Cloud Infrastructure and Services Foundations Free Sample Questions

Create a free account to browse all 20 sample questions. The full practice test includes 174 questions. Use the simulator for timed and flashcard mode.

Try Simulator

D-CIS-FN-01 Sample Questions

  1. Question 1

    Q1

    A financial services firm is migrating its on-premises data warehouse to a hybrid cloud model. To comply with industry regulations, the firm must ensure that data encryption keys are never accessible to the cloud provider. The security team has mandated a solution where key generation, storage, and management remain entirely within the firm's on-premises hardware security module (HSM). Which security control mechanism meets this stringent requirement?

    Show answer & explanation

    Correct answer: C

    Hold Your Own Key (HYOK) is the correct model for this scenario. It allows an organization to use its on-premises key management infrastructure, such as an HSM, to generate and manage encryption keys. The cloud service uses these keys to encrypt and decrypt data but never has access to the keys themselves, fulfilling the strict compliance requirement. Cloud provider-managed keys and keys in a cloud vault both involve the provider having some level of access or control, which is forbidden by the requirements. Encryption in use protects data during processing, which is different from key management.

  2. Question 2

    Q2Multiple answers

    An organization is implementing the 3-2-1 backup rule for its critical data. The primary data resides on a Dell EMC VxRail cluster. Which actions align with the principles of this rule? (Select THREE)

    Show answer & explanation

    Correct answers: B, C, D

    The 3-2-1 rule dictates maintaining at least three copies of your data (the primary data plus two backups).

    The rule specifies using two different storage media types (e.g., disk and cloud storage, or disk and tape) to protect against media-specific failures.

    The rule requires keeping one copy off-site to protect against local disasters like fire or flood.

  3. Question 3

    Q3

    A retail company runs a monolithic e-commerce application on-premises. The application is difficult to scale during peak shopping seasons, and deploying new features takes months. The company wants to improve agility and scalability. The application's core business logic is sound, but its components are tightly coupled. They want to move to the cloud without a complete rewrite, while enabling individual services (like payment processing and inventory) to be scaled and updated independently. Which application modernization approach is most suitable?

    Show answer & explanation

    Correct answer: C

    Refactoring is the most appropriate approach. It involves restructuring and re-architecting parts of the application to take advantage of cloud-native features, such as breaking down the monolith into microservices. This directly addresses the need to scale and update components independently without a complete rewrite. Rehosting would not solve the underlying architectural problems. Replatforming would make only minor changes. Rebuilding implies a complete rewrite, which the company wants to avoid.

  4. Question 4

    Q4

    A startup is leveraging a public cloud provider to rapidly deploy its new application. The development team can provision virtual machines and storage resources through a web portal without needing to interact with the cloud provider's staff or submit support tickets. This capability is an example of which essential characteristic of cloud computing?

    Show answer & explanation

    Correct answer: D

    On-demand self-service allows a consumer to unilaterally provision computing capabilities, such as server time and network storage, as needed automatically without requiring human interaction with each service provider. The scenario described, where developers use a web portal to provision resources without manual intervention, is a classic example of this characteristic.

  5. Question 5

    Q5

    A cloud service provider guarantees 99.95% uptime for its compute service in the Service Level Agreement (SLA). Over the past month, an operations team has been tracking the service's performance and noticed that the actual uptime was 99.91%. Which operational management process is responsible for identifying this discrepancy and initiating corrective action?

    Show answer & explanation

    Correct answer: C

    SLA Management is the process responsible for negotiating, agreeing upon, and monitoring Service Level Agreements. This includes tracking performance against the agreed-upon metrics (like uptime), reporting on the results, and initiating actions if the service levels are not met. Identifying that the 99.91% actual uptime is below the 99.95% guaranteed uptime is a core function of SLA Management.

  6. Question 6

    Q6

    An architect is designing a high-availability solution for a critical database. The requirement is to withstand the failure of a single server without any service interruption. The budget is constrained, so the most cost-effective solution that meets the requirement is preferred. The following diagram illustrates a potential configuration.

    Which fault tolerance mechanism does this configuration represent?

    graph TD subgraph Cluster DB1[DB Server 1] DB2[DB Server 2] DB3[DB Server 3] end LB(Load Balancer) --> DB1 LB --> DB2 LB --> DB3

    Show answer & explanation

    Correct answer: A

    This configuration represents N+1 redundancy. Here, 'N' is the number of components required for the system to operate (e.g., 2 servers to handle the load), and '+1' is the extra component added for failover. If one of the three servers fails, the remaining two can still handle the workload. This is a common and cost-effective way to provide high availability. 2N would require full duplication (4 servers if N=2), and N+M allows for multiple failures. Geographic redundancy involves multiple locations.

