PCCN-K (Knowledge Professional) study materials
PCCN-K (Knowledge Professional) study resources

PCCN-K (Knowledge Professional) practice questions

One question at a time. Build your PCCN-K (Knowledge Professional) understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Cloud Service Management Fundamentals

In cloud service management, which characteristic most directly distinguishes a public cloud deployment from a private cloud deployment?

  1. Resources are managed exclusively by the customer's internal IT department
  2. Resources are limited to a single department within one organization
  3. Resources are provisioned over a shared provider infrastructure open to multiple tenants Correct answer.
  4. Resources are always hosted on the customer's own on-premises hardware

Explanation

A public cloud is delivered over infrastructure owned by a provider and shared across many customers through multi-tenancy, with access typically over the network. Private clouds are dedicated to one organization, whether hosted on-premises or by a third party, so the sharing model is the key differentiator.

Question 2Cloud Service Management Fundamentals

A company wants to keep sensitive workloads on its own hardware while bursting to provider capacity during peak demand. Which deployment model best fits this requirement?

  1. Community cloud
  2. Public cloud only
  3. Hybrid cloud Correct answer.
  4. Multi-tenant SaaS

Explanation

Hybrid cloud combines private infrastructure with public cloud services, allowing workloads to move or burst between them while sensitive data stays on dedicated systems. This matches the stated requirement of keeping sensitive workloads internal while using provider capacity for peaks.

Question 3Cloud Service Management Fundamentals

Which statement accurately describes the relationship between IaaS and PaaS in the cloud service model stack?

  1. IaaS provides managed runtime environments, while PaaS provides raw virtual machines
  2. PaaS abstracts more of the stack than IaaS, leaving the customer to manage applications and data Correct answer.
  3. IaaS and PaaS both require the customer to patch the underlying hypervisor
  4. PaaS removes all customer responsibility, including application code and configuration

Explanation

Service models form a spectrum of management responsibility: IaaS exposes virtualized compute, storage, and network, while PaaS adds a managed runtime so the customer focuses on applications and data. The provider handles more layers as you move from IaaS to PaaS.

Question 4Cloud Service Management Fundamentals

An organization needs a fully managed email and collaboration suite with no server administration. Which cloud service model is being consumed?

  1. IaaS
  2. SaaS Correct answer.
  3. PaaS
  4. DaaS

Explanation

SaaS delivers a complete, provider-managed application accessed by end users, so the customer performs no server or platform administration. Email and collaboration suites are classic SaaS offerings.

Question 5Cloud Service Management Fundamentals

Which metric is most appropriate for measuring the availability of a cloud service against its committed target?

  1. Number of incidents opened by the provider's staff
  2. Percentage of uptime over the measurement period Correct answer.
  3. Mean time to repair the provider's network switches
  4. Total storage consumed by tenant workloads

Explanation

Availability is expressed as the proportion of time a service is operational over a defined period, often compared against an SLA target such as 99.9 percent. Incident counts and repair times are supporting indicators, not the availability figure itself.

Question 6Cloud Service Management Fundamentals

A customer's SLA promises 99.9 percent monthly availability. Approximately how much downtime does this permit in a 30-day month?

  1. About 43 minutes Correct answer.
  2. About 22 hours
  3. About 7 hours
  4. About 4 minutes

Explanation

A 30-day month contains 43,200 minutes, and 0.1 percent of that is about 43 minutes. Therefore 99.9 percent availability allows roughly 43 minutes of downtime in a 30-day period.

Question 7Cloud Service Management Fundamentals

In the shared responsibility model for IaaS, which task remains the customer's responsibility?

  1. Patching the physical host operating system
  2. Maintaining the data center power and cooling
  3. Securing guest operating system patches and access controls Correct answer.
  4. Managing the provider's network backbone

Explanation

Under IaaS, the provider secures the physical facility and hypervisor, while the customer secures the guest operating system, middleware, applications, and data. Guest OS patching and access control therefore stay with the customer.

