I85PREP
⌘ K
Cloud Essentials+ study materials
Cloud Essentials+ study resources

Cloud Essentials+ practice questions

One question at a time. Build your Cloud Essentials+ understanding.

First 50 of 190 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Cloud concepts, architecture and service models

Which of the following is one of the five essential characteristics of cloud computing defined by NIST SP 800-145?

  1. Single-tenant isolation on dedicated hardware
  2. On-demand self-service Correct answer.
  3. Fixed monthly hardware allocation
  4. Mandatory government oversight

Explanation

NIST SP 800-145 defines five essential characteristics: on-demand self-service, broad network access, resource pooling, rapid elasticity, and measured service. Single-tenant dedicated hardware contradicts resource pooling; fixed monthly allocation contradicts elasticity/measured service; government oversight is not a NIST cloud characteristic.

Question 2Cloud concepts, architecture and service models

Which service model provides virtualized compute, storage, and networking over the internet while leaving the customer responsible for operating systems, middleware, and applications?

  1. SaaS
  2. PaaS
  3. IaaS Correct answer.
  4. FaaS

Explanation

Infrastructure as a Service (IaaS) delivers raw virtualized infrastructure (VMs, block storage, VPCs). The customer manages OS and above. SaaS delivers a finished application. PaaS provides a managed runtime/platform. FaaS (serverless) runs code in response to events.

Question 3Cloud concepts, architecture and service models

A company runs Microsoft 365 for email and collaboration. This is an example of which cloud service model?

  1. IaaS
  2. PaaS
  3. SaaS Correct answer.
  4. Private cloud

Explanation

Microsoft 365 is a Software as a Service (SaaS) offering - Microsoft manages infrastructure, platform, and application. Users simply sign in and use the software. IaaS and PaaS require the customer to build and operate more of the stack. Private cloud is a deployment model, not a service model.

Question 4Cloud concepts, architecture and service models

Which deployment model combines on-premises infrastructure with public cloud services, allowing workloads and data to move between them?

  1. Public cloud
  2. Private cloud
  3. Hybrid cloud Correct answer.
  4. Community cloud

Explanation

Hybrid cloud combines on-premises (or private cloud) with public cloud, connected by a network so workloads and data can move between environments. Public cloud is shared infrastructure; private cloud is dedicated; community cloud is shared across several related organizations.

Question 5Cloud concepts, architecture and service models

Which NIST characteristic is MOST directly demonstrated when a service automatically scales from 10 to 500 VM instances during a traffic spike?

  1. On-demand self-service
  2. Broad network access
  3. Rapid elasticity Correct answer.
  4. Measured service

Explanation

Rapid elasticity is the capability to scale resources up and down automatically to match demand, often appearing limitless to the consumer. On-demand self-service is about provisioning without human intervention. Broad network access concerns reachability over standard networks. Measured service is metered usage billing.

Question 6Cloud concepts, architecture and service models

In the shared responsibility model, who is responsible for patching the GUEST operating system on an IaaS VM such as an AWS EC2 instance?

  1. The cloud provider
  2. The customer Correct answer.
  3. The underlying hardware vendor
  4. The regional regulator

Explanation

In IaaS, the provider secures the physical data center, hardware, and virtualization layer. The customer is responsible for everything from the guest OS upward - including OS patching, middleware, applications, and data. This boundary shifts with PaaS and SaaS.

Question 7Cloud concepts, architecture and service models

A multi-cloud strategy means:

  1. Using a single cloud provider across multiple regions
  2. Using two or more public cloud providers (for example, AWS and Azure) in the same organization Correct answer.
  3. Using only on-premises data centers
  4. Using a single SaaS vendor for all services

Explanation

Multi-cloud intentionally uses services from two or more public cloud providers to reduce vendor lock-in, leverage best-of-breed services, or meet regulatory requirements. A single provider across regions is still single-cloud. On-prem only is not cloud at all.

Question 8Cloud concepts, architecture and service models

Which of the following BEST represents a serverless / Function as a Service offering?

  1. Amazon EC2
  2. AWS Lambda Correct answer.
  3. AWS RDS
  4. Amazon EBS

Explanation

AWS Lambda is a FaaS offering where the provider runs code in response to events and manages all underlying infrastructure. EC2 is IaaS compute, RDS is a managed relational database service (PaaS-like), and EBS is block storage.

