Free CLO-002 Practice Test Questions and Answers (2026) | Cert Empire Practice Questions

Geo-redundancy is the best option for a company that needs to ensure data availability in multiple

datacenters around the world. Geo-redundancy is the duplication of IT infrastructure and data across

geographically dispersed locations, such as different regions or continents1. Geo-redundancy

provides several benefits for cloud-based applications, such as:

High availability: Geo-redundancy can improve the availability of cloud services by reducing the

impact of regional outages, disasters, or network failures. If one datacenter becomes unavailable,

the application can switch to another datacenter that has a copy of the data and continue to

operate2.

Performance: Geo-redundancy can enhance the performance of cloud services by reducing the

latency and bandwidth consumption for users who are located far from the primary datacenter. By

having datacenters closer to the users, the application can deliver faster and more consistent

responses3.

Compliance: Geo-redundancy can help the company comply with regulatory or legal requirements

that mandate data sovereignty or data protection. By having datacenters in different jurisdictions,

the company can store and process data according to the local laws and regulations4.

The other options are not as suitable as geo-redundancy for the company’s needs because:

Auto-scaling: Auto-scaling is the ability of cloud services to automatically adjust the amount of

resources allocated to an application based on the demand and workload. Auto-scaling can improve

the scalability and cost-efficiency of cloud services, but it does not guarantee data availability in

multiple datacenters5.

Disaster recovery: Disaster recovery is the process of restoring the normal operation of an

application after a disruption or failure. Disaster recovery can involve backup, restore, and failover

mechanisms, but it does not necessarily require data replication across multiple datacenters.

High availability: High availability is the degree to which an application can operate without

interruption or downtime. High availability can be achieved by using redundant components, load

balancing, and fault tolerance techniques, but it does not imply data distribution across multiple

datacenters.

Reference:

1: Georedundancy - Open Telekom Cloud

2: Why geo-redundancy for cloud infrastructure is a ‘must have’

3: Use geo-redundancy to design highly available applications

4: Protect your cloud infrastructure with geo-redundancy - Data Centre Review

5: What is Auto Scaling? - Amazon Web Services

: What is Disaster Recovery? - Microsoft Azure

: What is High Availability? - IBM Cloud

A hybrid cloud is a cloud deployment model that has on-premises and off-site data. A hybrid cloud is

a combination of public and private clouds that are connected by a common network and share data

and applications. A hybrid cloud allows an organization to leverage the benefits of both public and

private clouds, such as scalability, cost-efficiency, security, and control. A hybrid cloud also enables

an organization to move workloads and data between the clouds based on performance, availability,

compliance, and cost requirements. For example, an organization can use a private cloud for

sensitive data and applications, and a public cloud for less critical data and applications, or for

temporary or seasonal workloads. A hybrid cloud can also provide backup and disaster recovery

solutions by replicating data and applications between the clouds. Reference: CompTIA Cloud

Essentials+ CLO-002 Study Guide, Chapter 2: Cloud Computing Concepts, page 511. Cloud

Deployment Models: What’s the Difference? | VMware News & Stories2. What are the different

types of cloud computing? | Google Cloud3. 5 Types of Cloud Deployment Models and How to Use

Them - MUO4.

Machine learning is a branch of artificial intelligence that enables computers to learn from data and

make predictions or decisions without being explicitly programmed. Machine learning can be used to

forecast market trends by analyzing historical and current data, identifying patterns and

relationships, and generating models that can extrapolate future outcomes. Machine learning can

also adapt to changing data and environments, and improve its accuracy and performance over

time1.

The other options are not commonly used to forecast market trends:

Serverless computing: This is a type of cloud computing that allows customers to run applications or

functions without managing or provisioning servers. Serverless computing can reduce the

operational and infrastructure costs, and improve the scalability and availability of the applications

or functions. However, serverless computing is not directly related to forecasting market trends,

although it can be used to deploy or run machine learning models or applications2.

Data warehouse: This is a centralized repository that stores structured and historical data from

various sources, such as databases, applications, or files. Data warehouse can support business

intelligence and analytics, and provide consistent and reliable data for reporting and decision

making. However, data warehouse is not a forecasting method, but rather a data storage and

integration system, that can be used as an input for machine learning or other forecasting methods3.

