Sample Exam
Edition 202011

Copyright © EXIN Holding B.V. 2020. All rights reserved.
EXIN® is a registered trademark.
No part of this publication may be reproduced, stored, utilized or transmitted in any form or by any means, electronic,
mechanical, or otherwise, without the prior written permission from EXIN.

Sample Exam EXIN Cloud Computing Foundation (CLOUDF.EN)

2

Content
Introduction
Sample Exam
Answer Key
Evaluation

4
5
14
29

Sample Exam EXIN Cloud Computing Foundation (CLOUDF.EN)

3

Introduction
This is the EXIN Cloud Computing Foundation (CLOUDF.EN) sample exam. The Rules andRegulations for EXIN’s examinations apply to this exam.
This exam consists of 40 multiple-choice questions. Each multiple-choice question has a numberof possible answers, of which only one is correct.
The maximum number of points that can be obtained for this exam is 40. Each correct answer isworth 1 point. You need 26 points or more to pass the exam.
The time allowed for this exam is 60 minutes.
Good luck!

Sample Exam EXIN Cloud Computing Foundation (CLOUDF.EN)

4

Sample Exam
1 / 40A customer wants to:- run application software- store related data in central computer systems- provide customers or other users access to them through the Internet
What would help do this?
A)
B)
C)
D)

Application architecture
Application management
Cloud computing
IT service management

2 / 40
A cloud infrastructure delivers services to a specific group of organizations and individuals that share
a common goal.
Which cloud deployment model is this?
A)
B)
C)
D)

Community cloudHybrid cloudPrivate cloudPublic cloud

3 / 40What is a key characteristic of PaaS?
A)
B)
C)
D)

No modification of the software
Provides dynamic scaling
Used for remote application development
Vendor with advanced technical knowledge

4 / 40Which protocol forms the basis of the Internet and, therefore, of cloud computing?
A) FTP
B) HTTPC) TCP/IP

Sample Exam EXIN Cloud Computing Foundation (CLOUDF.EN)

5

5 / 40
What is the main role that a network plays in cloud computing?
A) Connecting personal computers to share computing powerB) Connecting personal devices to the shared resources
C) Connecting thin clients to create a pooled resource server

6 / 40What does virtualization achieve?
A) Virtualization creates more security than using a physical machine.
B) Virtualization makes it easier to share resources between users.
C) Virtualization leads to better LAN and WAN utilization.

7 / 40Application service providers (ASPs) offered an application over a network. The application was not
owned by the business.
What is this an early example of?
A)
B)
C)
D)

ArpanetMainframes
Managed services
Virtual private networks (VPN)

8 / 40What is an example of a single-purpose environment?
A) An accounting system on a private serverB) An application to share documents over the Internet
C) An interface to a large online storage application

9 / 40What is not a key characteristic of a multi-purpose architecture?
A)
B)
C)
D)

Interoperable layers
Multi-tiered
Portability
Security

Sample Exam EXIN Cloud Computing Foundation (CLOUDF.EN)

6

10 / 40
What does the abbreviation SOA stand for?
A)
B)
C)
D)

Service-organized application
Service-organized architecture
Service-oriented application
Service-oriented architecture

11 / 40
What is an environment-related benefit of cloud computing?
A)
B)
C)
D)

Lower bandwidth requirements
Lower Internet dependency
Lower levels of data protection
Lower power consumption

12 / 40
What is not a limitation of cloud computing?
A) Concerns about data protectionB) Compliance with local laws
C) Total costs of ownership (TCO)

13 / 40
Flexibility can be considered both a benefit and a concern of cloud computing.
Which aspect is a concern?
A)
B)
C)
D)

The absence of application customization
The immediate fulfilment of new business needs
The location independence for access
The speed of implementation

14 / 40
What ensures the interoperability of cloud computing?
A) Multiple system integrators
B) Single cloud computing vendor
C) Standardized protocols

Sample Exam EXIN Cloud Computing Foundation (CLOUDF.EN)

7

15 / 40
What are the hardware components of a local cloud environment?
A) - Blade server arrays- LAN- Storage area network (SAN)- Network attached storage (NAS)- Backup and restore solution- Load balancerB) - Cloud automation software- Virtualization software- Cloud application software- Database software- Middleware- Operating systems
C) - On-demand self-service- Broad network access- Resource pooling- Rapid elasticity and scalability- Measured service- Multi-tenancy

16 / 40
What is one of the key building blocks for a VPN?
A)
B)
C)
D)

AuditsClustering
Denial of service
IP tunneling

17 / 40Which measure contributes most to data protection in cloud environments?
A) FailoverB) Role-based user profiles
C) Service levels

18 / 40Which international standard contains IT service management principles?
A)
B)
C)
D)

COBIT 5ISO/IEC 17788
ISO/IEC 20000
NIST SP800-145

Sample Exam EXIN Cloud Computing Foundation (CLOUDF.EN)

8

19 / 40
How does using standards benefit cloud computing?
A)
B)
C)
D)

Standards ensure compliance.
Standards ensure location independence.
Standards ensure portability.
Standards ensure security.

