Cloud Engineer Professional Standards & Competencies 3 — Questions and Answers
Question 1: A cloud engineer suspects a vendor's managed service has a backdoor intentionally inserted by the vendor. The BEST immediate step is:
- Continue using the service and monitor traffic patterns
- Report the suspicion to internal security and consider migrating workloads off the service (Correct answer)
- Publish findings on social media to warn other customers
- Contact the vendor directly and ask if a backdoor exists
Correct answer: Report the suspicion to internal security and consider migrating workloads off the service
Suspected supply-chain backdoors require immediate internal escalation and risk mitigation before any public disclosure.
Question 2: Under the shared responsibility model in public cloud, which security area is ALWAYS the customer's responsibility regardless of service model (IaaS, PaaS, SaaS)?
- Physical data center security
- Hypervisor patching
- Data classification and identity management (Correct answer)
- Network hardware maintenance
Correct answer: Data classification and identity management
Regardless of service model, the customer always owns data classification and identity/access management decisions.
Question 3: A cloud engineer discovers that a recently deployed Terraform module introduces a privilege escalation vulnerability. What is the CORRECT order of actions?
- Notify users, patch, deploy, document
- Document, notify security, patch in a branch, test, deploy, post-mortem (Correct answer)
- Deploy the patch immediately to minimize exposure window
- Archive the vulnerable module and start over from scratch
Correct answer: Document, notify security, patch in a branch, test, deploy, post-mortem
Privilege escalation vulnerabilities require security notification and tested remediation before deployment to avoid introducing new issues.
Question 4: Which ethical obligation does a cloud engineer have when they leave an employer and join a competitor?
- Share architecture knowledge freely since cloud patterns are generic
- Avoid using or disclosing former employer's proprietary configurations and trade secrets (Correct answer)
- Copy environment scripts for personal learning reference
- Document all former employer infrastructure before departure
Correct answer: Avoid using or disclosing former employer's proprietary configurations and trade secrets
Non-disclosure obligations typically survive employment termination; sharing proprietary configurations constitutes a breach of duty and trade secret law.
Question 5: A cloud engineer notices their team consistently underestimates migration timelines, leading to budget overruns. The MOST professional way to address this is:
- Pad estimates secretly without telling stakeholders
- Conduct a retrospective, identify estimation biases, and introduce structured planning techniques like three-point estimation (Correct answer)
- Accept overruns as normal for cloud projects
- Outsource estimations to the cloud vendor's professional services team
Correct answer: Conduct a retrospective, identify estimation biases, and introduce structured planning techniques like three-point estimation
Structured retrospectives and formal estimation techniques reduce systematic bias and improve forecast accuracy over time.
Question 6: When a cloud engineer is asked to provide a cost estimate to a client, professional standards require that the estimate:
- Reflect the lowest possible number to win the contract
- Include assumptions, confidence intervals, and known unknowns clearly documented (Correct answer)
- Be kept vague to avoid being held to a specific number
- Match competitor quotes regardless of actual projected spend
Correct answer: Include assumptions, confidence intervals, and known unknowns clearly documented
Professional estimates must be transparent about assumptions and uncertainty so clients can make informed decisions.
Question 7: A junior engineer on your team writes overly complex Terraform code with no comments. As a senior cloud engineer, the BEST professional response is:
- Rewrite the code silently without informing them
- Provide constructive feedback, suggest simplification, and explain readability standards in a code review (Correct answer)
- Escalate immediately to management as a performance issue
- Approve the code to avoid conflict since it technically works
Correct answer: Provide constructive feedback, suggest simplification, and explain readability standards in a code review
Constructive code review feedback builds team competency and establishes maintainable standards without undermining the junior engineer.
Cloud Engineer Professional Standards & Competencies 3
A cloud engineer suspects a vendor's managed service has a backdoor intentionally inserted by the vendor.
The BEST immediate step is: