CompTIA CLO-002 Online Practice Questions and Exam Preparation

CompTIA CLO-002 Online Questions & Answers

• Question 81:

  A business analyst is examining a report and notices compute costs are very high for four cloud-based, load- balanced virtual machines hosting an application. The application will be in use for at least two more years, but there are no developers available to help optimize it. Which of the following should the analyst recommend to BEST reduce costs without impacting performance?

  A. Decommission a virtual machine.
  B. Change to a pay-as-you-go plan.
  C. Convert the application to a SaaS solution.
  D. Switch the virtual machines to reserved instances.
  D. Switch the virtual machines to reserved instances.

  ---

  Explanation/Reference:

  Reserved instances are a discount billing concept in which businesses can obtain significant discounts compared to standard on-demand cloud computing prices in return for committing to a specified level of usage1. Reserved instances are not physical instances, but rather a billing discount applied to the use of on-demand instances in the account2. Reserved instances can save up to 75% over equivalent on-demand capacity3. By switching the virtual machines to reserved instances, the analyst can best reduce costs without impacting performance, as long as the application's usage pattern is predictable and consistent. Decommissioning a virtual machine might affect the performance and availability of the application. Changing to a pay-as-you-go plan might not reduce costs if the application's usage is high and stable. Converting the application to a SaaS solution might require additional development and migration efforts, which are not feasible in this scenario. References:

  1: AWS Cost Management and Optimization

  2: Amazon Elastic Compute Cloud

  3: VMware Aria Cost powered by CloudHealth

• Question 82:

  Which of the following concepts will help lower the attack surface after unauthorized user- level access?

  A. Hardening
  B. Validation
  C. Sanitization
  D. Audit
  A. Hardening

  ---

  Explanation/Reference:

  Hardening is the concept that will help lower the attack surface after unauthorized user-level access. Hardening is the process of securing a system by reducing its vulnerability to attacks. Hardening involves applying patches, updates, and configuration changes to eliminate or mitigate known weaknesses. Hardening also involves disabling or removing unnecessary services, features, and accounts that could be exploited by attackers. Hardening can help lower the attack surface by reducing the amount of code running, the number of entry points available, and the potential damage that can be caused by unauthorized access. References: CompTIA Cloud Essentials+ CLO-002 Study Guide, Chapter 4: Cloud Security, Section 4.2: Cloud Security Concepts, Page 153.

• Question 83:

  Which of the following cloud principles will help manage the risk of a network breach?

  A. Shared responsibility
  B. Self-service
  C. Availability
  D. Elasticity
  A. Shared responsibility

  ---

  Explanation/Reference:

  Shared responsibility is the cloud principle that states that the security and compliance of the cloud service are shared between the cloud service provider and the cloud customer. The cloud service provider is responsible for securing the cloud infrastructure, such as the hardware, software, networking, and facilities, while the cloud customer is responsible for securing the cloud data, applications, and access, such as the encryption, backup, authentication, and authorization. By following the shared responsibility principle, the cloud customer can manage the risk of a network breach by implementing appropriate security measures and controls on their end, such as firewalls, antivirus, VPNs, and IAM. The cloud customer can also leverage the security features and services offered by the cloud service provider, such as encryption, monitoring, auditing, and incident response. References: CompTIA Cloud Essentials+ CLO-002 Certification Study Guide, Chapter 5: Managing Cloud Security, Section 5.1: Understanding Cloud Security Concepts, Page 1611

• Question 84:

  A small business is engaged with a cloud provider to migrate from on-premises CRM software. The contract includes fixed costs associated with the product. Which of the following variable costs must be considered?

  A. Time to market
  B. Operating expenditure fees
  C. BYOL costs
  D. Human capital
  B. Operating expenditure fees

  ---

  Explanation/Reference:

  Operating expenditure (OPEX) fees are variable costs that depend on the usage of cloud services, such as storage, bandwidth, compute, or licensing fees. OPEX fees are typically charged by the cloud provider on a monthly or pay-as-you-go basis. A small business that migrates from on-premises CRM software to a cloud provider must consider the OPEX fees as part of the total cost of ownership (TCO) of the cloud solution. OPEX fees can vary depending on the demand, performance, availability, and scalability of the cloud service. References: CompTIA Cloud Essentials+ Certification Exam Objectives1, CompTIA Cloud Essentials+ Study Guide, Chapter 2: Business Principles of Cloud Environments

• Question 85:

  Following a risk assessment, a company decides to adopt a multicloud strategy for its IT applications. Which of the following is the company trying to avoid as part of its risk mitigation strategy?