20 / 40
Service level requirements (SLRs) for public clouds are highly standardized.
Why are they highly standardized?
A)
B)
C)
D)

Because these SLRs are legislated and standardized by ISO/IEC
Because these SLRs are legislated and standardized in the GDPR
Because these SLRs are meant to be used by a large customer baseBecause these SLRs enable a single service level for all services

21 / 40Which process is not a part of service level management?
A)
B)
C)
D)

Configuration management
Human resource management
Service availability management
Service request management

22 / 40
What is required for accessing any cloud application?
A)
B)
C)
D)

The application and client must use the same programming language.
The application must verify the user's identity.
The user must know on which server the application is located.
The user's browser must support the application's features.

23 / 40
To which Open Systems Interconnection (OSI) model layer do HTTP and HTTPS relate?
A)
B)
C)
D)

2 - data link layer
3 - network layer
4 - transport layer
7 - application layer

Sample Exam EXIN Cloud Computing Foundation (CLOUDF.EN)

9

24 / 40
What is a thin client?
A)
B)
C)
D)

A lightweight device optimized for virtualized computing
A name for a desktop computer without a screen
A smartphone with network access and a large processor
A user terminal without a processor or a hard drive

25 / 40
What is not a possible benefit of using mobile applications (apps)?
A)
B)
C)
D)

Mobile apps synchronize e-mail and calendar automatically.
Mobile devices allow access to desktop virtualizations.
Mobile devices heighten the chance of shoulder surfing.
There are many apps available that help staff be productive.

26 / 40
An IT company that creates their own software switches to a PaaS solution.
What benefit does this have for the company?
A)
B)
C)
D)

The marketing department gets an extra platform for marketing.
The sales department can showcase work to clients faster.
The software can be developed without software developers.
The software developers can spend more time on valuable work.

27 / 40
A service provider has taken over a large part of a customer’s IT systems and service management.
How can the service provider best show their customer that they can and will deliver most of thevalue chain?
A)
B)
C)
D)

By addressing issues surrounding sizing and costing infrastructure
By matching service level agreements (SLAs) with customer needs
By providing access to innovative new applications and technology
By showing understanding of service levels through certification

28 / 40
An organization wishes to become a cloud service provider.
Which question must the organization ask themselves before becoming a cloud service provider?
A)
B)
C)
D)

Can freed-up assets be re-used in an efficient and financially viable way?
Do we need personal connections through cellphone data connections?
What are the names of the customer's service desk employees?
What are the provisions when we want to migrate to another provider?

Sample Exam EXIN Cloud Computing Foundation (CLOUDF.EN)

10

29 / 40
Data is compromised due to unauthorized access to the data.
Which threat is this?
A) Account hijackingB) Data breachC) Insecure interfaces and application programming interfaces (APIs)

30 / 40
A business implements two-factor authentication and monitoring of user behavior.
Which risk will these measures help mitigate most directly?
A) Account hijackingB) Data breachC) Insecure interfaces and APIs

31 / 40
A business frequently deals with data breaches due to insider threats.
Which risk-mitigating measure is most effective for this business?
A) Awareness campaigns
B) Designing for securityC) Implement two-factor authentication

32 / 40
What does federated identity management do?
A)
B)
C)
D)

It allows passwords to be used on multiple devices.
It allows users to reset their own passwords.
It ensures passwords are only used once.
It enables the single sign-on (SSO) feature.

