CompTIA CompTIA Certifications CLO-002 Questions & Answers

• Question 81:

  Which of the following is a cloud service model that organizations use when their third-party ERP tool is provided as a complete service?

  A. Public cloud

  B. SaaS

  C. Hybrid cloud

  D. IaaS

  Correct Answer: B

  Explanation: SaaS, or software as a service, is a cloud service model that provides ready- to-use, cloud-hosted application software to customers. Customers do not need to install, manage, or maintain the software; they simply access it via an internet connection, usually through a web browser. SaaS applications are typically offered on a subscription or pay- per-use basis. Examples of SaaS applications include email, CRM, ERP, office productivity, and collaboration tools12. SaaS is different from the other cloud service models in terms of the level of abstraction and control. In SaaS, the cloud service provider manages everything from the underlying infrastructure to the application software, while the customer only controls the application settings and data. In contrast, in IaaS (infrastructure as a service), the customer has more control and responsibility over the servers, storage, networking, and operating systems, while the cloud service provider only manages the physical infrastructure. In PaaS (platform as a service), the customer has control and responsibility over the applications and data, while the cloud service provider manages the underlying infrastructure and the development tools and platforms12. Therefore, when an organization uses a third-party ERP tool as a complete service, it is using the SaaS cloud service model. The organization does not need to worry about the installation, configuration, or maintenance of the ERP software; it only needs to access it via the internet and pay for the usage. The cloud service provider takes care of the rest.

  https://www.comptia.org/training/books/cloud-essentials-clo-002-study-guide https://www.amazon.com/CompTIA-Essentials-Certification-Second-CLO- 002/dp/1260461785

• Question 82:

  A business analyst asked for an RFI from a public CSP. The analyst wants to assess the financial aspects of a potential contract. Which of the following should the analyst expect to see in the RFI?

  A. Time to market

  B. Fixed costs

  C. Training

  D. Capital expenditures

  Correct Answer: B

  Explanation: A request for information (RFI) is a tool used by procurement teams to understand the options available for solving a problem or completing a task. Suppliers respond to RFIs with information about their products and services1. An RFI can inform buyers about the size, operation, experience, and products of potential suppliers2. A business analyst who asked for an RFI from a public cloud service provider (CSP) would want to assess the financial aspects of a potential contract. One of the financial aspects that the analyst should expect to see in the RFI is the fixed costs of the cloud service. Fixed costs are the costs that do not vary with the amount of resources or services consumed by the buyer. Fixed costs can include setup fees, subscription fees, maintenance fees, or support fees. Fixed costs can help the analyst to compare the prices of different cloud service providers and to plan the budget for the cloud project. Fixed costs can also affect the return on investment (ROI) and the total cost of ownership (TCO) of the cloud service3. The other options are not financial aspects that the analyst should expect to see in the RFI. Time to market, training, and capital expenditures are not relevant to the cloud service provider, but to the buyer. Time to market is the time it takes for the buyer to launch a product or service using the cloud. Training is the cost of educating the buyer's staff on how to use the cloud service. Capital expenditures are the costs of acquiring or upgrading physical assets, such as servers or hardware, for the cloud project. These are not information that the cloud service provider would provide in the RFI, but information that the buyer would need to consider in the procurement process. References: RFIs: The Simple Guide to Writing a Request for Information - HubSpot Blog, What is the difference between RFI, RFQ, RFT and RFP? | LawBite, CompTIA Cloud Essentials+ CLO-002 Study Guide, Chapter 1: Cloud Principles and Design, Section 1.3: Cloud Business Principles, Page 29.

• Question 83:

  A company's finance team is reporting increased cloud costs against the allocated cloud budget. Which of the following is the BEST approach to match some of the cloud operating costs with the appropriate departments?

  A. Right-sizing

  B. Scaling

  C. Chargeback

  D. Showback

  Correct Answer: C

  Explanation: Chargeback is the best approach to match some of the cloud operating costs with the appropriate departments. Chargeback is a process where the IT department bills each department for the amount of cloud resources they use, such as compute, storage, network, or software. Chargeback can help the company to allocate the cloud costs more accurately and fairly, as well as to encourage the departments to optimize their cloud consumption and reduce waste. Chargeback can also provide the company with more visibility and accountability of the cloud usage and spending across the organization12 Chargeback is different from showback, which is a process where the IT department shows each department the amount of cloud resources they use, but does not charge them for it. Showback can also help the company to increase the awareness and transparency of the cloud costs, but it may not have the same impact on the behavior and efficiency of the departments as chargeback12 Right-sizing and scaling are not approaches to match the cloud costs with the departments, but rather techniques to adjust the cloud resources to the actual demand and performance of the applications or services. Right-sizing and scaling can help the company to save money and improve the cloud utilization, but they do not address the issue of cost allocation or attribution34 References: CompTIA Cloud Essentials+ Certification Exam Objectives, CompTIA Cloud Essentials+ Study Guide, Chapter 2: Business Principles of Cloud Environments, IT Chargeback vs Showback: What's The Difference?2, Cloud Essentials+ Certification Training

• Question 84:

  Which of the following concepts will help lower the attack surface after unauthorized user- level access?

