考试样卷202011 版本

Copyright © EXIN Holding B.V. 2020. All rights reserved.
EXIN® is a registered trademark.
No part of this publication may be reproduced, stored, utilized or transmitted in any form or by any means, electronic,
mechanical, or otherwise, without the prior written permission from EXIN.

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

2

目录
考试说明
考试样卷
答案解析
试题评分

4
5
20
47

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

3

考试说明
本试卷是 EXIN Cloud Computing Foundation (CLOUDF.CH)模拟考试。 EXIN 考试准则适用于该考试。
本试卷由 40 道单项选择题组成。每道选择题有多个选项，但这些选项中只有一个是正确答案。
本试卷的总分是 40 分。每道题的分数是 1 分。您需要获得 26 分或以上通过考试。
考试时间为 60 分钟。
祝您好运!

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

4

考试样卷
1 / 40
某客户希望：-运行应用软件
-将相关数据存储在中央计算机系统中
-为他们的客户或其它用户通过互联网访问客户提供权限哪一项可以起到帮助？
A customer wants to:- run application software- store related data in central computer systems- provide customers or other users access to them through the Internet
What would help do this?
A) 应用程序架构Application architectureB) 应用程序管理
Application managementC) 云计算Cloud computingD) IT服务管理IT service management

2 / 40云基础设施向一批具有共同目标的特定组织和个人群体提供服务。
以上描述的是哪一种云部署模型？

A cloud infrastructure delivers services to a specific group of organizations and individuals
that share a common goal.
Which cloud deployment model is this?
A) 社区云Community cloudB) 混合云Hybrid cloudC) 私有云Private cloudD) 公有云Public cloud考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

5

3 / 40哪一项是这是平台即服务（PaaS）的主要特点？
What is a key characteristic of PaaS?
A) 无需修改软件No modification of the softwareB) 提供动态扩展
Provides dynamic scalingC) 用于远程应用程序开发
Used for remote application development
D) 服务商具备先进技术知识
Vendor with advanced technical knowledge

4 / 40哪种协议构成了互联网以及云计算的基础？
Which protocol forms the basis of the Internet and, therefore, of cloud computing ?
A) 文件传输协议（FTP）
FTP
B) 超文本传输协议（HTTP）
HTTPC) 传输控制协议/互联网协议（TCP/IP）
TCP/IP5 / 40哪一项是网络在云计算中扮演的主要角色？
What is the main role that a network plays in cloud computing?
A) 连接个人计算机以共享计算能力
Connecting personal computers to share computing powerB) 将个人设备连接到共享资源
Connecting personal devices to the shared resourcesC) 连接瘦客户端以创建一个资源集中化的服务器
Connecting thin clients to create a pooled resource server

6 / 40虚拟化可以实现什么？
What does virtualization achieve?
A) 虚拟化比使用实体机的安全性更高。
Virtualization creates more security than using a physical machine.
B) 虚拟化便于用户之间共享资源。
Virtualization makes it easier to share resources between users.
C) 虚拟化可以提高局域网（LAN）和广域网（WAN）的利用率。
Virtualization leads to better LAN and WAN utilization.

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

6

7 / 40

应用程序服务提供商（ASP）通过网络提供了一个应用程序。该应用程序不属于企业所有。
这种情况是下列那一项的早期现象？

Application service providers (ASPs) offered an application over a network. The application
was not owned by the business.
What is this an early example of?
A) 阿帕网
ArpanetB) 大型机MainframesC) 管理服务Managed services
D) 虚拟专用网（VPN）
Virtual private networks (VPN)

8 / 40哪一项属于单一功能环境？
What is an example of a single-purpose environment?
A) 专用服务器上的计费系统An accounting system on a private serverB) 通过互联网共享文档的应用程序
An application to share documents over the Internet
C) 大型在线存储应用程序的接口
An interface to a large online storage application

9 / 40
哪一项不是多功能架构的主要特点？
What is not a key characteristic of a multi-purpose architecture?
A) 可互操作层
Interoperable layersB) 多层Multi-tieredC) 可移植性PortabilityD) 安全
Security

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

7

10 / 40
SOA是什么的缩写？
What does the abbreviation SOA stand for?
A) 服务组织应用程序
Service-organized applicationB) 服务组织架构
Service-organized architectureC) 面向服务的应用程序
Service-oriented applicationD) 面向服务的架构Service-oriented architecture

11 / 40
哪一项是云计算与环境有关的优点？
What is an environment-related benefit of cloud computing?
A) 降低了带宽要求Lower bandwidth requirementsB) 降低了对互联网的依赖性
Lower Internet dependencyC) 降低了数据保护级别
Lower levels of data protectionD) 降低了功耗
Lower power consumption

12 / 40
哪一项不是云计算的局限性？
What is not a limitation of cloud computing?
A) 数据保护方面的担忧
Concerns about data protectionB) 需要遵守当地法律
Compliance with local lawsC) 总拥有成本（TCO）
Total costs of ownership (TCO)

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

8

13 / 40
灵活性是云计算的优点，但又令人担忧。
哪个方面值得担忧？
Flexibility can be considered both a benefit and a concern of cloud computing.
Which aspect is a concern?
A) 没有应用程序定制
The absence of application customizationB) 即时满足新的业务需求
The immediate fulfilment of new business needsC) 访问的位置无关性
The location independence for accessD) 实施速度The speed of implementation

14 / 40
什么确保了云计算的互操作性？
What ensures the interoperability of cloud computing?
A) 多个系统集成商
Multiple system integratorsB) 单个云计算服务商Single cloud computing vendorC) 标准化协议Standardized protocols

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

9

15 / 40
哪一项是本地云环境的硬件组件？
What are the hardware components of a local cloud environment?
A) - 刀片服务器阵列- 局域网（LAN）- 存储区域网络（SAN）- 网络连接存储（NAS）- 备份和还原解决方案- 负载均衡- Blade server arrays- LAN- Storage area network (SAN)- Network attached storage (NAS)- Backup and restore solution- Load balancerB) - 云自动化软件- 虚拟软件- 云应用软件
- 数据库软件
- 中间件
- 操作系统
- Cloud automation software- Virtualization software- Cloud application software- Database software- Middleware- Operating systems
C) - 按需自助服务- 广泛的网络接入- 资源池- 快速弹性和可扩展性- 可计量的服务
- 多租户
- On-demand self-service- Broad network access- Resource pooling- Rapid elasticity and scalability- Measured service- Multi-tenancy

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

10

16 / 40
哪一项是虚拟专用网（VPN）的关键组件之一？
What is one of the key building blocks for a VPN?
A) 审计
AuditsB) 聚类
ClusteringC) 拒绝服务
Denial of service
D) IP隧道
IP tunneling

17 / 40
哪种措施最有利于云环境中的数据保护？
Which measure contributes most to data protection in cloud environments?
A) 故障转移
FailoverB) 基于角色的用户配置文件
Role-based user profiles
C) 服务级别
Service levels

18 / 40哪个国际标准包含IT服务管理原则？
Which international standard contains IT service management principles?
A) COBIT 5
COBIT 5B) ISO/IEC 17788
ISO/IEC 17788
C) ISO/IEC 20000
ISO/IEC 20000
D) NIST SP800-145
NIST SP800-145

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

11

19 / 40
使用标准如何使云计算受益？
How does using standards benefit cloud computing?
A) 标准确保合规。
Standards ensure compliance.
B) 标准确保了位置无关性。
Standards ensure location independence.
C) 标准确保可移植性。
Standards ensure portability.
D) 标准确保安全性。
Standards ensure security.