33 / 40
Presence and location determine the available services and capabilities.
Which characteristic of identity management is this?
A)
B)
C)
D)

Digital identity
Group management
Role management
Separation of duties

Sample Exam EXIN Cloud Computing Foundation (CLOUDF.EN)

11

34 / 40
The European Parliament and the Council of the European Union have drafted this legislation for dataprotection which came into effect in 2018.
Which legislation is meant?
A)
B)
C)
D)

The CLOUD Act
The Constitution
The GDPR
The UDHR

35 / 40
Free cloud applications may use personal data to provide personalized advertisements.
What should the user be concerned about?
A)
B)
C)
D)

The correctness of their personal data
The integrity of their personal data
The security of their personal information
The usability of their personal data

36 / 40
A business starts using cloud computing solutions. They recalculate their capital expenditure(CAPEX) and operational expenditure (OPEX).
What is the most likely result of this re-calculation?
A)
B)
C)
D)

Both CAPEX and OPEX decrease.
CAPEX decreases and OPEX increases.
CAPEX increases and OPEX decreases.
Both CAPEX and OPEX increase.

37 / 40Which benefit would a start-up company have from moving to cloud computing?
A)
B)
C)
D)

Lower operational support costs
Lower operational expenditures (OPEX)
Shorter implementation times
Shorter use of cloud solutions

38 / 40
Why is a short time to market a benefit of cloud computing?
A)
B)
C)
D)

Increased capacity or new technology can be implemented in a short time.
Market leadership is guaranteed by implementing emerging technologies.
Short time to market enables scalability and elasticity of cloud solutions.
Slower worldwide coverage reduces the risks of short deployment times.

Sample Exam EXIN Cloud Computing Foundation (CLOUDF.EN)

12

39 / 40
A business is researching cloud service providers. They are concerned about cloud security.
Which question addresses this?
A)
B)
C)
D)

Can the cloud services support the business?
How does cloud security level compare to your own?
What are the cloud service billing mechanism and units?
What is the system performance of the cloud solution?

40 / 40
A business has chosen a SaaS solution. They need to monitor the cloud service provider's financial
performance.
What helps a business monitor financial performance?
A) Weekly technical performance reports
B) Monthly capacity utilization reports
C) Yearly third-party audit reports

Sample Exam EXIN Cloud Computing Foundation (CLOUDF.EN)

13

Answer Key
1 / 40A customer wants to:- run application software- store related data in central computer systems- provide customers or other users access to them through the Internet
What would help do this?
A)
B)
C)
D)

Application architecture
Application management
Cloud computing
IT service managementA) Incorrect. Applications architecture is the art and science of ensuring the suite of applications used byan organization to create the composite architecture is scalable, reliable, available and manageable.
B) Incorrect. Application management is the function responsible for managing applications throughout
their lifecycle.
C) Correct. Cloud computing is a paradigm that enables network access to a scalable and elastic pool ofshareable physical or virtual resources with self-service provisioning and administration on-demand.
(Literature: A, Chapter 1)
D) Incorrect. IT service management is the implementation and management of quality IT services thatmeet the needs of the business.

2 / 40
A cloud infrastructure delivers services to a specific group of organizations and individuals that share
a common goal.
Which cloud deployment model is this?
A)
B)
C)
D)

Community cloudHybrid cloudPrivate cloudPublic cloudA) Correct. A community cloud delivers services to a specific group of organizations or individuals thatshare a common goal. (Literature: A, Chapter 1)
B) Incorrect. A hybrid cloud combines several private and public cloud solutions from several providers
into one IT infrastructure.
C) Incorrect. A private cloud resides on a private network that runs on (part of) a data center that is
exclusively used by one organization.
D) Incorrect. A public cloud provides shared services over the internet, but it is not targeted to a specificgroup of organizations and/or individuals that share a common goal.

Sample Exam EXIN Cloud Computing Foundation (CLOUDF.EN)

14

3 / 40
What is a key characteristic of PaaS?
A)
B)
C)
D)

No modification of the software
Provides dynamic scaling
Used for remote application development
Vendor with advanced technical knowledge

A)
B)
C)
D)

Incorrect. This is a key characteristic of Software as a Service (SaaS).
Incorrect. This is a key characteristic of Infrastructure as a Service (IaaS).
Correct. This is a key characteristic of Platform as a Service (PaaS). (Literature: A, Chapter 1)
Incorrect. This is a key characteristic of Software as a Service (SaaS).

