71. What is DevOps and how does it relate to cloud computing?
- A team of developers who work on cloud operating systems exclusively
- A cultural and technical approach that combines software development (Dev) and IT operations (Ops) — promoting collaboration, automation, CI/CD pipelines, and continuous delivery — cloud computing provides the elastic infrastructure that makes DevOps practices scalable and efficient
- A cloud security certification program for developers working on operational cloud systems
- A specialized cloud service model exclusively for development and testing environments
Answer : B Explanation: DevOps bridges the traditional gap between development teams (who build software) and operations teams (who deploy and maintain it). Core DevOps practices in the cloud: CI/CD (Continuous Integration/Continuous Delivery) — automate building, testing, and deploying code. IaC — manage infrastructure with code. Monitoring and Observability — continuous performance monitoring. Collaboration — shared tools, shared responsibility. Cloud enables DevOps by: providing on-demand infrastructure (spin up test environments in seconds), managed CI/CD services (AWS CodePipeline, Azure DevOps, GCP Cloud Build), container platforms (Docker, Kubernetes), and infrastructure automation (Terraform, Ansible). DevOps + Cloud = faster software delivery, higher reliability, and more efficient resource use. Popular DevOps tools: Jenkins, GitLab CI, GitHub Actions, Ansible, Chef, Puppet.
72. What is cloud-native application development?
- Developing applications that are native to (only run on) a single specific cloud provider
- An approach to building and running applications that fully exploits cloud computing advantages — designed from the ground up using microservices architecture, containers, dynamic orchestration (Kubernetes), and CI/CD to be scalable, resilient, and easily updatable
- A programming paradigm that uses cloud storage as the primary data type
- Applications developed by cloud providers exclusively for their own internal use
Answer : B Explanation: Cloud-native applications are architected to take full advantage of cloud capabilities, unlike “lifted and shifted” traditional applications. Cloud-native principles: Microservices — application broken into small, independent services. Containers — each service packaged in containers for portability. Dynamic Orchestration — Kubernetes manages container lifecycle. CI/CD — continuous automated deployment. API-first — services communicate via APIs. Twelve-Factor App methodology — a set of best practices for cloud-native apps (stateless processes, externalized config, disposable infrastructure). Benefits: independent scaling of individual components, faster feature releases, fault isolation (one microservice failing doesn’t bring down the whole app), and technology flexibility (each service can use different languages/databases). CNCF (Cloud Native Computing Foundation) governs key cloud-native projects like Kubernetes, Prometheus, Envoy, and Jaeger.
73. What is microservices architecture in cloud computing?
- A cloud architecture that uses the smallest possible virtual machines for efficiency
- An architectural style where an application is built as a collection of small, independent, loosely coupled services — each running its own process, communicating via APIs, and deployable independently
- A cloud service that provides very small computing instances (micro-sized VMs) at low cost
- An architecture where micro-transactions are processed at very high speed in the cloud
Answer : B Explanation: Microservices decompose a monolithic application into small, focused services. Each microservice: has a single business responsibility, can be developed by a small team independently, can be deployed independently (no coordinated releases), can be scaled independently (scale only the bottleneck service), and can use the best technology for its purpose (polyglot). Example: a Netflix-like streaming service may have separate microservices for: user authentication, video encoding, recommendation engine, billing, and search. Benefits: faster development, independent scaling, technology flexibility, fault isolation, easier maintenance. Challenges: distributed systems complexity, inter-service communication, distributed tracing, and increased operational overhead. Typically deployed in containers managed by Kubernetes. Compare with monolith: single deployable unit, simpler but hard to scale and change as it grows.
