Certbie

Free practice · No sign-up required

Cloud+ free practice test

15 questions with answer explanations. Choose an answer below to begin.

Question 1 of 15

Which service model provides on-demand access to shared computing resources that can be rapidly provisioned with minimal management effort?

Show hint

Understand cloud service models and their characteristics.

0/15 answered · Bookmark questions to review later. Focus the practice area to use keys 1–9 and Enter.

Learn by doing

Put your answers into practice

Use official documentation and hands-on labs to work through topics you missed.

Explore all study resources →

All questions and explanations

Prefer to read at your own pace? Work through each question below, then open its answer to check your reasoning. You can link directly to a question or print this reference.

  1. Question 1

    Link to question

    Which service model provides on-demand access to shared computing resources that can be rapidly provisioned with minimal management effort?

    1. Infrastructure as a Service (IaaS)

    2. Platform as a Service (PaaS)

    3. Software as a Service (SaaS)

    4. Network as a Service (NaaS)

    Show answer and explanation

    Correct answer

    • Infrastructure as a Service (IaaS)

    IaaS delivers virtualized computing resources over the internet, allowing users to deploy and run arbitrary software such as operating systems and applications. This model offers scalable resources with minimal administrative overhead.

  2. Question 2

    Link to question

    What is the primary purpose of network segmentation in a cloud environment?

    1. To improve network throughput

    2. To isolate workloads and limit lateral movement

    3. To reduce the number of required IP addresses

    4. To simplify network configuration

    Show answer and explanation

    Correct answer

    • To isolate workloads and limit lateral movement

    Network segmentation divides a network into smaller subnetworks to enhance security and control. In the cloud, it helps contain breaches by restricting communication between unrelated workloads.

  3. Question 3

    Link to question

    Which cloud deployment model is typically owned and operated by a single organization for exclusive use?

    1. Public cloud

    2. Private cloud

    3. Hybrid cloud

    4. Community cloud

    Show answer and explanation

    Correct answer

    • Private cloud

    A private cloud is dedicated to a single organization, providing exclusive access to resources. It can be hosted internally or by a third party but is not shared with other organizations.

  4. Question 4

    Link to question

    What does the shared responsibility model in cloud computing describe?

    1. The division of costs between the cloud provider and the customer

    2. The allocation of security and compliance responsibilities between provider and customer

    3. The distribution of application logic across multiple regions

    4. The balance of compute and storage resources

    Show answer and explanation

    Correct answer

    • The allocation of security and compliance responsibilities between provider and customer

    The shared responsibility model clarifies that the cloud provider secures the infrastructure, while the customer is responsible for securing their data, applications, and access controls.

  5. Question 5

    Link to question

    Which practice helps ensure that cloud resources are used efficiently and costs are predictable?

    1. Disabling monitoring tools

    2. Implementing resource tagging and governance policies

    3. Using only on-demand instances

    4. Avoiding automation

    Show answer and explanation

    Correct answer

    • Implementing resource tagging and governance policies

    Resource tagging and governance policies enable organizations to track usage, assign costs to departments, and enforce compliance. This supports cost management and operational efficiency.

  6. Question 6

    Link to question

    What is a common use case for cloud storage in enterprise environments?

    1. Replacing all local network hardware

    2. Providing scalable, durable data storage for backups and archives

    3. Eliminating the need for authentication

    4. Storing only temporary session data

    Show answer and explanation

    Correct answer

    • Providing scalable, durable data storage for backups and archives

    Cloud storage offers scalable and durable options for backups, archives, and data recovery. It reduces the need for maintaining physical storage infrastructure on-premises.

  7. Question 7

    Link to question

    Which cloud characteristic enables rapid scaling of resources to meet changing demand?

    1. Measured service

    2. On-demand self-service

    3. Elasticity

    4. Resource pooling

    Show answer and explanation

    Correct answer

    • Elasticity

    Elasticity allows cloud environments to automatically scale resources up or down based on workload requirements. This ensures performance during peaks and cost savings during low usage.

  8. Question 8

    Link to question

    What is a primary benefit of using containers in cloud-native applications?

    1. They eliminate the need for networking

    2. They provide consistent runtime environments across development and deployment

    3. They require more resources than virtual machines

    4. They are only compatible with public clouds

    Show answer and explanation

    Correct answer

    • They provide consistent runtime environments across development and deployment

    Containers package applications and dependencies together, ensuring consistent behavior across environments. This simplifies deployment and improves portability in cloud workflows.