Accelerated computing: This is a type of computing that uses specialized hardware, such as graphics

processing units (GPUs) or field-programmable gate arrays (FPGAs), to accelerate the performance of

certain applications or tasks, such as machine learning, gaming, or video processing. Accelerated

computing can enhance the speed and efficiency of the applications or tasks, and reduce the power

consumption and costs. However, accelerated computing is not a forecasting method, but rather a

computing platform, that can be used to support or enable machine learning or other forecasting

methods4.

Reference:

Machine Learning for Forecasting Market Trends

Serverless Computing for Machine Learning

Data Warehouse for Business Intelligence and Analytics

Accelerated Computing for Machine Learning

A risk analysis is a process of identifying and assessing the potential threats and vulnerabilities that

could affect the confidentiality, integrity, and availability of data and systems. A SaaS-based human

resources portal is a cloud service that provides access to human resources applications and data

over the internet. The human resources department should consider the following requirements

when conducting a risk analysis for this service:

Threats: These are the sources or events that could exploit the vulnerabilities of the service and

cause harm to the data or systems. For example, malicious actors, natural disasters, power outages,

network failures, etc. The human resources department should identify the possible threats that

could affect the SaaS service and evaluate their likelihood and impact.

Vulnerabilities: These are the weaknesses or gaps in the security of the service that could be

exploited by the threats. For example, misconfigurations, outdated software, lack of encryption,

insufficient authentication, etc. The human resources department should identify the existing and

potential vulnerabilities of the SaaS service and evaluate their severity and exposure.

The other options are not relevant for a risk analysis:

Support: This is the assistance or guidance provided by the SaaS provider or a third party to the

customers of the service. Support is not a requirement for a risk analysis, but rather a factor to

consider when selecting or evaluating a SaaS provider.

Chargebacks: These are the fees or penalties imposed by the SaaS provider to the customers for

exceeding the agreed-upon service levels or usage limits. Chargebacks are not a requirement for a

risk analysis, but rather a factor to consider when negotiating or reviewing the service level

agreement (SLA) with the SaaS provider.

Maintenance: This is the process of updating, repairing, or improving the service to ensure its

functionality and performance. Maintenance is not a requirement for a risk analysis, but rather a

responsibility of the SaaS provider that should be specified in the SLA.

Gap analysis: This is a process of comparing the current state and the desired state of a system or a

process and identifying the gaps or differences between them. Gap analysis is not a requirement for

a risk analysis, but rather a tool to use for planning or implementing improvements or changes.

Reference:

CompTIA Cloud Essentials+ CLO-002 Study Guide, Chapter 2: Cloud Concepts and Models, Section

2.3: Cloud Security Concepts, p. 54-55

CompTIA Cloud Essentials+ CLO-002 Study Guide, Chapter 4: Cloud Business Principles, Section 4.1:

Cloud Service Agreements, p. 116-117

SaaS, or software as a service, is a cloud service model that provides ready-to-use, cloud-hosted

application software to customers. Customers do not need to install, manage, or maintain the

software; they simply access it via an internet connection, usually through a web browser. SaaS

applications are typically offered on a subscription or pay-per-use basis. Examples of SaaS

applications include email, CRM, ERP, office productivity, and collaboration tools12.

SaaS is different from the other cloud service models in terms of the level of abstraction and control.

In SaaS, the cloud service provider manages everything from the underlying infrastructure to the

application software, while the customer only controls the application settings and data. In contrast,

in IaaS (infrastructure as a service), the customer has more control and responsibility over the

servers, storage, networking, and operating systems, while the cloud service provider only manages

the physical infrastructure. In PaaS (platform as a service), the customer has control and

responsibility over the applications and data, while the cloud service provider manages the

underlying infrastructure and the development tools and platforms12.

Therefore, when an organization uses a third-party ERP tool as a complete service, it is using the SaaS

cloud service model. The organization does not need to worry about the installation, configuration,

or maintenance of the ERP software; it only needs to access it via the internet and pay for the

usage. The cloud service provider takes care of the rest.

https://www.comptia.org/training/books/cloud-essentials-clo-002-study-guide

https://www.amazon.com/CompTIA-Essentials-Certification-Second-CLO-002/dp/1260461785

Pay-as-you-go is a pricing model in which customers pay only for the resources they consume, such

as compute, storage, network, or software services4. Pay-as-you-go helps transform from a typical

capital expenditure model to an operating expenditure model by eliminating the upfront costs of

purchasing and maintaining physical infrastructure and software licenses5. Pay-as-you-go also

provides flexibility and scalability to adjust the resource consumption according to the changing

business needs6.

