180 practice questions with answers and explanations.
A software engineer needs to transfer data over the internet using programmatic access while also being able to query the data. Which of the following will best help the engineer to complete this task?
The correct answer is D. Option D: GraphQL
Which of the following is a field of computer science that enables computers to identify and understand objects and people in images and videos?
The correct answer is D. Option D: Computer vision
A company needs to deploy its own code directly in the cloud without provisioning additional infrastructure. Which of the following is the best cloud service model for the company to use?
The correct answer is A. Option A: PaaS
Explanation
Platform as a service manages the underlying platform so customers focus on deploying applications and data.
A company just learned that the data in its object storage was accessed by an unauthorized party. Which of the following should the company have done to make the data unusable?
The correct answer is D. Option D: The company should have encrypted the data at rest.
A customer relationship management application, which is hosted in a public cloud IaaS network, is vulnerable to a remote command execution vulnerability. Which of the following is the best solution for the security engineer to implement to prevent the application from being exploited by basic attacks?
The correct answer is D. Option D: WAF This option keeps traffic private / properly secured as required.
Which of the following is a difference between a SAN and a NAS?
The correct answer is D. Option D: A NAS uses a slower protocol than a SAN.
A cloud engineer is troubleshooting an application that consumes multiple third-party REST APIs. The application is randomly experiencing high latency. Which of the following would best help determine the source of the latency?
The correct answer is D. Option D: Enabling tracing to detect HTTP response times and codes
A cloud engineer is reviewing the following Dockerfile to deploy a Python web application: Which of the following changes should the engineer make to the file to improve container security?
The correct answer is A. Option A: Add the instruction USER nonroot. This option keeps traffic private / properly secured as required.
A group of cloud administrators frequently uses the same deployment template to recreate a cloud-based development environment. The administrators are unable to go back and review the history of changes they have made to the template. Which of the following cloud resource deployment concepts should the administrator start using?
The correct answer is D. Option D: Versioning
A government agency in the public sector is considering a migration from on premises to the cloud. Which of the following are the most important considerations for this cloud migration? (Choose two.)
The correct answer is A, D. Option A: Compliance Option D: Regulatory
A company wants to optimize cloud resources and lower the overhead caused by managing multiple operating systems. Which of the following compute resources would be best to help to achieve this goal?
The correct answer is B. Option B: Containers
Explanation
A container packages an application and dependencies while sharing the host kernel for lightweight isolation.
A company runs a discussion forum that caters to global users. The company’s monitoring system reports that the home page suddenly is seeing elevated response times, even though internal monitoring has reported no issues or changes. Which of the following is the most likely cause of this issue?
The correct answer is C. Option C: DDos
Which of the following migration types is best to use when migrating a highly available application, which is normally hosted on a local VM cluster, for usage with an external user population?
The correct answer is C. Option C: On-premises to cloud By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.
A cloud architect attempts to modify a protected branch but is unable to do so. The architect receives an error indicating the action cannot be completed. Which of the following should the architect try instead?
The correct answer is B. Option B: Creating a pull request
Which of the following container storage types loses data after a restart?
The correct answer is C. Option C: Ephemeral
Following a ransomware attack, the legal department at a company instructs the IT administrator to store the data from the affected virtual machines for a minimum of one year. Which of the following is this an example of?
The correct answer is B. Option B: Retention
An engineer made a change to an application and needs to select a deployment strategy that meets the following requirements: Is simple and fast - Can be performed on two identical platforms Which of the following strategies should the engineer use?
The correct answer is A. Option A: Blue-green
An organization needs to retain its data for compliance reasons but only when required. Which of the following would be the most cost-effective type of tiered storage?
The correct answer is C. Option C: Archive This option delivers the requirement at the lowest cost.
An e-commerce store is preparing for an annual holiday sale. Previously, this sale has increased the number of transactions between two and ten times the normal level of transactions. A cloud administrator wants to implement a process to scale the web server seamlessly. The goal is to automate changes only when necessary and with minimal cost. Which of the following scaling approaches should the administrator use?
The correct answer is B. Option B: Allow the load to trigger adjustments to the resources. This option scales automatically to match demand.
Which of the following vulnerability management phases includes the process of discovering newly introduced security vulnerabilities?
The correct answer is A. Option A: Scanning This option keeps traffic private / properly secured as required.
Showing questions 1–20 of 180 · Page 1 of 9