  A. Geo-redundancy
  B. Vendor lock-in
  C. High availability
  D. Data sovereignty
  D. Data sovereignty

  ---

  Explanation/Reference:

  A company that adopts a multicloud strategy for its IT applications is trying to avoid vendor lock-in as part of its risk mitigation strategy. Vendor lock-in is a situation where the customer becomes dependent on a single cloud provider and faces high switching costs and technical challenges if they want to migrate to another provider. Vendor lock-in can limit the customer's flexibility, choice, and control over their IT resources and expose them to the risks of service degradation, price increases, or vendor lockout12. A multicloud strategy is an approach that uses multiple cloud providers for different IT applications, based on the best fit for each workload. A multicloud strategy can help the customer avoid vendor lock-in by reducing their reliance on any single provider, increasing their bargaining power, and enabling them to leverage the best features and services from different providers34. References: CompTIA Cloud Essentials+ CLO-002 Study Guide, Chapter 2: Cloud Concepts and Models, Section 2.4: Cloud Service Challenges, p. 76-771 What is vendor lock-in? | Vendor lock-in and cloud computing 2 Avoiding vendor lock-in with the help of multicloud 3 How to Avoid Vendor Lock-In with Cloud Computing - Seagate 4

• Question 86:

  A cloud administrator needs to ensure as much uptime as possible for an application. The application has two database servers. If both servers go down simultaneously, the application will go down. Which of the following must the administrator configure to ensure the CSP does not bring both servers down for maintenance at the same time?

  A. Backups
  B. Availability zones
  C. Autoscaling
  D. Replication
  B. Availability zones

  ---

  Explanation/Reference:

  Availability zones are logical data centers within a cloud region that are isolated and independent from each other. Availability zones have their own power, cooling, and networking infrastructure, and are connected by low-latency networks. Availability zones help to ensure high availability and fault tolerance for cloud applications by allowing customers to deploy their resources across multiple zones within a region. If one availability zone experiences an outage or maintenance, the other zones can continue to operate and serve the application12 To ensure the CSP does not bring both servers down for maintenance at the same time, the cloud administrator must configure the application to use availability zones. The administrator can deploy the two database servers in different availability zones within the same region, and enable replication and synchronization between them. This way, the application can access either server in case one of them is unavailable due to maintenance or failure. The administrator can also use load balancers and health checks to distribute the traffic and monitor the status of the servers across the availability zones34 Backups are not the best option to ensure the CSP does not bring both servers down for maintenance at the same time, because backups are copies of data that are stored in another location for recovery purposes. Backups can help to restore the data in case of data loss or corruption, but they do not provide high availability or fault tolerance for the application. Backups are usually performed periodically or on-demand, rather than continuously. Backups also require additional storage space and bandwidth, and may incur additional costs. Autoscaling is not the best option to ensure the CSP does not bring both servers down for maintenance at the same time, because autoscaling is a feature that allows customers to scale their cloud resources up or down automatically, based on predefined conditions such as traffic or utilization levels. Autoscaling can help to optimize the performance and costs of the application, but it does not guarantee high availability or fault tolerance for the application. Autoscaling may not be able to scale the resources fast enough to handle sudden spikes or drops in demand, and it may also introduce additional complexity and overhead for managing the resources.