Reference:

Consumption and fixed cost models, Microsoft Azure Well-Architected Framework

What is Cloud Elasticity in Cloud Computing?, The Iron.io Blog

CompTIA Cloud Essentials CLO-002 Certification Study Guide, Chapter 2: Business Principles of Cloud

Environments, page 51

Shared responsibility is the cloud principle that states that the security and compliance of the cloud

service are shared between the cloud service provider and the cloud customer. The cloud service

provider is responsible for securing the cloud infrastructure, such as the hardware, software,

networking, and facilities, while the cloud customer is responsible for securing the cloud data,

applications, and access, such as the encryption, backup, authentication, and authorization. By

following the shared responsibility principle, the cloud customer can manage the risk of a network

breach by implementing appropriate security measures and controls on their end, such as firewalls,

antivirus, VPNs, and IAM. The cloud customer can also leverage the security features and services

offered by the cloud service provider, such as encryption, monitoring, auditing, and incident

response. Reference: CompTIA Cloud Essentials+ CLO-002 Certification Study Guide, Chapter 5:

Managing Cloud Security, Section 5.1: Understanding Cloud Security Concepts, Page 1611

According to the CompTIA Cloud Essentials+ Study Guide, risk response is the process of developing

and implementing strategies to address the identified risks in a cloud project1. There are four types

of risk response strategies: acceptance, transference, avoidance, and mitigation1. Each strategy has

its own advantages and disadvantages, depending on the nature and impact of the risk.

Acceptance is the strategy of acknowledging the risk and its consequences, without taking any action

to reduce or eliminate it. This strategy is suitable for risks that have low probability and low impact,

or for risks that are unavoidable or too costly to address. Acceptance can be passive, where no

contingency plans are prepared, or active, where some reserves or fallback options are allocated1.

Transference is the strategy of shifting the risk and its responsibility to a third party, such as a cloud

service provider, an insurance company, or a subcontractor. This strategy is suitable for risks that

have high impact but low probability, or for risks that require specialized skills or resources to handle.

Transference does not eliminate the risk, but it reduces the exposure and liability of the

organization. However, transference also involves some costs and trade-offs, such as loss of control,

dependency, or contractual issues1.

Avoidance is the strategy of eliminating the risk and its causes, by changing the scope, plan, or

design of the cloud project. This strategy is suitable for risks that have high probability and high

impact, or for risks that are unacceptable or intolerable for the organization. Avoidance can be

effective in removing the threat, but it can also result in missed opportunities, reduced benefits, or

increased costs1.

Mitigation is the strategy of reducing the probability and/or impact of the risk, by implementing

some preventive or corrective actions. This strategy is suitable for risks that have moderate

probability and impact, or for risks that can be controlled or minimized. Mitigation can be proactive,

where actions are taken before the risk occurs, or reactive, where actions are taken after the risk

occurs1.

In the given scenario, an organization determines it cannot go forward with a cloud migration due to

the risks involved. This describes the avoidance strategy, as the organization is eliminating the risk

and its causes by changing the plan of the cloud project. The organization is avoiding the potential

negative consequences of the cloud migration, but it is also foregoing the potential benefits and

opportunities of the cloud adoption. Reference: 1: https://www.comptia.org/training/books/cloudessentials-clo-002-study-guide, Chapter 7, page 241-243

Auto-scaling and CDN are two technologies that would help a game company prepare its cloud

infrastructure to support a global distribution workload of a newly released online game.