74. What is a CDN (Content Delivery Network) in cloud computing?
- A cloud network that delivers only certified digital content to verified users
- A geographically distributed network of servers (edge servers/PoPs) that caches and delivers web content (images, videos, scripts, web pages) from the server closest to the user — reducing latency and improving load times globally
- A content management system delivered as a cloud service for web developers
- A cloud data network that connects different cloud providers for data transfer
Answer : B Explanation: A CDN improves performance for globally distributed users by serving content from geographically proximate edge servers (Points of Presence — PoPs) rather than a central origin server. How it works: a user in Mumbai accessing a US-hosted website gets static content (images, CSS, JavaScript, videos) served from a nearby CDN edge server in Mumbai — dramatically reducing latency from 300ms to ~10ms. Benefits: faster page loads, reduced origin server load, bandwidth cost reduction, improved availability, and DDoS attack mitigation (absorb attacks at edge). Major CDN providers: Cloudflare, Akamai, Amazon CloudFront, Azure CDN, Google Cloud CDN, Fastly. CDNs are essential for e-commerce, media streaming (Netflix, YouTube), gaming, and any application serving a global user base where performance is critical.
75. What is cloud storage and what are its main types?
- A physical storage device located in the cloud provider’s data center
- Internet-based storage where data is saved on remote servers maintained by a cloud provider — three main types: Object Storage (for unstructured data), Block Storage (for VMs and databases), and File Storage (for shared file systems)
- A storage technology that compresses data into cloud-shaped formations for efficiency
- A backup system that stores data in the cloud once local storage is completely full
Answer : B Explanation: Three main cloud storage types: Object Storage: stores data as discrete objects (files with metadata and unique IDs). Infinitely scalable, highly durable (11 nines — 99.999999999%), ideal for unstructured data. Examples: AWS S3, Azure Blob Storage, Google Cloud Storage. Use cases: backups, media files, data lakes, website assets. Block Storage: raw storage volumes attached to VMs, similar to a hard drive. Low latency, ideal for databases and OS volumes. Examples: AWS EBS, Azure Managed Disks, Google Persistent Disk. File Storage: shared file system accessible by multiple VMs simultaneously using NFS or SMB protocols. Examples: AWS EFS, Azure Files, Google Filestore. Use cases: shared application data, content management, home directories. Cloud storage is cheaper, more durable, and more scalable than on-premise storage and is billed per GB used.
76. What is the concept of cloud bursting?
- A cloud failure mode where too many users cause the cloud service to burst and break
- A hybrid cloud deployment technique where an application runs in a private cloud or on-premises until demand exceeds its capacity — at which point it automatically bursts into public cloud resources to handle the excess load
- A cloud billing term describing sudden unexpected cost spikes from over-provisioning
- A security incident where attackers exploit cloud vulnerabilities to burst through firewalls
Answer : B Explanation: Cloud Bursting allows organizations to maintain predictable workloads on their own infrastructure while seamlessly scaling out to public cloud during peak demand periods. Example: a retail company runs its e-commerce platform on a private cloud sized for average traffic but bursts to AWS during Black Friday when traffic spikes 10x — then scales back to private cloud afterward. Benefits: cost efficiency (only pay for public cloud during peaks), capital efficiency (don’t need to size private infrastructure for peak capacity), and flexibility. Requirements: consistent networking between private and public cloud (VPN, dedicated connection), compatible infrastructure (VMware-compatible VMs for VMware Cloud on AWS), and orchestration tools to manage the automatic bursting. Cloud bursting is a key use case for hybrid cloud architectures.
77. What is multi-cloud strategy in cloud computing?
- Using multiple cloud accounts from the same provider for different departments
- A strategy of using services from two or more cloud providers simultaneously — to avoid vendor lock-in, leverage best-of-breed services from each provider, improve resilience, and optimize costs
- A cloud approach where multiple virtual clouds are created within a single provider’s network
- A billing strategy that uses multiple payment methods across a single cloud provider
Answer : B Explanation: A Multi-Cloud strategy uses two or more cloud providers (e.g., AWS + Azure + GCP) for different workloads or the same workload. Benefits: No vendor lock-in (avoid dependency on a single provider), Best-of-breed services (use GCP’s BigQuery for analytics, AWS for compute, Azure for Active Directory integration), Negotiating leverage (create competitive pricing pressure), Resilience (if one provider has an outage, workloads can shift to another). Challenges: Increased complexity (different APIs, management tools, security models for each provider), Higher operational overhead (need expertise across multiple platforms), Data egress costs (moving data between providers can be expensive). Tools enabling multi-cloud: Terraform (IaC across providers), Kubernetes (portable across clouds), and management platforms like HashiCorp Vault, Pulumi, and cloud management platforms (CloudHealth, Apptio Cloudability).