Question 9Cloud concepts, architecture and service models

A private cloud is BEST described as:

  1. Cloud infrastructure provisioned for exclusive use by a single organization Correct answer.
  2. Free cloud offered to the public by the government
  3. A cloud used only for backups
  4. A cloud with no virtualization

Explanation

Private cloud is infrastructure provisioned for the exclusive use of a single organization. It may be hosted on-premises or by a third party. The other options mischaracterize cloud or confuse it with specific use cases.

Question 10Cloud concepts, architecture and service models

Which service model provides a managed platform (runtime, database, build tools) so developers deploy application code without managing servers or OS?

  1. IaaS
  2. PaaS Correct answer.
  3. SaaS
  4. DRaaS

Explanation

Platform as a Service (PaaS) abstracts the OS and middleware - developers deploy code to a managed runtime (Azure App Service, AWS Elastic Beanstalk, Google App Engine). IaaS exposes VMs; SaaS provides finished apps; DRaaS (Disaster Recovery as a Service) addresses DR specifically.

Question 11Cloud concepts, architecture and service models

Which characteristic of cloud enables fine-grained, usage-based billing (for example, per-GB storage, per-second compute)?

  1. Resource pooling
  2. Measured service Correct answer.
  3. Rapid elasticity
  4. Broad network access

Explanation

Measured service means the cloud system automatically meters resource usage so providers can bill and customers can monitor - producing pay-as-you-go economics. Resource pooling is multi-tenancy. Elasticity scales capacity. Broad network access enables reachability.

Question 12Cloud concepts, architecture and service models

Which of the following is a major DISADVANTAGE of a public cloud compared to a private cloud?

  1. Less scalability
  2. Potentially less control over data location and hardware Correct answer.
  3. Higher up-front CapEx
  4. No internet connectivity

Explanation

Public cloud shares infrastructure across many tenants, so the customer has less direct control over specific hardware and exact data location than in private cloud. Public cloud typically offers MORE scalability, lower CapEx, and standard internet connectivity.

Question 13Cloud concepts, architecture and service models

Broad network access, as a NIST cloud characteristic, refers to:

  1. Internet throughput measured in Gbps
  2. Capabilities available over the network and accessed through standard mechanisms by heterogeneous client platforms Correct answer.
  3. Dedicated fiber circuits to each user
  4. Only LAN-based access

Explanation

Broad network access means capabilities are reachable over standard networks (typically the internet) from diverse client devices - browsers, mobile apps, thin/thick clients. It is not a raw throughput metric or a requirement for dedicated fiber or LAN-only access.

Question 14Cloud concepts, architecture and service models

A developer wants to run event-driven code that scales to zero when idle and only bills for actual execution time. Which approach BEST fits?

  1. A fleet of always-on EC2 instances
  2. A serverless function platform (AWS Lambda, Azure Functions, Google Cloud Functions) Correct answer.
  3. A dedicated bare-metal server
  4. An unmanaged Kubernetes cluster

Explanation

Serverless FaaS scales to zero, runs only on events, and bills per invocation and execution time. Always-on EC2 or bare-metal bills continuously. Unmanaged Kubernetes still requires persistent node cost unless additional scaling mechanisms are added.

Question 15Cloud concepts, architecture and service models

In SaaS, which component is TYPICALLY the customer's responsibility under the shared responsibility model?

  1. Physical data center security
  2. Hypervisor patching
  3. Identity, access management configuration, and customer data Correct answer.
  4. The application's source code

Explanation

In SaaS, the provider handles infrastructure, platform, and application. The customer is responsible for identity and access management configuration, user accounts, and the data they put in. Physical security, hypervisor patching, and source code are the provider's.

Question 16Cloud concepts, architecture and service models

A community cloud is BEST described as cloud infrastructure that is:

  1. Open to the general public at no cost
  2. Shared by several organizations with common concerns (for example, regulatory, mission) Correct answer.
  3. Deployed only in a single country
  4. Reserved for a single user

Explanation

A community cloud is shared by several organizations with common concerns (security, compliance, mission) and may be managed by one of them or a third party. It is not free to the public, is not geography-restricted by definition, and is not single-user.

Question 17Cloud concepts, architecture and service models

Which listed combination is a common enabling approach for resource pooling and tenant separation in cloud services?

