VendorsExamsEnterprise
Support
Request an ExamContact UsFAQ

Cloud Infrastructure and Services Foundations Free Sample Questions

Description

Covers digital transformation and cloud reference architecture, application modernization and orchestration, cloud security, business continuity and data protection, and service management.

20 free sample questions174 in the full practice test

Try simulator

D-CIS-FN-01 Sample Questions

  1. Question 1

    Advanced

    Cloud Security and Business Continuity · GRC and Security Control Mechanisms

    A financial services firm is migrating its on-premises data warehouse to a hybrid cloud model. To comply with industry regulations, the firm must ensure that data encryption keys are never accessible to the cloud provider. The security team has mandated a solution where key generation, storage, and management remain entirely within the firm's on-premises hardware security module (HSM). Which security control mechanism meets this stringent requirement?

    Answer and explanation

    Correct answer: C

    Hold Your Own Key (HYOK) is the correct model for this scenario. It allows an organization to use its on-premises key management infrastructure, such as an HSM, to generate and manage encryption keys. The cloud service uses these keys to encrypt and decrypt data but never has access to the keys themselves, fulfilling the strict compliance requirement. Cloud provider-managed keys and keys in a cloud vault both involve the provider having some level of access or control, which is forbidden by the requirements. Encryption in use protects data during processing, which is different from key management.

  2. Question 2

    IntermediateMultiple answers

    Cloud Security and Business Continuity · Data Protection Solutions

    An organization is implementing the 3-2-1 backup rule for its critical data. The primary data resides on a Dell EMC VxRail cluster. Which actions align with the principles of this rule? (Select THREE)

    Answer and explanation

    Correct answers: B, C, D

    The 3-2-1 rule dictates maintaining at least three copies of your data (the primary data plus two backups).

    The rule specifies using two different storage media types (e.g., disk and cloud storage, or disk and tape) to protect against media-specific failures.

    The rule requires keeping one copy off-site to protect against local disasters like fire or flood.

  3. Question 3

    Intermediate

    Application, Cloud Services, Orchestration, and Modern Infrastructure · Application Modernization Approaches

    A retail company runs a monolithic e-commerce application on-premises. The application is difficult to scale during peak shopping seasons, and deploying new features takes months. The company wants to improve agility and scalability. The application's core business logic is sound, but its components are tightly coupled. They want to move to the cloud without a complete rewrite, while enabling individual services (like payment processing and inventory) to be scaled and updated independently. Which application modernization approach is most suitable?

    Answer and explanation

    Correct answer: C

    Refactoring is the most appropriate approach. It involves restructuring and re-architecting parts of the application to take advantage of cloud-native features, such as breaking down the monolith into microservices. This directly addresses the need to scale and update components independently without a complete rewrite. Rehosting would not solve the underlying architectural problems. Replatforming would make only minor changes. Rebuilding implies a complete rewrite, which the company wants to avoid.

  4. Question 4

    Beginner

    Digital Transformation, Cloud Computing Reference Architecture, and Introduction to Cloud Computing · Essential Characteristics of Cloud Computing

    A startup is leveraging a public cloud provider to rapidly deploy its new application. The development team can provision virtual machines and storage resources through a web portal without needing to interact with the cloud provider's staff or submit support tickets. This capability is an example of which essential characteristic of cloud computing?

    Answer and explanation

    Correct answer: D

    On-demand self-service allows a consumer to unilaterally provision computing capabilities, such as server time and network storage, as needed automatically without requiring human interaction with each service provider. The scenario described, where developers use a web portal to provision resources without manual intervention, is a classic example of this characteristic.

  5. Question 5

    Intermediate

    Cloud Service Management and IT Transformation · Operation Management

    A cloud service provider guarantees 99.95% uptime for its compute service in the Service Level Agreement (SLA). Over the past month, an operations team has been tracking the service's performance and noticed that the actual uptime was 99.91%. Which operational management process is responsible for identifying this discrepancy and initiating corrective action?

    Answer and explanation

    Correct answer: C

    SLA Management is the process responsible for negotiating, agreeing upon, and monitoring Service Level Agreements. This includes tracking performance against the agreed-upon metrics (like uptime), reporting on the results, and initiating actions if the service levels are not met. Identifying that the 99.91% actual uptime is below the 99.95% guaranteed uptime is a core function of SLA Management.

  6. Question 6

    Intermediate

    Cloud Security and Business Continuity · Fault Tolerance Mechanisms

    An architect is designing a high-availability solution for a critical database. The requirement is to withstand the failure of a single server without any service interruption. The budget is constrained, so the most cost-effective solution that meets the requirement is preferred. The following diagram illustrates a potential configuration.

