CompTIA CLO-002 Online Practice Questions and Exam Preparation

CompTIA CLO-002 Online Questions & Answers

• Question 71:

  Which of the following deployment models includes application components on a company's network as well as on the Internet?

  A. Private
  B. Public
  C. Community
  D. Hybrid
  D. Hybrid

  ---

  Explanation/Reference:

  A hybrid cloud deployment model includes application components on a company's network as well as on the Internet. A hybrid cloud is a combination of two or more cloud deployment models, such as public, private, or community, that are connected by a common network or technology. A hybrid cloud allows the company to leverage the benefits of both public and private clouds, such as scalability, cost-efficiency, security, and control. A hybrid cloud can also enable the company to use different cloud services for different types of workloads, such as sensitive data, high-performance computing, or disaster recovery12. References: CompTIA Cloud Essentials+ Certification | CompTIA IT Certifications, CompTIA Cloud Essentials+: Essential Cloud Principles, CompTIA Cloud Essentials CLO-002 Certification Study Guide, CompTIA Cloud+ Certification Exam Objectives

• Question 72:

  A company has defined a multicloud model.

  Which of the following is the MOST important aspect to consider when defining the company's needs?

  A. Change management
  B. Data sovereignty
  C. Data portability
  D. Data classification
  B. Data sovereignty

  ---

  Explanation/Reference:

  Data sovereignty is the most important aspect to consider when defining the company's needs for a multicloud model. Data sovereignty refers to the legal and regulatory requirements that apply to the data based on its location and ownership. Different cloud providers and regions may have different laws and regulations that affect how the data can be stored, processed, accessed, and transferred. For example, some countries may require that data generated within their borders must be stored locally and not transferred to other jurisdictions. Some cloud providers may also have different policies and practices regarding data security, privacy, and compliance. Therefore, the company needs to understand the data sovereignty implications of using multiple cloud platforms and ensure that they comply with the relevant laws and regulations. References: CompTIA Cloud Essentials+ CLO-002 Study Guide, Chapter 2: Cloud Concepts and Models, Section 2.3: Cloud Deployment Models, p. 66-67.

• Question 73:

  A company with critical resources in the cloud needs to ensure data is available in multiple datacenters around the world.

  Which of the following BEST meets the company's needs?

  A. Auto-scaling
  B. Geo-redundancy
  C. Disaster recovery
  D. High availability
  B. Geo-redundancy

  ---

  Explanation/Reference:

  Geo-redundancy is the best option for a company that needs to ensure data availability in multiple datacenters around the world. Geo-redundancy is the duplication of IT infrastructure and data across geographically dispersed

  locations, such as different regions or continents1. Geo-redundancy provides several benefits for cloud-based applications, such as:

  High availability: Geo-redundancy can improve the availability of cloud services by reducing the impact of regional outages, disasters, or network failures. If one datacenter becomes unavailable, the application can switch to another

  datacenter that has a copy of the data and continue to operate2. Performance: Geo-redundancy can enhance the performance of cloud services by reducing the latency and bandwidth consumption for users who are located far from the

  primary datacenter. By having datacenters closer to the users, the application can deliver faster and more consistent responses3. Compliance: Geo-redundancy can help the company comply with regulatory or legal requirements that

  mandate data sovereignty or data protection. By having datacenters in different jurisdictions, the company can store and process data according to the local laws and regulations4.

  The other options are not as suitable as geo-redundancy for the company's needs because:

  Auto-scaling: Auto-scaling is the ability of cloud services to automatically adjust the amount of resources allocated to an application based on the demand and workload. Auto-scaling can improve the scalability and cost-efficiency of cloud

  services, but it does not guarantee data availability in multiple datacenters5. Disaster recovery: Disaster recovery is the process of restoring the normal operation of an application after a disruption or failure. Disaster recovery can involve

  backup, restore, and failover mechanisms, but it does not necessarily require data replication across multiple datacenters. High availability: High availability is the degree to which an application can operate without interruption or downtime.

  High availability can be achieved by using redundant components, load balancing, and fault tolerance techniques, but it does not imply data distribution across multiple datacenters.

  References:

  1: Georedundancy - Open Telekom Cloud

  2: Why geo-redundancy for cloud infrastructure is a `must have'

  3: Use geo-redundancy to design highly available applications

  4: Protect your cloud infrastructure with geo-redundancy - Data Centre Review

  5: What is Auto Scaling? - Amazon Web Services : What is Disaster Recovery? - Microsoft Azure : What is High Availability? - IBM Cloud

• Question 74:

  A human resources department is considering a SaaS-based human resources portal and requires a risk analysis.

  Which of the following are requirements to consider? (Choose two.)

