Explain Policies or Procedures. CLO-002 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company's marketing department frequently needs to create and delete cloud resources for short-term campaigns. The IT department manages a shared cloud environment. The company wants to ensure that marketing can work independently without compromising security. What should the department-specific policy include?

   • AA self-service portal with pre-approved templates and role-based access controls for marketing users.
   • BA policy that requires IT to manually create every resource for marketing.
   • CA policy that forbids marketing from using the cloud entirely.
   • DFull administrative access to the cloud subscription for all marketing employees.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company notices that its cloud costs have increased significantly because developers are leaving test environments running overnight. Which resource management policy would best address this issue?

   • AIncrease the budget for cloud resources to accommodate the extra usage.
   • BRequire developers to manually turn off resources at the end of the day.
   • CMove all test environments to a different cloud provider.
   • DImplement a policy that automatically shuts down non-production resources outside business hours.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company has a policy that requires multi-factor authentication (MFA) for all cloud administrators. The HR department wants to use a cloud-based HR system and asks if MFA is required for their users. What should the access control policy state?

   • AMFA is not needed because the HR system is cloud-based and secure by default.
   • BMFA is required for all users who have access to sensitive data, including HR users.
   • CMFA is only required for administrators, not for regular users.
   • DMFA is optional for HR users because they are not IT staff.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company plans to migrate its customer relationship management (CRM) system to the cloud. The migration will require a brief downtime. The change management policy requires that all stakeholders be informed. What should the change management process include?

   • AA security assessment of the CRM data after migration.
   • BA communication plan that specifies when and how stakeholders will be notified about the downtime.
   • CA rollback plan that is only activated if the migration fails.
   • DA cost analysis of the migration to present to the finance department.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company's incident response plan includes a step to 'contain the incident.' Which action best exemplifies this step in a cloud environment?

   • ARestore all systems from the last backup.
   • BIsolate the affected virtual network and revoke compromised credentials.
   • CDelete all logs related to the incident to prevent data leakage.
   • DNotify the public about the incident immediately.
   Reveal Solution Discussion Select an answer first