CompTIA Cloud+ Certification: Applied Design & Security Scenarios

Question 1

Which activity should occur immediately after a production deployment to confirm the release met its intended objectives?

●        A. Post-deployment validation and smoke testing

●        B. Immediately archiving all logs

●        C. Disabling monitoring to reduce noise

●        D. Removing the previous version's backups

Explanation: Post-deployment validation (smoke testing) confirms the new release is functioning as intended before declaring the deployment successful.

Question 2

An organization is evaluating whether its cloud provider meets specific security and availability commitments through an independent audit report. Which type of report would they request?

●        A. SOC 2 report

●        B. GDPR consent form

●        C. RFP document

●        D. Change request form

Explanation: A SOC 2 report is an independent auditor's assessment of a service provider's controls related to security, availability, and other trust criteria.

Question 3

An architect is designing redundant network paths between two data centers so that a single link failure does not cause an outage. Which concept does this design address?

●        A. High availability

●        B. Multi-tenancy

●        C. Elasticity

●        D. Chargeback

Explanation: High availability designs eliminate single points of failure, such as by providing redundant network paths, to keep systems accessible.

Question 4

Which of the following best describes the purpose of a 'change freeze' period before a major business event, such as a retailer's holiday sales season?

●        A. To prevent non-critical changes that could introduce instability during a high-risk period

●        B. To permanently stop all future deployments

●        C. To increase the frequency of deployments

●        D. To disable monitoring during the event

Explanation: A change freeze restricts non-essential changes during a critical business period to minimize the risk of introducing instability.

Question 5

Which deployment consideration addresses ensuring that an application's storage, compute, and network resources are provisioned to handle both current needs and reasonably anticipated growth?

●        A. Right-sizing with growth headroom

●        B. Data masking

●        C. Federation

●        D. Tokenization

Explanation: Right-sizing with growth headroom balances current resource needs against anticipated future demand, avoiding frequent re-provisioning.

Question 6

Which practice involves testing a documented disaster recovery plan through a scheduled, controlled exercise to confirm the organization can actually execute it under pressure?

●        A. A DR tabletop exercise or full failover test

●        B. A one-time vulnerability scan

●        C. A change freeze

●        D. A cost optimization review

Explanation: A DR tabletop exercise or full failover test validates that the documented recovery plan actually works and that staff can execute it effectively.

Question 7

Which document outlines the step-by-step procedures an organization will follow to resume critical business functions after a major disruption?

●        A. Business continuity plan

●        B. Service level agreement

●        C. Non-disclosure agreement

●        D. Vulnerability scan report

Explanation: A business continuity plan (BCP) details the procedures for maintaining or quickly resuming essential functions after a disruption.

Question 8

Which access control model grants or restricts access based on attributes such as user department, time of day, and device type, rather than fixed roles?

●        A. Role-based access control

●        B. Attribute-based access control

●        C. Discretionary access control

●        D. Mandatory access control

Explanation: Attribute-based access control (ABAC) evaluates multiple dynamic attributes to make access decisions, offering more granularity than static roles.

Question 9

Which practice ensures that patches are tested in a non-production environment before being applied to production systems?

●        A. Patch management with a staged rollout process

●        B. Immediate production patching with no testing

●        C. Disabling all patches indefinitely

●        D. Patching only during a security breach

Explanation: A staged patch management process tests updates in non-production environments first, reducing the risk of a patch causing unexpected issues in production.

Question 10

Which type of clustering configuration keeps a standby node continuously ready to take over immediately if the active node fails, with no data loss?

●        A. Active-passive clustering with synchronous replication

●        B. Cold standby with manual failover only

●        C. Single-node deployment

●        D. Archive-tier storage

Explanation: Active-passive clustering with synchronous replication keeps a standby node current with the active node, enabling immediate failover with minimal data loss.

Question 11

An organization's automated failover to a secondary region did not trigger during a recent primary region outage. Which area should be investigated first?

●        A. The health check and failover trigger configuration

●        B. The color scheme of the status dashboard

●        C. The vendor's press releases

●        D. The physical location of the help desk

Explanation: If automated failover did not trigger, the health check thresholds or failover trigger configuration are the most likely misconfigured components.