Auto-scaling is the ability of a cloud service to automatically adjust the amount of resources, such as

compute, storage, or bandwidth, based on the demand or load of the service. Auto-scaling can help a

game company to handle the spikes or fluctuations in the number of players or traffic that may occur

during the launch or peak times of a new online game. Auto-scaling can also help the game company

to optimize the performance, availability, and cost of the cloud service, as it can scale up or down the

resources as needed. Auto-scaling can be triggered by predefined rules, metrics, or schedules, or by

using machine learning or artificial intelligence to predict the demand patterns12

CDN stands for Content Delivery Network, which is a network of distributed servers that deliver

content, such as web pages, images, videos, or games, to the end-users based on their geographic

location, the origin of the content, and the network conditions. CDN can help a game company to

distribute its online game to a global audience, as it can reduce the latency, bandwidth, and load on

the origin server, and improve the user experience, security, and reliability of the content delivery.

CDN can also help the game company to cope with the high volume of requests or traffic that may

occur during the launch or peak times of a new online game. CDN can use various techniques, such

as caching, compression, encryption, or load balancing, to optimize the content delivery34

Reference: CompTIA Cloud Essentials+ Certification Exam Objectives5, CompTIA Cloud Essentials+

Study Guide, Chapter 4: Cloud Storage6, Chapter 6: Cloud Connectivity and Load Balancing7

Managed services are a type of outsourcing administration in the context of the cloud, where a

third-party provider takes over the responsibility of managing and operating cloud services on behalf

of the customer. Managed services can include various functions such as maintenance, monitoring,

security, backup, recovery, and support. Managed services can help customers to reduce costs,

improve performance, enhance security, and focus on their core business. Managed services are

different from other types of support, such as audit, community, or premium support, which do not

involve the transfer of control or ownership of cloud services to a third-party provider. Reference:

CompTIA Cloud Essentials+ Certification Exam Objectives1, CompTIA Cloud Essentials+ Study Guide,

Chapter 2: Business Principles of Cloud Environments2, Outsourcing Cloud Administration

Shadow IT refers to any IT resource used by employees or end users without the IT department’s

approval or oversight. This can include SaaS applications that are not aligned with corporate policy or

governance. Employees or teams may adopt shadow IT for convenience, productivity, or innovation,

but it can also pose significant security risks and compliance concerns. Therefore, it is important for

IT organizations to have visibility and control over the IT devices, software, and services used on the

enterprise network. Reference: : CompTIA Cloud Essentials+ CLO-002 Study Guide, Chapter 1, page

14 : CompTIA Cloud Essentials+ CLO-002 Study Guide, Chapter 1, page 15 : CompTIA Cloud

Essentials+ CLO-002 Study Guide, Chapter 1, page 16Top of Form

Bottom of Form

Cold storage is a type of cloud storage that is designed for data that does not need to be accessible

in a timely manner, such as backup, archive, or historical data. Cold storage offers the lowest cost per

gigabyte of storage, but also the highest cost and latency for data retrieval. Cold storage is suitable

for data that is rarely accessed, has low performance requirements, and can tolerate delays of hours

or days. Cold storage can help a company save on cloud storage costs by reducing the use of more

expensive storage tiers, such as hot, warm, or cool storage. Cold storage can also provide high

durability, security, and scalability for long-term data retention.

Cold storage is different from other storage types, such as block, object, or tape. Block storage is a

type of cloud storage that stores data in fixed-sized blocks that are attached to a virtual machine as a

disk volume. Block storage provides high performance and low latency for data that needs frequent

and random access, such as databases, operating systems, or applications. Object storage is a type of

cloud storage that stores data as objects that consist of data, metadata, and a unique identifier.

Object storage provides high scalability and durability for data that needs simple and direct access,

such as files, images, videos, or documents. Tape storage is a type of physical storage that stores data

on magnetic tapes that are stored in tape libraries or vaults. Tape storage provides low cost and high

capacity for data that needs offline or long-term backup, but also has high retrieval time and risk of

data loss or degradation. Reference: What Is Cold Data Storage? Storing Cold Data in the

Cloud, Amazon S3 Glacier Storage Classes | AWS, The Complete Guide to Cold Data Storage -

NetApp, Hot Storage vs Cold Storage in 2023: Instant Access vs Archiving, How cold storage is

redefining the new data era

Infrastructure as code (IaC) is a DevOps practice that uses code to define and deploy infrastructure,

such as networks, virtual machines, load balancers, and connection topologies1. IaC ensures

consistency, repeatability, and scalability of the infrastructure, as well as enables automation and

orchestration of the provisioning process2. IaC is different from infrastructure templates, which are

predefined configurations that can be reused for multiple deployments3. Infrastructure orchestration

is the process of coordinating multiple automation tasks to achieve a desired state of the

infrastructure4. Infrastructure automation is the broader term for any technique that uses

technology to perform infrastructure tasks without human intervention5.