  9. Question 9

    Link to question

    Which security control is most effective for protecting data at rest in cloud storage?

    1. Network firewalls

    2. Encryption

    3. Physical security guards

    4. Public access policies

    Show answer and explanation

    Correct answer

    • Encryption

    Encryption protects data at rest by making it unreadable without the proper decryption keys. This is essential for maintaining confidentiality in cloud storage.

  10. Question 10

    Link to question

    What does a cloud provider typically manage under the shared responsibility model?

    1. User access permissions

    2. Physical infrastructure security

    3. Application code vulnerabilities

    4. Data classification policies

    Show answer and explanation

    Correct answer

    • Physical infrastructure security

    The cloud provider is responsible for the security of the physical infrastructure, including data centers and hardware. The customer manages access and data-level protections.

  11. Question 11

    Link to question

    Which cloud service model is best suited for developers who want to focus on writing code without managing underlying infrastructure?

    1. Infrastructure as a Service (IaaS)

    2. Platform as a Service (PaaS)

    3. Software as a Service (SaaS)

    4. Function as a Service (FaaS)

    Show answer and explanation

    Correct answer

    • Platform as a Service (PaaS)

    PaaS provides a development environment without requiring users to manage servers or storage. It allows developers to concentrate on application logic and code.

  12. Question 12

    Link to question

    What is a key advantage of using a hybrid cloud architecture?

    1. It requires no network connectivity

    2. It allows data and applications to move between public and private clouds

    3. It eliminates all security risks

    4. It reduces the need for any form of backup

    Show answer and explanation

    Correct answer

    • It allows data and applications to move between public and private clouds

    Hybrid cloud combines public and private cloud environments, enabling flexible deployment based on workload requirements and compliance needs.

  13. Question 13

    Link to question

    Which practice is essential for maintaining security in cloud environments?

    1. Sharing credentials across teams

    2. Regularly updating and patching systems

    3. Using default passwords for convenience

    4. Disabling logging to reduce data volume

    Show answer and explanation

    Correct answer

    • Regularly updating and patching systems

    Regular updates and patching address known vulnerabilities and reduce exposure to threats. This is a fundamental security practice in any cloud environment.

  14. Question 14

    Link to question

    What does high availability in cloud computing aim to achieve?

    1. Maximize resource consumption

    2. Minimize downtime and ensure continuous service access

    3. Reduce the number of users

    4. Simplify data backup processes

    Show answer and explanation

    Correct answer

    • Minimize downtime and ensure continuous service access

    High availability designs ensure that services remain accessible with minimal interruption. This is typically achieved through redundancy and failover mechanisms.

  15. Question 15

    Link to question

    Which cloud storage type is optimized for infrequently accessed data that requires long-term retention?

    1. Standard storage

    2. High-performance storage

    3. Archive storage

    4. In-memory storage

    Show answer and explanation

    Correct answer

    • Archive storage

    Archive storage is designed for data that is rarely accessed but must be retained for compliance or historical purposes. It offers lower costs at the expense of retrieval time.

Read all flashcards

Recall the answer before opening each card.

Which cloud service model provides virtualized computing resources with minimal management?

IaaS – Infrastructure as a Service. It delivers on-demand access to virtualized hardware like servers and storage. Users deploy and manage their own OS and applications.

What is the primary purpose of network segmentation in cloud environments?

To isolate workloads and limit lateral movement. Segmentation divides a network into smaller subnets, enhancing security by restricting communication between unrelated workloads.

Which cloud deployment model is exclusive to a single organization?

Private cloud. It is dedicated to one organization, providing exclusive access to resources. It can be hosted on-premises or by a third-party provider.

What does the shared responsibility model define?

The allocation of security and compliance responsibilities between the cloud provider and the customer. The provider manages physical infrastructure, while the customer protects data and access.

How can resource tagging help manage cloud costs?

Resource tagging organizes cloud resources with metadata, enabling cost allocation by department or project. This supports governance policies and helps predict and control spending.

What is a common use case for cloud storage in enterprises?

Providing scalable, durable storage for backups and archives. Cloud storage reduces the need for on-premises infrastructure and offers automated replication for data protection.

Which cloud characteristic allows automatic resource scaling based on demand?

Elasticity. It enables resources to scale up during peak usage and scale down when demand decreases, optimizing performance and cost.