  1. Virtualization and multi-tenancy Correct answer.
  2. Dedicated single-tenant servers
  3. Mandatory RAID 0 across disks
  4. Fixed IP allocation per tenant

Explanation

Resource pooling uses virtualization and multi-tenancy so a provider's physical resources serve many customers dynamically. Dedicated single-tenant hardware contradicts pooling. RAID configuration and fixed IP allocation are implementation details unrelated to this characteristic.

Question 18Cloud concepts, architecture and service models

Which of the following is CORRECT about the shared responsibility model across service models?

  1. The provider always owns 100% of security
  2. The customer owns more of the stack in IaaS than in SaaS Correct answer.
  3. The customer owns the physical hardware in SaaS
  4. Shared responsibility only exists in private cloud

Explanation

As you move from IaaS to PaaS to SaaS, more of the stack becomes the provider's responsibility and less is the customer's. In IaaS the customer manages OS and above; in SaaS the customer mainly manages data and identity/access. Providers never own 100%, and customers never own physical hardware in public cloud.

Question 19Cloud concepts, architecture and service models

Which of the following BEST describes Anything as a Service (XaaS)?

  1. A deprecated term for legacy mainframes
  2. An umbrella term for delivering IT capabilities as subscription-based cloud services (IaaS, PaaS, SaaS, DaaS, CaaS, DRaaS, etc.) Correct answer.
  3. A storage protocol
  4. A backup retention strategy

Explanation

XaaS is an umbrella term encompassing all "as-a-service" delivery models - IaaS, PaaS, SaaS, DaaS (Desktop/Data), CaaS (Containers), DRaaS, and more. The other options misidentify the concept.

Question 20Cloud concepts, architecture and service models

Which cloud service model is MOST likely to include SLA-backed uptime for the underlying application, not just the infrastructure?

  1. IaaS
  2. PaaS
  3. SaaS Correct answer.
  4. Private colocation

Explanation

SaaS providers commit SLAs on the application itself (for example, 99.9% for Microsoft 365, Salesforce). IaaS and PaaS SLAs typically cover the infrastructure or platform, while customers remain responsible for their application's uptime. Colocation SLAs cover facility services only.

Question 21Cloud Adoption and Implementation

Which cost category is typically REDUCED when migrating from on-premises data centers to public cloud?

  1. Operating Expenses (OpEx)
  2. Capital Expenditures (CapEx) for hardware Correct answer.
  3. Monthly electricity billed to data center
  4. Cost of training staff on cloud tools

Explanation

Moving to public cloud replaces large up-front hardware CapEx with metered OpEx - you pay for what you use. OpEx often increases, and training costs may rise. Electricity at the provider's data center is not billed directly to the customer.

Question 22Cloud Adoption and Implementation

Which metric represents the TOTAL cost of owning and operating a system over its full lifecycle, including hardware, software, labor, and facilities?

  1. ROI
  2. TCO Correct answer.
  3. RPO
  4. SLA

Explanation

Total Cost of Ownership (TCO) includes acquisition plus ongoing costs over the asset's useful life. ROI measures financial return relative to investment. RPO is a recovery-point metric. SLA is a service-level agreement.

Question 23Cloud Adoption and Implementation

A company expects to save $200,000 annually after a $500,000 cloud migration investment. Approximately what is the break-even point?

  1. 6 months
  2. 2.5 years Correct answer.
  3. 10 years
  4. Immediate

Explanation

Break-even = investment / annual savings = $500,000 / $200,000 per year = 2.5 years. Six months would require ~$1,000,000 annual savings. Ten years and immediate do not match the math.

Question 24Cloud Adoption and Implementation

Which of the 6 R's migration strategies involves moving an application to the cloud WITHOUT code changes ("lift and shift")?

  1. Rehost Correct answer.
  2. Refactor
  3. Repurchase
  4. Retire

Explanation

Rehost ("lift and shift") re-deploys an application to cloud infrastructure with no or minimal code changes. Refactor re-architects for cloud-native; Repurchase replaces with SaaS; Retire decommissions applications no longer needed. The 6 R's also include Replatform and Retain.

Question 25Cloud Adoption and Implementation

A company replaces its legacy on-prem CRM with Salesforce. Which of the 6 R's does this represent?

