Cloud Engineer Professional Standards & Competencies 2 — Questions and Answers
Question 1: A cloud engineer discovers that a co-worker's credentials were used to access production systems during off-hours without authorization. What is the FIRST action the engineer should take?
- Delete the suspicious access logs to prevent panic
- Immediately revoke the co-worker's credentials without investigation
- Report the incident to the security team and follow the incident response plan (Correct answer)
- Confront the co-worker directly before involving management
Correct answer: Report the incident to the security team and follow the incident response plan
Following the incident response plan ensures a structured, documented, and legally defensible response to potential credential compromise.
Question 2: Which document formally defines the performance expectations and acceptable uptime guarantees between a cloud provider and a customer?
- Acceptable Use Policy (AUP)
- Service Level Agreement (SLA) (Correct answer)
- Master Service Agreement (MSA)
- Data Processing Agreement (DPA)
Correct answer: Service Level Agreement (SLA)
An SLA specifies measurable service commitments such as uptime percentage, response times, and remedies for failures.
Question 3: A cloud engineer is asked to cut costs by disabling encryption on a non-production database containing real customer PII. What should the engineer do?
- Disable encryption since it is not a production environment
- Comply but document the decision in a change log
- Refuse and escalate to a compliance officer, explaining the PII risk (Correct answer)
- Anonymize the data first, then disable encryption
Correct answer: Refuse and escalate to a compliance officer, explaining the PII risk
Real PII must be protected regardless of environment; disabling encryption violates regulations like GDPR and CCPA and must be escalated.
Question 4: When participating in a post-incident review, a cloud engineer should primarily focus on:
- Identifying and blaming the team member who caused the outage
- Documenting systemic causes and preventive action items without blame (Correct answer)
- Minimizing the written record to reduce legal exposure
- Reporting the incident publicly to build stakeholder trust
Correct answer: Documenting systemic causes and preventive action items without blame
Blameless post-mortems focus on systemic improvements rather than individual fault, fostering a culture of continuous learning.
Question 5: A cloud engineer's employer asks them to configure infrastructure in a way that clearly violates a customer's contractual data residency requirement. The engineer should:
- Implement it and note the deviation in a comment
- Refuse and document the conflict in writing to management (Correct answer)
- Implement it but alert the customer after the fact
- Seek a third-party cloud consultant to share responsibility
Correct answer: Refuse and document the conflict in writing to management
Violating a contractual data residency requirement exposes the company to legal liability; the engineer should refuse and escalate in writing.
Question 6: Which practice BEST demonstrates continuous professional development for a cloud engineer?
- Memorizing provider pricing pages quarterly
- Pursuing vendor-neutral and vendor-specific certifications alongside active lab work (Correct answer)
- Reading cloud provider press releases once a month
- Attending one conference every three years
Correct answer: Pursuing vendor-neutral and vendor-specific certifications alongside active lab work
Combining certifications with hands-on lab work builds both validated knowledge and practical skill, representing true professional development.
Question 7: A cloud engineer is about to push an urgent hotfix directly to production without a change review. The MOST professional course of action is:
- Push directly since speed is the priority in an emergency
- Apply the hotfix under an emergency change process and document it immediately after (Correct answer)
- Ask a teammate to push it so the engineer is not accountable
- Wait for the next scheduled change window regardless of business impact
Correct answer: Apply the hotfix under an emergency change process and document it immediately after
Emergency change processes allow expedited approvals while preserving auditability and accountability.
Cloud Engineer Professional Standards & Competencies 2
A cloud engineer discovers that a co-worker's credentials were used to access production systems during off-hours without authorization.
What is the FIRST action the engineer should take?