78. What is cloud security and what are its key concerns?
- A cloud service provided by providers to prevent all possible data breaches automatically
- A broad set of policies, technologies, and controls designed to protect cloud-based systems, data, and infrastructure — addressing concerns including data breaches, misconfigurations, insecure APIs, identity and access management, account hijacking, and compliance
- Physical security measures applied to protect cloud provider data center buildings
- A cloud computing feature that automatically encrypts all data stored by all users
Answer : B Explanation: Cloud Security addresses unique challenges compared to traditional IT security. Top cloud security threats (per OWASP/CSA): Data Breaches (unauthorized access to cloud data), Misconfiguration (publicly exposed S3 buckets, overly permissive IAM — most common cause of cloud incidents), Insecure APIs (APIs are the attack surface for cloud services), Insufficient Identity and Access Management (weak credentials, over-privileged accounts), Account Hijacking (credential theft leading to full account compromise). Key cloud security practices: Zero Trust Architecture (verify every request, never trust implicitly), IAM (least-privilege access, MFA), Encryption at rest and in transit, Security groups and network ACLs, Cloud Security Posture Management (CSPM) tools (AWS Security Hub, Azure Defender, Google Security Command Center), and regular penetration testing. The shared responsibility model defines who handles what security aspect.
79. What is Identity and Access Management (IAM) in cloud computing?
- A HR system that manages cloud provider employee identities and access cards
- A framework of policies, services, and technologies that controls who (identity) can access what cloud resources (access management) — using authentication (proving identity) and authorization (granting appropriate permissions)
- An international certification for cloud identity management professionals
- A database service that stores user identity information in the cloud for applications
Answer : B Explanation: IAM (Identity and Access Management) is the cornerstone of cloud security. Key concepts: Identity: who is making the request (user, service account, application). Authentication: verifying the identity (username/password, MFA, certificates, API keys). Authorization: what the identity is allowed to do (IAM policies, roles, permissions). Principle of Least Privilege: grant only the minimum permissions needed. IAM components: Users (individual human accounts), Groups (collection of users sharing permissions), Roles (temporary permissions assumed by services or users), and Policies (JSON documents defining allowed/denied actions). Cloud IAM services: AWS IAM, Azure Active Directory (Entra ID), Google Cloud IAM. Common IAM mistakes: overly permissive policies (attaching AdministratorAccess to all users), not enabling MFA, sharing credentials, and not rotating access keys regularly. IAM misconfigurations are the leading cause of cloud security incidents.
80. What is the difference between vertical scaling and horizontal scaling in cloud computing?
- Vertical scaling is for databases; horizontal scaling is only for web servers
- Vertical scaling (scaling up) increases the capacity of a single server by adding more CPU, RAM, or storage; horizontal scaling (scaling out) adds more servers to distribute the load — horizontal scaling is preferred in cloud for better availability and cost efficiency
- Vertical scaling is faster than horizontal scaling for all cloud workload types
- Horizontal scaling increases server height in the data center rack; vertical scaling adds more racks
Answer : B Explanation: Vertical Scaling (Scale Up): increase the size of an existing server — upgrade from 4 CPU/8GB RAM to 32 CPU/128GB RAM. Simple (no application changes required), but has an upper limit (can’t add CPU beyond hardware max), requires downtime for the change, and creates a single point of failure. Horizontal Scaling (Scale Out): add more servers of the same size. No upper limit theoretically, provides fault tolerance (if one server fails, others continue), and works well with cloud auto-scaling. Requires applications to be stateless (no session data tied to a specific server). Cloud auto-scaling typically implements horizontal scaling. Example: AWS Auto Scaling Group adds or removes EC2 instances based on CPU usage. Most cloud-native applications are designed for horizontal scaling, which is more cost-effective and highly available than vertical scaling.