  A. Hardening

  B. Validation

  C. Sanitization

  D. Audit

  Correct Answer: A

  Explanation: Hardening is the concept that will help lower the attack surface after unauthorized user-level access. Hardening is the process of securing a system by reducing its vulnerability to attacks. Hardening involves applying patches, updates, and configuration changes to eliminate or mitigate known weaknesses. Hardening also involves disabling or removing unnecessary services, features, and accounts that could be exploited by attackers. Hardening can help lower the attack surface by reducing the amount of code running, the number of entry points available, and the potential damage that can be caused by unauthorized access. References: CompTIA Cloud Essentials+ CLO-002 Study Guide, Chapter 4: Cloud Security, Section 4.2: Cloud Security Concepts, Page 153.

• Question 85:

  A cloud administrator configures a server to insert an entry into a log file whenever an administrator logs in to the server remotely. Which of the following BEST describes the type of policy being used?

  A. Audit

  B. Authorization

  C. Hardening

  D. Access

  Correct Answer: A

  Explanation: An audit policy is a set of rules and guidelines that define how to monitor and record the activities and events that occur on a system or network1. An audit policy can help track and report the actions of users, applications, processes, or devices, and provide evidence of compliance, security, or performance issues. An audit policy can also help deter unauthorized or malicious activities, as the users know that their actions are being logged and reviewed. A cloud administrator who configures a server to insert an entry into a log file whenever an administrator logs in to the server remotely is using an audit policy, as they are enabling the collection and recording of a specific event that relates to the access and management of the server. The log file can then be used to verify the identity, time, and frequency of the administrator logins, and to detect any anomalies or suspicious activities. An authorization policy is a set of rules and guidelines that define what actions or resources a user or a system can access or perform2. An authorization policy can help enforce the principle of least privilege, which means that users or systems are only granted the minimum level of access or permissions they need to perform their tasks. An authorization policy can also help prevent unauthorized or malicious activities, as the users or systems are restricted from accessing or performing actions that are not allowed or necessary. A hardening policy is a set of rules and guidelines that define how to reduce the attack surface and vulnerability of a system or network3. A hardening policy can help improve the security and resilience of a system or network, by applying various measures such as disabling unnecessary services, removing default accounts, applying patches and updates, configuring firewalls and antivirus software, etc. A hardening policy can also help prevent unauthorized or malicious activities, as the users or systems are faced with more obstacles and challenges to compromise the system or network. An access policy is a set of rules and guidelines that define who or what can access a system or network, and under what conditions or circumstances4. An access policy can help control the authentication and identification of users or systems, and the verification and validation of their credentials. An access policy can also help prevent unauthorized or malicious activities, as the users or systems are required to prove their identity and legitimacy before accessing the system or network. References: CompTIA Cloud Essentials+ CLO-002 Study Guide, Chapter 6: Cloud Service Management, pages 229- 230.

• Question 86:

  A large database needs to be hosted in a cloud environment with little to no downtime while minimizing any loss of content. Which of the following will BEST facilitate these requirements?

  A. Automation

  B. Sandboxing

  C. Replication

  D. Orchestration

  Correct Answer: C

  Explanation: Replication is the process of copying data from one location to another, usually in a cloud environment, to ensure high availability, accessibility, and disaster recovery. Replication helps minimize downtime and data loss by creating multiple copies of the same data that can be synchronized and updated in real time. Replication is especially useful for large databases that need to be hosted in the cloud with little to no interruption or degradation of service. Replication can also improve performance and scalability by distributing the workload across multiple servers or regions. References: Cloud Essentials+ CLO-002 Study Guide, Chapter 3: Business Principles of Cloud Environments, Section

  3.4:

  Explain the importance of high availability, scalability, and elasticity concepts, p. 83. What Is Cloud Data Replication and Why Does It Matter? - WEKACloud Replication: A Comprehensive Guide - Hevo DataReplication in Cloud Computing The Customize WindowsThe role of replication in the migration process - Cloud Adoption Framework Learn more:

  1. weka.io2. hevodata.com3. thecustomizewindows.com4. learn.microsoft.com+1 more

• Question 87:

  A company's new systems administrator has been asked to create a new user for the human resources department. Which of the following will help the systems administrator understand the user privileges for each role in the company?

