CompTIA CompTIA Cloud Essentials CLO-002 Questions & Answers

• Question 21:

  Following a risk assessment, a company decides to adopt a multicloud strategy for its IT applications. Which of the following is the company trying to avoid as part of its risk mitigation strategy?

  A. Geo-redundancy

  B. Vendor lock-in

  C. High availability

  D. Data sovereignty

  Correct Answer: D

  Explanation: A company that adopts a multicloud strategy for its IT applications is trying to avoid vendor lock-in as part of its risk mitigation strategy. Vendor lock-in is a situation where the customer becomes dependent on a single cloud provider and faces high switching costs and technical challenges if they want to migrate to another provider. Vendor lock-in can limit the customer's flexibility, choice, and control over their IT resources and expose them to the risks of service degradation, price increases, or vendor lockout12. A multicloud strategy is an approach that uses multiple cloud providers for different IT applications, based on the best fit for each workload. A multicloud strategy can help the customer avoid vendor lock-in by reducing their reliance on any single provider, increasing their bargaining power, and enabling them to leverage the best features and services from different providers34. References: CompTIA Cloud Essentials+ CLO-002 Study Guide, Chapter 2: Cloud Concepts and Models, Section 2.4: Cloud Service Challenges, p. 76-771 What is vendor lock-in? | Vendor lock-in and cloud computing 2 Avoiding vendor lock-in with the help of multicloud 3 How to Avoid Vendor Lock-In with Cloud Computing - Seagate 4

• Question 22:

  Each time a new virtual machine is created, a systems administrator creates a new script to accomplish tasks such as obtaining an IP, provisioning a virtual machine, and populating information in a change management database. Creating a new script to coordinate all of these existing scripts into one is BEST an example of:

  A. automation.

  B. orchestration.

  C. collaboration.

  D. federation.

  Correct Answer: B

  Explanation: Orchestration is the process of coordinating multiple automated tasks to create a dynamic and complex workflow1. Orchestration can simplify and streamline the management of cloud resources and services by integrating different scripts, tools, and platforms2. Creating a new script to coordinate all of the existing scripts into one is an example of orchestration, as it involves managing multiple automated tasks to accomplish a larger goal, such as provisioning a virtual machine and updating a change management database. Automation, on the other hand, refers to automating a single task or a small number of related tasks, such as obtaining an IP or populating information in a database1. Automation does not require coordination or decision-making, unlike orchestration. Collaboration and federation are not related to the question, as they refer to the interaction and integration of different cloud providers or users, not the automation or orchestration of cloud tasks3. References: Orchestration vs Automation: The Main Differences - phoenixNAP; Cloud Automation vs Cloud Orchestration: Understanding the Differences; CompTIA Cloud Essentials+ CLO-002 Study Guide, Chapter 3: Cloud Computing Concepts, pages 85-86.

• Question 23:

  A business analyst has been drafting a risk response for a vulnerability that was identified on a server. After considering the options, the analyst decides to decommission the server. Which of the following describes this approach?

  A. Mitigation

  B. Transference

  C. Acceptance

  D. Avoidance

  Correct Answer: D

  Explanation: Avoidance is a risk response strategy that involves eliminating the threat or uncertainty associated with a risk by removing the cause or the source of the risk. Avoidance can help to prevent the occurrence or the impact of a negative risk, but it may also result in the loss of potential opportunities or benefits. Avoidance is usually applied when the risk is too high or too costly to mitigate, transfer, or accept12 The business analyst is using the avoidance strategy by decommissioning the server that has a vulnerability. By doing so, the analyst is eliminating the possibility of the vulnerability being exploited or causing harm to the system or the data. However, the analyst is also losing the functionality or the value that the server provides, and may need to find an alternative solution or resource. Mitigation is not the correct answer, because mitigation is a risk response strategy that involves reducing the probability or the impact of a negative risk by implementing actions or controls that can minimize or counteract the risk. Mitigation can help to lower the exposure or the severity of a risk, but it does not eliminate the risk completely. Mitigation is usually applied when the risk is moderate or manageable, and the cost of mitigation is justified by the potential benefit12 Transference is not the correct answer, because transference is a risk response strategy that involves shifting the responsibility or the impact of a negative risk to a third party, such as a vendor, a partner, or an insurer. Transference can help to share or distribute the risk, but it does not reduce or remove the risk. Transference is usually applied when the risk is beyond the control or the expertise of the organization, and the cost of transference is acceptable or affordable12 Acceptance is not the correct answer, because acceptance is a risk response strategy that involves acknowledging the existence or the possibility of a negative risk, and being prepared to deal with the consequences if the risk occurs. Acceptance can be passive, which means no action is taken to address the risk, or active, which means a contingency plan or a reserve is established to handle the risk. Acceptance is usually applied when the risk is low or inevitable, and the cost of avoidance, mitigation, or transference is higher than the cost of acceptance12 References: 1: https://www.projectengineer.net/5-risk-response-strategies/ 2: https://www.comptia.org/training/books/cloud-essentials-clo-002-study-guide, page 50

• Question 24:

  A startup company that provides streaming media services is considering a new CSP. The company sees an average volume of 5000TB daily and high QoS. It has received the following bids:

  

  Based on the information above, which of the following CSPs offers the MOST cost- effective solution for streaming?