4 / 40Which protocol forms the basis of the Internet and, therefore, of cloud computing?
A) FTP
B) HTTPC) TCP/IP
A) Incorrect. FTP (file transfer protocol) is used in cloud computing, but it is only part of the protocolgroup. It is not the basis of the Internet.
B) Incorrect. HTTP (Hypertext Transfer Protocol) is the protocol that makes sure that HTML istransferred over the Internet. Although it is integral to the Internet, it does not facilitate cloudcomputing.
C) Correct. TCP/IP (transmission control protocol/Internet protocol) is the protocol that Internet is based
on, and therefore, that cloud computing is based on. (Literature: A, Chapter 1)

5 / 40What is the main role that a network plays in cloud computing?
A) Connecting personal computers to share computing powerB) Connecting personal devices to the shared resources
C) Connecting thin clients to create a pooled resource serverA) Incorrect. Although the network connects personal computers, within cloud computing the goal of the
network is not to share computing powers between the personal computers.
B) Correct. The network, possibly the Internet, connects any personal devices in the network to thepooled resource servers. (Literature: A, Chapter 1)
C) Incorrect. Thin clients can be connected through a network to a pooled resource server. The thinclients themselves do not form a pooled resource server.

Sample Exam EXIN Cloud Computing Foundation (CLOUDF.EN)

15

6 / 40
What does virtualization achieve?
A) Virtualization creates more security than using a physical machine.
B) Virtualization makes it easier to share resources between users.
C) Virtualization leads to better LAN and WAN utilization.
A) Incorrect. Virtual machines (VMs) are not less vulnerable than physical machines.
B) Correct. Virtualization makes implementing a multi-tenant system easier. (Literature: A, Chapter 1 and
3)C) Incorrect. There is no difference in network usage.

7 / 40Application service providers (ASPs) offered an application over a network. The application was not
owned by the business.
What is this an early example of?
A)
B)
C)
D)

ArpanetMainframes
Managed services
Virtual private networks (VPN)

A) Incorrect. Arpanet was a predecessor to the Internet.
B) Incorrect. Applications can be hosted on mainframes, but a mainframe is not an application service
provider.
C) Correct. ASPs had set up an early form of managed services. This initiative turned to Software as aService (SaaS) with the advent of the Internet. (Literature: A, Chapter 1)
D) Incorrect. VPNs are used to secure data transfer and used to access shared applications.

8 / 40What is an example of a single-purpose environment?
A) An accounting system on a private serverB) An application to share documents over the Internet
C) An interface to a large online storage applicationA) Correct. This is a single-purpose environment. (Literature: A, Chapter 1)
B) Incorrect. This is an example of a multi-purpose environment.
C) Incorrect. This is an example of a multi-purpose environment.

Sample Exam EXIN Cloud Computing Foundation (CLOUDF.EN)

16

9 / 40
What is not a key characteristic of a multi-purpose architecture?
A)
B)
C)
D)

Interoperable layers
Multi-tiered
Portability
SecurityA) Incorrect. Interoperable layers are a characteristic of a multi-purpose architecture.
B) Incorrect. A multi-purpose architecture has different tiers for database, application and loadbalancing.
C) Incorrect. Portability is a characteristic of a multi-purpose architecture.
D) Correct. Security is not a key characteristic of a multi-purpose architecture. It is a key element of amulti-tenancy architecture. (Literature: A, Chapter 1)

10 / 40
What does the abbreviation SOA stand for?
A)
B)
C)
D)

Service-organized application
Service-organized architecture
Service-oriented application
Service-oriented architectureA) Incorrect. There is no service-organized application. The 'O' stands for 'oriented'. The 'A' stands for'architecture'.
B) Incorrect. There is no such thing as a service-organized architecture. The 'O' stands for 'oriented'.
C) Incorrect. There is no such thing as a service-oriented application. The 'A' stands for 'architecture'.
D) Correct. SOA is the abbreviation of 'service-oriented architecture'. SOA is a collection of services that
communicate with each other. (Literature: A, Chapter 1)

11 / 40
What is an environment-related benefit of cloud computing?
A)
B)
C)
D)

Lower bandwidth requirements
Lower Internet dependency
Lower levels of data protection
Lower power consumption

A)
B)
C)
D)

Incorrect. High bandwidth is needed for cloud computing.
Incorrect. The dependency on the Internet is high.
Incorrect. Data protection is something to be worried about in cloud computing. It is not a benefit.
Correct. Cloud computing typically requires less power than traditional IT. (Literature: A, Chapter 1)

Sample Exam EXIN Cloud Computing Foundation (CLOUDF.EN)

17

12 / 40
What is not a limitation of cloud computing?
A) Concerns about data protectionB) Compliance with local laws
C) Total costs of ownership (TCO)
A) Incorrect. Because data protection is outsourced with the data, data protection is a limitation.
B) Incorrect. Because of the uncertainty where data is stored, legislations are a limitation.
C) Correct. The TCO is just a number. It is not a limitation of cloud computing itself. (Literature: A,
Chapter 1 and 5)

13 / 40
Flexibility can be considered both a benefit and a concern of cloud computing.
Which aspect is a concern?
A)
B)
C)
D)

The absence of application customization
The immediate fulfilment of new business needs
The location independence for access
The speed of implementationA) Correct. Absence of application customization is considered to be a flexibility concern of cloudcomputing. (Literature: A, Chapter 1)
B) Incorrect. Immediate fulfilment of new business needs is mostly considered a benefit, not a concern.
C) Incorrect. Location independence is mostly considered a benefit, not a concern.
D) Incorrect. Speed of implementation is mostly considered a benefit, not a concern.