20 / 40
公有云的服务级别要求（SLR）是高度标准化的。
为什么SLR是高度标准化的？
Service level requirements (SLRs) for public clouds are highly standardized.
Why are they highly standardized?
A) 因为SLR经由ISO/IEC立法和标准化Because these SLRs are legislated and standardized by ISO/IEC
B) 因为SLR经过《通用数据保护条例》（GDPR）的立法和标准化Because these SLRs are legislated and standardized in the GDPR
C) 因为SLR供大量客户使用Because these SLRs are meant to be used by a large customer baseD) 因为SLR使所有服务遵循单一服务级别
Because these SLRs enable a single service level for all services

21 / 40
哪一个流程不是服务级别管理的一部分？
Which process is not a part of service level management?
A) 配置管理
Configuration managementB) 人力资源管理
Human resource management
C) 服务可用性管理
Service availability managementD) 服务请求管理
Service request management

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

12

22 / 40
访问任何云应用程序需要什么？
What is required for accessing any cloud application?
A) 应用程序和客户端必须使用相同的编程语言。
The application and client must use the same programming language.
B) 应用程序必须验证用户的身份。
The application must verify the user's identity.
C) 用户必须知道应用程序位于哪台服务器。
The user must know on which server the application is located.
D) 用户的浏览器必须支持应用程序的功能。
The user's browser must support the application's features.

23 / 40
超文本传输协议（HTTP）和超文本传输安全协议（HTTPS）与开放系统互连（OSI）模型的哪一层相关？
To which Open Systems Interconnection (OSI) model layer do HTTP and HTTPS relate?
A) 第2层数据链路层
2 - data link layerB) 第3层网络层3 - network layerC) 第4层传输层4 - transport layerD) 第7层应用层
7 - application layer

24 / 40什么是瘦客户端？
What is a thin client?
A) 针对虚拟化计算进行了优化的轻便设备
A lightweight device optimized for virtualized computingB) 无屏幕台式电脑的名称
A name for a desktop computer without a screenC) 可联网并带大处理器的智能手机A smartphone with network access and a large processorD) 无处理器或硬盘驱动器的用户终端
A user terminal without a processor or a hard drive

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

13

25 / 40
哪一项不是使用移动应用程序（Apps）可能带来的好处？
What is not a possible benefit of using mobile applications (apps)?
A) 移动应用程序会自动同步电子邮件和日历。
Mobile apps synchronize e-mail and calendar automatically.
B) 移动设备允许访问桌面虚拟化。
Mobile devices allow access to desktop virtualizations.
C) 移动设备增加了肩窥的可能性。
Mobile devices heighten the chance of shoulder surfing.
D) 有许多应用程序可帮助员工提高工作效率。
There are many apps available that help staff be productive.

26 / 40
一家自主开发软件的IT公司转向应用平台即服务（PaaS）解决方案。
这个举措对公司有何好处？
An IT company that creates their own software switches to a PaaS solution.
What benefit does this have for the company?
A) 营销部门得到了一个额外的营销平台。
The marketing department gets an extra platform for marketing.
B) 销售部门可以更快地向客户展示工作。
The sales department can showcase work to clients faster.
C) 无需软件开发人员即可开发软件。
The software can be developed without software developers.
D) 软件开发人员可以将更多时间投入到有价值的工作上。
The software developers can spend more time on valuable work.

27 / 40
某服务提供商接管了一个客户的大部分IT系统和服务管理。
服务提供商如何最有力地向客户证明他们可以且会交付大部分价值链？
A service provider has taken over a large part of a customer’s IT systems and service
management.
How can the service provider best show their customer that they can and will deliver mostof the value chain?
A) 通过解决有关规模和成本基础设施的问题
By addressing issues surrounding sizing and costing infrastructureB) 通过将服务级别协议（SLA）与客户需求匹配
By matching service level agreements (SLAs) with customer needsC) 通过提供对创新的新应用程序和新技术的获取途径
By providing access to innovative new applications and technologyD) 通过认证显示对服务级别的理解
By showing understanding of service levels through certification

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

14

28 / 40
某组织希望成为云服务提供商。
在此之前，该组织必须问自己哪个问题？
An organization wishes to become a cloud service provider.
Which question must the organization ask themselves before becoming a cloud service
provider?
A) 腾出的资产能否以高效、经济可行的方式重复利用？
Can freed-up assets be re-used in an efficient and financially viable way?
B) 是否需要通过手机数据连接进行个人连接？
Do we need personal connections through cellphone data connections?
C) 客户服务台员工的姓名是什么？
What are the names of the customer's service desk employees?
D) 想迁移到另一个提供商时有何规定？
What are the provisions when we want to migrate to another provider?

29 / 40

数据因遭受未授权访问而损坏。
这种情况构成哪种威胁？

Data is compromised due to unauthorized access to the data.
Which threat is this?
A) 账户劫持
Account hijackingB) 数据泄露
Data breachC) 不安全的接口和应用程序编程接口（API）
Insecure interfaces and application programming interfaces (APIs)

30 / 40一家企业实施双重身份验证和用户行为监控。
这种措施将有助于最直接地减轻哪个风险？
A business implements two-factor authentication and monitoring of user behavior.
Which risk will these measures help mitigate most directly?
A) 账户劫持
Account hijackingB) 数据泄露
Data breachC) 不安全的接口和API
Insecure interfaces and APIs

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

15

31 / 40一家企业经常处理因内部威胁造成的数据泄露。
哪种风险缓解措施对该组织机构最有效？
A business frequently deals with data breaches due to insider threats.
Which risk-mitigating measure is most effective for this business?
A) 意识宣传
Awareness campaigns
B) 出于安全的设计
Designing for securityC) 实施双重身份验证
Implement two-factor authentication

32 / 40联盟身份管理的作用是什么？
What does federated identity management do?
A) 允许在多个设备上使用密码。
It allows passwords to be used on multiple devices.
B) 允许用户重置自己的密码。
It allows users to reset their own passwords.
C) 确保密码一次性使用。
It ensures passwords are only used once.
D) 实现了单点登录（SSO）功能。
It enables the single sign-on (SSO) feature.

33 / 40

存在和位置确定可用的服务和功能。
以上描述的是身份管理的哪一个特点？

Presence and location determine the available services and capabilities.
Which characteristic of identity management is this?
A) 数字身份
Digital identityB) 群管理Group managementC) 角色管理
Role managementD) 职责分离Separation of duties

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

16

34 / 40

欧洲议会和欧盟理事会起草了一份有关数据保护的法规，该项法规于2018年生效。
以上指的是哪一项法规？

The European Parliament and the Council of the European Union have drafted thislegislation for data protection which came into effect in 2018.
Which legislation is meant?
A) 《澄清境外合法使用数据法案》（CLOUD Act）
The CLOUD Act
B) 宪法
The ConstitutionC) 《通用数据保护条例》（GDPR）
The GDPRD) 《世界人权宣言》（UDHR）
The UDHR

35 / 40免费的云应用程序可能会利用个人数据提供个性化广告。
用户应注意什么？
Free cloud applications may use personal data to provide personalized advertisements.
What should the user be concerned about?
A) 个人数据的正确性The correctness of their personal dataB) 个人数据的完整性
The integrity of their personal dataC) 个人信息的安全性
The security of their personal informationD) 个人数据的可用性
The usability of their personal data考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

17

36 / 40一家企业开始使用云计算解决方案。他们重新计算了资本支出（CAPEX）和运营支出（OPEX）。
哪一项是重新计算最可能的结果？
A business starts using cloud computing solutions. They recalculate their capital
expenditure (CAPEX) and operational expenditure (OPEX).
What is the most likely result of this re-calculation?
A) CAPEX和OPEX均减少。
Both CAPEX and OPEX decrease.
B) CAPEX减少而OPEX增加。
CAPEX decreases and OPEX increases.
C) CAPEX增加而OPEX减少。
CAPEX increases and OPEX decreases.
D) CAPEX和OPEX均增加。
Both CAPEX and OPEX increase.

