ICT Cloud Computing and Virtualization 5 — Questions and Answers
Question 1: What is 'Infrastructure as Code' (IaC) in the context of cloud computing?
- Writing firmware for physical servers
- Managing and provisioning cloud infrastructure through machine-readable configuration files (Correct answer)
- Coding directly inside a virtual machine
- Using a cloud provider's web console to deploy resources
Correct answer: Managing and provisioning cloud infrastructure through machine-readable configuration files
IaC (e.g., Terraform, CloudFormation) lets you define and version infrastructure in code for repeatable, automated deployments.
Question 2: Which disaster recovery metric defines the maximum acceptable amount of data loss measured in time?
- RTO (Recovery Time Objective)
- RPO (Recovery Point Objective) (Correct answer)
- MTTR (Mean Time To Repair)
- SLA (Service Level Agreement)
Correct answer: RPO (Recovery Point Objective)
RPO specifies how far back in time data can be lost; if RPO is 1 hour, backups must occur at least hourly.
Question 3: In Kubernetes, what is a 'Pod'?
- A physical server in a cluster
- The smallest deployable unit, containing one or more containers sharing network and storage (Correct answer)
- A virtual machine image
- A namespace for grouping clusters
Correct answer: The smallest deployable unit, containing one or more containers sharing network and storage
A Pod is Kubernetes' atomic unit of deployment, wrapping one or more tightly coupled containers.
Question 4: What does 'serverless computing' mean?
- Running workloads on physical servers with no virtualization
- A model where developers deploy functions and the cloud provider manages all server provisioning and scaling (Correct answer)
- Using containers instead of VMs
- A data center with no physical servers, only network hardware
Correct answer: A model where developers deploy functions and the cloud provider manages all server provisioning and scaling
Serverless (e.g., AWS Lambda) abstracts server management; developers write functions and pay only for execution time.
Question 5: Which cloud security concept follows the principle of 'never trust, always verify' regardless of network location?
- VPN-based perimeter security
- Zero Trust Architecture (Correct answer)
- DMZ segmentation
- Firewall whitelisting
Correct answer: Zero Trust Architecture
Zero Trust assumes no implicit trust based on network location and requires continuous verification of every user and device.
Question 6: What is 'VM sprawl' in a virtualized environment?
- A VM that consumes more RAM than allocated
- The uncontrolled proliferation of virtual machines that leads to wasted resources and management complexity (Correct answer)
- The process of cloning VMs across data centers
- A network bottleneck caused by too many VMs on one switch
Correct answer: The uncontrolled proliferation of virtual machines that leads to wasted resources and management complexity
VM sprawl occurs when VMs are created faster than they are decommissioned, consuming resources and increasing management overhead.
Question 7: Which protocol is most commonly used to securely access and manage cloud-based Linux virtual machines remotely?
- Telnet
- RDP (Remote Desktop Protocol)
- SSH (Secure Shell) (Correct answer)
- SNMP
Correct answer: SSH (Secure Shell)
SSH provides encrypted command-line access to Linux servers, using key pairs for authentication in cloud environments.
ICT Cloud Computing and Virtualization 5
What is 'Infrastructure as Code' (IaC) in the context of cloud computing?