14 / 40
What ensures the interoperability of cloud computing?
A) Multiple system integrators
B) Single cloud computing vendor
C) Standardized protocols
A) Incorrect. Employing multiple system integrators does not guarantee interoperability.
B) Incorrect. Using a single vendor creates vendor lock-in.
C) Correct. Standards ensure interoperability. (Literature: A, Chapter 3)

Sample Exam EXIN Cloud Computing Foundation (CLOUDF.EN)

18

15 / 40
What are the hardware components of a local cloud environment?
A) - Blade server arrays- LAN- Storage area network (SAN)- Network attached storage (NAS)- Backup and restore solution- Load balancerB) - Cloud automation software- Virtualization software- Cloud application software- Database software- Middleware- Operating systems
C) - On-demand self-service- Broad network access- Resource pooling- Rapid elasticity and scalability- Measured service- Multi-tenancyA) Correct. This is the full list of hardware components of a local cloud environment. (Literature: A,
Chapter 2)
B) Incorrect. This is the full list of software components for a local cloud environment, not the hardware
components.
C) Incorrect. This is the list of cloud computing characteristics in general, not of the hardware
components for a local cloud environment.

16 / 40
What is one of the key building blocks for a VPN?
A)
B)
C)
D)

AuditsClustering
Denial of service
IP tunnelingA) Incorrect. Audits help identify and remedy weak spots and are part of improvement cycles andmonitoring systems.
B) Incorrect. Clustering is the practice of running a single cloud environment on multiple physicalservers.
C) Incorrect. Denial of service is a type of cyberattack.
D) Correct. Key building blocks are: IP tunneling, security, encryption, and AAA. (Literature: A, Chapter 2)

Sample Exam EXIN Cloud Computing Foundation (CLOUDF.EN)

19

17 / 40Which measure contributes most to data protection in cloud environments?
A) FailoverB) Role-based user profiles
C) Service levelsA) Incorrect. Failover ensures there is no system failure. Although this reduces the risk of losing data, it is
not the most effective for increasing data protection.
B) Correct. Role-based user profiles ensure only authorized persons can access data. This increases
data protection most. (Literature: A, Chapter 2)C) Incorrect. Service levels may be used to ensure high performance of the system, but there is a betterway to increase data protection.

18 / 40Which international standard contains IT service management principles?
A)
B)
C)
D)

COBIT 5ISO/IEC 17788
ISO/IEC 20000
NIST SP800-145

A) Incorrect. COBIT 5 is the latest edition of ISACA's globally accepted framework, providing an end-toend business view of the governance of enterprise IT that reflects the central role of information andtechnology in creating value for enterprises.
B) Incorrect. ISO/IEC 17788 provides an overview of cloud computing along with a set of terms anddefinitions. It is a terminology foundation for cloud computing standards.
C) Correct. ISO/IEC 20000-1 is a service management system (SMS) standard. (Literature: A, Chapter 2)D) Incorrect. NIST SP800-145 is the definition of cloud computing according to NIST (American National
Institute of Standards and Technology). It is a recommendation, not an international standard.

19 / 40
How does using standards benefit cloud computing?
A)
B)
C)
D)

Standards ensure compliance.
Standards ensure location independence.
Standards ensure portability.
Standards ensure security.

A) Incorrect. Just having standards does not ensure compliance. Human behavior is not guaranteed byhaving standards.
B) Incorrect. Standards as such do not allow a user to connect to a service from any location.
C) Correct. Standards allow interoperability and portability. (Literature: A, Chapter 2)D) Incorrect. Just having standards does not provide security. Security awareness, firewalls, and virus
scanners are needed.

Sample Exam EXIN Cloud Computing Foundation (CLOUDF.EN)

20

20 / 40
Service level requirements (SLRs) for public clouds are highly standardized.
Why are they highly standardized?
A)
B)
C)
D)

Because these SLRs are legislated and standardized by ISO/IEC
Because these SLRs are legislated and standardized in the GDPR
Because these SLRs are meant to be used by a large customer baseBecause these SLRs enable a single service level for all services

A) Incorrect. ISO/IEC does not standardize SLRs for public clouds.
B) Incorrect. The GDPR does not mention standardized SLRs for public cloud services.
C) Correct. Public cloud SLRs are designed to be used by a large group of customers. (Literature: A,
Chapter 2)D) Incorrect. Public cloud providers can provide multiple service levels.

21 / 40Which process is not a part of service level management?
A)
B)
C)
D)

Configuration management
Human resource management
Service availability management
Service request managementA) Incorrect. Configuration management is part of service level management.
B) Correct. Human resource management is not part of service level management. (Literature: A, Chapter
2)C) Incorrect. Service availability management is part of service level management.
D) Incorrect. Service request management is part of service level management.

22 / 40
What is required for accessing any cloud application?
A)
B)
C)
D)

The application and client must use the same programming language.
The application must verify the user's identity.
The user must know on which server the application is located.
The user's browser must support the application's features.

A) Incorrect. Applications do not exchange programming code with clients.
B) Incorrect. Many public cloud applications do not require users to log in, so no identity verification isrequired.
C) Incorrect. There is no reason for users to know on which server an application is located.
D) Correct. Users access the application through a browser, which should support the features theapplication needs. (Literature: A, Chapter 3)

Sample Exam EXIN Cloud Computing Foundation (CLOUDF.EN)

21

23 / 40
To which Open Systems Interconnection (OSI) model layer do HTTP and HTTPS relate?
A)
B)
C)
D)

2 - data link layer
3 - network layer
4 - transport layer
7 - application layerA) Incorrect. Ethernet and IEEE 802.3 are related to the data link layer.
B) Incorrect. IP (Internet protocol) is related to the network layer.
C) Incorrect. TCP (transmission control protocol) and SSL (secure socket layer) are related to thetransport layer.
D) Correct. HTTP (hypertext transfer protocol) and HTTPS (hypertext transfer protocol secure) are
related to the application layer. (Literature: A, Chapter 3)

24 / 40
What is a thin client?
A)
B)
C)
D)

A lightweight device optimized for virtualized computing
A name for a desktop computer without a screen
A smartphone with network access and a large processor
A user terminal without a processor or a hard driveA) Correct. This is a generic description of a thin client. (Literature: A, Chapter 3)
B) Incorrect. The presence or absence of a screen does not determine if a computer is a thin client ornot.
C) Incorrect. Smart phones may act as a thin client, but this is not a definition.
D) Incorrect. The thin client needs a processor to run the applications it is accessing.

25 / 40
What is not a possible benefit of using mobile applications (apps)?
A)
B)
C)
D)

Mobile apps synchronize e-mail and calendar automatically.
Mobile devices allow access to desktop virtualizations.
Mobile devices heighten the chance of shoulder surfing.
There are many apps available that help staff be productive.

A) Incorrect. This is a benefit of using mobile apps.
B) Incorrect. This is a benefit of using mobile apps.
C) Correct. This is not a benefit. Shoulder surfing means unauthorized persons can see data. That is asecurity risk. (Literature: A, Chapter 3)
D) Incorrect. This is a benefit of using mobile apps.

Sample Exam EXIN Cloud Computing Foundation (CLOUDF.EN)

22

26 / 40
An IT company that creates their own software switches to a PaaS solution.
What benefit does this have for the company?
A)
B)
C)
D)

The marketing department gets an extra platform for marketing.
The sales department can showcase work to clients faster.
The software can be developed without software developers.
The software developers can spend more time on valuable work.

A)
B)
C)
D)

Incorrect. Platform as a Service (PaaS) solutions are not used as a marketing platform.
Incorrect. Platform as a Service (PaaS) is not meant to showcase work to clients.
Incorrect. Platform as a Service (PaaS) does not automatically develop software.
Correct. Software developers use Platform as a Service (PaaS) in the design, build and test stages of
their solutions. As a result, they may be able to reduce the time needed for these activities and do
more valuable work. (Literature: A, Chapter 3)

27 / 40
A service provider has taken over a large part of a customer’s IT systems and service management.
How can the service provider best show their customer that they can and will deliver most of thevalue chain?
A)
B)
C)
D)

By addressing issues surrounding sizing and costing infrastructure
By matching service level agreements (SLAs) with customer needs
By providing access to innovative new applications and technology
By showing understanding of service levels through certificationA) Incorrect. Although the business may need a low price, this does not show insight in the customer's
core business.
B) Correct. Rewriting SLAs to match the customer's business needs shows insight in their core businessprocesses. (Literature: A, Chapter 3)C) Incorrect. This may benefit the business but is not the best way to show insight in the customer's corebusiness.
D) Incorrect. Simply understanding service levels or being certified is not enough to show insight in thecustomer's core business.

Sample Exam EXIN Cloud Computing Foundation (CLOUDF.EN)

23

28 / 40
An organization wishes to become a cloud service provider.
Which question must the organization ask themselves before becoming a cloud service provider?
A)
B)
C)
D)

Can freed-up assets be re-used in an efficient and financially viable way?
Do we need personal connections through cellphone data connections?
What are the names of the customer's service desk employees?
What are the provisions when we want to migrate to another provider?

A) Correct. This is something organizations should ask themselves when becoming a cloud service
provider. (Literature: A, Chapter 3)
B) Incorrect. This is something an organization must decide before choosing a cloud service provider.
C) Incorrect. This is irrelevant.
D) Incorrect. This is a question for the customer. The provider is usually not dependent on anotherprovider.

29 / 40
Data is compromised due to unauthorized access to the data.
Which threat is this?
A) Account hijackingB) Data breachC) Insecure interfaces and application programming interfaces (APIs)
A) Incorrect. Account hijacking may lead to a data breach but is in essence another threat.
B) Correct. This is a description of a data breach. (Literature: A, Chapter 4)C) Incorrect. This threat may pose a security risk, but the description does not fit the threat.

30 / 40
A business implements two-factor authentication and monitoring of user behavior.
Which risk will these measures help mitigate most directly?
A) Account hijackingB) Data breachC) Insecure interfaces and APIs
A) Correct. Strong authentication in combination with monitoring will mitigate the risk of accounthijacking. (Literature: A, Chapter 4)B) Incorrect. Although data breaches may be prevented indirectly, this is not a mitigation that directly
addresses data breaches.
C) Incorrect. Although strong authentication will mitigate some of the risks of insecure interfaces andAPIs, this threat is not addressed directly.

Sample Exam EXIN Cloud Computing Foundation (CLOUDF.EN)

24

31 / 40
A business frequently deals with data breaches due to insider threats.
Which risk-mitigating measure is most effective for this business?
A) Awareness campaigns
B) Designing for securityC) Implement two-factor authenticationA) Correct. Insider threat is usually due to negligence, not malintent. This can be mitigated by awarenesscampaigns. (Literature: A, Chapter 4)B) Incorrect. Even if security is perfectly designed, the threat here is caused by human failure or
negligence.
C) Incorrect. Two-factor authentication is always a good idea but does not address negligence.

32 / 40
What does federated identity management do?
A)
B)
C)
D)

It allows passwords to be used on multiple devices.
It allows users to reset their own passwords.
It ensures passwords are only used once.
It enables the single sign-on (SSO) feature.

A)
B)
C)
D)

Incorrect. That is what password synchronization does.
Incorrect. That is what self-service functions do.
Incorrect. That is what password synchronization does.
Correct. Federated identity management enables SSO. (Literature: A, Chapter 4)

33 / 40
Presence and location determine the available services and capabilities.
Which characteristic of identity management is this?
A)
B)
C)
D)

Digital identity
Group management
Role management
Separation of duties

A) Correct. Digital identity cross-references a location with the presence of a user to determine whichtasks they can perform. (Literature: A, Chapter 4)B) Incorrect. Group management deals with permissions that are not given to people, but to roles.
C) Incorrect. Role management is the IT implementation of a business role.
D) Incorrect. Separation of duties means that more than one person must be involved to complete a task.

Sample Exam EXIN Cloud Computing Foundation (CLOUDF.EN)

25

34 / 40
The European Parliament and the Council of the European Union have drafted this legislation for dataprotection which came into effect in 2018.
Which legislation is meant?
A)
B)
C)
D)

The CLOUD Act
The Constitution
The GDPR
The UDHR

A) Incorrect. The CLOUD Act is an American Act.
B) Incorrect. This refers to the Constitution of the United States. It is concerned with privacy, not withdata protection directly.
C) Correct. The General Data Protection Regulation (GDPR) is concerned with data protection, andindirectly, with privacy. (Literature: A, Chapter 4)D) Incorrect. The Universal Declaration of Human Rights (UDHR) describes the right to privacy but is notconcerned with data protection directly.