  A. Provider 1

  B. Provider 2

  C. Provider 3

  D. Provider 4

  Correct Answer: D

  Explanation: The most cost-effective solution for streaming is the one that offers the lowest cost per GB for storage and network. In this case, Provider 4 offers the lowest cost per GB for storage ($0.10) and network ($0.01). Additionally, Provider 4 offers the lowest cost for backup ($5.00) and VM cost ($4.00 per hour). References: CompTIA Cloud Essentials+ CLO-002 Study Guide, Chapter 4: Selecting Cloud Service Providers, page 85

• Question 25:

  Which of the following types of risk is MOST likely to be associated with moving all data to one cloud provider?

  A. Vendor lock-in

  B. Data portability

  C. Network connectivity

  D. Data sovereignty

  Correct Answer: A

  Explanation: Vendor lock-in is the type of risk that is most likely to be associated with moving all data to one cloud provider. Vendor lock-in refers to the situation where a customer is dependent on a particular vendor's products and services to such an extent that switching to another vendor becomes difficult, time-consuming, or expensive. Vendor lock-in can limit the customer's flexibility, choice, and control over their cloud environment, and expose them to potential issues such as price increases, service degradation, security breaches, or compliance violations. Vendor lock-in can also prevent the customer from taking advantage of new technologies, innovations, or opportunities offered by other vendors. Vendor lock-in can be caused by various factors, such as proprietary formats, standards, or protocols, lack of interoperability or compatibility, contractual obligations or penalties, or high switching costs12 References: CompTIA Cloud Essentials+ Certification Exam Objectives3, CompTIA Cloud Essentials+ Study Guide, Chapter 2: Business Principles of Cloud Environments2, Moving All Data to One Cloud Provider: Understanding Risks1

• Question 26:

  A company is planning to use cloud computing to extend the compute resources that will run a new resource- intensive application. A direct deployment to the cloud would cause unexpected billing. Which of the following must be generated while the application is running on-premises to predict the cloud budget for this project better?

  A. Proof or concept

  B. Benchmark

  C. Baseline

  D. Feasibility study

  Correct Answer: C

  Explanation: A baseline is a snapshot of the current state of a system or an environment that serves as a reference point for future comparisons. A baseline can capture various aspects of a system, such as performance, cost, configuration, and resource utilization. By generating a baseline while the application is running on-premises, the company can better predict the cloud budget for the project by estimating the cloud resources and services that would match or exceed the baseline values. A baseline can also help the company to monitor and optimize the cloud deployment and identify any anomalies or deviations from the expected behavior. References: CompTIA Cloud Essentials+ CLO-002 Study Guide, Chapter 5: Cloud Migration, page 1971; Addressing Cloud Security with Infrastructure Baselines - Fugue2

• Question 27:

  A company is migrating its e-commerce platform to a cloud service provider. The e- commerce site has a significant number of images. Which of the following is the BEST storage type for storing the images?

  A. Object

  B. Cold

  C. File

  D. Block

  Correct Answer: A

  Explanation: Object storage is a type of cloud storage that stores data as objects, which consist of data and metadata. Object storage is ideal for storing large amounts of unstructured data, such as images, videos, audio, documents, etc. Object storage provides high scalability, durability, and availability, as well as easy access via HTTP or REST APIs. Object storage is also more cost-effective than other types of storage, such as block or file storage, which are more suitable for structured data or applications that require high performance or low latency. References: CompTIA Cloud Essentials+ Certification Exam Objectives1, CompTIA Cloud Essentials+ Study Guide, Chapter 4: Cloud Storage2

• Question 28:

  Which of the following storage types will BEST allow data to be backed up and retained for long periods of time?

