CCSP Cloud Architecture and Design Quiz

1. Which design pattern separates compute resources from storage to improve scalability?

Monolithic architecture

Decoupled architecture

Tightly coupled architecture

Legacy architecture

2. Which security principle should guide cloud architecture to minimize the impact of a potential breach?

Least privilege access

Maximum transparency

Open network access

Shared credentials

3. In cloud architecture design, what does immutability refer to?

The inability to change infrastructure or configurations after deployment

Permanent data retention requirements

Fixed pricing models

Static user permissions

4. What is a primary security concern when implementing containerized cloud applications?

Container image vulnerabilities and runtime security

Excessive data center cooling

Network bandwidth consumption

Physical server maintenance

5. Which architectural consideration ensures that cloud services remain available during provider maintenance?

Service level agreements (SLAs)

Encryption at rest

Role-based access control

Data classification

6. In a cloud environment, what does network segmentation primarily protect against?

Lateral movement of threats within the network

Internet bandwidth limitations

Cloud service provider outages

User authentication failures

7. What is the main benefit of implementing automated security policies in cloud architecture?

Reduced operational costs and consistent policy enforcement

Elimination of all security risks

Removal of compliance requirements

Simplified user authentication

8. Which component of cloud infrastructure is responsible for managing virtual machine placement and resource allocation?

Hypervisor

Storage array

Network switch

Backup system

9. In cloud architecture, what does defense-in-depth mean?

Using a single strong security control

Implementing multiple layers of security controls

Focusing only on perimeter security

Minimizing security investments

10. What is a critical aspect of cloud infrastructure resilience?

Single point of failure

Disaster recovery and business continuity planning

Centralized resource management

Manual failover processes

11. Which cloud service model gives customers the most control over infrastructure and security responsibilities?

Software as a Service (SaaS)

Infrastructure as a Service (IaaS)

Platform as a Service (PaaS)

Function as a Service (FaaS)

12. What is the primary purpose of a cloud access security broker (CASB)?

Monitor and control data movement between users and cloud services

Replace the need for firewalls

Eliminate encryption requirements

Reduce cloud service costs

13. In cloud architecture, what does elasticity enable?

Automatic scaling of resources based on demand

Permanent resource allocation

Reduction of security controls

Elimination of backup needs

14. Which cloud deployment model is best suited for organizations with strict data residency requirements?

Public cloud

Private cloud

Community cloud

Serverless cloud

15. What is a key security consideration when designing multi-tenant cloud environments?

Ensuring data isolation between tenants

Using a single encryption key for all tenants

Sharing security policies across all tenants

Eliminating access controls

16. Which architectural pattern uses multiple availability zones to ensure high availability?

Single-region deployment

Multi-region active-passive

Multi-AZ redundancy

Edge computing

17. In cloud architecture, what does the shared responsibility model define?

How customers and providers divide security and compliance obligations

How to split cloud costs between departments

The process for incident response

Customer rights to audit the provider

18. Which design principle emphasizes distributing cloud resources across multiple geographic regions?

Availability

Redundancy

Geo-distribution

Load balancing

19. What is the primary advantage of a hybrid cloud architecture?

Complete elimination of on-premises infrastructure

Flexibility to run workloads on-premises or in public cloud

Reduced need for security controls

Automatic compliance with all regulations

20. In a public cloud deployment, who typically manages patches and security updates for the underlying hypervisor?

The cloud customer

The cloud service provider

A third-party security firm

The customer's IT department