Question 12

Which intrusion detection approach compares observed network behavior against a known baseline of normal activity to identify potential threats, rather than relying solely on known attack signatures?

●        A. Signature-based detection

●        B. Anomaly-based detection

●        C. Load-based detection

●        D. Tokenized detection

Explanation: Anomaly-based detection flags deviations from an established behavioral baseline, allowing it to catch novel threats that signature-based methods might miss.

Question 13

An organization's SLA with its cloud provider guarantees 99.9% uptime per month. Approximately how much downtime does this allow per 30-day month?

●        A. About 43 minutes

●        B. About 8 hours

●        C. About 3 days

●        D. Zero downtime allowed

Explanation: 99.9% uptime ('three nines') allows for approximately 43 minutes of downtime over a 30-day month.

Question 14

Which security approach layers multiple independent controls (firewalls, IDS, encryption, access control) so that if one control fails, others still provide protection?

●        A. Defense in depth

●        B. Single sign-on

●        C. Tokenization

●        D. Federation

Explanation: Defense in depth uses multiple, overlapping layers of security controls so that no single point of failure compromises the entire system.

Question 15

An administrator configures a security group so that a database server only accepts connections from the application server's specific IP address on the required port. What security concept does this exemplify?

●        A. Network segmentation with least privilege access

●        B. Data masking

●        C. Federation

●        D. Elastic scaling

Explanation: Restricting access to only the specific source and port needed reflects both network segmentation and least-privilege access control.

Question 16

A company's compliance requirement mandates that encryption keys never leave a certified, tamper-resistant hardware boundary, even during cryptographic operations. Which solution satisfies this requirement?

●        A. Software-based key storage in application code

●        B. Hardware security module (HSM)

●        C. Plaintext configuration files

●        D. Shared spreadsheet of keys

Explanation: An HSM performs cryptographic operations within a certified, tamper-resistant hardware boundary, ensuring keys never leave in an exposed form.

Question 17

An organization is deploying infrastructure using a template language specific to one major public cloud provider. What is the primary tradeoff of this approach compared to a cloud-agnostic IaC tool?

●        A. Improved portability across cloud providers

●        B. Potential vendor lock-in due to provider-specific syntax

●        C. Elimination of the need for version control

●        D. Guaranteed lower cost regardless of provider

Explanation: Provider-specific IaC templates can create vendor lock-in since the syntax and features are not portable to other cloud platforms.

Question 18

Which consideration should most influence the decision to use a Database as a Service (DBaaS) offering instead of self-managing a database on IaaS virtual machines?

●        A. Desire to offload patching, backups, and scaling management to the provider

●        B. Need for full control of the underlying operating system

●        C. Requirement to install custom kernel modules

●        D. Need for on-premises-only hosting

Explanation: DBaaS offloads operational tasks like patching, backup, and scaling to the provider, which is the main appeal compared to self-managed database VMs.

Question 19

Which of the following best describes 'shift-left' security in a cloud DevOps pipeline?

●        A. Performing security testing only after production deployment

●        B. Integrating security testing earlier in the development lifecycle

●        C. Disabling security checks to speed up releases

●        D. Outsourcing all security responsibilities to the cloud provider

Explanation: Shift-left security moves testing and remediation earlier in the development process, catching issues before they reach production.

Question 20

A cloud security team wants to ensure that firewall rules only permit the minimum necessary ports and protocols required for each application to function. Which principle does this reflect?

●        A. Least privilege

●        B. Defense in depth

●        C. Federation

●        D. Data sovereignty

Explanation: Restricting rules to only what is strictly necessary reflects the principle of least privilege applied to network access.

Question 21

Which testing type evaluates how easily and intuitively end users can navigate a newly deployed cloud application's interface?

●        A. Usability testing

●        B. Load testing

●        C. Regression testing

●        D. Interoperability testing

Explanation: Usability testing assesses how easily real users can accomplish tasks within an application's interface.

Question 22

Which of the following best describes the purpose of a maintenance window?

