10 free, exam-style Cloud Plus (Cloud Plus) practice questions with answers and explanations. No signup required. Work through them below, then take the full free Cloud Plus practice test to study every exam domain.
These 10 free Cloud Plus questions are organized by exam domain, so you can see how each part of the Cloud Plus blueprint is tested. Reveal the answer and explanation under each question.
A company hosts a web application using IaaS virtual machines in a public cloud. After a security breach, the investigation reveals that the operating system had not been patched in six months. Under the shared responsibility model, who is accountable for this failure?
Correct answer: C - The customer, because OS patching is the customer's responsibility in an IaaS model
A financial services company requires that no more than 15 minutes of transaction data can be lost in the event of a disaster. Which metric defines this requirement?
Correct answer: B - Recovery Point Objective (RPO)
A media company needs to store 200 TB of video archives that will be accessed approximately once per year for regulatory audits. Retrieval can take up to 12 hours. Which storage solution is MOST cost-effective?
Correct answer: D - Object storage in an archive tier with lifecycle policies
A development team deploys a new application version by directing 5% of production traffic to the updated instances while 95% of traffic continues to the existing version. After monitoring error rates and latency for 30 minutes, they gradually increase traffic to the new version. Which deployment strategy is being used?
Correct answer: D - Canary deployment
A cloud administrator runs a Terraform plan and discovers that the live environment contains three additional security groups that are not defined in any Terraform configuration file. Which IaC concept does this scenario describe?
Correct answer: A - Configuration drift
An organization performs a full backup every Sunday night. Incremental backups run Monday through Saturday. A server failure occurs on Thursday morning. Which backups are required to perform a complete restore?
Correct answer: B - Sunday's full backup and the incremental backups from Monday, Tuesday, and Wednesday
A company wants to allow a third-party analytics application to read data from its cloud storage on behalf of users, without requiring users to share their passwords with the third party. Which protocol is designed specifically for this use case?
Correct answer: A - OAuth 2.0, because it grants delegated authorization via access tokens
A security team deploys a network device that inspects traffic in real time and automatically drops packets matching known attack signatures. Which security control is this?
Correct answer: D - Intrusion Prevention System (IPS)
A DevOps engineer needs to automate server configuration across 200 Linux instances without installing any agent software on the target machines. The tool must use SSH and YAML-based playbooks. Which tool meets these requirements?
Correct answer: C - Ansible
Users report that they can log in to a cloud-hosted application successfully but receive an error when attempting to access the admin dashboard. The application returns HTTP status code 403. What is the MOST likely cause?
Correct answer: C - The users are authenticated but lack authorization for the admin resource
Practice hundreds more Cloud Plus questions with instant scoring, weak-area drills, and full exam simulations.