37 / 40
初创公司应用云计算有何好处？
Which benefit would a start-up company have from moving to cloud computing?
A) 降低运营支持成本
Lower operational support costsB) 降低运营支出（OPEX）
Lower operational expenditures (OPEX)C) 缩短实施时间
Shorter implementation timesD) 缩短云解决方案使用时间
Shorter use of cloud solutions

38 / 40
为什么上市时间短是云计算的优点？
Why is a short time to market a benefit of cloud computing?
A) 可以在短时间内实施增容或新技术。
Increased capacity or new technology can be implemented in a short time.
B) 通过实施新兴技术保证市场领导地位。
Market leadership is guaranteed by implementing emerging technologies.
C) 上市时间短可实现云解决方案的可扩展性和弹性。
Short time to market enables scalability and elasticity of cloud solutions.
D) 较慢的全球覆盖速度降低了部署时间短的风险。
Slower worldwide coverage reduces the risks of short deployment times.

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

18

39 / 40一家企业正在研究云服务提供商。他们担心云安全问题。
哪个问题试图解决这点？
A business is researching cloud service providers. They are concerned about cloud security.
Which question addresses this?
A) 云服务可以支持企业业务吗？
Can the cloud services support the business?
B) 云安全级别与自己的相比如何？
How does cloud security level compare to your own?
C) 云服务的计费机制和单位是什么？
What are the cloud service billing mechanism and units?
D) 云解决方案的系统性能如何？
What is the system performance of the cloud solution?

40 / 40一家企业选择了软件即服务（SaaS）解决方案。他们需要监视云服务提供商的财务状况。
哪一项可以帮助该企业监视财务状况？
A business has chosen a SaaS solution. They need to monitor the cloud service provider'sfinancial performance.
What helps a business monitor financial performance?
A) 每周技术性能报告
Weekly technical performance reportsB) 每月产能利用率报告
Monthly capacity utilization reports
C) 年度第三方审计报告Yearly third-party audit reports

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

19

答案解析
1 / 40
某客户希望：-运行应用软件
-将相关数据存储在中央计算机系统中
-为他们的客户或其它用户通过互联网访问客户提供权限哪一项可以起到帮助？
A customer wants to:- run application software- store related data in central computer systems- provide customers or other users access to them through the Internet
What would help do this?
A) 应用程序架构Application architectureB) 应用程序管理
Application managementC) 云计算Cloud computingD) IT服务管理IT service managementA) 错误。应用程序架构是一种艺术和科学，确保一家组织机构用于创建复合架构的应用程序套件具有可扩
展性、可靠性、可用性和可管理性等特点。
Incorrect. Applications architecture is the art and science of ensuring the suite of applications
used by an organization to create the composite architecture is scalable, reliable, available andmanageable.
B) 错误。应用程序管理是负责在整个生命周期中管理应用程序的功能。
Incorrect. Application management is the function responsible for managing applications
throughout their lifecycle.
C) 正确。云计算是一种范式，它通过自服务置备和按需管理，实现网络访问一个具有可扩展的和弹性的共享物理或虚拟资源池。（文献：A，第1章）
Correct. Cloud computing is a paradigm that enables network access to a scalable and elastic
pool of shareable physical or virtual resources with self-service provisioning andadministration on-demand. (Literature: A, Chapter 1)D) 错误。IT服务管理是满足业务需求的高质量IT服务的实施和管理。
Incorrect. IT service management is the implementation and management of quality IT
services that meet the needs of the business.

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

20

2 / 40云基础设施向一批具有共同目标的特定组织和个人群体提供服务。
以上描述的是哪一种云部署模型？

A cloud infrastructure delivers services to a specific group of organizations and individuals
that share a common goal.
Which cloud deployment model is this?
A) 社区云Community cloudB) 混合云Hybrid cloudC) 私有云Private cloudD) 公有云Public cloudA) 正确。社区云向具有共同目标的特定组织或个人群体提供服务。（文献：A，第1章）
Correct. A community cloud delivers services to a specific group of organizations or
individuals that share a common goal. (Literature: A, Chapter 1)
B) 错误。混合云将多个提供商的几种私有云和公有云解决方案组合到一个IT基础设施中。
Incorrect. A hybrid cloud combines several private and public cloud solutions from several
providers into one IT infrastructure.
C) 错误。私有云位于一个专用网络上，该网络运行在一个组织专用的（一部分）数据中心上。
Incorrect. A private cloud resides on a private network that runs on (part of) a data center thatis exclusively used by one organization.
D) 错误。公有云通过互联网提供共享服务，但其并非面向具有共同目标的特定组织和/或个人群体。
Incorrect. A public cloud provides shared services over the internet, but it is not targeted to a
specific group of organizations and/or individuals that share a common goal.

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

21

3 / 40哪一项是这是平台即服务（PaaS）的主要特点？
What is a key characteristic of PaaS?
A) 无需修改软件No modification of the softwareB) 提供动态扩展
Provides dynamic scalingC) 用于远程应用程序开发
Used for remote application development
D) 服务商具备先进技术知识
Vendor with advanced technical knowledgeA) 错误。这是软件即服务（SaaS）的主要特点。
Incorrect. This is a key characteristic of Software as a Service (SaaS).
B) 错误。这是基础设施即服务（IaaS）的主要特点。
Incorrect. This is a key characteristic of Infrastructure as a Service (IaaS).
C) 正确。PaaS的主要特点。（文献：A，第1章）
Correct. This is a key characteristic of Platform as a Service (PaaS). (Literature: A, Chapter 1)D) 错误。SaaS的主要特点。
Incorrect. This is a key characteristic of Software as a Service (SaaS).

4 / 40哪种协议构成了互联网以及云计算的基础？
Which protocol forms the basis of the Internet and, therefore, of cloud computing ?
A) 文件传输协议（FTP）
FTP
B) 超文本传输协议（HTTP）
HTTPC) 传输控制协议/互联网协议（TCP/IP）
TCP/IPA) 错误。FTP用于云计算，但只是协议组的一部分，不是互联网的基础。
Incorrect. FTP (file transfer protocol) is used in cloud computing, but it is only part of the
protocol group. It is not the basis of the Internet.
B) 错误。HTTP是确保超文本标记语言（HTML）通过互联网传输的协议。尽管它是互联网的构成，但它并没促进云计算的发展。
Incorrect. HTTP (Hypertext Transfer Protocol) is the protocol that makes sure that HTML istransferred over the Internet. Although it is integral to the Internet, it does not facilitate cloudcomputing.
C) 正确。TCP/IP是互联网所基于的协议，因此是云计算所基于的协议。（文献：A，第1章）
Correct. TCP/IP (transmission control protocol/Internet protocol) is the protocol that Internet
is based on, and therefore, that cloud computing is based on. (Literature: A, Chapter 1)

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

22

5 / 40哪一项是网络在云计算中扮演的主要角色？
What is the main role that a network plays in cloud computing?
A) 连接个人计算机以共享计算能力
Connecting personal computers to share computing powerB) 将个人设备连接到共享资源
Connecting personal devices to the shared resourcesC) 连接瘦客户端以创建一个资源集中化的服务器
Connecting thin clients to create a pooled resource serverA) 错误。尽管网络连接个人计算机，但是在云计算中，网络的目标不是在个人计算机之间共享计算能力。
Incorrect. Although the network connects personal computers, within cloud computing thegoal of the network is not to share computing powers between the personal computers.
B) 正确。网络（可能是互联网）将网络中的任何个人设备连接到资源集中化服务器。（文献：A，第1章）
Correct. The network, possibly the Internet, connects any personal devices in the network to
the pooled resource servers. (Literature: A, Chapter 1)C) 错误。瘦客户端可以通过网络连接到资源集中化服务器。瘦客户端本身不构成资源集中化服务器。
Incorrect. Thin clients can be connected through a network to a pooled resource server. The
thin clients themselves do not form a pooled resource server.