●        A. A predefined time period during which planned changes can be made with minimal business impact

●        B. A permanent block on all future changes

●        C. A period where monitoring is disabled entirely

●        D. A period reserved exclusively for security audits

Explanation: A maintenance window is a scheduled time period, typically during low usage, set aside for planned changes to minimize business disruption.

Question 23

Following a cloud provider region failover, some application features that depend on a specific regional service are unavailable. What is the most likely explanation?

●        A. The failover region does not have full feature parity with the primary region

●        B. The application license expired

●        C. The DNS provider is down

●        D. The load balancer health checks are misconfigured

Explanation: Not all cloud regions offer identical service availability; a failover region may lack certain features present in the primary region.

Question 24

A team notices that a specific automated task consistently fails at the same time each night. Which troubleshooting step is most likely to reveal the cause?

●        A. Reviewing logs and other scheduled jobs for resource contention at that specific time

●        B. Disabling all logging

●        C. Increasing the task's priority without investigation

●        D. Deleting the task entirely

Explanation: Consistent failure at a specific time often indicates resource contention with another scheduled process; reviewing logs for that window helps identify it.

Question 25

Which consideration is most important when sizing network bandwidth for a new deployment expected to transfer large volumes of data between an on-premises data center and the cloud?

●        A. The physical color of network cabling

●        B. Expected data transfer volume and required transfer window

●        C. The brand of the switch hardware

●        D. The number of help desk tickets submitted last month

Explanation: Bandwidth sizing should be based on the actual expected data volume and the time window in which that transfer must complete.

Question 26

Which RAID level stripes data across at least three disks with distributed parity, tolerating the failure of a single disk without data loss?

●        A. RAID 0

●        B. RAID 1

●        C. RAID 5

●        D. RAID 10

Explanation: RAID 5 stripes data with distributed parity across three or more disks, allowing recovery from a single disk failure.

Question 27

A cloud administrator finds that costs for outbound data transfer have unexpectedly increased significantly. Which area should be investigated first?

●        A. Recent changes to application architecture that may have increased cross-region or internet-bound traffic

●        B. The physical color of the network switches

●        C. The number of help desk tickets closed last month

●        D. The vendor's stock price

Explanation: Unexpected data transfer cost increases usually stem from architectural changes that increased cross-region or internet egress traffic.

Question 28

An organization's DR plan uses a cold site as its secondary location. What is the primary tradeoff of choosing a cold site over a hot site?

●        A. Higher ongoing cost but faster recovery

●        B. Lower ongoing cost but significantly longer recovery time

●        C. Identical recovery time to a hot site at lower cost

●        D. No infrastructure required at any time

Explanation: A cold site has minimal or no pre-installed infrastructure, making it the least expensive option but resulting in the longest recovery time.

Question 29

Which characteristic of cloud computing allows an organization to rapidly increase or decrease resource consumption in response to demand, paying only for what is used?

●        A. Elasticity

●        B. Federation

●        C. Multi-tenancy

●        D. Interoperability

Explanation: Elasticity is the ability to dynamically scale resources up or down to match demand, with billing aligned to actual consumption.

Question 30

A company needs a storage solution that preserves a traditional directory/folder hierarchy and supports simultaneous access by multiple servers using standard protocols like NFS or SMB. Which storage type fits this need?

●        A. Block storage

●        B. Object storage

●        C. File storage

●        D. Ephemeral storage

Explanation: File storage organizes data in a hierarchical directory structure and supports shared access via network protocols such as NFS and SMB.

Question 31

Which resource should be reviewed first when a scheduled automation script fails with an 'access denied' error immediately after a cloud provider platform update?

●        A. Whether the update changed default IAM permission behavior or required new permissions

●        B. The physical server rack temperature

●        C. The office Wi-Fi password

●        D. The vendor's quarterly earnings report

Explanation: Platform updates sometimes change default permission behavior or introduce new required permissions, which is the most direct explanation for a sudden access-denied error.

Question 32

Which type of test simulates a real-world attack against a system, with explicit authorization, to identify exploitable weaknesses beyond what automated scanning alone would find?

●        A. Vulnerability scan

●        B. Penetration test

●        C. Regression test

●        D. Usability test

Explanation: A penetration test involves authorized, hands-on attempts to exploit vulnerabilities, going beyond the automated detection of a vulnerability scan.

