Question 1

Which of the following describes the benefit of infrastructure as code (IaC) in a cloud environment?
A. Prevents resource overutilization
B. Enhances manual provisioning
C. Automates infrastructure deployments consistently
D. Replaces cloud-native tools
Correct Answer: C
Explanation: IaC allows consistent and repeatable provisioning of infrastructure using code.

Question 2

What is the main purpose of using containers in a cloud environment?
A. To replace hypervisors
B. To isolate applications with minimal overhead
C. To install firmware updates
D. To increase server boot time
Correct Answer: B
Explanation: Containers offer lightweight application isolation and fast deployment.

Question 3

Which technology helps ensure data integrity during transmission in cloud environments?
A. NAT
B. Checksum
C. SSH
D. Load balancing
Correct Answer: B
Explanation: Checksums verify data integrity by detecting errors in transmission.

Question 4

A cloud administrator wants to prevent a DDoS attack on a public-facing application. What should they use?
A. WAF
B. CDN
C. IAM
D. Auto-scaler
Correct Answer: A
Explanation: A Web Application Firewall (WAF) filters malicious traffic, including DDoS.

Question 5

Which method is commonly used to maintain high availability in cloud infrastructure?
A. Cold backup
B. Geographic redundancy
C. Static routing
D. IP whitelisting
Correct Answer: B
Explanation: Geographic redundancy ensures service availability even during regional outages.

Question 6

Which of the following best describes serverless computing?
A. Applications that run without any backend code
B. Applications running on containers
C. Applications that automatically scale and are managed by the provider
D. Static code hosted in virtual machines
Correct Answer: C
Explanation: Serverless platforms manage scaling and infrastructure automatically.

Question 7

An organization needs to secure data at rest in a cloud storage solution. What should they implement?
A. VPN
B. Encryption
C. Hashing
D. TLS
Correct Answer: B
Explanation: Encryption protects stored data from unauthorized access.

Question 8

What is a common reason for using hybrid cloud architecture?
A. To rely entirely on a third-party provider
B. To isolate workloads using VLANs
C. To combine on-premises infrastructure with cloud resources
D. To reduce total cloud capacity
Correct Answer: C
Explanation: Hybrid cloud integrates on-premises and cloud environments for flexibility.

Question 9

Which logging method is most suitable for real-time security event tracking?
A. CSV
B. Audit trail
C. Syslog
D. RDP
Correct Answer: C
Explanation: Syslog is widely used for centralized, real-time log collection and analysis.

Question 10

A user complains of intermittent access issues to a cloud-based app. Which tool helps troubleshoot the problem?
A. IDS
B. Performance baseline
C. DNS sinkhole
D. Traceroute
Correct Answer: D
Explanation: Traceroute helps identify where connectivity issues occur along a network path.

Question 11

Which of the following controls helps implement Zero Trust architecture in the cloud?
A. Open authentication
B. VPN passthrough
C. Least privilege access
D. MAC filtering
Correct Answer: C
Explanation: Zero Trust emphasizes strict identity verification and least privilege access.

Question 12

What is the primary use case of a cloud orchestration tool like Terraform or Ansible?
A. Endpoint detection
B. Resource tagging
C. Automating infrastructure provisioning
D. Container monitoring
Correct Answer: C
Explanation: Orchestration tools automate infrastructure deployment and configuration.

Question 13

Which of the following technologies is most relevant to auto-scaling in cloud platforms?
A. SNMP
B. REST API
C. Load balancer
D. Event-driven triggers
Correct Answer: D
Explanation: Auto-scaling often relies on event-driven triggers (like CPU usage) to scale resources.

Question 14

To comply with data residency laws, an organization should:
A. Use immutable storage
B. Choose a cloud provider with local data centers
C. Apply a NAT gateway
D. Minimize encryption
Correct Answer: B
Explanation: Data residency compliance requires storing data in specific geographic locations.

Question 15

Which of the following is a disaster recovery best practice in cloud environments?
A. Hard-coded credentials
B. Snapshot backups
C. Increasing latency
D. Reducing fault domains
Correct Answer: B
Explanation: Snapshots provide quick recovery points for virtual machines and services.

Question 16

Which service type allows the user to deploy applications without managing the underlying infrastructure?
A. IaaS
B. PaaS
C. SaaS
D. DaaS
Correct Answer: B
Explanation: Platform as a Service (PaaS) abstracts the infrastructure, allowing focus on app development.

Question 17

What is the main purpose of tagging cloud resources?
A. Encrypt metadata
B. Block access
C. Organize and manage resources
D. Assign IP addresses
Correct Answer: C
Explanation: Tags help in organizing, billing, and managing cloud assets effectively.

Question 18

Which of the following helps identify configuration drift in cloud environments?
A. CI/CD pipeline
B. Intrusion detection system
C. Baseline comparison
D. DNS query logs
Correct Answer: C
Explanation: Comparing against a baseline helps detect unauthorized or unintended changes.

Question 19

Which network architecture model is most scalable in cloud environments?
A. Flat
B. Star
C. Hub-and-spoke
D. Mesh
Correct Answer: D
Explanation: Mesh networks provide scalable and resilient interconnections.

Question 20

What’s the most secure method to store secrets in a cloud-native application?
A. Environment variables
B. Hardcoded in source code
C. Encrypted secrets manager
D. Plaintext in database
Correct Answer: C
Explanation: Using a secrets manager ensures credentials and keys are encrypted and access-controlled.