6 / 40虚拟化可以实现什么？
What does virtualization achieve?
A) 虚拟化比使用实体机的安全性更高。
Virtualization creates more security than using a physical machine.
B) 虚拟化便于用户之间共享资源。
Virtualization makes it easier to share resources between users.
C) 虚拟化可以提高局域网（LAN）和广域网（WAN）的利用率。
Virtualization leads to better LAN and WAN utilization.
A) 错误。虚拟机（VMs）并没有比实体机更不容易受到攻击。
Incorrect. Virtual machines (VMs) are not less vulnerable than physical machines.
B) 正确。虚拟化便于实现多租户系统。（文献：A，第1和3章）
Correct. Virtualization makes implementing a multi-tenant system easier. (Literature: A,
Chapter 1 and 3)C) 错误。网络使用率没有差别。
Incorrect. There is no difference in network usage.

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

23

7 / 40

应用程序服务提供商（ASP）通过网络提供了一个应用程序。该应用程序不属于企业所有。
这种情况是下列那一项的早期现象？

Application service providers (ASPs) offered an application over a network. The application
was not owned by the business.
What is this an early example of?
A) 阿帕网
ArpanetB) 大型机MainframesC) 管理服务Managed services
D) 虚拟专用网（VPN）
Virtual private networks (VPN)
A) 错误。阿帕网是互联网的前身。
Incorrect. Arpanet was a predecessor to the Internet.
B) 错误。应用程序可以托管在大型机上，但是大型机不是应用程序服务提供者。
Incorrect. Applications can be hosted on mainframes, but a mainframe is not an application
service provider.
C) 正确。ASP建立了管理服务的雏形。随着互联网的出现，这项倡议转向了软件即服务（SaaS）。（文献：A，第1章）
Correct. ASPs had set up an early form of managed services. This initiative turned to Software
as a Service (SaaS) with the advent of the Internet. (Literature: A, Chapter 1)D) 错误。VPN用于保护数据传输安全，并用于访问共享的应用程序。
Incorrect. VPNs are used to secure data transfer and used to access shared applications.

8 / 40哪一项属于单一功能环境？
What is an example of a single-purpose environment?
A) 专用服务器上的计费系统An accounting system on a private serverB) 通过互联网共享文档的应用程序
An application to share documents over the Internet
C) 大型在线存储应用程序的接口
An interface to a large online storage applicationA) 正确。这属于单一功能环境。（文献：A，第1章）
Correct. This is a single-purpose environment. (Literature: A, Chapter 1)
B) 错误。这属于多功能环境。
Incorrect. This is an example of a multi-purpose environment.
C) 错误。这属于多功能环境。
Incorrect. This is an example of a multi-purpose environment.

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

24

9 / 40
哪一项不是多功能架构的主要特点？
What is not a key characteristic of a multi-purpose architecture?
A) 可互操作层
Interoperable layersB) 多层Multi-tieredC) 可移植性PortabilityD) 安全
SecurityA) 错误。可互操作层是多功能架构的特点。
Incorrect. Interoperable layers are a characteristic of a multi-purpose architecture.
B) 错误。多功能架构在数据库、应用程序和负载平衡方面具有不同的层次。
Incorrect. A multi-purpose architecture has different tiers for database, application and loadbalancing.
C) 错误。可移植性是多功能架构的特点。
Incorrect. Portability is a characteristic of a multi-purpose architecture.
D) 正确。安全性不是多功能架构的主要特点，而是多租户架构的关键要素。（文献：A，第1章）
Correct. Security is not a key characteristic of a multi-purpose architecture. It is a key elementof a multi-tenancy architecture. (Literature: A, Chapter 1)

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

25

10 / 40
SOA是什么的缩写？
What does the abbreviation SOA stand for?
A) 服务组织应用程序
Service-organized applicationB) 服务组织架构
Service-organized architectureC) 面向服务的应用程序
Service-oriented applicationD) 面向服务的架构Service-oriented architectureA) 错误。不存在服务组织应用程序。“O”代表“面向”。“A”代表“架构”。
Incorrect. There is no service-organized application. The The 'O' stands for 'oriented'. The 'A'
stands for 'architecture'.
B) 错误。不存在服务组织架构。“O”代表“面向”。
Incorrect. There is no such thing as a service-organized architecture. The 'O' stands for'oriented'.
C) 错误。不存在面向服务的应用程序。“A”代表“架构”。
Incorrect. There is no such thing as a service-oriented application. The 'A' stands for'architecture'.
D) 正确。SOA是“面向服务的架构”的缩写。SOA是指一系列可以相互通信的服务。（文献：A，第1章）
Correct. SOA is the abbreviation of 'service-oriented architecture'. SOA is a collection ofservices that communicate with each other. (Literature: A, Chapter 1)

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

26

11 / 40
哪一项是云计算与环境有关的优点？
What is an environment-related benefit of cloud computing?
A) 降低了带宽要求Lower bandwidth requirementsB) 降低了对互联网的依赖性
Lower Internet dependencyC) 降低了数据保护级别
Lower levels of data protectionD) 降低了功耗
Lower power consumptionA) 错误。云计算需要高带宽。
Incorrect. High bandwidth is needed for cloud computing.
B) 错误。对互联网的依赖性较高。
Incorrect. The dependency on the Internet is high.
C) 错误。数据保护是云计算令人担忧的方面，不是优点。
Incorrect. Data protection is something to be worried about in cloud computing. It is not abenefit.
D) 正确。与传统IT相比，云计算通常耗电更少。（文献：A，第1章）
Correct. Cloud computing typically requires less power than traditional IT. (Literature: A,
Chapter 1)

12 / 40
哪一项不是云计算的局限性？
What is not a limitation of cloud computing?
A) 数据保护方面的担忧
Concerns about data protectionB) 需要遵守当地法律
Compliance with local lawsC) 总拥有成本（TCO）
Total costs of ownership (TCO)
A) 错误。因为数据保护是与数据一起被外包，所以数据保护是一个局限性。
Incorrect. Because data protection is outsourced with the data, data protection is a limitation.
B) 错误。由于数据存储地点不确定，所以法规是一个局限性。
Incorrect. Because of the uncertainty where data is stored, legislations are a limitation.
C) 正确。TCO只是一个数字，不是云计算本身的局限性。（文献：A，第1和5章）
Correct. The TCO is just a number. It is not a limitation of cloud computing itself. (Literature: A,
Chapter 1 and 5)考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

27

13 / 40
灵活性是云计算的优点，但又令人担忧。
哪个方面值得担忧？
Flexibility can be considered both a benefit and a concern of cloud computing.
Which aspect is a concern?
A) 没有应用程序定制
The absence of application customizationB) 即时满足新的业务需求
The immediate fulfilment of new business needsC) 访问的位置无关性
The location independence for accessD) 实施速度The speed of implementationA) 正确。没有应用程序定制被认为是云计算的灵活性问题。（文献：A，第1章）
Correct. Absence of application customization is considered to be a flexibility concern of cloudcomputing. (Literature: A, Chapter 1)
B) 错误。即时满足新的业务需求通常被认为是优点，而不是担忧。
Incorrect. Immediate fulfilment of new business needs is mostly considered a benefit, not aconcern.
C) 错误。位置无关性通常被认为是优点，而不是担忧。
Incorrect. Location independence is mostly considered a benefit, not a concern.
D) 错误。实施速度通常被认为是优点，而不是担忧。
Incorrect. Speed of implementation is mostly considered a benefit, not a concern.