Question 33

A team wants to validate that a new cloud deployment correctly integrates with a third-party payment gateway before going live. Which testing type addresses this directly?

●        A. Interoperability testing

●        B. Usability testing

●        C. Capacity testing

●        D. Regression testing

Explanation: Interoperability testing confirms that a system correctly exchanges data and functions with external systems it depends on, such as a payment gateway.

Question 34

An organization is choosing between deploying an application in containers versus traditional virtual machines. Which factor most directly favors containers?

●        A. Need for a full separate guest operating system per workload

●        B. Need for lightweight, fast-starting, portable application packaging

●        C. Requirement for direct hardware pass-through

●        D. Requirement for a hypervisor-only environment

Explanation: Containers share the host OS kernel and are lightweight and fast to start, making them well suited for portable, rapidly scaling application packaging compared to full VMs.

Question 35

An organization wants to identify unpatched software vulnerabilities across its cloud fleet before attackers can exploit them. Which type of automated process should be scheduled regularly?

●        A. Vulnerability scanning

●        B. Load testing

●        C. Chargeback reporting

●        D. Data masking

Explanation: Regularly scheduled vulnerability scans identify unpatched or misconfigured systems so they can be remediated before exploitation.

Question 36

Which orchestration practice automatically provisions, configures, and decommissions cloud resources based on predefined workflows, reducing manual intervention?

●        A. Automation and orchestration

●        B. Manual ticketing

●        C. Ad hoc scripting

●        D. Cold storage archiving

Explanation: Automation and orchestration tools execute predefined workflows to provision, configure, and decommission resources with minimal manual effort.

Question 37

A company must classify its data based on sensitivity (public, internal, confidential, restricted) before applying appropriate security controls. Which practice does this describe?

●        A. Data classification

●        B. Data masking

●        C. Load balancing

●        D. Federation

Explanation: Data classification categorizes data by sensitivity level, which then determines the appropriate handling and security controls to apply.

Question 38

A newly deployed application intermittently loses its connection to a cloud-hosted cache service. Network metrics show no packet loss. Which area should be investigated next?

●        A. Cache service connection timeout and retry configuration

●        B. The physical building's HVAC system

●        C. The vendor's marketing website

●        D. The office badge access logs

Explanation: With network metrics ruled out, application-level connection timeout and retry settings for the cache client are the next logical area to investigate.

Question 39

A container repeatedly crashes with an out-of-memory error shortly after starting. Which configuration should be checked first?

●        A. The container's memory limit/request settings

●        B. The container registry's authentication settings

●        C. The DNS zone file

●        D. The load balancer's SSL certificate

Explanation: Repeated out-of-memory crashes point directly to insufficient memory limits/requests configured for the container.

Question 40

Which testing type specifically measures how a system behaves under expected and above-expected traffic volumes to identify breaking points?

●        A. Load and stress testing

●        B. Usability testing

●        C. Compatibility testing

●        D. Interoperability testing

Explanation: Load and stress testing pushes a system to expected and beyond-expected traffic levels to find performance limits and failure points.

Question 41

Which key management practice reduces risk by periodically replacing encryption keys with new ones, limiting the amount of data exposed if a key is ever compromised?

●        A. Key rotation

●        B. Key escrow

●        C. Data masking

●        D. Tokenization

Explanation: Key rotation periodically replaces cryptographic keys, limiting the exposure window and impact if any single key is compromised.

Question 42

Users in a specific office location cannot reach a cloud application, while users elsewhere have no issues. Which area should be investigated first?

●        A. The application's source code

●        B. The office's local network path and DNS/routing to the cloud provider

●        C. The cloud provider's global outage status only

●        D. The application's licensing agreement

Explanation: Since the issue is isolated to one location, the local network path, DNS, and routing from that office are the most likely points of failure.

Question 43

An application intermittently returns database connection errors under moderate load, though the database server's CPU and memory appear healthy. Which resource is most likely being exhausted?

●        A. The database's maximum connection pool limit

●        B. The physical rack's power supply

●        C. The office printer queue

●        D. The DNS cache on end-user devices

Explanation: Intermittent connection errors under load with otherwise healthy CPU/memory often indicate the database's connection pool limit is being reached.