35 / 40
Free cloud applications may use personal data to provide personalized advertisements.
What should the user be concerned about?
A)
B)
C)
D)

The correctness of their personal data
The integrity of their personal data
The security of their personal information
The usability of their personal dataA) Incorrect. The cloud service provider is most affected by incorrect data, not the user. Although any
data subject has the right to rectify incorrect data.
B) Incorrect. The cloud service provider will want to ensure data integrity, not the user.
C) Correct. They should worry about how the cloud service provider keeps their personal data secure.
(Literature: A, Chapter 4)D) Incorrect. The cloud service provider may worry about usability, not the user.

Sample Exam EXIN Cloud Computing Foundation (CLOUDF.EN)

26

36 / 40
A business starts using cloud computing solutions. They recalculate their capital expenditure(CAPEX) and operational expenditure (OPEX).
What is the most likely result of this re-calculation?
A)
B)
C)
D)

Both CAPEX and OPEX decrease.
CAPEX decreases and OPEX increases.
CAPEX increases and OPEX decreases.
Both CAPEX and OPEX increase.

A) Incorrect. It is more likely that CAPEX decreases because the business owns and buys less hardware.
B) Correct. Instead of buying hardware, the business is buying services. This shifts the costs fromCAPEX to OPEX. In some cases, buying services may end up more expensive than buying hardware.
(Literature: A, Chapter 5)C) Incorrect. It is the other way around.
D) Incorrect. It is more likely that CAPEX decreases because the business owns and buys less hardware.

37 / 40Which benefit would a start-up company have from moving to cloud computing?
A)
B)
C)
D)

Lower operational support costs
Lower operational expenditures (OPEX)
Shorter implementation times
Shorter use of cloud solutionsA) Incorrect. Operational support costs are not a benefit specific to start-up companies.
B) Incorrect. OPEX is likely to be higher when using a cloud solution.
C) Correct. Cloud solutions have a short implementation time compared to buying hardware and setting
up an infrastructure. This benefits start-up companies especially. (Literature: A, Chapter 4)D) Incorrect. Cloud solutions can be used as long as, or longer than, other solutions.

38 / 40
Why is a short time to market a benefit of cloud computing?
A)
B)
C)
D)

Increased capacity or new technology can be implemented in a short time.
Market leadership is guaranteed by implementing emerging technologies.
Short time to market enables scalability and elasticity of cloud solutions.
Slower worldwide coverage reduces the risks of short deployment times.

A) Correct. Scalability and elasticity bundled with short implementation times for new technology allow afast time to market. (Literature: A, Chapter 5)B) Incorrect. Although a fast time to market increases the chance of market leadership, nothing canguarantee this.
C) Incorrect. Scalability and elasticity enable time to market, not the other way around.
D) Incorrect. Time to market increases worldwide coverage and short deployment times do not carryrisks.

Sample Exam EXIN Cloud Computing Foundation (CLOUDF.EN)

27

39 / 40
A business is researching cloud service providers. They are concerned about cloud security.
Which question addresses this?
A)
B)
C)
D)

Can the cloud services support the business?
How does cloud security level compare to your own?
What are the cloud service billing mechanism and units?
What is the system performance of the cloud solution?

A)
B)
C)
D)

Incorrect. Although this is an important question, it does not address cloud security directly.
Correct. This question will address cloud security. (Literature: A, Chapter 5)
Incorrect. Although this is an important question, it does not address cloud security directly.
Incorrect. Although this is an important question, it does not address cloud security directly.

40 / 40
A business has chosen a SaaS solution. They need to monitor the cloud service provider's financial
performance.
What helps a business monitor financial performance?
A) Weekly technical performance reports
B) Monthly capacity utilization reports
C) Yearly third-party audit reports
A) Incorrect. Technical performance reports help monitor technical performance, not financial
performance.
B) Correct. Capacity utilization reports help monitor financial performance. (Literature: A, Chapter 5)C) Incorrect. Audit reports help monitor compliance.

Sample Exam EXIN Cloud Computing Foundation (CLOUDF.EN)

28

Evaluation
The table below shows the correct answers to the questions in this sample exam.
Question
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20

Answer
C
A
C
C
B
B
C
A
D
D
D
C
A
C
A
D
B
C
C
C

Question
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40

Answer
B
D
D
A
C
D
B
A
B
A
A
D
A
C
C
B
C
A
B
B

Sample Exam EXIN Cloud Computing Foundation (CLOUDF.EN)

29

Contact EXIN
www.exin.com