following best describes what caused this issue?
A. Leaked credentials
B. Poor coding practices
C. Cipher suite depreciation
D. Incompatible hardware
Show Answer
Correct Answer: B
Explanation: Buffer overflows and broken authentication mechanisms are classic software vulnerabilities caused by improper input handling, memory management, and logic errors during development, which point to poor coding practices rather than credential leaks, cryptographic changes, or hardware issues.
Question 42
A cloud solutions architect wants to deploy a three-tier web application that requires the minimum amount of operational overhead. Which of the following is the best template given these requirements?
A.
B.
C.
D.
Show Answer
Correct Answer: B
Explanation: Option B uses a fully managed, serverless architecture: static content hosted on object storage for the presentation layer, serverless functions for the application layer with automatic scaling and no server management, and a managed relational database for the data layer. This combination minimizes provisioning, patching, scaling, and maintenance effort, resulting in the lowest operational overhead for a three-tier web application.
Question 42
Which of the following cloud services has the highest level of vendor lock-in?
A. Object storage
B. PaaS database
C. Virtual machine
D. File server
Show Answer
Correct Answer: B
Explanation: PaaS databases typically rely on provider-specific engines, APIs, management tools, and integrations. Migrating away often requires significant application changes and data migration effort, resulting in much higher vendor lock-in than more standardized services like virtual machines, object storage, or file servers.
Question 43
Which of the following protocols is often used in IoT to reduce the amount of data exchanged?
A. MQTT
B. SMB
C. NFS
D. HTTPS
Show Answer
Correct Answer: A
Explanation: MQTT is a lightweight messaging protocol designed for constrained devices and low-bandwidth networks common in IoT. Its publish/subscribe model and compact binary headers minimize protocol overhead and reduce the amount of data exchanged, unlike SMB, NFS, or HTTPS, which are heavier and not optimized for IoT constraints.
Question 43
An administrator attempts to use a script to deploy a cloud-based virtual machine with five data disks. After running the script, the administrator sees the following message:
ERROR: Response 403 storage API provisioning error
Which of the following is the reason the deployment failed?
A. Permission issues
B. Partial outage
C. Functionality deprecation
D. Sizing issues
Show Answer
Correct Answer: A
Explanation: An HTTP 403 Forbidden error means the request was understood but not authorized. In a cloud storage API provisioning context, this indicates the script’s identity lacks the required permissions or RBAC roles to create or attach the data disks, causing the deployment to fail.
Question 44
A healthcare provider contacts a MSP about moving an on-premises infrastructure to the cloud. Which of the following requirements are most important for the MSP to consider when migrating this customer? (Choose two.)
A. Security
B. Cost
C. Availability
D. Storage
E. Compliance
F. Compute
Show Answer
Correct Answer: A, E
Explanation: For a healthcare provider, the most critical considerations in a cloud migration are protecting sensitive patient data and meeting regulatory obligations. Security is essential to safeguard PHI through controls like encryption, access management, and monitoring. Compliance is equally important because healthcare organizations must adhere to regulations such as HIPAA (and others like GDPR where applicable), requiring the cloud environment to support audits, certifications, and regulatory controls.
Question 44
A software development team must manage changes to source code for different clients who utilize the same product with different features. Which of the following meets this requirement?
A. Branch
B. Commit
C. Push
D. Merge
Show Answer
Correct Answer: A
Explanation: Using branches allows the team to maintain separate lines of development for different clients, each with its own set of features, without interfering with the main codebase or other client versions. Commits, pushes, and merges are actions within version control, but they do not by themselves provide isolation for client-specific variations.
Question 45
A cloud administrator recently created three servers in the cloud. The goal was to create ACLs so the servers could not communicate with each other. The servers were configured with the following IP addresses:
After implementing the ACLs, the administrator confirmed that some servers are still able to reach the other servers. Which of the following should the administrator change to prevent the servers from being on the same network?
A. The IP address of Server 1 to 172.16.12.36
B. The IP address of Server 1 to 172.16.12.2
C. The IP address of Server 2 to 172.16.12.18
D. The IP address of Server 2 to 172.16.14.14
Show Answer
Correct Answer: C
Explanation: With a /28 subnet (255.255.255.240), each subnet spans 16 addresses. The issue is that two servers still fall within the same /28 network. Changing Server 2 to 172.16.12.18 moves it into a different /28 subnet than the others, preventing them from being on the same network. The other options either keep the server in the same subnet or would require additional changes such as modifying the default gateway.
Question 45
Which of the following costs would increase significantly for data transfer when comparing a multiregion to a single-region cloud platform design?
A. Storage
B. Power and cooling
C. Network
D. Compliance and regulation
Show Answer
Correct Answer: C
Explanation: In a multiregion design, data frequently crosses regional boundaries, which incurs higher inter-region data transfer and egress charges compared to data that stays within a single region or availability zones. Storage, power/cooling, and compliance do not scale directly with data transfer distance in the same way.
$19
Get all 179 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.