Question 8Cloud Service Management Fundamentals

A team is evaluating whether to move a legacy application to cloud. Which factor most strongly favors a rehost (lift-and-shift) approach over refactoring?

  1. The team wants to maximize long-term cost efficiency through autoscaling
  2. The application has tight deadlines and few architectural dependencies Correct answer.
  3. The application must exploit serverless event-driven processing
  4. The application requires deep modernization to become cloud-native

Explanation

Rehosting moves workloads with minimal changes, which suits time-constrained migrations and applications that do not depend heavily on cloud-native features. Refactoring is preferred when long-term elasticity and modernization benefits justify the effort.

Question 9Cloud Service Management Fundamentals

Which cloud economic principle explains why reserved capacity is often cheaper per hour than on-demand pricing?

  1. Reserved instances always include premium support at no cost
  2. The provider trades a usage commitment for a discounted rate Correct answer.
  3. Reserved capacity includes more physical hardware per tenant
  4. On-demand pricing excludes the cost of network egress

Explanation

Reserved pricing exchanges a customer commitment, usually a term or spend level, for a lower unit rate, giving the provider predictable demand. On-demand pricing charges a premium for flexibility with no commitment.

Question 10Cloud Service Management Fundamentals

A finance team notices monthly cloud spend rising without a corresponding increase in workload. Which management practice best addresses this first?

  1. Implementing cost allocation tagging and usage analysis Correct answer.
  2. Disabling autoscaling across the estate
  3. Immediately terminating all non-production environments
  4. Migrating all workloads to reserved instances

Explanation

Cost visibility through tagging and usage analysis identifies which resources or teams drive spend before remediation decisions are made. Acting without analysis risks removing needed capacity or committing to the wrong pricing model.

Question 11Cloud Service Management Fundamentals

Which practice is the primary purpose of establishing a cloud service catalog within an organization?

  1. To present approved, standardized services with associated policies and costs Correct answer.
  2. To replace the change management process entirely
  3. To list the provider's public price sheet for all regions
  4. To record all incidents raised against cloud providers

Explanation

A service catalog gives consumers a curated menu of approved services with defined offerings, ownership, policies, and often pricing, which standardizes consumption and governance. It complements rather than replaces change management.

Question 12Cloud Service Management Fundamentals

A cloud consumer needs assurance that a provider's controls have been independently assessed. Which artifact should the consumer request?

  1. The provider's internal marketing brochure
  2. An independent audit report such as SOC 2 Correct answer.
  3. A list of the provider's competitors
  4. The provider's source code repository

Explanation

Independent attestations such as SOC 2 reports provide third-party evidence about the design and operation of a provider's controls. Marketing materials and internal documents are not independent assurance.

Question 13Cloud Service Management Fundamentals

Which statement best describes the role of a cloud service level objective (SLO) relative to an SLA?

  1. An SLA is a monitoring dashboard used to track SLOs
  2. An SLO is an internal target that supports meeting the SLA Correct answer.
  3. An SLO is a legally binding commitment with financial penalties
  4. An SLO and an SLA are identical documents

Explanation

An SLO is an internal operational target, such as 99.95 percent availability, that teams aim for to keep the customer-facing SLA commitment satisfied. The SLA is the formal agreement with consequences for missing targets.

Question 14Cloud Service Management Fundamentals

Which cloud capability most directly supports elasticity during unpredictable traffic spikes?

  1. Static reserved instances sized for peak load
  2. Horizontal autoscaling based on demand metrics Correct answer.
  3. Manual provisioning with fixed capacity
  4. Single-zone deployment with a fixed instance count

Explanation

Elasticity is the ability to scale resources automatically in response to demand, which horizontal autoscaling driven by metrics provides. Fixed or manually provisioned capacity does not adapt to spikes.

Question 15Cloud Service Management Fundamentals

A workload has strict data residency requirements within a single country. Which cloud management consideration is most critical?

  1. Choosing the lowest-cost instance family globally
  2. Selecting a provider region located within that country Correct answer.
  3. Enabling cross-region replication to every continent
  4. Maximizing the number of availability zones worldwide

Explanation

Data residency obligations are met by controlling where data is stored and processed, which starts with selecting regions inside the permitted jurisdiction. Cost or global replication choices must not override that constraint.