  A. Support
  B. Threats
  C. Chargebacks
  D. Vulnerabilities
  E. Maintenance
  F. Gap analysis
  B. Threats
  D. Vulnerabilities

  ---

  Explanation/Reference:

  A risk analysis is a process of identifying and assessing the potential threats and vulnerabilities that could affect the confidentiality, integrity, and availability of data and systems. A SaaS-based human resources portal is a cloud

  service that provides access to human resources applications and data over the internet. The human resources department should consider the following requirements when conducting a risk analysis for this service:

  Threats: These are the sources or events that could exploit the vulnerabilities of the service and cause harm to the data or systems. For example, malicious actors, natural disasters, power outages, network failures, etc. The human resources

  department should identify the possible threats that could affect the SaaS service and evaluate their likelihood and impact.

  Vulnerabilities: These are the weaknesses or gaps in the security of the service that could be exploited by the threats. For example, misconfigurations, outdated software, lack of encryption, insufficient authentication, etc. The human

  resources department should identify the existing and potential vulnerabilities of the SaaS service and evaluate their severity and exposure. The other options are not relevant for a risk analysis:

  Support: This is the assistance or guidance provided by the SaaS provider or a third party to the customers of the service. Support is not a requirement for a risk analysis, but rather a factor to consider when selecting or evaluating a SaaS

  provider.

  Chargebacks: These are the fees or penalties imposed by the SaaS provider to the customers for exceeding the agreed-upon service levels or usage limits. Chargebacks are not a requirement for a risk analysis, but rather a factor to consider

  when negotiating or reviewing the service level agreement (SLA) with the SaaS provider.

  Maintenance: This is the process of updating, repairing, or improving the service to ensure its functionality and performance. Maintenance is not a requirement for a risk analysis, but rather a responsibility of the SaaS provider that should be

  specified in the SLA.

  Gap analysis: This is a process of comparing the current state and the desired state of a system or a process and identifying the gaps or differences between them. Gap analysis is not a requirement for a risk analysis, but rather a tool to use

  for planning or implementing improvements or changes.

  References:

  CompTIA Cloud Essentials+ CLO-002 Study Guide, Chapter 2: Cloud Concepts and Models, Section 2.3: Cloud Security Concepts, p. 54-55 CompTIA Cloud Essentials+ CLO-002 Study Guide, Chapter 4: Cloud Business Principles, Section

  4.1: Cloud Service Agreements, p. 116-117

• Question 75:

  A developer is leveraging a public cloud service provider to provision servers using the templates created by the company's cloud engineer.

  Which of the following does this BEST describe?

  A. Subscription services
  B. Containerization
  C. User self-service
  D. Autonomous environments
  C. User self-service

  ---

  Explanation/Reference:

  User self-service is a cloud computing feature that allows users to provision, manage, and terminate cloud resources on demand, without the need for human intervention or approval. User self-service enables users to access cloud services through an online control panel, a web portal, or an API. User self-service can improve the agility, efficiency, and scalability of cloud computing, as users can quickly and easily obtain the resources they need, when they need them, and pay only for what they use. User self- service can also reduce the workload and costs of the cloud service provider, as they do not have to manually process requests or allocate resources. In this scenario, a developer is leveraging a public cloud service provider to provision servers using the templates created by the company's cloud engineer. This means that the developer can access the cloud provider's web portal or API, select the desired template, and launch the server instance without waiting for approval or assistance from the cloud provider or the cloud engineer. This is an example of user self-service, as the developer can self-manage the cloud resources according to their needs. References:

  1: What is On-Demand Self Service? - Definition from Techopedia

  2: What is Self-Service Provisioning in Cloud? | CloudBolt Software CompTIA Cloud Essentials+ Certification Study Guide, Second Edition (Exam CLO-002), Chapter 2: The Business Side of Cloud Computing, Section 2.1: Cloud Service Models3

• Question 76:

  An analyst is reviewing a report on a company's cloud resources expenditures. The analyst has noted that a data warehouse team uses a significant amount of high-speed storage for live databases and backups. Which of the following should the analyst recommend for improved cost and efficiency?

  A. Configure the live database for redundant clustering.
  B. Move the backups to slower storage.
  C. Configure geo-redundancy for backups.
  D. Move the backups to another availability zone.
  B. Move the backups to slower storage.

  ---

  Explanation/Reference:

  High-speed storage, such as solid-state drives (SSDs), is more expensive and faster than slower storage, such as hard disk drives (HDDs). High-speed storage is suitable for live databases that require low latency and high performance, but not for backups that are rarely accessed and do not need fast retrieval. Therefore, the analyst should recommend moving the backups to slower storage, which can reduce the cost and improve the efficiency of the cloud resources expenditures. Moving the backups to slower storage can also free up more space for the live database on the high-speed storage1. Configuring the live database for redundant clustering, configuring geo-redundancy for backups, or moving the backups to another availability zone are not recommended for improved cost and efficiency, as they would increase the complexity and expense of the cloud resources. Redundant clustering and geo-redundancy are techniques for enhancing the availability and reliability of the data, but they also require more storage and network resources2. Moving the backups to another availability zone may improve the fault tolerance and latency of the backups, but it may also incur additional fees for data transfer and storage3. References: Choose between SSD and HDD storage - Google Cloud; Cloud Computing vs. Cloud Storage | Pure Storage; Cloud Storage vs. Local Storage | Enterprise Storage Forum.