Reference:

CompTIA Cloud Essentials CLO-002 Certification Study Guide, Chapter 4: Operating in the Cloud,

page 137

What is infrastructure as code (IaC)?, Azure DevOps | Microsoft Learn

CompTIA Cloud Essentials+ Certification Study Guide, Second Edition (Exam CLO-002), Chapter 4:

Operating in the Cloud, page 137

Infrastructure Automation: 7 DevOps Tools for Orchestration, Secrets Management, and More,

Apriorit Blog

Infrastructure As Code Vs Configuration Management, DevOpsCube Blog

A proprietary SaaS solution is one that uses a specific vendor’s software and platform, which may

not be compatible with other vendors’ solutions or industry standards. This can result in vendor lock-

in, which means that the organization becomes dependent on the vendor and cannot easily switch to

another provider or solution without significant costs or risks. Vendor lock-in can also limit the

organization’s ability to negotiate better terms or prices with the vendor. Integration issues can arise

when the proprietary SaaS solution does not support open standards, which are widely accepted and

interoperable protocols or formats that enable different systems or applications to communicate and

exchange data. Open standards can facilitate integration with other cloud or on-premise solutions, as

well as enhance portability and scalability of the cloud services. If the SaaS solution does not adopt

open standards, the organization may face challenges or limitations in integrating the solution with

its existing or future IT environment, which can affect the functionality, performance, and security of

the cloud services. Reference: CompTIA Cloud Essentials+ Certification Study Guide, Second Edition

(Exam CLO-002), Chapter 2: Cloud Concepts, Section 2.3: Cloud Service Models, p. 62-63.

A gap analysis is a process of comparing the current state and the desired state of a system or a

process and identifying the gaps or differences between them. A gap analysis can help an

organization to determine the steps and resources needed to achieve its goals and objectives. A gap

analysis can be used for cloud migration to assess the readiness and suitability of the existing

services and applications for the cloud, and to identify the gaps in terms of performance, security,

functionality, compatibility, and cost. A gap analysis can also help to prioritize the migration tasks

and to estimate the time and effort required for the migration1.

The other options are not appropriate for the recommendation:

Feasibility study: This is a process of evaluating the viability and benefits of a proposed project or

solution. A feasibility study can help an organization to determine whether a project is worth

pursuing, and to identify the potential risks and challenges involved. A feasibility study can be used

for cloud migration to evaluate the benefits and drawbacks of moving to the cloud, and to compare

different cloud service models and providers. A feasibility study can also help to define the scope and

objectives of the migration project2. However, a feasibility study is not sufficient to inform the CIO of

the additional resources necessary for the migration, as it does not provide a detailed analysis of the

gaps and requirements of the existing services and applications.

Future requirements: These are the needs and expectations of the organization and its stakeholders

for the future state of the system or the process. Future requirements can help an organization to

plan and design the system or the process to meet the changing demands and opportunities. Future

requirements can be used for cloud migration to envision the desired outcomes and benefits of

moving to the cloud, and to align the migration strategy with the business strategy and goals3.

However, future requirements are not specific enough to inform the CIO of the additional resources

necessary for the migration, as they do not provide a detailed analysis of the gaps and requirements

of the existing services and applications.

Baseline report: This is a document that records the current state and performance of the system or

the process, and serves as a reference point for measuring the progress and improvement. A

baseline report can help an organization to monitor and evaluate the system or the process, and to

identify the areas of strength and weakness. A baseline report can be used for cloud migration to

measure the performance and functionality of the existing services and applications, and to compare

them with the cloud-based services and applications4. However, a baseline report is not

comprehensive enough to inform the CIO of the additional resources necessary for the migration, as

it does not provide a detailed analysis of the gaps and requirements of the existing services and

applications.