Question 16Cloud Service Management Fundamentals

In cloud governance, what is the primary function of a policy that enforces resource tagging on creation?

  1. It encrypts all data at rest automatically
  2. It prevents all unauthorized network traffic
  3. It guarantees the workload meets its availability SLA
  4. It ensures cost and ownership metadata exists for accountability Correct answer.

Explanation

Tag enforcement policies require metadata such as owner, cost center, or environment at resource creation, enabling cost allocation and accountability. They do not provide encryption, availability guarantees, or network filtering.

Question 17Cloud Service Management Fundamentals

Which approach best supports multi-cloud portability for a containerized application?

  1. Relying on provider-specific serverless functions for core logic
  2. Using open container standards and a portable orchestration layer Correct answer.
  3. Binding the application to one provider's proprietary database
  4. Hard-coding storage APIs of a single provider

Explanation

Open container formats and portable orchestration reduce coupling to any single provider, which supports moving workloads across clouds. Proprietary functions, storage APIs, and databases increase lock-in.

Question 18Cloud Service Management Fundamentals

Which element is typically included in a cloud service level agreement's remedy clause?

  1. The personal contact details of the provider's engineers
  2. A description of the provider's internal staffing model
  3. The provider's complete network topology diagram
  4. Service credits issued when availability targets are missed Correct answer.

Explanation

Remedy clauses define what the customer receives when commitments are missed, most commonly service credits against future billing. Internal staffing, topology, and personal details are not standard remedy content.

Question 19Cloud Service Management Fundamentals

A team must choose between vertical and horizontal scaling for a stateless web tier. Which reasoning is most sound?

  1. Vertical scaling is preferred because it adds no complexity to the application
  2. Horizontal scaling is preferred because it adds capacity across instances and improves resilience Correct answer.
  3. Horizontal scaling is preferred because it eliminates the need for session management
  4. Vertical scaling is preferred because it removes the need for load balancing

Explanation

Horizontal scaling adds more instances, which suits stateless tiers, distributes load, and improves fault tolerance when combined with a load balancer. Vertical scaling increases the size of a single machine and has hard limits and single points of failure.

Question 20Cloud Service Management Fundamentals

Which cloud management activity is performed during the operation phase rather than the planning phase of the service lifecycle?

  1. Estimating initial migration costs
  2. Monitoring capacity utilization and responding to threshold alerts Correct answer.
  3. Selecting the deployment model for a new workload
  4. Defining service level requirements with stakeholders

Explanation

The operation phase focuses on running services, which includes monitoring utilization and reacting to alerts to maintain performance and cost targets. Requirements definition, model selection, and cost estimation belong to planning and design.

Question 21Cloud Service Management Fundamentals

A provider offers a 99.95 percent SLA but the customer's own composite service depends on three independent components each at 99.95 percent. What is the approximate serial availability of the composite service?

  1. About 99.99 percent
  2. About 99.85 percent Correct answer.
  3. About 99.95 percent
  4. About 99.5 percent

Explanation

For components in series, availability multiplies: 0.9995 raised to the third power is approximately 0.9985, or 99.85 percent. Composite availability is therefore lower than any individual component.

Question 22Cloud Service Management Fundamentals

Which control most directly limits the blast radius of a compromised cloud identity?

  1. Sharing one identity across all engineering teams
  2. Granting the identity broad administrator rights for convenience
  3. Disabling audit logging to reduce storage costs
  4. Applying least-privilege permissions scoped to required actions Correct answer.

Explanation

Least privilege limits what a compromised identity can do by restricting permissions to only the actions and resources required. Broad rights, shared identities, and disabled logging all increase exposure and reduce detection.

Question 23Cloud Service Management Fundamentals

Which statement best explains why chargeback models require accurate resource tagging and metering?