Question 44

Which cloud deployment model is shared exclusively among organizations with common regulatory or compliance requirements, such as several government agencies?

●        A. Public cloud

●        B. Private cloud

●        C. Community cloud

●        D. Hybrid cloud

Explanation: A community cloud is shared by several organizations with common concerns (e.g., compliance, security requirements), distinguishing it from a single-tenant private cloud or open public cloud.

Question 45

A backup administrator schedules a weekly full backup and daily backups that only capture changes since the last full backup, regardless of intervening days. Which backup type is being used daily?

●        A. Incremental backup

●        B. Differential backup

●        C. Synthetic full backup

●        D. Snapshot clone

Explanation: Differential backups capture all changes since the last full backup, growing larger each day but simplifying restores to just two backup sets.

Question 46

A cloud operations team documents the exact steps to follow when a specific, recurring alert fires, so that any team member can respond consistently. What is this document called?

●        A. A runbook

●        B. A service level agreement

●        C. A penetration test report

●        D. A data classification policy

Explanation: A runbook provides documented, step-by-step procedures for responding to specific known issues, ensuring consistent handling regardless of who responds.

Question 47

Which monitoring practice involves establishing normal performance ranges for a system so that deviations can be more easily identified as potential issues?

●        A. Baseline establishment

●        B. Data masking

●        C. Federation

●        D. Load balancing

Explanation: Establishing a performance baseline defines what 'normal' looks like, making it easier to detect meaningful deviations that indicate problems.

Question 48

An architect needs to select the appropriate compute instance size for a new database server. Which factor should be evaluated first?

●        A. The color scheme of the monitoring dashboard

●        B. Expected workload characteristics such as CPU, memory, and IOPS requirements

●        C. The vendor's stock price

●        D. The number of employees in the IT department

Explanation: Right-sizing compute instances requires understanding the workload's actual CPU, memory, and I/O requirements to avoid under- or over-provisioning.

Question 49

A team is deploying a new application version using an all-at-once cutover, replacing the old version entirely with no phased rollout. Which deployment strategy does this describe, and what is its main risk?

●        A. Rolling deployment; risk of prolonged partial outages

●        B. Big bang deployment; risk of widespread impact if issues arise

●        C. Canary deployment; risk of insufficient testing coverage

●        D. Blue-green deployment; risk of doubled infrastructure cost

Explanation: A big bang deployment replaces the entire system at once, meaning any undetected issue immediately affects all users.

Question 50

A design team must decide on the appropriate number of availability zones to use for a critical application. Which primary benefit does spreading resources across multiple availability zones provide?

●        A. Lower storage costs

●        B. Resilience against a single data center failure

●        C. Faster software licensing approval

●        D. Simplified billing

Explanation: Distributing resources across multiple availability zones protects against the failure of any single facility, improving resilience.

Question 51

Which practice validates that a cloud application functions correctly when accessed from different browsers, operating systems, and device types?

●        A. Compatibility testing

●        B. Penetration testing

●        C. Capacity planning

●        D. Data masking

Explanation: Compatibility testing confirms that an application works correctly across the range of browsers, OSes, and devices users may have.

Question 52

Which practice ensures that when an employee leaves the organization, their cloud account access is promptly revoked across all systems?

●        A. Offboarding/deprovisioning process

●        B. Data masking

●        C. Load balancing

●        D. Capacity planning

Explanation: A formal offboarding/deprovisioning process ensures departing employees' access is removed promptly, reducing the risk of lingering unauthorized access.

Question 53

Users report that file uploads to a cloud storage bucket fail only for files larger than a certain size. Which cause is most likely?

●        A. A configured maximum object size or timeout limit

●        B. A DNS misconfiguration

●        C. An expired user password

●        D. A missing backup schedule

Explanation: Failures tied specifically to file size point to a configured size limit or timeout threshold being exceeded, rather than a general connectivity issue.

Question 54

A newly provisioned storage volume shows significantly lower-than-expected IOPS performance despite the correct tier being selected. Which cause should be investigated first?

