Exam Mode

1. security | Bloom: apply | Difficulty: 3

Which control most directly helps if someone obtains access to stored snapshots of production data?

A. Encryption at rest B. Auto scaling C. Public IP addressing D. Round-robin load balancing

2. security | Bloom: analyze | Difficulty: 4

Why is it unsafe to assume that moving to cloud means the provider now handles all security decisions?

A. Because customers still configure identities, data access, applications, and other layers depending on the model B. Because providers never secure infrastructure at all C. Because the customer must always own physical servers D. Because cloud has no security model

3. data_analytics | Bloom: apply | Difficulty: 4

Which use case most strongly favors object storage over block storage?

A. Providing swap space to one compute instance B. Mounting a boot volume onto a VM C. Hosting a kernel module D. Storing huge collections of independent images and videos for later processing

4. data_analytics | Bloom: apply | Difficulty: 3

Why are cloud notebook environments useful in teaching analytics or ML?

A. They eliminate model errors B. They are the same as firewalls C. They let students experiment interactively without building a full platform first D. They replace all need for data storage

5. fundamentals | Bloom: apply | Difficulty: 3

A provider charges based on actual compute hours and storage consumed instead of a fixed one-size-fits-all fee. Which cloud principle is most directly reflected?

A. Static capacity planning B. Measured service C. Dedicated hardware ownership D. Air-gapped isolation

6. data_analytics | Bloom: analyze | Difficulty: 4

Why does a BI dashboard usually depend on earlier processing and preparation steps?

A. Because dashboards are network routers B. Because dashboards present derived results rather than acting as the primary raw-data processing engine C. Because dashboards replace ETL D. Because dashboards are identical to block storage

7. security | Bloom: analyze | Difficulty: 4

Why does the customer's exact security responsibility depend partly on the chosen service model?

A. Because every model removes IAM responsibilities B. Because different service models abstract different parts of the stack, shifting who manages which layers C. Because every model gives the customer physical-hardware responsibility D. Because service models only affect pricing and never controls

8. security | Bloom: apply | Difficulty: 4

A data analyst role is accidentally granted full administrator privileges to the entire cloud account. Which security control category is primarily misconfigured?

A. CDN caching B. Autoscaling policy C. IAM D. Object-storage durability

9. security | Bloom: apply | Difficulty: 4

If too many users can read a sensitive Amazon S3 bucket, which control family should be examined first?

A. Notebook environment B. Autoscaling policy C. IAM or bucket-policy configuration D. CPU scheduling

10. fundamentals | Bloom: apply | Difficulty: 3

Which practice most strongly indicates self-service infrastructure provisioning?

A. A user mails paper forms to request CPU time B. A user waits for a purchasing department to acquire hardware C. A user hand-builds a data center D. A user launches a test environment directly from a cloud console

11. fundamentals | Bloom: apply | Difficulty: 4

Which workload is the strongest candidate for a move to serverless functions?

A. A fixed-capacity backup appliance in one office B. A database engine that must hold long-lived in-memory state C. A bursty image-resizing task triggered only when users upload files D. A desktop application with a graphical interface

12. security | Bloom: apply | Difficulty: 4

Why might an architect place sensitive internal services in private subnets with restrictive security-group rules?

A. To eliminate all need for identity management B. To convert every workload into object storage C. To guarantee that encryption is no longer necessary D. To reduce unnecessary exposure and constrain traffic paths to those that are needed

13. data_analytics | Bloom: apply | Difficulty: 4

A research team collects large raw sensor files from many devices and wants durable cloud storage before later batch processing. Which option is most suitable as the initial landing zone?

A. Object storage B. A VM's boot disk only C. An in-memory cache only D. A local USB drive for each user

14. security | Bloom: analyze | Difficulty: 4

Which statement best reflects the shared responsibility idea in cloud security?

A. Shared responsibility applies only to billing and not security B. Once an application is in the cloud, the provider is solely responsible for all security decisions C. Shared responsibility matters only for private cloud and never for public cloud D. Some security responsibilities stay with the customer even when infrastructure is hosted by a provider

15. data_analytics | Bloom: apply | Difficulty: 4

A compute instance requires a persistent disk volume presented as an attached device. Which storage model best matches?