  1. Tags determine the encryption algorithm applied to stored objects
  2. Chargeback eliminates the need for budget forecasting
  3. Costs must be attributed to the consuming unit based on measured usage Correct answer.
  4. Metering automatically enforces network segmentation rules

Explanation

Chargeback allocates costs to business units according to their measured consumption, which depends on reliable metering and tags that map resources to owners. It supports accountability but does not replace forecasting or security controls.

Question 24Cloud Service Management Fundamentals

An organization is designing a disaster recovery strategy with a recovery time objective of minutes and a recovery point objective near zero. Which approach best meets these targets?

  1. A warm standby site rebuilt manually after failure
  2. Nightly backups restored from cold storage
  3. A single-region deployment with periodic snapshots
  4. Active-active deployment across regions with continuous replication Correct answer.

Explanation

A near-zero RPO requires continuous replication, and a minutes-level RTO requires capacity that is already running, which active-active multi-region design provides. Backup restore and manual rebuild approaches cannot meet these tight targets.

Question 25Cloud Service Management Fundamentals

Which activity is the best example of cloud capacity management rather than cloud incident management?

  1. Escalating a severity-one outage to the provider's support desk
  2. Reviewing utilization trends to plan quota increases ahead of demand Correct answer.
  3. Rolling back a configuration change that broke production
  4. Diagnosing a failed deployment pipeline after an alert

Explanation

Capacity management is proactive: it analyzes utilization trends and plans quotas or scaling ahead of demand. Incident management is reactive, covering diagnosis, escalation, and rollback after a failure occurs.

Question 26Cloud Service Management Fundamentals

Which cloud service model places the greatest operational burden on the customer for patching and runtime management?

  1. Function as a Service
  2. Infrastructure as a Service Correct answer.
  3. Software as a Service
  4. Platform as a Service

Explanation

In IaaS the provider manages the physical host, hypervisor, and network fabric, but the guest operating system, middleware, and runtime remain the customer's to patch and configure. Higher-level models progressively absorb those tasks, so the customer burden decreases as you move toward SaaS.

Question 27Cloud Service Management Fundamentals

A cloud architect needs a documented, provider-published description of a service's features, interfaces, and supported configurations. Which artifact should be consulted?

  1. The customer's internal chargeback report
  2. The provider's service catalog entry and API reference Correct answer.
  3. The customer's disaster recovery runbook
  4. The provider's status page incident history

Explanation

Service catalog entries and API references are the provider's authoritative description of what a service offers and how it is configured. Chargeback reports, incident history, and internal runbooks describe consumption or operations rather than the service definition itself.

Question 28Cloud Service Management Fundamentals

Which metric set is most appropriate for tracking the operational health of a provisioned cloud service after go-live?

  1. Contract renewal dates and vendor headcount
  2. Capital expenditure and depreciation schedules
  3. Feature backlog size and sprint velocity
  4. Utilization, error rate, and latency against defined thresholds Correct answer.

Explanation

Operational health monitoring relies on runtime signals such as resource utilization, request error rates, and latency measured against agreed thresholds. Financial, development, and contractual indicators describe other management concerns and do not reveal whether the running service is behaving correctly.

Question 29Cloud Service Management Fundamentals

What does a cloud provider's published status page primarily communicate to consumers?

  1. The customer's own configuration drift findings
  2. The provider's per-unit pricing tiers
  3. Current and historical availability of services and any active degradations Correct answer.
  4. The provider's internal engineering roadmap

Explanation

A status page reports service availability, ongoing incidents, and maintenance windows so consumers can correlate their own symptoms with provider-side events. It is an operational communication channel, not a pricing, configuration, or planning document.

Question 30Cloud Service Management Fundamentals

A team must decide whether to build an internal capability or consume a provider-managed service. Which analysis best supports this decision?

  1. Choose the build option whenever the team has spare engineering capacity
  2. Select the option with the lowest advertised monthly price only
  3. Compare total cost of ownership including operational staffing against the managed service's fees and lock-in risk Correct answer.
  4. Defer the decision until the provider publishes a new roadmap

Explanation

Build-versus-consume decisions hinge on total cost of ownership, which includes ongoing operational labor, not just the headline price. Lock-in and exit costs also matter because they constrain future flexibility. Spare capacity or roadmap timing are secondary factors that do not by themselves justify a choice.