●        A. Whether the volume is properly attached and using the correct performance mode/queue depth

●        B. The color scheme of the management console

●        C. The number of open browser tabs

●        D. The vendor's marketing claims

Explanation: Lower-than-expected IOPS despite the correct tier often points to attachment configuration or queue depth/performance mode settings rather than the tier itself.

Question 55

An organization is deploying an application across two cloud providers simultaneously to avoid dependency on a single vendor. Which strategy does this describe?

●        A. Vendor lock-in

●        B. Multi-cloud strategy

●        C. Single-tenancy

●        D. Cold site failover

Explanation: A multi-cloud strategy deploys workloads across multiple providers, reducing dependency on and risk from any single vendor.

Question 56

After a security group rule change, an application server can no longer reach a required external API. What is the most likely cause?

●        A. The outbound rule for the required port/destination was removed or restricted

●        B. The database ran out of storage

●        C. The DNS TTL expired

●        D. The application license expired

Explanation: If connectivity broke immediately after a security group change, an overly restrictive outbound rule is the most likely cause.

Question 57

A cloud technician suspects a recent configuration change caused an outage but has not yet confirmed this. What is the appropriate next step per troubleshooting methodology?

●        A. Establish and test a theory before implementing any fix

●        B. Immediately roll back all recent changes without investigation

●        C. Close the ticket as unresolved

●        D. Escalate directly to executive management

Explanation: Methodology calls for establishing and testing a theory of probable cause before implementing a solution, avoiding unnecessary or incorrect changes.

Question 58

An organization wants to track and control every modification made to its cloud environment configuration over time, including who made each change. Which practice supports this?

●        A. Version-controlled configuration management

●        B. Data masking

●        C. Federation

●        D. Load testing

Explanation: Version-controlled configuration management records every change along with who made it, providing traceability and rollback capability.

Question 59

A company is migrating a monolithic application to a microservices architecture as part of its cloud deployment. Which benefit is most directly associated with this approach?

●        A. Independent scaling and deployment of individual application components

●        B. Guaranteed reduction in total infrastructure cost

●        C. Elimination of the need for testing

●        D. Removal of all security requirements

Explanation: Microservices allow individual components to be scaled, updated, and deployed independently, rather than as a single monolithic unit.

Question 60

Which factor determines the order in which application tiers (database, application, web) should be brought online during a multi-tier deployment?

●        A. Dependency relationships between the tiers

●        B. Alphabetical order of tier names

●        C. The size of each tier's IP address range

●        D. The time zone of the deployment team

Explanation: Tiers with dependencies (e.g., database) typically must be available before dependent tiers (e.g., application, web) can start successfully.

Question 61

A cloud engineer is writing a deployment template that defines the desired end state of infrastructure, letting the tool determine the steps needed to reach that state. Which approach does this describe?

●        A. Imperative scripting

●        B. Declarative infrastructure as code

●        C. Manual console configuration

●        D. Ad hoc CLI commands

Explanation: Declarative IaC defines the desired end state, and the tool determines how to achieve it, unlike imperative scripts that specify exact steps.

Question 62

An organization uses federation to allow employees to access a partner company's cloud application using their existing corporate credentials. What is the primary benefit of this approach?

●        A. Employees avoid managing a separate set of credentials for the partner application

●        B. It eliminates the need for encryption

●        C. It removes the need for any access logging

●        D. It disables multifactor authentication requirements

Explanation: Federation allows trusted identity assertions across organizational boundaries, so users authenticate once with their home credentials to access partner resources.

Question 63

Which control is specifically designed to prevent sensitive data, such as credit card numbers, from being copied to unauthorized external destinations like personal email or USB drives?

●        A. Data loss prevention (DLP)

●        B. Federation

●        C. Load balancing

●        D. Auto-scaling

Explanation: DLP systems monitor and block unauthorized transmission of sensitive data to prevent leaks to unapproved destinations.

Question 64

An organization wants a deployment pipeline where every code commit automatically triggers a build and a suite of automated tests before merging. Which practice does this describe?

●        A. Continuous integration

●        B. Manual quarterly releases

●        C. Cold standby provisioning

●        D. Change freeze

Explanation: Continuous integration automatically builds and tests code on every commit, catching integration issues early.