  1. Rehost
  2. Replatform
  3. Repurchase Correct answer.
  4. Retain

Explanation

Repurchase (also called "drop and shop") replaces an existing application with a commercial SaaS product - for example, moving to Salesforce CRM or Workday HR. Rehost is lift-and-shift of the same app. Replatform modifies the platform. Retain keeps the app where it is.

Question 26Cloud Adoption and Implementation

Which listed capacity-pricing model explicitly trades possible interruption for a potential discount?

  1. On-demand (pay-as-you-go)
  2. Reserved Instances / Savings Plans
  3. Spot / Preemptible Instances Correct answer.
  4. Dedicated hosts

Explanation

Spot (AWS) / Preemptible (GCP) / Spot VMs (Azure) offer up to 90% off on-demand in exchange for the provider's right to reclaim capacity with short notice. On-demand has no commitment or discount. Reserved/Savings Plans discount for 1-3 year commitments. Dedicated hosts are typically more expensive.

Question 27Cloud Adoption and Implementation

Which pricing model is typically BEST for a workload that runs at steady state 24/7 for a multi-year period?

  1. On-demand
  2. Reserved Instance or Savings Plan with 1-3 year commitment Correct answer.
  3. Spot
  4. Trial credits

Explanation

Steady-state, predictable workloads are best matched to reserved capacity or savings plans that offer 30-70% discounts in exchange for a 1-3 year commitment. On-demand costs the most. Spot is unreliable for steady workloads. Trial credits are short-term introductory offers.

Question 28Cloud Adoption and Implementation

Which licensing approach allows a customer to apply existing software licenses they already own to cloud-hosted instances (for example, Windows Server, SQL Server)?

  1. Freemium
  2. Bring Your Own License (BYOL) Correct answer.
  3. Open source only
  4. Perpetual-free

Explanation

Bring Your Own License (BYOL) reuses existing software licenses (such as Microsoft with Azure Hybrid Benefit) on cloud instances, avoiding double-paying for licenses. Freemium offers a free tier, open source requires no license fees, and "perpetual-free" is not a recognized cloud licensing term.

Question 29Cloud Adoption and Implementation

Cloud bursting is BEST described as:

  1. Automatically distributing traffic evenly across all regions at all times
  2. Using public cloud capacity to handle peak demand beyond private/on-prem capacity Correct answer.
  3. Deleting unused resources to reduce cost
  4. Running the same workload twice for redundancy

Explanation

Cloud bursting is a hybrid pattern: workloads normally run on private/on-prem infrastructure but "burst" to public cloud during peaks, keeping base-load on cheaper in-house capacity while using cloud elasticity only when needed.

Question 30Cloud Adoption and Implementation

A business case for cloud adoption should include ALL of the following EXCEPT:

  1. Expected benefits and ROI timeline
  2. Migration costs (labor, training, licensing)
  3. Risks and mitigation
  4. The CIO's favorite color Correct answer.

Explanation

A business case documents benefits, costs (migration, operating, training), risks, timeline, and expected ROI. Personal preferences unrelated to business outcomes belong nowhere in a business case.

Question 31Cloud Adoption and Implementation

Which cloud use case is BEST matched to a startup that needs to launch quickly with minimal up-front capital?

  1. Buying a new data center
  2. Leasing a colocation cage
  3. Using pay-as-you-go public cloud Correct answer.
  4. Purchasing multi-year reserved capacity before any customers

Explanation

Pay-as-you-go public cloud matches a startup's unpredictable demand and avoids large CapEx. Buying a data center or leasing colocation carries heavy up-front costs and long lead times. Committing to reserved capacity before customer demand is known wastes money.

Question 32Cloud Adoption and Implementation

Which migration strategy BEST matches modernizing a monolithic application by breaking it into microservices running on Kubernetes?

  1. Rehost
  2. Replatform
  3. Refactor / Re-architect Correct answer.
  4. Retain

Explanation

Refactor / re-architect redesigns the application for cloud-native features (microservices, containers, serverless). Rehost is lift-and-shift. Replatform makes small targeted changes (like switching to a managed database) without rewriting. Retain keeps it in place.

Question 33Cloud Adoption and Implementation

In FinOps, which practice reduces waste from idle or oversized resources?