Question 31Cloud Service Management Fundamentals

An organization wants a single view of which cloud services each business unit consumes and at what cost. Which management capability delivers this?

  1. Relying on the provider's public price list as the spend record
  2. Manually reconciling provider invoices in a spreadsheet each quarter
  3. Metering and showback reporting keyed to accountable cost centers Correct answer.
  4. Restricting all provisioning to one shared administrative account

Explanation

Metering captures consumption per resource and showback attributes it to accountable cost centers, giving each business unit visibility of its own consumption. Manual reconciliation, shared accounts, and price lists do not produce attributable, timely consumption data.

Question 32Cloud Service Management Fundamentals

A cloud consumer wants to verify that a provider meets a specific regulatory framework before signing. Which evidence is most direct?

  1. The provider's marketing brochure describing security as a priority
  2. A verbal assurance from the provider's sales representative
  3. The provider's uptime percentage over the past year
  4. An independent audit report or certification scoped to that framework Correct answer.

Explanation

An independent audit report or certification scoped to the specific framework provides third-party evidence that controls were assessed against those requirements. Marketing claims, verbal assurances, and uptime figures do not demonstrate conformity with a named regulatory standard.

Question 33Cloud Service Management Fundamentals

Which statement correctly distinguishes a cloud provider's responsibility from a cloud consumer's responsibility for data classification?

  1. The consumer classifies its data and defines handling rules; the provider implements the contracted safeguards Correct answer.
  2. Both parties jointly own the classification labels applied to consumer records
  3. Classification is unnecessary once data resides in an encrypted provider store
  4. The provider classifies consumer data and decides which regulations apply

Explanation

Data classification reflects the consumer's business and legal obligations, so the consumer defines sensitivity levels and handling requirements. The provider is responsible for implementing the contractual and technical safeguards that protect data at those levels. Ownership of classification does not transfer to the provider, and encryption does not remove the need to classify.

Question 34Cloud Service Management Fundamentals

A service owner needs to define the acceptable performance envelope for a new API before launch. Which element belongs in that definition?

  1. The provider's corporate headquarters address
  2. The names of the engineers who will be on call
  3. The marketing launch date for the API
  4. Target latency percentiles and error budget thresholds expressed as measurable objectives Correct answer.

Explanation

An acceptable performance envelope is expressed as measurable objectives such as latency percentiles and error budget thresholds that can be monitored after launch. On-call rosters, corporate addresses, and launch dates are logistical details that do not define the performance target.

Question 35Cloud Service Management Fundamentals

Which practice best supports continuous improvement of a managed cloud service after it enters operation?

  1. Relying solely on the provider's status page as the improvement input
  2. Reviewing incidents and performance trends on a regular cadence and feeding findings into change backlogs Correct answer.
  3. Replacing the monitoring stack whenever a new provider feature ships
  4. Freezing all configuration changes once the service is live

Explanation

Continuous improvement depends on a recurring review of incidents and performance trends whose findings are converted into prioritized changes. Freezing configuration, churning tooling, or depending only on provider status data removes the feedback loop needed to improve the service.

Question 36Cloud Service Management Fundamentals

A consumer is comparing two providers that both publish 99.9 percent availability. Which additional factor most affects the effective service level the consumer will experience?

  1. How each provider measures and excludes downtime in its SLA definitions Correct answer.
  2. The size of each provider's partner ecosystem
  3. The number of regions each provider operates globally
  4. The visual design of each provider's management console

Explanation

Two nominally identical percentages can yield very different outcomes depending on what counts as downtime, how it is measured, and which exclusions apply. Global footprint, partner ecosystem, and console design affect convenience but not the measured service level itself.

Question 37Cloud Service Management Fundamentals

Which activity is the clearest example of cloud service portfolio management rather than day-to-day service operations?