Question 65

A company wants to reduce network latency for users in Asia by processing data closer to where it is generated rather than routing everything to a central data center. Which architecture addresses this?

●        A. Centralized cloud computing

●        B. Edge computing

●        C. Cold storage archiving

●        D. Vertical scaling

Explanation: Edge computing processes data near its source, reducing latency for geographically distributed users compared to a single centralized location.

Question 66

Which practice involves periodically reviewing and right-sizing cloud resources to eliminate unused or underutilized capacity, reducing unnecessary cost?

●        A. Resource/cost optimization review

●        B. Data masking

●        C. Federation

●        D. Change freeze

Explanation: Regular resource optimization reviews identify underutilized or idle resources so they can be resized or decommissioned, reducing waste.

Question 67

A cloud operations team wants to ensure that scaling actions taken by an auto-scaling group are logged and can be reviewed later for capacity planning. Which practice supports this?

●        A. Enabling detailed scaling event logging and retention

●        B. Disabling all scaling logs

●        C. Manually scaling resources only

●        D. Deleting logs immediately after each event

Explanation: Logging and retaining scaling events provides historical data that supports future capacity planning and troubleshooting.

Question 68

An organization's operations team is asked to reduce the average time between when an incident occurs and when it is detected. Which practice most directly supports this goal?

●        A. Improved real-time monitoring and alerting

●        B. Reducing backup frequency

●        C. Disabling logging to save storage

●        D. Removing redundant infrastructure

Explanation: Better real-time monitoring and alerting shortens the time between an incident's occurrence and its detection by the operations team.

Question 69

Which network design approach separates the control plane from the data plane, allowing centralized, programmatic management of network traffic flows?

●        A. Software-defined networking (SDN)

●        B. VLAN trunking

●        C. RAID striping

●        D. Object versioning

Explanation: SDN decouples the control plane from the data plane, enabling centralized, programmable control over how traffic flows through the network.

Question 70

A company wants to ensure that its cloud spending stays within budget by setting automated alerts when usage-based costs approach a defined threshold. Which practice addresses this?

●        A. Cost/budget monitoring and alerting

●        B. Data classification

●        C. Penetration testing

●        D. Federation

Explanation: Cost monitoring with automated threshold alerts helps organizations catch unexpected spend increases before they significantly exceed budget.

Question 71

A cloud engineer needs to determine whether a reported performance issue is isolated to one instance or affects the entire fleet. Which step should be taken first?

●        A. Compare metrics across multiple instances to identify scope

●        B. Immediately terminate all instances

●        C. Disable monitoring on the affected instance

●        D. Change the DNS provider

Explanation: Comparing metrics across instances helps determine whether an issue is isolated or systemic, guiding the appropriate next troubleshooting step.

Question 72

An organization is converting a virtual machine into a physical server to meet a specific hardware performance requirement. Which migration type does this describe?

●        A. P2V

●        B. V2P

●        C. V2V

●        D. P2P

Explanation: Virtual-to-Physical (V2P) migration moves a workload from a virtual machine onto dedicated physical hardware.

Question 73

An operations team wants to verify that a recently restored backup actually contains usable, uncorrupted data rather than assuming the restore succeeded. Which practice addresses this?

●        A. Restore verification/integrity checking

●        B. Data masking

●        C. Load balancing

●        D. Change freeze

Explanation: Restore verification confirms that recovered data is complete and uncorrupted, rather than simply assuming a successful restore process means usable data.

Question 74

A technician has established a theory of probable cause for an outage. According to standard troubleshooting methodology, what should be done next?

●        A. Immediately document the resolution

●        B. Test the theory to determine the actual cause

●        C. Close the incident ticket

●        D. Escalate to the vendor without further investigation

Explanation: After forming a theory, the next step is to test it to confirm or rule out that cause before proceeding to a fix.

Question 75

Which metric measures the average time it takes to repair a failed system component and restore it to operation?

●        A. MTTR (Mean Time To Repair)

●        B. MTBF (Mean Time Between Failures)

●        C. RPO

●        D. SLA

Explanation: Mean Time To Repair (MTTR) measures the average duration required to fix a failure and restore normal operation.