14 / 40
什么确保了云计算的互操作性？
What ensures the interoperability of cloud computing?
A) 多个系统集成商
Multiple system integratorsB) 单个云计算服务商Single cloud computing vendorC) 标准化协议Standardized protocolsA) 错误。使用多个系统集成商不能保证互操作性。
Incorrect. Employing multiple system integrators does not guarantee interoperability.
B) 错误。使用单个服务商会造成企业客户被服务商锁定的情况。
Incorrect. Using a single vendor creates vendor lock-in.
C) 正确。标准确保了互操作性。（文献：A，第3章）
Correct. Standards ensure interoperability. (Literature: A, Chapter 3)

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

28

15 / 40
哪一项是本地云环境的硬件组件？
What are the hardware components of a local cloud environment?
A) - 刀片服务器阵列- 局域网（LAN）- 存储区域网络（SAN）- 网络连接存储（NAS）- 备份和还原解决方案- 负载均衡- Blade server arrays- LAN- Storage area network (SAN)- Network attached storage (NAS)- Backup and restore solution- Load balancerB) - 云自动化软件- 虚拟软件- 云应用软件
- 数据库软件
- 中间件
- 操作系统
- Cloud automation software- Virtualization software- Cloud application software- Database software- Middleware- Operating systems
C) - 按需自助服务- 广泛的网络接入- 资源池- 快速弹性和可扩展性- 可计量的服务
- 多租户
- On-demand self-service- Broad network access- Resource pooling- Rapid elasticity and scalability- Measured service- Multi-tenancyA) 正确。这是本地云环境的完整硬件组件。（文献：A，第2章）
Correct. This is the full list of hardware components of a local cloud environment. (Literature:
A, Chapter 2)B) 错误。这是本地云环境的完整软件组件，不是硬件组件。
Incorrect. This is the full list of software components for a local cloud environment, not the
hardware components.
C) 错误。这总体上列出的是云计算的特点，不是本地云环境的硬件组件。
Incorrect. This is the list of cloud computing characteristics in general, not of the hardware
components for a local cloud environment.

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

29

16 / 40
哪一项是虚拟专用网（VPN）的关键组件之一？
What is one of the key building blocks for a VPN?
A) 审计
AuditsB) 聚类
ClusteringC) 拒绝服务
Denial of service
D) IP隧道
IP tunnelingA) 错误。审计有助于识别和补救薄弱环节，而且是改进周期和监控系统的一部分。
Incorrect. Audits help identify and remedy weak spots and are part of improvement cycles andmonitoring systems.
B) 错误。聚类是在多个物理服务器上运行单个云环境的做法。
Incorrect. Clustering is the practice of running a single cloud environment on multiple physicalservers.
C) 错误。拒绝服务是一种网络攻击。
Incorrect. Denial of service is a type of cyberattack.
D) 正确。关键组件包括：IP隧道、安全性、加密和3A框架。（文献：A，第2章）
Correct. Key building blocks are: IP tunneling, security, encryption, and AAA. (Literature: A,
Chapter 2)

17 / 40
哪种措施最有利于云环境中的数据保护？
Which measure contributes most to data protection in cloud environments?
A) 故障转移
FailoverB) 基于角色的用户配置文件
Role-based user profiles
C) 服务级别
Service levelsA) 错误。故障转移确保没有系统故障。尽管这样可以降低丢失数据的风险，但这并不是最有效地增强数据保护的方法。
Incorrect. Failover ensures there is no system failure. Although this reduces the risk of losing
data, it is not the most effective for increasing data protection.
B) 正确。基于角色的用户配置文件确保只有授权人员才能访问数据。这最大程度地增强了数据保护。（文献：A，第2章）
Correct. Role-based user profiles ensure only authorized persons can access data. This
increases data protection most. (Literature: A, Chapter 2)C) 错误。服务级别可用于确保系统的高性能，但是有更好的方法来增强数据保护。
Incorrect. Service levels may be used to ensure high performance of the system, but there is abetter way to increase data protection.

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

30

18 / 40哪个国际标准包含IT服务管理原则？
Which international standard contains IT service management principles?
A) COBIT 5
COBIT 5B) ISO/IEC 17788
ISO/IEC 17788
C) ISO/IEC 20000
ISO/IEC 20000
D) NIST SP800-145
NIST SP800-145
A) 错误。COBIT 5是ISACA全球认可框架的最新版本，提供了企业IT治理的端到端业务视图，其中反映了
信息和技术在为企业创造价值中的核心作用。
Incorrect. COBIT 5 is the latest edition of ISACA's globally accepted framework, providing an
end-to-end business view of the governance of enterprise IT that reflects the central role ofinformation and technology in creating value for enterprises.
B) 错误。ISO/IEC 17788提供了云计算的概述以及一系列术语和定义。它是云计算标准的术语基础。
Incorrect. ISO/IEC 17788 provides an overview of cloud computing along with a set of terms
and definitions. It is a terminology foundation for cloud computing standards.
C) 正确。ISO/IEC 20000-1是服务管理系统（SMS）标准。（文献：A，第2章）
Correct. ISO/IEC 20000-1 is a service management system (SMS) standard. (Literature: A,
Chapter 2)D) 错误。NIST SP800-145是根据NIST（美国国家标准技术研究院）定义的云计算。 这是一个建议，而不是国际标准。
Incorrect. NIST SP800-145 is the definition of cloud computing according to NIST (American
National Institute of Standards and Technology). It is a recommendation, not an international
standard.

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

31

19 / 40
使用标准如何使云计算受益？
How does using standards benefit cloud computing?
A) 标准确保合规。
Standards ensure compliance.
B) 标准确保了位置无关性。
Standards ensure location independence.
C) 标准确保可移植性。
Standards ensure portability.
D) 标准确保安全性。
Standards ensure security.
A) 错误。仅制定标准并不能确保合规。有标准不能保证人的行为。
Incorrect. Just having standards does not ensure compliance. Human behavior is notguaranteed by having standards.
B) 错误。这种标准不允许用户从任何位置连接到服务。
Incorrect. Standards as such do not allow a user to connect to a service from any location.
C) 正确。标准允许互操作性和可移植性。（文献：A，第2章）
Correct. Standards allow interoperability and portability. (Literature: A, Chapter 2)D) 错误。仅制定标准并不能确保安全性，还需要安全意识、防火墙和病毒扫描程序。
Incorrect. Just having standards does not provide security. Security awareness, firewalls, andvirus scanners are needed.

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

32

20 / 40
公有云的服务级别要求（SLR）是高度标准化的。
为什么SLR是高度标准化的？
Service level requirements (SLRs) for public clouds are highly standardized.
Why are they highly standardized?
A) 因为SLR经由ISO/IEC立法和标准化Because these SLRs are legislated and standardized by ISO/IEC
B) 因为SLR经过《通用数据保护条例》（GDPR）的立法和标准化Because these SLRs are legislated and standardized in the GDPR
C) 因为SLR供大量客户使用Because these SLRs are meant to be used by a large customer baseD) 因为SLR使所有服务遵循单一服务级别
Because these SLRs enable a single service level for all servicesA) 错误。ISO/IEC未将公有云的SLR标准化。
Incorrect. ISO/IEC does not standardize SLRs for public clouds.
B) 错误。GDPR没有提及公有云服务的标准化SLR。
Incorrect. The GDPR does not mention standardized SLRs for public cloud services.
C) 正确。公有云SLR是为了供大量客户使用。（文献：A，第2章）
Correct. Public cloud SLRs are designed to be used by a large group of customers. (Literature:
A, Chapter 2)D) 错误。公有云提供商可以提供多种服务级别。
Incorrect. Public cloud providers can provide multiple service levels.

21 / 40
哪一个流程不是服务级别管理的一部分？
Which process is not a part of service level management?
A) 配置管理
Configuration managementB) 人力资源管理
Human resource management
C) 服务可用性管理
Service availability managementD) 服务请求管理
Service request managementA) 错误。配置管理是服务级别管理的一部分。
Incorrect. Configuration management is part of service level management.
B) 正确。人力资源管理不是服务级别管理的一部分。（文献：A，第2章）
Correct. Human resource management is not part of service level management. (Literature: A,
Chapter 2)C) 错误。服务可用性管理是服务级别管理的一部分。
Incorrect. Service availability management is part of service level management.
D) 错误。服务请求管理是服务级别管理的一部分。
Incorrect. Service request management is part of service level management.

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

33

22 / 40
访问任何云应用程序需要什么？
What is required for accessing any cloud application?
A) 应用程序和客户端必须使用相同的编程语言。
The application and client must use the same programming language.
B) 应用程序必须验证用户的身份。
The application must verify the user's identity.
C) 用户必须知道应用程序位于哪台服务器。
The user must know on which server the application is located.
D) 用户的浏览器必须支持应用程序的功能。
The user's browser must support the application's features.
A) 错误。应用程序不与客户端交换编程代码。
Incorrect. Applications do not exchange programming code with clients.
B) 错误。许多公有云应用程序不需要用户登录，因此不需要身份验证。
Incorrect. Many public cloud applications do not require users to log in, so no identity
verification is required.
C) 错误。用户没有理由要知道应用程序位于哪台服务器。
Incorrect. There is no reason for users to know on which server an application is located.
D) 正确。用户通过浏览器访问应用程序，浏览器应支持应用程序所需的功能。（文献：A，第3章）
Correct. Users access the application through a browser, which should support the features
the application needs. (Literature: A, Chapter 3)

23 / 40
超文本传输协议（HTTP）和超文本传输安全协议（HTTPS）与开放系统互连（OSI）模型的哪一层相关？
To which Open Systems Interconnection (OSI) model layer do HTTP and HTTPS relate?
A) 第2层数据链路层
2 - data link layerB) 第3层网络层3 - network layerC) 第4层传输层4 - transport layerD) 第7层应用层
7 - application layerA) 错误。以太网和IEEE 802.3与数据链路层相关。
Incorrect. Ethernet and IEEE 802.3 are related to the data link layer.
B) 错误。互联网协议（IP）与网络层相关。
Incorrect. IP (Internet protocol) is related to the network layer.
C) 错误。传输控制协议（TCP）和安全套接字层（SSL）与传输层相关。
Incorrect. TCP (transmission control protocol) and SSL (secure socket layer) are related to thetransport layer.
D) 正确。HTTP和HTTPS与应用层相关。（文献：A，第3章）
Correct. HTTP (hypertext transfer protocol) and HTTPS (hypertext transfer protocol secure) are
related to the application layer. (Literature: A, Chapter 3)

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

34

24 / 40什么是瘦客户端？
What is a thin client?
A) 针对虚拟化计算进行了优化的轻便设备
A lightweight device optimized for virtualized computingB) 无屏幕台式电脑的名称
A name for a desktop computer without a screenC) 可联网并带大处理器的智能手机A smartphone with network access and a large processorD) 无处理器或硬盘驱动器的用户终端
A user terminal without a processor or a hard driveA) 正确。这是瘦客户端的一般描述。（文献：A，第3章）
Correct. This is a generic description of a thin client. (Literature: A, Chapter 3)B) 错误。有无屏幕并不能确定计算机是否是瘦客户端。
Incorrect. The presence or absence of a screen does not determine if a computer is a thinclient or not.
C) 错误。智能手机可以充当瘦客户端，但这不是它的定义。
Incorrect. Smart phones may act as a thin client, but this is not a definition.
D) 错误。瘦客户端需要处理器运行其正在访问的应用程序。
Incorrect. The thin client needs a processor to run the applications it is accessing.

25 / 40
哪一项不是使用移动应用程序（Apps）可能带来的好处？
What is not a possible benefit of using mobile applications (apps)?
A) 移动应用程序会自动同步电子邮件和日历。
Mobile apps synchronize e-mail and calendar automatically.
B) 移动设备允许访问桌面虚拟化。
Mobile devices allow access to desktop virtualizations.
C) 移动设备增加了肩窥的可能性。
Mobile devices heighten the chance of shoulder surfing.
D) 有许多应用程序可帮助员工提高工作效率。
There are many apps available that help staff be productive.
A) 错误。这是使用移动应用程序的好处。
Incorrect. This is a benefit of using mobile apps.
B) 错误。这是使用移动应用程序的好处。
Incorrect. This is a benefit of using mobile apps.
C) 正确。这不是好处。肩窥意味着未经授权的人可以看到数据。这构成了安全隐患。（文献：A，第3章）
Correct. This is not a benefit. Shoulder surfing means unauthorized persons can see data. Thatis a security risk. (Literature: A, Chapter 3)D) 错误。这是使用移动应用程序的好处。
Incorrect. This is a benefit of using mobile apps.

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

35

26 / 40
一家自主开发软件的IT公司转向应用平台即服务（PaaS）解决方案。
这个举措对公司有何好处？
An IT company that creates their own software switches to a PaaS solution.
What benefit does this have for the company?
A) 营销部门得到了一个额外的营销平台。
The marketing department gets an extra platform for marketing.
B) 销售部门可以更快地向客户展示工作。
The sales department can showcase work to clients faster.
C) 无需软件开发人员即可开发软件。
The software can be developed without software developers.
D) 软件开发人员可以将更多时间投入到有价值的工作上。
The software developers can spend more time on valuable work.
A) 错误。PaaS解决方案不用作营销平台。
Incorrect. Platform as a Service (PaaS) solutions are not used as a marketing platform.
B) 错误。PaaS不是用于向客户展示工作。
Incorrect. Platform as a Service (PaaS) is not meant to showcase work to clients.
C) 错误。PaaS不自动开发软件。
Incorrect. Platform as a Service (PaaS) does not automatically develop software.
D) 正确。软件开发人员在其解决方案的设计、构建和测试阶段使用PaaS。这样，他们能够减少这些活动所需的时间并做更多有价值的工作。（文献：A，第3章）
Correct. Software developers use Platform as a Service (PaaS) in the design, build and teststages of their solutions. As a result, they may be able to reduce the time needed for these
activities and do more valuable work. (Literature: A, Chapter 3)

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

36

27 / 40
某服务提供商接管了一个客户的大部分IT系统和服务管理。
服务提供商如何最有力地向客户证明他们可以且会交付大部分价值链？
A service provider has taken over a large part of a customer’s IT systems and service
management.
How can the service provider best show their customer that they can and will deliver mostof the value chain?
A) 通过解决有关规模和成本基础设施的问题
By addressing issues surrounding sizing and costing infrastructureB) 通过将服务级别协议（SLA）与客户需求匹配
By matching service level agreements (SLAs) with customer needsC) 通过提供对创新的新应用程序和新技术的获取途径
By providing access to innovative new applications and technologyD) 通过认证显示对服务级别的理解
By showing understanding of service levels through certificationA) 错误。尽管企业客户可能需要一个较低的价格，但这并不能表明提供商对客户核心业务的洞察。
Incorrect. Although the business may need a low price, this does not show insight in thecustomer's core business.
B) 正确。重写SLA以匹配客户的业务需求，可以表明提供商对客户核心业务流程的洞察。（文献：A，第3章）
Correct. Rewriting SLAs to match the customer's business needs shows insight in their corebusiness processes. (Literature: A, Chapter 3)C) 错误。这可能有利于企业客户，但不是表明对客户核心业务洞察力的最佳方法。
Incorrect. This may benefit the business but is not the best way to show insight in thecustomer's core business.
D) 错误。仅理解服务级别或获得认证不足以表明对客户核心业务的洞察力。
Incorrect. Simply understanding service levels or being certified is not enough to show insightin the customer's core business.