  1. Deciding which services to retire, retain, or add in the coming year based on business value Correct answer.
  2. Responding to a latency alert on a production endpoint
  3. Restarting a failed instance to restore service
  4. Applying a routine security patch to a guest operating system

Explanation

Portfolio management decides the composition of the service inventory over time by weighing business value, cost, and risk. Restarting instances, patching, and responding to alerts are operational tasks that keep existing services running.

Question 38Cloud Service Management Fundamentals

A consumer's composite service depends on two provider services, each with an independently published 99.9 percent monthly availability. Assuming independent failures and no redundancy, what is the approximate expected availability of the composite?

  1. 99.9 percent
  2. 99.95 percent
  3. 99.99 percent
  4. 99.8 percent Correct answer.

Explanation

For independent components in series, availabilities multiply: 0.999 times 0.999 equals approximately 0.998, or 99.8 percent. Composite availability is therefore lower than any single component, which is why architects add redundancy when a higher target is required.

Question 39Cloud Service Management Fundamentals

An organization wants to reduce the risk that a single misconfigured deployment deletes production data across many accounts. Which management control addresses this most directly?

  1. Guardrail policies that block destructive actions in production and require approval for exceptions Correct answer.
  2. A training video on provider console navigation
  3. A dashboard that visualizes storage consumption per account
  4. A monthly report listing all deployed resources

Explanation

Preventive guardrails stop destructive operations before they execute, and approval workflows govern the rare exceptions. Dashboards, inventory reports, and training are detective or educational measures that do not block the action itself.

Question 40Cloud Service Management Fundamentals

A provider's SLA offers service credits equal to 10 percent of monthly fees when availability falls below the target. Which interpretation of this remedy is most accurate?

  1. Credits guarantee the service will meet the target in subsequent months
  2. Credits compensate part of the fee but do not restore the business losses caused by the outage Correct answer.
  3. Credits fully indemnify the consumer for all consequential damages from the outage
  4. Credits replace the need for the consumer to design its own resilience

Explanation

Service credits are a partial financial remedy tied to fees paid, and they typically fall far short of the business impact of an outage. They do not transfer consequential risk to the provider, remove the need for consumer-side resilience, or guarantee future performance.

Question 41Cloud Service Strategy and Governance

A PCCN-K candidate is asked to define the primary purpose of a cloud service strategy document within an enterprise governance framework. Which statement best captures that purpose?

  1. It defines how cloud services will be selected, consumed, and governed to deliver business outcomes aligned with organizational objectives. Correct answer.
  2. It records the salary bands of the cloud engineering team for budgeting transparency.
  3. It lists the network topology diagrams for every data center the organization currently operates.
  4. It provides the source code repository layout used by application developers.

Explanation

A cloud service strategy sets direction: which services are adopted, how they are consumed and governed, and how they map to business goals. It is a decision and alignment artifact, not an operational inventory or HR or code-layout document.

Question 42Cloud Service Strategy and Governance

An organization is drafting a cloud governance operating model. Which element is most essential to include so that decision rights are clear?

  1. A marketing plan for promoting cloud adoption to customers
  2. A named owner and defined escalation path for each governance decision area Correct answer.
  3. A complete list of every SaaS product available in the market
  4. The historical uptime statistics of the organization's on-premises servers

Explanation

A governance operating model must establish who decides, who is consulted, and how disputes escalate. Assigning an accountable owner and escalation path per decision area makes decision rights enforceable rather than aspirational.

Question 43Cloud Service Strategy and Governance

A financial services firm wants to ensure cloud spending stays within approved limits while still allowing developers to provision resources quickly. Which governance control best balances these goals?

  1. Freezing all cloud accounts at the start of each quarter
  2. Removing all budget tracking so developers are not slowed down
  3. Requiring every provisioning request to be approved by the CIO personally
  4. Setting budget guardrails and automated policy enforcement with alerts on thresholds Correct answer.

Explanation

Guardrails with automated enforcement and threshold alerts preserve agility while keeping spend bounded. Personal approval of every request and account freezes destroy the speed benefit of cloud, and removing tracking eliminates control.