A. Block storage B. Object storage C. IAM policy D. BI dashboard

16. service_models | Bloom: analyze | Difficulty: 4

A company is deciding between consuming an existing CRM product and building its own custom CRM platform. Which distinction is most important between SaaS and PaaS here?

A. SaaS gives more OS control than PaaS B. SaaS is for consuming finished software; PaaS is for building and deploying custom applications C. They differ only in billing currency D. PaaS is only for desktop users and SaaS is only for mobile users

17. data_analytics | Bloom: apply | Difficulty: 4

An application stores customer orders with well-defined relationships and needs strong support for SQL queries. Which kind of managed data service is the best fit?

A. Object bucket only B. Relational database service C. Message queue D. Non-relational key-value database as the primary fit

18. security | Bloom: apply | Difficulty: 4

In AWS, which control most directly limits which application tiers can reach an RDS instance in a sensitive backend subnet?

A. Bigger storage volumes B. Faster CPUs C. Rewriting the BI dashboard D. VPC segmentation with restrictive security-group and subnet rules

19. service_models | Bloom: analyze | Difficulty: 4

What usually happens to customer-managed infrastructure work as a team moves from IaaS toward SaaS?

A. It generally decreases because the provider manages more of the stack B. It disappears only if the team stops using security C. It becomes identical across all models D. It always increases

20. security | Bloom: analyze | Difficulty: 4

Why do cloud security lectures often emphasize multitenancy?

A. Because multitenancy prevents any encryption use B. Because shared infrastructure raises the importance of isolation and control boundaries C. Because multitenancy disables networking D. Because multitenancy means customers share the same credentials

21. security | Bloom: analyze | Difficulty: 4

Why is tenant isolation central in public-cloud security discussions?

A. Because different tenants may share infrastructure while still requiring strict separation B. Because public cloud prohibits access control C. Because encryption cannot be used in shared environments D. Because tenants are expected to share one root password

22. data_analytics | Bloom: evaluate | Difficulty: 4

What is the strongest rationale for choosing a managed cloud AI service over assembling every ML workflow component manually?

A. It can reduce platform-management effort and integrate with cloud data services B. It makes data governance unnecessary C. It guarantees that every model will be accurate D. It permanently removes all compute cost

23. deployment | Bloom: apply | Difficulty: 3

Founders of a new startup need usable infrastructure this month and cannot fund their own facility or ops team. Which deployment model is the most practical starting point?

A. Public cloud B. Air-gapped local servers with no external connectivity C. Community cloud only D. Private cloud on owned hardware

24. data_analytics | Bloom: apply | Difficulty: 4

A product catalog changes shape frequently across regions and needs horizontally scalable key-based access. Which data model is most defensible?

A. Strictly normalized relational schema only B. Non-relational cloud database C. A VPC security group D. A load balancer

25. fundamentals | Bloom: understand | Difficulty: 2

Why is broad network access useful from a user perspective?

A. It allows services to be reached from different device types over standard networks B. It eliminates the need for credentials C. It guarantees zero latency D. It forces all services to be public websites

26. security | Bloom: apply | Difficulty: 3

Which control most directly protects data while it travels between users and an AWS-hosted service such as an API behind a load balancer?

A. Object lifecycle policy B. Block storage C. Autoscaling D. Encryption in transit

27. fundamentals | Bloom: analyze | Difficulty: 4

Which observation is most accurate about operational work as compute abstraction increases?

A. Teams no longer need architecture decisions B. Teams stop needing to think about performance C. Teams often manage fewer low-level details but must adapt to the constraints of the higher abstraction D. Teams gain full physical-hardware control

28. data_analytics | Bloom: apply | Difficulty: 4

A media platform needs to store millions of uploaded images and videos cheaply and durably before later analytics jobs process them. Which storage choice is the best fit?

A. Object storage B. Ephemeral memory cache C. A spreadsheet on a lecturer's laptop D. Block storage attached to one VM only

29. security | Bloom: evaluate | Difficulty: 4

Why is least privilege useful even for trusted internal services?

A. It makes authentication unnecessary B. It limits the damage that can occur if a service is misused or compromised C. It replaces network segmentation entirely D. It guarantees that no failures will ever happen

30. deployment | Bloom: apply | Difficulty: 4

Which design pattern best supports elasticity for a web application?

A. No monitoring and no redundancy B. Stateless application instances behind a load balancer with scaling rules C. One manually resized instance with all tiers combined D. A spreadsheet-driven deployment model