What is a primary benefit of containers in cloud-native apps?

Consistent runtime environments across development and deployment. Containers package applications with dependencies, ensuring portability and simplifying scaling.

Which security control is most effective for protecting data at rest in cloud storage?

Encryption. It makes data unreadable without proper keys, safeguarding confidentiality. Storage-level or object-level encryption is common.

Under the shared responsibility model, what does the cloud provider typically manage?

Physical infrastructure security, including data centers, network hardware, and hypervisors. The customer manages data, applications, and access controls.

Which service model is best for developers who want to focus on coding?

PaaS – Platform as a Service. It provides a managed development environment without requiring server or storage management, allowing developers to concentrate on application logic.

What is a key advantage of hybrid cloud architecture?

It allows data and applications to move between public and private clouds. This enables flexible deployment based on workload requirements, compliance, and cost.

Which practice is essential for maintaining security in cloud environments?

Regularly updating and patching systems. This addresses known vulnerabilities and reduces exposure to threats, a fundamental security practice.

What does high availability in cloud computing aim to achieve?

Minimize downtime and ensure continuous service access. It is achieved through redundancy, failover mechanisms, and distributing resources across availability zones.

Which cloud storage type is optimized for infrequently accessed data?

Archive storage. It offers low cost for long-term retention but has longer retrieval times. Suitable for compliance archives and historical backups.

What is the role of elasticity in cloud cost optimization?

Elasticity automatically adjusts resource capacity to match demand, preventing over-provisioning and reducing costs during low usage periods.

How does network segmentation limit lateral movement?

By dividing the network into isolated subnets, segmentation restricts communication between workloads. If one segment is compromised, attackers cannot easily access others.

What is the main difference between private and public cloud?

Private cloud is dedicated to a single organization, while public cloud is shared among multiple tenants. Private cloud offers greater control and compliance isolation.

Why is encryption important for data at rest in cloud storage?

It protects data confidentiality by converting it into ciphertext. Only authorized parties with decryption keys can read the data, essential for compliance and security.

What are the benefits of using containers over virtual machines?

Containers share the host OS, making them lighter and faster to start. They provide consistent environments and higher resource density than VMs.

Active recall deck

Practice Cloud+ with real flashcards

Read the prompt, commit to an answer, then flip the card. Move through the deck at your own pace and repeat any topic that does not come back quickly.

20 free cards

Card 1 of 20

1 reviewed this session

Connect the concepts

Your Cloud+ study mind map

Open a branch to connect a topic with its practice questions and explanations. Use the map to choose your next review topic.

Cloud+15 questions in this practice set
Understand cloud service models and their characteristics.(1)
Implement network security controls in cloud environments.(1)
Compare cloud deployment models and their use cases.(1)
Explain the shared responsibility model in cloud environments.(1)
Manage cloud costs and governance effectively.(1)
Identify appropriate uses for cloud storage solutions.(1)
Understand key characteristics of cloud computing.(1)
Evaluate containerization benefits in cloud applications.(1)
Implement data security controls in cloud storage.(1)
Differentiate responsibilities between cloud provider and customer.(1)
Select appropriate cloud service models for development needs.(1)
Understand hybrid cloud benefits and integration strategies.(1)
More practice connections(3)
Exam-focused analysis

What this Cloud+ practice set measures

This is an analysis of the practice bank, not a claim about the vendor's live exam blueprint. Use it to identify the knowledge, judgment, and recall patterns exercised here, then verify your coverage against the current official exam guide.

Cloud Service Models and Deployment

The practice bank covers primary service models—IaaS and PaaS—and deployment models—private and hybrid. IaaS provides virtualized computing resources with minimal management, while PaaS abstracts infrastructure for developer productivity. Private clouds are exclusive to a single organization, and hybrid clouds enable workload portability between public and private environments. Understanding these distinctions is crucial for selecting the right model based on control, compliance, and development needs.

  • IaaS delivers on-demand virtualized resources; users manage OS and applications.
  • PaaS allows developers to focus on code without managing underlying infrastructure.
  • Private cloud is dedicated to one organization; hybrid cloud combines public and private.
  • Hybrid cloud advantages include data mobility and flexible deployment.

Security and the Shared Responsibility Model

Security in cloud environments is shared between provider and customer. The provider secures physical infrastructure, while customers protect data, access, and configurations. Network segmentation isolates workloads to limit lateral movement. Encryption safeguards data at rest, and regular patching is a fundamental security practice. These controls are essential for compliance and risk management in cloud operations.