Question 44Cloud Service Strategy and Governance

Which statement accurately distinguishes cloud service governance from cloud service management?

  1. Governance and management are identical and the terms are fully interchangeable in all frameworks.
  2. Governance sets the rules, policies, and accountability for cloud use, while management executes day-to-day operations within those rules. Correct answer.
  3. Management sets policy direction, while governance handles incident tickets and patching.
  4. Governance is performed only by external auditors, while management is performed only by vendors.

Explanation

Governance defines decision rights, policies, and accountability; management carries out operational activities under those constraints. Keeping the two distinct clarifies who authorizes versus who executes.

Question 45Cloud Service Strategy and Governance

A multinational enterprise must satisfy data residency rules in several jurisdictions. Which strategic approach best addresses this requirement in a cloud service strategy?

  1. Encrypt all data and assume encryption removes residency obligations
  2. Deploy all workloads to a single region chosen for its low cost
  3. Classify data by residency requirement and map each class to approved deployment regions and services Correct answer.
  4. Rely on the provider's global content delivery network to handle residency automatically

Explanation

Residency compliance requires knowing which data falls under which rule and constraining placement accordingly. Data classification mapped to approved regions and services gives auditable evidence of compliance.

Question 46Cloud Service Strategy and Governance

In a cloud center of excellence model, which responsibility most appropriately belongs to the CCoE rather than to individual application teams?

  1. Writing feature code for each product team's release
  2. Approving individual employee expense reports
  3. Negotiating the salaries of cloud architects
  4. Defining reusable landing zone patterns, guardrails, and reference architectures Correct answer.

Explanation

A CCoE provides shared standards, reusable patterns, and guardrails that teams adopt, accelerating consistency across the organization. Feature code, expense reports, and salaries remain with the respective teams or functions.

Question 47Cloud Service Strategy and Governance

A governance board is reviewing a proposal to adopt a new managed database service. Which criterion is most directly a governance concern rather than a technical implementation detail?

  1. The preferred indentation style for the application code
  2. The number of coffee machines needed in the office
  3. Whether the service meets the organization's approved data classification and vendor risk standards Correct answer.
  4. The exact SQL syntax the developers will use in queries

Explanation

Governance evaluates whether a service fits approved standards such as data classification and vendor risk. Query syntax, code style, and office amenities are implementation or facilities matters outside governance scope.

Question 48Cloud Service Strategy and Governance

An enterprise wants to measure whether its cloud service strategy is delivering value. Which set of indicators is most appropriate for a governance dashboard?

  1. The average length of internal meetings
  2. The count of office plants maintained by facilities
  3. The number of lines of code written per developer per day
  4. Cost per workload, compliance exception counts, adoption rate against plan, and service availability against SLAs Correct answer.

Explanation

A governance dashboard should track outcomes tied to strategy: cost efficiency, compliance, adoption progress, and service reliability. These indicators show whether governance is working and where intervention is needed.

Question 49Cloud Service Strategy and Governance

A team wants to adopt a public cloud service that is not on the organization's approved list. According to typical cloud governance, what is the correct first step?

  1. Use a personal credit card to avoid internal review
  2. Ask the vendor to bypass the organization's procurement controls
  3. Deploy it immediately and inform governance afterward
  4. Submit a service request through the defined exception or approval process Correct answer.

Explanation

Governance relies on a defined intake process for new services, including exceptions, so risk can be assessed before use. Deploying first, bypassing procurement, or using personal funds undermines control and accountability.

Question 50Cloud Service Strategy and Governance

Which statement best describes the concept of a cloud landing zone in a governance context?

  1. A preconfigured, governed environment baseline with identity, networking, logging, and policy controls that workloads inherit Correct answer.
  2. A physical room where cloud servers are racked by the provider
  3. A temporary discount program offered by cloud vendors
  4. A marketing landing page describing cloud products

Explanation

A landing zone is a baseline environment that bakes in identity, network segmentation, logging, and policy so workloads inherit compliant defaults. It is a governance accelerator that reduces per-workload configuration drift.