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)37

28 / 40
某组织希望成为云服务提供商。
在此之前，该组织必须问自己哪个问题？
An organization wishes to become a cloud service provider.
Which question must the organization ask themselves before becoming a cloud service
provider?
A) 腾出的资产能否以高效、经济可行的方式重复利用？
Can freed-up assets be re-used in an efficient and financially viable way?
B) 是否需要通过手机数据连接进行个人连接？
Do we need personal connections through cellphone data connections?
C) 客户服务台员工的姓名是什么？
What are the names of the customer's service desk employees?
D) 想迁移到另一个提供商时有何规定？
What are the provisions when we want to migrate to another provider?
A) 正确。这是该组织在成为云服务提供商时应问自己的问题。（文献：A，第3章）
Correct. This is something organizations should ask themselves when becoming a cloudservice provider. (Literature: A, Chapter 3)B) 错误。这是一个组织在选择云服务提供商之前就必须做好的决定。
Incorrect. This is something an organization must decide before choosing a cloud service
provider.
C) 错误。这与题干无关。
Incorrect. This is irrelevant.
D) 错误。这是针对客户的问题。提供商通常不依赖于另一个提供商。
Incorrect. This is a question for the customer. The provider is usually not dependent onanother provider.

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

38

29 / 40

数据因遭受未授权访问而损坏。
这种情况构成哪种威胁？

Data is compromised due to unauthorized access to the data.
Which threat is this?
A) 账户劫持
Account hijackingB) 数据泄露
Data breachC) 不安全的接口和应用程序编程接口（API）
Insecure interfaces and application programming interfaces (APIs)
A) 错误。账户劫持可能导致数据泄露，但本质上是另一种威胁。
Incorrect. Account hijacking may lead to a data breach but is in essence another threat.
B) 正确。问题中描述的是数据泄露。（文献：A，第4章）
Correct. This is a description of a data breach. (Literature: A, Chapter 4)C) 错误。此威胁可能会带来安全风险，但是与题干不符。
Incorrect. This threat may pose a security risk, but the description does not fit the threat.

30 / 40一家企业实施双重身份验证和用户行为监控。
这种措施将有助于最直接地减轻哪个风险？
A business implements two-factor authentication and monitoring of user behavior.
Which risk will these measures help mitigate most directly?
A) 账户劫持
Account hijackingB) 数据泄露
Data breachC) 不安全的接口和API
Insecure interfaces and APIsA) 正确。强身份验证与监控相结合将减轻账户劫持的风险。（文献：A，第4章）
Correct. Strong authentication in combination with monitoring will mitigate the risk ofaccount hijacking. (Literature: A, Chapter 4)B) 错误。尽管数据泄露可以间接预防，但这并不是直接解决数据泄露的缓解措施。
Incorrect. Although data breaches may be prevented indirectly, this is not a mitigation that
directly addresses data breaches.
C) 错误。尽管强身份验证将减轻不安全接口和API的一些风险，但是无法直接解决此威胁。
Incorrect. Although strong authentication will mitigate some of the risks of insecure interfaces
and APIs, this threat is not addressed directly.

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

39

31 / 40一家企业经常处理因内部威胁造成的数据泄露。
哪种风险缓解措施对该组织机构最有效？
A business frequently deals with data breaches due to insider threats.
Which risk-mitigating measure is most effective for this business?
A) 意识宣传
Awareness campaigns
B) 出于安全的设计
Designing for securityC) 实施双重身份验证
Implement two-factor authenticationA) 正确。内部威胁通常是由于疏忽而不是过失造成的。这可以通过意识宣传来缓解。（文献：A，第4章）
Correct. Insider threat is usually due to negligence, not malintent. This can be mitigated byawareness campaigns. (Literature: A, Chapter 4)B) 错误。即使安全性设计完美，这种情况下的威胁仍是由人为失误或疏忽造成的。
Incorrect. Even if security is perfectly designed, the threat here is caused by human failure or
negligence.
C) 错误。双重身份验证始终是一个好主意，但不能解决疏忽问题。
Incorrect. Two-factor authentication is always a good idea but does not address negligence.

32 / 40联盟身份管理的作用是什么？
What does federated identity management do?
A) 允许在多个设备上使用密码。
It allows passwords to be used on multiple devices.
B) 允许用户重置自己的密码。
It allows users to reset their own passwords.
C) 确保密码一次性使用。
It ensures passwords are only used once.
D) 实现了单点登录（SSO）功能。
It enables the single sign-on (SSO) feature.
A) 错误。这是密码同步的作用。
Incorrect. That is what password synchronization does.
B) 错误。这是自助服务功能的作用。
Incorrect. That is what self-service functions do.
C) 错误。这是密码同步的作用。
Incorrect. That is what password synchronization does.
D) 正确。联盟身份管理实现了SSO。（文献：A，第4章）
Correct. Federated identity management enables SSO. (Literature: A, Chapter 4)

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)40

33 / 40

存在和位置确定可用的服务和功能。
以上描述的是身份管理的哪一个特点？

Presence and location determine the available services and capabilities.
Which characteristic of identity management is this?
A) 数字身份
Digital identityB) 群管理Group managementC) 角色管理
Role managementD) 职责分离Separation of dutiesA) 正确。数字身份对照某个位置与用户的存在，确定其可以执行哪些任务。（文献：A，第4章）
Correct. Digital identity cross-references a location with the presence of a user to determine
which tasks they can perform. (Literature: A, Chapter 4)B) 错误。群管理处理的不是授予人的权限，而是授予角色的权限。
Incorrect. Group management deals with permissions that are not given to people, but toroles.
C) 错误。角色管理是业务角色的IT实施。
Incorrect. Role management is the IT implementation of a business role.
D) 错误。职责分离意味着完成一项任务必须涉及多个人。
Incorrect. Separation of duties means that more than one person must be involved tocomplete a task.

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

41

34 / 40

欧洲议会和欧盟理事会起草了一份有关数据保护的法规，该项法规于2018年生效。
以上指的是哪一项法规？

The European Parliament and the Council of the European Union have drafted thislegislation for data protection which came into effect in 2018.
Which legislation is meant?
A) 《澄清境外合法使用数据法案》（CLOUD Act）
The CLOUD Act
B) 宪法
The ConstitutionC) 《通用数据保护条例》（GDPR）
The GDPRD) 《世界人权宣言》（UDHR）
The UDHRA) 错误。CLOUD Act是一项美国法案。
Incorrect. The CLOUD Act is an American Act.
B) 错误。这是指美国宪法。它涉及隐私，而不直接涉及数据保护。
Incorrect. This refers to the Constitution of the United States. It is concerned with privacy, notwith data protection directly.
C) 正确。GDPR设计了数据保护，且间接涉及了隐私。（文献：A，第4章）
Correct. The General Data Protection Regulation (GDPR) is concerned with data protection,and indirectly, with privacy. (Literature: A, Chapter 4)D) 错误。UDHR描述了隐私权，但不直接涉及数据保护。
Incorrect. The Universal Declaration of Human Rights (UDHR) describes the right to privacy
but is not concerned with data protection directly.