  1. Tagging resources and running rightsizing / idle-resource reports Correct answer.
  2. Disabling all monitoring
  3. Deploying only on-demand pricing
  4. Allocating random instance sizes

Explanation

FinOps combines consistent tagging with rightsizing and idle-detection reports so teams can resize or shut down underused resources. Disabling monitoring hides waste; defaulting to on-demand costs more; random sizing is not a strategy.

Question 34Cloud Adoption and Implementation

A chargeback model in cloud cost management differs from a showback model in that chargeback:

  1. Only displays costs to teams without moving money
  2. Actually bills internal business units for their cloud consumption Correct answer.
  3. Is the same thing as showback
  4. Applies only to storage costs

Explanation

Chargeback bills internal business units for their consumption, creating direct accountability. Showback only reports consumption and cost without transferring funds. They are different tools that can be used together.

Question 35Cloud Adoption and Implementation

Which of the following is a TYPICAL component of a cloud Service Level Agreement (SLA)?

  1. Uptime percentage (for example, 99.9%) and service credits for breaches Correct answer.
  2. The CEO's personal email address
  3. A guaranteed stock price
  4. Free unlimited compute forever

Explanation

A cloud SLA typically commits to an uptime percentage, defines how downtime is measured, and specifies service credits (billing refunds) when the target is missed, along with exclusions. Personal contacts, financial guarantees, or unlimited free resources are not SLA components.

Question 36Cloud Adoption and Implementation

Using a supplied730-hour month, a time-based99.9% availability target permits approximately how much unavailability before any exclusions?

  1. About 43.8 minutes Correct answer.
  2. About 8 hours
  3. About 24 hours
  4. About 1 week

Explanation

99.9% of 30 days (43,200 minutes) means up to ~43.2 minutes of downtime per month (close to ~43.8 minutes for a 30.44-day average). 99% would allow ~7.3 hours; 90% would allow ~72 hours; 98% would allow ~14 hours.

Question 37Cloud Adoption and Implementation

Which organizational role is typically responsible for translating cloud adoption into business-value outcomes and executive reporting?

  1. Cloud architect
  2. Cloud business manager / cloud economist Correct answer.
  3. Database administrator
  4. SOC analyst

Explanation

The cloud business manager / cloud economist (often part of a FinOps team) focuses on business outcomes, cost management, and executive reporting. Cloud architects focus on technical design, DBAs on databases, and SOC analysts on security operations.

Question 38Cloud Adoption and Implementation

When evaluating cloud providers, which factor is MOST important for workloads subject to data residency laws?

  1. Whether the provider offers regions in the required country or jurisdiction Correct answer.
  2. The provider's marketing budget
  3. The age of the CEO
  4. The number of t-shirt colors in the company store

Explanation

Data residency rules (GDPR, national laws) require data to be stored/processed within a specific jurisdiction, so provider region availability is a decisive factor. Marketing budget, executive demographics, and merchandise are not compliance criteria.

Question 39Cloud Adoption and Implementation

Which of the following is the BEST description of ROI in a cloud context?

  1. A metric of CPU usage
  2. The ratio of net financial benefit to the cost of a cloud investment Correct answer.
  3. A backup retention policy
  4. A storage replication mode

Explanation

Return on Investment (ROI) = (Net Benefit / Investment Cost) x 100%. It quantifies the financial return delivered by a cloud initiative. The other options describe operational or technical metrics unrelated to financial return.

Question 40Cloud Adoption and Implementation

Which of the following is a TYPICAL business risk when adopting public cloud?

  1. Unexpected cost overruns due to untagged or misconfigured resources Correct answer.
  2. Elimination of all technical debt
  3. Guaranteed 100% uptime
  4. Zero need for IAM

Explanation

Uncontrolled cloud usage can create surprise bills from autoscaling, data egress, or abandoned resources. Adoption does not eliminate technical debt, no provider guarantees 100% uptime, and IAM is more important than ever in cloud.

Question 41Cloud Adoption and Implementation

Which of the 6 R's strategy leaves an application in place, often temporarily, because it is not yet ready for cloud migration?

  1. Retire
  2. Retain Correct answer.
  3. Repurchase
  4. Refactor

Explanation

Retain leaves an application where it is, often because of cost, risk, or compliance constraints. Retire decommissions unused applications. Repurchase replaces with SaaS. Refactor rearchitects for cloud-native.