Reference:

Gap Analysis for Cloud Migration

Feasibility Study for Cloud Migration

Future Requirements for Cloud Migration

Baseline Report for Cloud Migration

A statement of work (SOW) is a document that outlines the scope of a project, specific deliverables,

scheduling, and additional specific details from the client/buyer1. A SOW defines what the service

provider will do for the client and how they will do it, as well as the expected outcomes and quality

standards2. A SOW is typically used as a supplement to a master service agreement (MSA) or a

contract that establishes the general terms and conditions of the business relationship3.

Reference:

CompTIA Cloud Essentials CLO-002 Certification Study Guide, Chapter 2: Business Principles of Cloud

Environments, page 65

Statement of Work (SOW): What Is It & How to Write One, The Blueprint

Master Services Agreement vs Statement Of Work, Difference between MSA & SOW, PandaDoc

Infrastructure as a service (IaaS) is a cloud service delivery model that provides on-demand

infrastructure resources to organizations via the cloud, such as compute, storage, networking, and

virtualization4. IaaS is the most suitable cloud service delivery model for patching and updating cloud

resources properly, as it gives the cloud consumer compliance team more control and flexibility over

the operating system, middleware, virtual machines, and any apps or data5. IaaS also enables

automation and orchestration of the provisioning process, as well as scalability and reliability of the

infrastructure6.

Reference:

IaaS vs PaaS vs SaaS vs DBaaS: Cloud Service Models Differences, The App Solutions

PaaS vs IaaS vs SaaS: What’s the difference?, Google Cloud

CompTIA Cloud Essentials CLO-002 Certification Study Guide, Chapter 1: Cloud Computing Concepts,

page 23

Private key encryption, also known as symmetric key encryption, is a method of encrypting data

using a single secret key that is shared by both the sender and the receiver of the message1. Private

key encryption ensures that only the authorized parties who have the same key can access the

encrypted data, while preventing unauthorized parties from reading or modifying it. Therefore,

private key encryption is mainly used to protect the confidentiality of data, which is the security

concern that deals with preventing unauthorized disclosure of information2.

Confidentiality is one of the three main goals of information security, along with integrity and

availability. Integrity refers to the security concern that deals with preventing unauthorized

modification or corruption of information. Availability refers to the security concern that deals with

ensuring timely and reliable access to information2. Authorization, on the other hand, is not a

security concern, but a security mechanism that deals with granting or denying access rights to

information based on predefined policies and rules3.

A cloud developer chooses to use private key encryption for all traffic in a new application. This best

describes the security concern of confidentiality, as the developer wants to ensure that only the

intended recipients can access the encrypted data, while keeping it secret from anyone

else. Reference: 1: https://www.comptia.org/training/books/cloud-essentials-clo-002-study-guide,

Chapter 8, page 274-275 2: https://www.comptia.org/training/books/cloud-essentials-clo-002-studyguide, Chapter 8, page 263-264 3: https://www.comptia.org/training/books/cloud-essentials-clo-

002-study-guide, Chapter 8, page 268-269

Data sovereignty is the most important aspect to consider when defining the company’s needs for a

multicloud model. Data sovereignty refers to the legal and regulatory requirements that apply to the

data based on its location and ownership. Different cloud providers and regions may have different

laws and regulations that affect how the data can be stored, processed, accessed, and transferred.

For example, some countries may require that data generated within their borders must be stored

locally and not transferred to other jurisdictions. Some cloud providers may also have different

policies and practices regarding data security, privacy, and compliance. Therefore, the company

needs to understand the data sovereignty implications of using multiple cloud platforms and ensure

that they comply with the relevant laws and regulations.

Reference: CompTIA Cloud Essentials+ CLO-002 Study Guide, Chapter 2: Cloud Concepts and Models,

Section 2.3: Cloud Deployment Models, p. 66-67.

Object storage is a type of cloud storage that stores data as objects, which consist of data and

metadata. Object storage is ideal for storing large amounts of unstructured data, such as images,

videos, audio, documents, etc. Object storage provides high scalability, durability, and availability, as

well as easy access via HTTP or REST APIs. Object storage is also more cost-effective than other types

of storage, such as block or file storage, which are more suitable for structured data or applications

that require high performance or low latency. Reference: CompTIA Cloud Essentials+ Certification

Exam Objectives1, CompTIA Cloud Essentials+ Study Guide, Chapter 4: Cloud Storage2