  A. Solid state storage

  B. Block storage

  C. Object storage

  D. File storage

  Correct Answer: C

  Explanation: Object storage is a type of cloud storage that stores data as objects, which consist of data, metadata, and a unique identifier. Object storage is ideal for backing up and retaining data for long periods of time, as it offers the following benefits: Scalability: Object storage can store virtually unlimited amounts of data, as objects are stored in a flat namespace that can span multiple servers, clusters, or regions. Object storage does not have the limitations of hierarchical file systems or block storage volumes, which can become fragmented or inefficient as they grow. Durability: Object storage can ensure high levels of data durability, as objects are replicated across multiple locations or zones. Object storage also supports versioning, which allows users to keep multiple versions of the same object and restore them if needed. Object storage can also use erasure coding, which splits objects into data and parity fragments and distributes them across different nodes, enabling data recovery in case of failures. Cost-effectiveness: Object storage can reduce the cost of storing data for long periods of time, as it typically uses commodity hardware and low-cost disks. Object storage also offers tiered storage options, which allow users to move data between different performance and price levels based on their access frequency and retention requirements. For example, users can store data in cold or archive tiers, which offer lower storage costs but higher retrieval latency and fees. Solid state storage is a type of storage that uses flash memory chips to store data. Solid state storage offers high performance, low latency, and low power consumption, but it is also more expensive and less durable than other types of storage. Solid state storage is more suitable for storing data that requires frequent and fast access, such as databases, applications, or operating systems, rather than backing up and retaining data for long periods of time. Block storage is a type of storage that divides data into fixed-sized blocks and assigns them unique identifiers. Block storage is commonly used to create storage volumes that can be attached to virtual machines or servers and act as local disks. Block storage offers high performance, low latency, and flexibility, but it also has some drawbacks for backing up and retaining data for long periods of time, such as: Scalability: Block storage has limited scalability, as storage volumes have a fixed size and capacity that cannot be easily changed. Block storage also requires more management and maintenance, as users have to provision, format, mount, and backup storage volumes manually or using scripts. Durability: Block storage has lower durability, as storage volumes are vulnerable to corruption, deletion, or failure. Block storage does not support versioning, which means users cannot restore previous versions of their data. Block storage also does not use erasure coding, which means users have to rely on RAID or other backup methods to ensure data redundancy and availability. Cost-effectiveness: Block storage has higher cost, as it typically uses more expensive and power-hungry disks. Block storage also charges users based on the provisioned size of the storage volumes, regardless of how much data they actually store. Block storage also incurs additional costs for data transfer, snapshot, and backup services. File storage is a type of storage that organizes data into files and folders within a hierarchical file system. File storage is commonly used to store and share data that can be accessed by multiple users or applications using standard protocols, such as NFS or SMB. File storage offers simplicity, compatibility, and convenience, but it also has some limitations for backing up and retaining data for long periods of time, such as: Scalability: File storage has limited scalability, as file systems have a maximum number of files and folders that they can support. File storage also suffers from performance degradation and inefficiency as file systems grow larger and more complex. File storage also requires more management and maintenance, as users have to create, delete, move, and backup files and folders manually or using scripts. Durability: File storage has lower durability, as files and folders are susceptible to corruption, deletion, or failure. File storage does not support versioning, which means users cannot restore previous versions of their data. File storage also does not use erasure coding, which means users have to rely on RAID or other backup methods to ensure data redundancy and availability. Cost-effectiveness: File storage has higher cost, as it typically uses more expensive and power-hungry disks. File storage also charges users based on the provisioned size of the file systems, regardless of how much data they actually store. File storage also incurs additional costs for data transfer, snapshot, and backup services. References: CompTIA Cloud Essentials+ CLO-002 Study Guide, Chapter 2: Cloud Concepts, Section 2.5: Cloud Storage, pages 66-69 6 Types of Backups for Cloud Storage 4 Types of Cloud Backup Services and How to Choose Cloud or tape for long-term data retention? How to Set Up Backup Retention to Purge Older Backups

• Question 29:

  Volume, variety, velocity, and veracity are the four characteristics of:

  A. machine learning.

  B. Big Data.

  C. microservice design.

  D. blockchain.

  E. object storage.

  Correct Answer: B

  Explanation: Big Data is a term that refers to data sets that are too large, complex, or diverse to be processed by traditional methods1. Big Data is characterized by four V's:

  volume, variety, velocity, and veracity2. Volume refers to the amount of data being generated and collected. Variety refers to the different types of data, such as structured, unstructured, or semi-structured. Velocity refers to the speed at which

  the data is created, processed, and analyzed. Veracity refers to the quality and reliability of the data.

  References:

  Understanding The 4 V's Of Big Data, Forbes

  Volume, velocity, and variety: Understanding the three V's of big data, DataSource.ai

• Question 30:

  Which of the following risks can an organization transfer by adopting the cloud?

  A. Data breach due to a break-in at the facility

  B. Data sovereignty due to geo-redundancy

  C. Data loss due to incomplete backup sets

  D. Data misclassification due to human error

  Correct Answer: A

  Explanation: One of the risks that an organization can transfer by adopting the cloud is data breach due to a break-in at the facility. This is because the cloud service provider (CSP) is responsible for the physical security of the data center where the data is stored and processed. The CSP should have adequate measures to prevent unauthorized access, theft, or damage to the hardware and infrastructure. By outsourcing the data storage and processing to the CSP, the organization transfers the risk of physical breach to the CSP. However, the organization still retains the risk of data breach due to other factors, such as network attacks, misconfiguration, or human error. Therefore, the organization should also implement appropriate controls to protect the data in transit and at rest, such as encryption, authentication, and monitoring. References: CompTIA Cloud Essentials+ CLO-002 Study Guide, Chapter 5: Risk Management, page 1661 and page 1692. The Top Cloud Computing Risk Treatment Options | CSA3.