  • Shared responsibility: provider manages physical security; customer manages data and access.
  • Network segmentation prevents unauthorized cross-workload communication.
  • Encryption protects data at rest; decryption requires proper keys.
  • Regular updates and patching address known vulnerabilities.

Storage Options and Cost Management

Cloud storage serves various use cases: scalable backups, archives, and data recovery. Archive storage is optimized for infrequently accessed data requiring long-term retention. Resource tagging and governance policies help track usage, assign costs, and enforce compliance, enabling predictable cost management. Selecting the correct storage class balances performance, availability, and cost.

  • Cloud storage provides scalable, durable backups and archives.
  • Archive storage is low-cost for rarely accessed data with longer retrieval times.
  • Resource tagging allocates costs to departments and improves governance.
  • Cost management is achieved through tagging, monitoring, and right-sizing.

Scalability, Containers, and High Availability

Elasticity allows resources to scale automatically with demand, ensuring performance and cost efficiency. Containers package applications with dependencies for consistent runtime across environments, simplifying deployment. High availability minimizes downtime through redundancy and failover mechanisms. These characteristics are fundamental to cloud-native architectures and resilient system design.

  • Elasticity enables automatic scaling up and down based on workload.
  • Containers provide portability and consistency across development and production.
  • High availability ensures continuous service access with minimal interruption.
  • Redundancy and failover are key to achieving high availability.

Study workflow

Turn one Cloud+ attempt into a study plan

  1. 1

    Identify Service Model Requirements

    When given a scenario, determine whether the user needs infrastructure control (IaaS), a development platform (PaaS), or a complete application (SaaS). For example, if developers want to write code without managing servers, PaaS is appropriate. Look for keywords like "provision virtual machines" for IaaS.

  2. 2

    Apply the Shared Responsibility Model

    Analyze who is responsible for what: the provider always manages physical infrastructure, hypervisor, and network hardware. The customer must secure data, user access, applications, and operating systems. Use this model to decide security controls like encryption and patching.

  3. 3

    Select Appropriate Storage Classes

    Evaluate data access patterns: frequently accessed data uses standard storage; data accessed less often uses infrequent access or glacier tiers. For long-term archival with rare retrieval, choose archive storage. Always prioritize cost and retrieval latency requirements.

  4. 4

    Implement Cost Management Practices

    Use resource tagging to assign metadata to cloud resources. This enables cost allocation by department or project. Establish governance policies to enforce tagging and monitor usage. Combine with budgeting tools to predict and control spending.

  5. 5

    Design for High Availability and Elasticity

    To minimize downtime, deploy resources across multiple availability zones and configure auto-scaling. Use load balancers and health checks to reroute traffic during failures. Elasticity automatically adjusts capacity, so set thresholds for scaling triggers to match demand.

FAQ

Questions about this exam practice page

Clear boundaries on what the bank covers, how to use it, and where official vendor information still matters.

What is the difference between IaaS and PaaS?+

IaaS provides virtualized hardware like servers and storage, giving users control over OS and applications. PaaS offers a managed platform where users deploy code without managing underlying infrastructure. Developers choose PaaS for ease of use, while IaaS offers more flexibility.

What is archive storage best used for?+

Archive storage is for data that is rarely accessed but must be retained for compliance or historical reasons. It offers significantly lower cost compared to standard storage but has longer retrieval times, often minutes to hours. Suitable for backups and legal holds.

How does network segmentation enhance cloud security?+

Network segmentation divides a cloud network into smaller, isolated subnetworks. This limits lateral movement in case of a breach, preventing an attacker from accessing other workloads. It also allows granular security controls and compliance boundaries.

Why is encryption important for data at rest?+

Encryption transforms data into an unreadable format, protecting it if unauthorized access occurs. Without encryption, data stored in cloud buckets or databases could be exposed. Encryption keys must be managed securely, often with cloud KMS services.

What are the benefits of using containers in cloud applications?+

Containers package an application with its dependencies, ensuring consistent behavior across development, testing, and production environments. They are lightweight, portable, and simplify scaling. They improve resource utilization compared to virtual machines.

Keep studying

Build the next review session

Browse another free bank or use the study strategy guide to turn your misses into spaced review.

All free testsStudy strategy