  A. Identity and access control management policy

  B. Classification and management policy

  C. Change management policy

  D. Standard operating procedures

  Correct Answer: A

  Explanation: An identity and access control management policy is a document that defines the roles, responsibilities, and rules for managing the identities and access rights of users in an organization1. It specifies how users are authenticated, authorized, and audited when they access the organization's resources, such as systems, applications, data, and networks1. An identity and access control management policy also describes the processes and procedures for creating, modifying, suspending, and deleting user accounts and privileges, as well as the standards and guidelines for selecting and managing passwords, tokens, certificates, and other authentication factors1. An identity and access control management policy can help the systems administrator understand the user privileges for each role in the company, as it defines the access levels and permissions that are granted to different types of users, such as employees, contractors, vendors, partners, and customers1. The policy also outlines the criteria and conditions for granting, changing, or revoking access rights, based on the principle of least privilege and the need-to-know basis1. By following the identity and access control management policy, the systems administrator can ensure that the new user for the human resources department has the appropriate and secure access to the resources that are relevant to their job function and responsibilities1. References: 1: CompTIA Cloud Essentials+ Certification Study Guide, Second Edition (LO-002), Chapter 3: Cloud Planning, Section 3.2: Cloud Adoption, Subsection 3.2.1: Identity and Access Management

• Question 88:

  A company is considering moving all of its VMs to reserved instances, which would save 20% on each instance. The instances the company would move are shown below:

  

  Which of the following is the amount the company would save annually be converting all of these VMs to reserved instances?

  A. $1110

  B. $1600

  C. $3840

  D. $5550

  E. $13320

  F. $53280

  Correct Answer: E

  Explanation: Reserved instances are a type of virtual machine (VM) that are purchased in advance and offer a significant discount compared to on-demand pricing. The company is considering moving all of its VMs to reserved instances, which would save 20% on each instance. The instances the company would move are shown below. The total annual cost of the VMs is $66600. Therefore, the company would save 20% of $66600, which is $13320 annually. References: CompTIA Cloud Essentials+ Certification Study Guide, Second Edition (LO-002), Chapter 2: Cloud Concepts, Section 2.2: Cloud Economics, Subsection 2.2.2: Cloud Pricing Models This is a table of virtual machines (VMs) that the company is considering moving to reserved instances. The table has three columns: Resource, Tag, and Currently monthly cost. The table has 11 rows, each representing a different VM. Resource Tag Currently monthly cost VM1 Web Server $100 VM2 Web Server $100 VM3 Web Server $100 VM4 Database Server $200 VM5 Database Server $200 VM6 Database Server $200 VM7 Application Server $300 VM8 Application Server $300 VM9 Application Server $300 VM10 Backup Server $400 VM11 Backup Server $400

• Question 89:

  The legal team is required to share legal proceedings with an outside council. The team uses SaaS fileshares. Which of the following policies will BEST state the requirements for sharing information with external parties?

  A. Information security policy

  B. Communication policy

  C. Resource management policy

  D. Identity control policy

  Correct Answer: A

  Explanation: An information security policy is a document that defines the rules and guidelines for protecting the confidentiality, integrity, and availability of data and systems in an organization. It covers topics such as data classification, access control, encryption, backup, incident response, and compliance. An information security policy is essential for ensuring that data is shared securely with external parties, especially when using SaaS fileshares that may have different security standards and features than the organization's own systems. A communication policy, a resource management policy, and an identity control policy are all related to information security, but they are not as comprehensive and specific as an information security policy. References: CompTIA Cloud Essentials+ CLO- 002 Study Guide, Chapter 4: Security in the Cloud, page 149.

• Question 90:

  Which of the following BEST describes a pay-as-you-go licensing model within a cloud service?

  A. Subscription agreement

  B. Perpetual agreement

  C. Enterprise agreement

  D. Promotional agreement

  Correct Answer: A

  Explanation: A subscription agreement is a type of pay-as-you-go licensing model within a cloud service, where the user pays a recurring fee for the access to the cloud resources and services. The fee is usually based on the number of users, the amount of data, or the duration of the subscription. A subscription agreement allows the user to scale up or down the cloud usage as needed, and only pay for what they use. A subscription agreement is different from a perpetual agreement, which is a one-time payment for a perpetual license to use the cloud service. A subscription agreement is also different from an enterprise agreement, which is a long-term contract that offers discounts and benefits for large-scale cloud usage. A promotional agreement is a temporary offer that provides free or discounted access to the cloud service for a limited time or under certain conditions. References: Cloud Service Models - CompTIA Cloud Essentials+ (CLO002) Cert Guide, Cloud Computing Pricing Models - CompTIA Cloud Essentials+ (CLO-002) Cert Guide