  7. Question 7

    Q7

    A rapidly growing company is deploying a new private cloud environment. They need a solution that simplifies management by integrating compute, storage, and networking into a single, software-defined platform. Their primary goal is operational simplicity and rapid, scalable deployment of virtualized workloads. For a secondary project, they also need a highly scalable, block-based storage solution that can be deployed on commodity hardware, independent of the compute nodes. Which Dell products are best suited for these two distinct requirements?

    Show answer & explanation

    Correct answer: B

    Dell EMC VxRail is a hyperconverged infrastructure (HCI) appliance that tightly integrates compute, storage, virtualization, and management, making it ideal for the primary goal of a simple, scalable private cloud. Dell EMC VxFlex is a software-defined storage (SDS) solution that provides highly scalable and flexible block storage, which can be deployed on commodity hardware, perfectly matching the secondary project's requirement. PowerEdge MX is modular infrastructure, not a complete HCI solution in the same way VxRail is.

  8. Question 8

    Q8

    True or False: Multi-factor authentication (MFA) protects against account hijacking solely by requiring a user to provide a complex password that meets specific length and character requirements.

    Show answer & explanation

    Correct answer: B

    This statement is false. MFA enhances security by requiring two or more verification factors from independent categories: something you know (password), something you have (a security token or phone), and something you are (biometrics). Complex password requirements are a single-factor control, whereas MFA adds additional, separate layers of verification.

  9. Question 9

    Q9

    Case Study

    Global Bank Inc. is a multinational financial institution subject to stringent regulatory requirements, including GDPR and local financial data sovereignty laws. Their primary data center is in Frankfurt, Germany. The bank's core transaction processing system runs on-premises and is critical to their daily operations. The board has mandated a robust business continuity plan to ensure operations can resume quickly after a regional disaster, such as a prolonged power outage affecting the entire Frankfurt metropolitan area.

    The Chief Technology Officer (CTO) has defined the following business continuity objectives: In the event of a disaster, the transaction system must be operational within 1 hour (RTO = 1 hour), and no more than 15 minutes of transaction data can be lost (RPO = 15 minutes). The disaster recovery (DR) solution must also comply with data sovereignty laws, meaning all data, including backups and replicated data, must remain within Germany.

    The IT team is evaluating different DR strategies. The proposed DR site is in a separate availability zone in Munich, Germany, hundreds of kilometers away. The network link between Frankfurt and Munich is high-speed and reliable. The team needs to choose a DR site type and a data replication method that meets the RTO, RPO, and compliance requirements.

    Given the requirements, what is the most appropriate DR solution for Global Bank Inc.?

    Show answer & explanation

    Correct answer: C

    A hot DR site is a fully operational duplicate of the primary site, allowing for near-instantaneous failover, which is necessary to meet the 1-hour RTO. Synchronous replication ensures that data is written to both the primary and DR sites simultaneously, achieving a near-zero RPO, which satisfies the 15-minute RPO requirement. Locating the site in Munich keeps all data within Germany, meeting data sovereignty laws. A cold or warm site would not meet the stringent RTO, and asynchronous replication might not meet the 15-minute RPO.

  10. Question 10

    Q10

    A software development company is choosing a cloud service model for its new application. The company wants to manage the application and its data, but wants to avoid managing the underlying operating system, patching, and server hardware. They need a platform that provides the runtime environment, database, and web server, allowing their developers to focus solely on writing and deploying code. Which cloud service model fits these requirements?

    Show answer & explanation

    Correct answer: B

    Platform as a Service (PaaS) is the correct model. PaaS provides a platform allowing customers to develop, run, and manage applications without the complexity of building and maintaining the infrastructure typically associated with developing and launching an app. The cloud provider manages the OS, hardware, and runtime, while the customer manages their application and data. IaaS would require the company to manage the OS. SaaS would provide a complete application, not a platform for development.

Register free to unlock 10 more sample questions

Create a free account to continue with the rest of the D-CIS-FN-01 sample set.

Lifetime One

Own this practice test forever.

$79.99
$75.99
one-time
  • Full access to 174 questions
  • Study, Timed & Flashcard Modes
  • All past and future versions i
  • Detailed Explanations
  • Study Tracking & Past Attempts
  • Brainy AI Assistant
  • Lifetime updates

Two

Any 2 exams per month.

$20.00/exam
$39.99
/month
  • 2 active exam slots
  • Study, Timed & Flashcard Modes
  • All past and future versions i
  • Detailed Explanations
  • Study Tracking & Past Attempts
  • 1,000 Brainy AI Credits
  • Cancel anytime

Premium Twelve

Any 12 exams over 3 months.

$15.00/exam
$179.99
/3 months
  • 4 active exam slots
  • Study, Timed & Flashcard Modes
  • All past and future versions i
  • Detailed Explanations
  • Study Tracking & Past Attempts
  • 15,000 Brainy AI Credits
  • Dedicated support
  • Friend seat included — full access

Trusted by professionals at

NvidiaSupabaseGitHubOpenAITursoClerkClaude AIAmazon