Question 42Cloud Adoption and Implementation

A Proof of Concept (POC) in cloud adoption is BEST used to:

  1. Replace the need for security review
  2. Validate feasibility and business value of a proposed cloud solution before full investment Correct answer.
  3. Immediately migrate all production workloads
  4. Eliminate the need for a business case

Explanation

A POC is a small-scope experiment designed to validate whether a proposed cloud solution is technically feasible and delivers expected business value before committing to broader investment. It complements, not replaces, security review and a formal business case.

Question 43Cloud Adoption and Implementation

Which pricing component should customers evaluate when moving large amounts of data OUT of a cloud region to the internet?

  1. Ingress data transfer cost
  2. Egress (outbound) data transfer cost Correct answer.
  3. Electricity rate
  4. Rack unit cost

Explanation

Most public cloud providers charge per GB of egress (data leaving the region to the internet or other regions) while ingress is typically free. This can dominate bills for data-heavy workloads and migrations. Electricity and rack costs are provider concerns.

Question 44Cloud Adoption and Implementation

Which of the following is a typical benefit a CAPEX-to-OPEX shift provides to a business?

  1. Large up-front hardware purchases every quarter
  2. Improved cash flow and the ability to scale IT spend with demand Correct answer.
  3. Guaranteed tax refunds
  4. Elimination of all vendor contracts

Explanation

Shifting from CapEx to OpEx replaces large hardware purchases with ongoing pay-for-use subscription spend, improving cash flow and letting IT spend follow demand rather than projected capacity. Tax outcomes depend on jurisdiction, and vendor contracts remain.

Question 45Cloud Adoption and Implementation

A team wants to forecast next year's cloud budget. Which data sources are MOST useful?

  1. Wikipedia revenue articles
  2. Historical billing usage, planned new workloads, and provider pricing calculators Correct answer.
  3. The CEO's favorite movie
  4. Desktop wallpaper settings

Explanation

Accurate forecasts combine historical usage/billing data with planned new workloads and provider pricing calculators (AWS Pricing Calculator, Azure TCO/Calculator). The other choices are not data sources.

Question 46Cloud Adoption and Implementation

Which of the following is NOT a typical benefit stated in a cloud business case?

  1. Improved scalability
  2. Faster time to market
  3. Reduced need for any security program Correct answer.
  4. Geographic reach

Explanation

Cloud reduces some types of cost and accelerates scale and global reach, but it does NOT reduce the need for a security program - in fact, shared responsibility makes customer-side security as important as ever. Scalability, speed, and geographic reach are common and valid benefits.

Question 47Cloud Adoption and Implementation

Which of the following is a KEY metric for measuring cloud cost efficiency per unit of business output?

  1. Cost per customer / cost per transaction Correct answer.
  2. Number of employees
  3. Number of meetings held
  4. Miles between offices

Explanation

Unit economics like cost per customer or cost per transaction directly relate cloud spend to business output, a common FinOps KPI. Counts of employees, meetings, or geographic distances do not measure cloud efficiency.

Question 48Cloud Adoption and Implementation

Which cloud migration assessment activity evaluates application dependencies before choosing a migration strategy?

  1. Skipping assessment entirely
  2. Discovery and dependency mapping Correct answer.
  3. Buying more on-prem hardware
  4. Only reading a vendor brochure

Explanation

Discovery and dependency mapping inventory applications, their traffic patterns, and interdependencies so the right 6-R strategy can be chosen per workload. Skipping assessment, adding hardware, or reading brochures does not analyze technical dependencies.

Question 49Cloud Operations and Management

Which core AWS service is primarily used for OBJECT STORAGE?

  1. Amazon EC2
  2. Amazon S3 Correct answer.
  3. Amazon RDS
  4. Amazon VPC

Explanation

Amazon S3 (Simple Storage Service) is AWS's object store for unstructured data (documents, images, backups, static sites). EC2 provides virtual machines. RDS is managed relational database. VPC is virtual networking.

Question 50Cloud Operations and Management

Which Azure service is the equivalent of AWS VPC - a logically isolated virtual network for Azure resources?

  1. Azure App Service
  2. Azure Virtual Network (VNet) Correct answer.
  3. Azure Blob Storage
  4. Azure Key Vault

Explanation

Azure Virtual Network (VNet) provides a logically isolated network in Azure, analogous to AWS VPC. Azure App Service is PaaS hosting. Blob Storage is object storage. Key Vault manages secrets/keys.