  Replication is not the best option to ensure the CSP does not bring both servers down for maintenance at the same time, because replication is a process of copying and synchronizing data across multiple locations or devices. Replication can

  help to improve the availability and consistency of the data, but it does not prevent the CSP from bringing both servers down for maintenance at the same time. Replication also depends on the availability and connectivity of the locations or

  devices where the data is replicated, and it may also increase the network traffic and storage requirements. References: 1: https://learn.microsoft.com/en-us/azure/reliability/availability-zones- overview 2: https://www.comptia.org/training/

  books/cloud-essentials-clo-002-study-guide, page 42 3:

  https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.RegionsAndAvaila bilityZones.html 4:

  https://docs.aws.amazon.com/elasticloadbalancing/latest/userguide/how-elastic-load- balancing-works.html : https://www.comptia.org/training/books/cloud-essentials-clo-002- study-guide, page 44 : https://www.comptia.org/training/books/

  cloud-essentials-clo-002- study-guide, page 46 : https://www.comptia.org/training/books/cloud-essentials-clo-002- study-guide, page 48

• Question 87:

  A cloud administrator notices users call to report application performance degradation between 1:00 p.m. and 3:00 p.m. every day. Which of the following is the BEST option for the administrator to configure?

  A. Locality
  B. Block storage
  C. Right-sizing
  D. Auto-scaling
  D. Auto-scaling

  ---

  Explanation/Reference:

  Auto-scaling is a feature that helps to adjust the capacity of a system automatically based on its current demand. The goal of auto-scaling is to maintain the performance of the system and to reduce costs by only using the resources that are actually needed1. If the cloud administrator configures auto-scaling for the application, the system can scale out (add more instances) during the peak hours of 1:00 p.m. and 3:00 p.m. every day, and scale in (remove instances) when the demand is low. This way, the application can handle the increased workload without degrading its performance, and the users can have a better experience. References: CompTIA Cloud Essentials+ Certification Study Guide, Second Edition (Exam CLO-002), Chapter 2: Cloud Computing Concepts, pages 41-42.

• Question 88:

  Which of the following should be considered to ensure the availability of data that is accessed across multiple sites? (Choose two.)

  A. Auto-scaling
  B. Geo-redundancy
  C. Backup
  D. Provisioning
  E. Locality
  F. Zones
  B. Geo-redundancy
  C. Backup

  ---

  Explanation/Reference:

  Geo-redundancy and backup are two methods that can ensure the availability of data that is accessed across multiple sites. Geo-redundancy is the practice of storing data in more than one geographic location, such as different regions, countries, or continents. This can improve the data availability by reducing the impact of natural disasters, network failures, or malicious attacks that may affect one site. Geo-redundancy can also improve the data performance by allowing users to access the data from the nearest or fastest site. Backup is the process of creating and storing copies of data that can be used to restore the original data in case of data loss, corruption, or deletion. Backup can ensure the data availability by providing a way to recover the data from a previous state, such as before a hardware failure, software error, or human error. Backup can also protect the data from accidental or intentional modifications that may compromise its integrity or security. Geo-redundancy and backup are different from other options, such as auto-scaling, provisioning, locality, and zones. Auto-scaling is the ability of a cloud service to automatically adjust the amount of resources allocated to a workload based on the demand or usage. Provisioning is the process of allocating and configuring the resources needed to run a cloud service or application. Locality is the principle of storing data close to where it is used, such as in the same region, country, or jurisdiction. Zones are logical or physical subdivisions of a cloud region that provide isolation and redundancy for the cloud resources. While these options may also affect the data availability, they do not directly address the data access across multiple sites, which is the focus of the question. References: Extending a Datastore Across Two Sites with Stretched Clusters, SQL Server Multi-Subnet Clustering - SQL Server Always On, What Is a Distributed Database? {Features, Benefits and Drawbacks}, Cloud Computing Availability - CompTIA Cloud Essentials+ (CLO-002) Cert Guide

• Question 89:

  Which of the following are true about the use of machine learning in a cloud environment? (Choose two).

  A. Specialized machine learning algorithms can be deployed to optimize results for specific scenarios.
  B. Machine learning can just be hosted in the cloud for managed services.
  C. Just one type of cloud storage is available in the cloud for machine learning workloads.
  D. Machine learning can leverage processes in a cloud environment through the use of cloud storage and auto-scaling.
  E. Machine learning requires a specialized IT team to create the machine learning models from scratch.
  F. Using machine learning solutions in the cloud removes the data-gathering step from the learning process.
  A. Specialized machine learning algorithms can be deployed to optimize results for specific scenarios.
  D. Machine learning can leverage processes in a cloud environment through the use of cloud storage and auto-scaling.