    Which fault tolerance mechanism does this configuration represent?

    graph TD subgraph Cluster DB1[DB Server 1] DB2[DB Server 2] DB3[DB Server 3] end LB(Load Balancer) --> DB1 LB --> DB2 LB --> DB3

    Answer and explanation

    Correct answer: A

    This configuration represents N+1 redundancy. Here, 'N' is the number of components required for the system to operate (e.g., 2 servers to handle the load), and '+1' is the extra component added for failover. If one of the three servers fails, the remaining two can still handle the workload. This is a common and cost-effective way to provide high availability. 2N would require full duplication (4 servers if N=2), and N+M allows for multiple failures. Geographic redundancy involves multiple locations.

  7. Question 7

    Advanced

    Application, Cloud Services, Orchestration, and Modern Infrastructure · Modern Infrastructure

    A rapidly growing company is deploying a new private cloud environment. They need a solution that simplifies management by integrating compute, storage, and networking into a single, software-defined platform. Their primary goal is operational simplicity and rapid, scalable deployment of virtualized workloads. For a secondary project, they also need a highly scalable, block-based storage solution that can be deployed on commodity hardware, independent of the compute nodes. Which Dell products are best suited for these two distinct requirements?

    Answer and explanation

    Correct answer: B

    Dell EMC VxRail is a hyperconverged infrastructure (HCI) appliance that tightly integrates compute, storage, virtualization, and management, making it ideal for the primary goal of a simple, scalable private cloud. Dell EMC VxFlex is a software-defined storage (SDS) solution that provides highly scalable and flexible block storage, which can be deployed on commodity hardware, perfectly matching the secondary project's requirement. PowerEdge MX is modular infrastructure, not a complete HCI solution in the same way VxRail is.

  8. Question 8

    Beginner

    Cloud Security and Business Continuity · Security Control Mechanisms

    True or False: Multi-factor authentication (MFA) protects against account hijacking solely by requiring a user to provide a complex password that meets specific length and character requirements.

    Answer and explanation

    Correct answer: B

    This statement is false. MFA enhances security by requiring two or more verification factors from independent categories: something you know (password), something you have (a security token or phone), and something you are (biometrics). Complex password requirements are a single-factor control, whereas MFA adds additional, separate layers of verification.

  9. Question 9

    Advanced

    Cloud Security and Business Continuity · Disaster Recovery and Business Continuity

    Case Study

    Global Bank Inc. is a multinational financial institution subject to stringent regulatory requirements, including GDPR and local financial data sovereignty laws. Their primary data center is in Frankfurt, Germany. The bank's core transaction processing system runs on-premises and is critical to their daily operations. The board has mandated a robust business continuity plan to ensure operations can resume quickly after a regional disaster, such as a prolonged power outage affecting the entire Frankfurt metropolitan area.

    The Chief Technology Officer (CTO) has defined the following business continuity objectives: In the event of a disaster, the transaction system must be operational within 1 hour (RTO = 1 hour), and no more than 15 minutes of transaction data can be lost (RPO = 15 minutes). The disaster recovery (DR) solution must also comply with data sovereignty laws, meaning all data, including backups and replicated data, must remain within Germany.

    The IT team is evaluating different DR strategies. The proposed DR site is in a separate availability zone in Munich, Germany, hundreds of kilometers away. The network link between Frankfurt and Munich is high-speed and reliable. The team needs to choose a DR site type and a data replication method that meets the RTO, RPO, and compliance requirements.

    Given the requirements, what is the most appropriate DR solution for Global Bank Inc.?

    Answer and explanation

    Correct answer: C

    A hot DR site is a fully operational duplicate of the primary site, allowing for near-instantaneous failover, which is necessary to meet the 1-hour RTO. Synchronous replication ensures that data is written to both the primary and DR sites simultaneously, achieving a near-zero RPO, which satisfies the 15-minute RPO requirement. Locating the site in Munich keeps all data within Germany, meeting data sovereignty laws. A cold or warm site would not meet the stringent RTO, and asynchronous replication might not meet the 15-minute RPO.

  10. Question 10

    Intermediate

    Digital Transformation, Cloud Computing Reference Architecture, and Introduction to Cloud Computing · Cloud Service Models

    A software development company is choosing a cloud service model for its new application. The company wants to manage the application and its data, but wants to avoid managing the underlying operating system, patching, and server hardware. They need a platform that provides the runtime environment, database, and web server, allowing their developers to focus solely on writing and deploying code. Which cloud service model fits these requirements?

    Answer and explanation

    Correct answer: B

    Platform as a Service (PaaS) is the correct model. PaaS provides a platform allowing customers to develop, run, and manage applications without the complexity of building and maintaining the infrastructure typically associated with developing and launching an app. The cloud provider manages the OS, hardware, and runtime, while the customer manages their application and data. IaaS would require the company to manage the OS. SaaS would provide a complete application, not a platform for development.

Register free for 10 more questions

Or unlock all 174 D-CIS-FN-01 questions with explanations, timed mode and flashcards.

Related practice tests

All Dell practice exams