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

42

35 / 40免费的云应用程序可能会利用个人数据提供个性化广告。
用户应注意什么？
Free cloud applications may use personal data to provide personalized advertisements.
What should the user be concerned about?
A) 个人数据的正确性The correctness of their personal dataB) 个人数据的完整性
The integrity of their personal dataC) 个人信息的安全性
The security of their personal informationD) 个人数据的可用性
The usability of their personal dataA) 错误。对云服务提供商影响最大的是不正确的数据，不是用户，尽管任何数据主体都有权纠正不正确的
数据。
Incorrect. The cloud service provider is most affected by incorrect data, not the user. Although
any data subject has the right to rectify incorrect data.
B) 错误。云服务提供商想要确保数据完整性，而不是用户。
Incorrect. The cloud service provider will want to ensure data integrity, not the user.
C) 正确。他们应担心云服务提供商如何确保其个人数据的安全。（文献：A，第4章）
Correct. They should worry about how the cloud service provider keeps their personal data
secure. (Literature: A, Chapter 4)D) 错误。云服务提供商可能会担心可用性，而不是用户。
Incorrect. The cloud service provider may worry about usability, not the user.

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

43

36 / 40一家企业开始使用云计算解决方案。他们重新计算了资本支出（CAPEX）和运营支出（OPEX）。
哪一项是重新计算最可能的结果？
A business starts using cloud computing solutions. They recalculate their capital
expenditure (CAPEX) and operational expenditure (OPEX).
What is the most likely result of this re-calculation?
A) CAPEX和OPEX均减少。
Both CAPEX and OPEX decrease.
B) CAPEX减少而OPEX增加。
CAPEX decreases and OPEX increases.
C) CAPEX增加而OPEX减少。
CAPEX increases and OPEX decreases.
D) CAPEX和OPEX均增加。
Both CAPEX and OPEX increase.
A) 错误。由于该企业的软件拥有量和硬件购买量减少，因此资本支出减少的可能性更大。
Incorrect. It is more likely that CAPEX decreases because the business owns and buys lesshardware.
B) 正确。该企业不是购买硬件，而是购买服务。这样成本从CAPEX变成了OPEX。在某些情况下，购买服务可能最终会比购买硬件高昂。（文献：A，第5章）
Correct. Instead of buying hardware, the business is buying services. This shifts the costs fromCAPEX to OPEX. In some cases, buying services may end up more expensive than buying
hardware. (Literature: A, Chapter 5)C) 错误。恰好相反。
Incorrect. It is the other way around.
D) 错误。由于该企业的软件拥有量和购买量减少，因此CAPEX减少的可能性更大。
Incorrect. It is more likely that CAPEX decreases because the business owns and buys lesshardware.

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

44

37 / 40
初创公司应用云计算有何好处？
Which benefit would a start-up company have from moving to cloud computing?
A) 降低运营支持成本
Lower operational support costsB) 降低运营支出（OPEX）
Lower operational expenditures (OPEX)C) 缩短实施时间
Shorter implementation timesD) 缩短云解决方案使用时间
Shorter use of cloud solutionsA) 错误。运营支持成本并非初创公司的特有好处。
Incorrect. Operational support costs are not a benefit specific to start-up companies.
B) 错误。使用云解决方案时，OPEX可能会更高。
Incorrect. OPEX is likely to be higher when using a cloud solution.
C) 正确。与购买硬件和建立基础设施相比，云解决方案的实施时间较短。这对初创公司尤为有利。（文献：A，第4章）
Correct. Cloud solutions have a short implementation time compared to buying hardware andsetting up an infrastructure. This benefits start-up companies especially. (Literature: A, Chapter
4)D) 错误。云解决方案的使用时间不短于其他解决方案。
Incorrect. Cloud solutions can be used as long as, or longer than, other solutions.

38 / 40
为什么上市时间短是云计算的优点？
Why is a short time to market a benefit of cloud computing?
A) 可以在短时间内实施增容或新技术。
Increased capacity or new technology can be implemented in a short time.
B) 通过实施新兴技术保证市场领导地位。
Market leadership is guaranteed by implementing emerging technologies.
C) 上市时间短可实现云解决方案的可扩展性和弹性。
Short time to market enables scalability and elasticity of cloud solutions.
D) 较慢的全球覆盖速度降低了部署时间短的风险。
Slower worldwide coverage reduces the risks of short deployment times.
A) 正确。可扩展性和弹性，再加上新技术较短的实施时间，加快了上市时间。（文献：A，第5章）
Correct. Scalability and elasticity bundled with short implementation times for new technology
allow a fast time to market. (Literature: A, Chapter 5)B) 错误。尽管快速上市增加了成为市场领导的可能性，但无法保证这一点。
Incorrect. Although a fast time to market increases the chance of market leadership, nothingcan guarantee this.
C) 错误。可扩展性和弹性实现了上市时间短，而不是相反。
Incorrect. Scalability and elasticity enable time to market, not the other way around.
D) 错误。上市时间短加快了全球覆盖速度，部署时间短不会带来风险。
Incorrect. Time to market increases worldwide coverage and short deployment times do notcarry risks.

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

45

39 / 40一家企业正在研究云服务提供商。他们担心云安全问题。
哪个问题试图解决这点？
A business is researching cloud service providers. They are concerned about cloud security.
Which question addresses this?
A) 云服务可以支持企业业务吗？
Can the cloud services support the business?
B) 云安全级别与自己的相比如何？
How does cloud security level compare to your own?
C) 云服务的计费机制和单位是什么？
What are the cloud service billing mechanism and units?
D) 云解决方案的系统性能如何？
What is the system performance of the cloud solution?
A) 错误。尽管这是一个重要的问题，但它没有直接解决云安全问题。
Incorrect. Although this is an important question, it does not address cloud security directly.
B) 正确。这个问题将会解决云安全问题。（文献：A，第5章）
Correct. This question will address cloud security. (Literature: A, Chapter 5)C) 错误。尽管这是一个重要的问题，但它没有直接解决云安全问题。
Incorrect. Although this is an important question, it does not address cloud security directly.
D) 错误。尽管这是一个重要的问题，但它没有直接解决云安全问题。
Incorrect. Although this is an important question, it does not address cloud security directly.

40 / 40一家企业选择了软件即服务（SaaS）解决方案。他们需要监视云服务提供商的财务状况。
哪一项可以帮助该企业监视财务状况？
A business has chosen a SaaS solution. They need to monitor the cloud service provider'sfinancial performance.
What helps a business monitor financial performance?
A) 每周技术性能报告
Weekly technical performance reportsB) 每月产能利用率报告
Monthly capacity utilization reports
C) 年度第三方审计报告Yearly third-party audit reportsA) 错误。技术性能报告帮助监视的是技术性能，而不是财务状况。
Incorrect. Technical performance reports help monitor technical performance, not financial
performance.
B) 正确。产能利用率报告帮助监视财务业绩。（文献：A，第 5 章）
Correct. Capacity utilization reports help monitor financial performance. (Literature: A, Chapter 5)C) 错误。审计报告帮助监视合规性。
Incorrect. Audit reports help monitor compliance.

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

46

试题评分
如下表格为本套样题的正确答案，供参考使用。
问题
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20

答案
C
A
C
C
B
B
C
A
D
D
D
C
A
C
A
D
B
C
C
C

问题
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40

答案
B
D
D
A
C
D
B
A
B
A
A
D
A
C
C
B
C
A
B
B

考试样卷 EXIN Cloud Computing Foundation (CLOUDF.CH)

47

联系 EXIN
www.exin.com