  ---

  Explanation/Reference:

  Machine learning is a subset of artificial intelligence that enables a system to autonomously learn and improve using neural networks and deep learning, without being explicitly programmed, by feeding it large amounts of data1. Machine learning can be used in a cloud environment to leverage the benefits of cloud computing, such as scalability, flexibility, and cost-effectiveness. Some of the ways that machine learning can use cloud processes are: Specialized machine learning algorithms can be deployed to optimize results for specific scenarios. Depending on the use case, an organization may choose different cloud services to support their machine learning projects, such as artificial intelligence as a service (AIaaS) or GPU as a service (GPUaaS)2. AIaaS provides pre-trained models for common tasks, such as image recognition, natural language processing, or sentiment analysis, while GPUaaS provides access to high-performance computing resources for training custom models. These services can help organizations achieve better results faster and more efficiently. Machine learning can leverage processes in a cloud environment through the use of cloud storage and auto-scaling. Cloud storage provides a scalable and secure way to store and access large amounts of data, which is essential for machine learning. Cloud storage also enables data integration and collaboration across different sources and platforms3. Auto-scaling is a feature of cloud computing that automatically adjusts the amount of resources allocated to a machine learning application based on the demand and workload. This helps optimize the performance and cost of machine learning in the cloud4. The other options are false because: Machine learning can just be hosted in the cloud for managed services. This is not true because machine learning can also be used in a hybrid or multi-cloud environment, where some components of the machine learning project are hosted on-premises or on different cloud providers. This can provide more flexibility and control over the machine learning process, as well as address security and compliance issues2. Just one type of cloud storage is available in the cloud for machine learning workloads. This is not true because there are different types of cloud storage available for machine learning workloads, such as object storage, block storage, or file storage. Each type of storage has its own advantages and disadvantages, depending on the data format, size, and access frequency. For example, object storage is suitable for storing unstructured data, such as images or videos, while block storage is suitable for storing structured data, such as databases or files3. Machine learning requires a specialized IT team to create the machine learning models from scratch. This is not true because machine learning does not always require a specialized IT team to create the models from scratch. There are many tools and services available in the cloud that can help simplify and automate the machine learning process, such as data preparation, model building, testing, deployment, and monitoring. For example, Google Cloud AutoML is a service that allows users to create custom machine learning models with minimal coding and expertise4. Using machine learning solutions in the cloud removes the data-gathering step from the learning process. This is not true because using machine learning solutions in the cloud does not remove the data-gathering step from the learning process. Data-gathering is a crucial step in machine learning, as it provides the input for the machine learning models to learn from. Data-gathering involves collecting, cleaning, labeling, and transforming data from various sources, such as sensors, databases, or web pages. Using machine learning solutions in the cloud can help with data-gathering, but it does not eliminate it3. References:

  1: What is Machine Learning? Types and Uses | Google Cloud

  2: Machine Learning in the Cloud: Complete Guide [2023] - Run

  3: Role: Artificial Intelligence and Machine Learning in Cloud Environment

  4: Data science and machine learning on Cloud AI Platform

• Question 90:

  Which of the following BEST describes decreasing the resources assigned to a system to avoid paying for unused capacity?

  A. Orchestration
  B. Auto-scaling
  C. Right-sizing
  D. Scalability
  C. Right-sizing

  ---

  Explanation/Reference:

  Right-sizing is the process of adjusting the resources allocated to a system to match its actual needs and avoid paying for unused capacity. Right-sizing can be done manually or automatically, and it can involve increasing or

  decreasing the resources as needed. Right-sizing is one of the benefits of cloud computing, as it allows for more efficient and cost-effective use of resources. References: CompTIA Cloud Essentials+ (CLO-002) Study Guide, Chapter 2:

  Cloud Computing Concepts, Section 2.2: Cloud Service Models, page 3812

  Learn more:

  1. comptia.org2. comptia.org3. globalknowledge.com4. partners.comptia.org 1of30