• Question 77:

  Which of the following would be expected from a security consultant who has been hired to investigate a data breach of a private cloud instance?

  A. Incident report
  B. Application scan results
  C. Request for information
  D. Risk register
  A. Incident report

  ---

  Explanation/Reference:

  An incident report is a document that summarizes the details of a security breach, such as the cause, impact, response, and lessons learned. It is expected from a security consultant who has been hired to investigate a data breach of a private cloud instance, as it provides a clear and concise account of what happened and how to prevent or mitigate future incidents. An incident report is also useful for communicating with stakeholders, regulators, customers, and other parties who may be affected by the breach. Application scan results are the output of a tool that scans an application for vulnerabilities, such as SQL injection, cross-site scripting, or broken authentication. They are not expected from a security consultant who has been hired to investigate a data breach of a private cloud instance, as they are more relevant for the development and testing phases of the application lifecycle. Application scan results may help identify potential weaknesses in the application, but they do not provide a comprehensive analysis of the breach. A request for information is a document that solicits information from vendors or service providers, such as their capabilities, pricing, or references. It is not expected from a security consultant who has been hired to investigate a data breach of a private cloud instance, as it is more relevant for the procurement and evaluation phases of the cloud service lifecycle. A request for information may help compare different cloud service options, but it does not provide a detailed report of the breach. A risk register is a document that records the risks associated with a project or an organization, such as their likelihood, impact, mitigation strategies, and status. It is not expected from a security consultant who has been hired to investigate a data breach of a private cloud instance, as it is more relevant for the risk management and governance phases of the cloud service lifecycle. A risk register may help identify and prioritize the risks that need to be addressed, but it does not provide a specific report of the breach. References: CompTIA Cloud Essentials+ CLO-002 Study Guide, Chapter 5: Security in the Cloud, Section 5.3: Incident Response, page 196 CompTIA Cloud Essentials+ CLO-002 Study Guide, Chapter 4: Cloud Service Management, Section 4.1: Cloud Service Lifecycle, page 145 CompTIA Cloud Essentials+ CLO-002 Study Guide, Chapter 2: Cloud Concepts, Section 2.4: Cloud Service Models, page 63

• Question 78:

  A cloud administrator for an ISP identified a vulnerability in the software that controls all the firewall rules for a geographic area. To ensure the software upgrade is properly tested, approved, and applied, which of the following processes should the administrator follow?

  A. Configuration management
  B. Incident management
  C. Resource management
  D. Change management
  D. Change management

  ---

  Explanation/Reference:

  Change management is an IT practice that aims to minimize disruptions to IT services while making changes to critical systems and services5. Change management involves planning, testing, approving, and implementing changes in a controlled and systematic manner6. A change is defined as adding, modifying, or removing anything that could have a direct or indirect effect on services5. In this case, the cloud administrator should follow the change management process to ensure that the software upgrade is properly tested, approved, and applied. References: Change management types, Atlassian Change management vs Configuration management, Virima

• Question 79:

  A web application was deployed, and files are available globally to improve user experience. Which of the following technologies is being used?

  A. SAN
  B. CDN
  C. VDI
  D. API
  B. CDN

  ---

  Explanation/Reference:

  A content delivery network (CDN) is a technology that distributes web content across multiple servers in different geographic locations to improve user experience11. A CDN can be used to deploy web applications and files globally, so that users can access them faster and more reliably from their nearest server12. A CDN also reduces bandwidth consumption and network congestion by caching static content at the edge servers13.

  References: What is a content delivery network (CDN)?, IBM Where to A/B Test: Front-End vs Back-End vs CDN vs API, Medium Content Delivery Networks (CDNs), MDN Web Docs

• Question 80:

  The IT department has noticed the costs associated with the server are increasing. The application is scheduled to run uninterrupted for at least two years, and the Chief Financial Officer (CFO) would like the IT department to investigate ways to decrease the costs. Which of the following would MOST likely help to decrease the costs of the server?

  A. Migrate the server to another CSP.
  B. Convert the server to a reserved instance.
  C. Configure resource tagging on the server.
  D. Run the server in a sandbox environment.
  E. Utilize spot instances.
  B. Convert the server to a reserved instance.

  ---

  Explanation/Reference:

  A reserved instance is a type of cloud instance that offers a discounted hourly rate and capacity reservation for a specific period of time, typically one or three years. Reserved instances are suitable for applications that have predictable usage patterns and require uninterrupted performance. By converting the server to a reserved instance, the IT department can reduce the costs of the server by up to 72%, compared to on-demand instances1. Additionally, reserved instances can provide more stability and availability than spot instances, which are subject to interruption and fluctuating prices. References: Spot Instances vs Reserved Instances: Which is The Right EC2 Pricing Model?; On-Demand vs Reserved vs Spot Instances | Incredibuild; Spot Instances - Amazon Elastic Compute Cloud.