--- title: "Multi-Cloud Strategy & Architecture" description: "Master multi-cloud deployments: AWS, Azure, GCP, vendor lock-in prevention, cost optimization, disaster recovery across clouds." author: "Mohammad Abu Mattar" canonical: https://mkabumattar.com/quizzes/post/multicloud-strategy-quiz --- # Multi-Cloud Strategy & Architecture Welcome to the Multi-Cloud Strategy & Architecture Quiz! Test your knowledge on multi-cloud concepts, vendor lock-in, cloud-agnostic design, Kubernetes, multi-cloud storage, disaster recovery, and more. Each question has a timer, so think fast and choose wisely. Good luck! ## Questions ### 1. What is multi-cloud? - **The strategic distribution of IT assets across multiple public cloud providers** ✅ - Multi-cloud: reduce vendor lock-in, cost optimization, disaster recovery, competitive advantages. - A configuration where on-premises infrastructure is connected to a public cloud - This describes a Hybrid Cloud architecture. - The practice of hosting a single application across multiple regions of one provider - This is a Multi-Region deployment within a single cloud provider. - A networking strategy that uses edge locations to bypass the public internet - This refers to Content Delivery Networks (CDNs) or Edge Computing. **Hint:** Think about using multiple cloud providers. ### 2. What is vendor lock-in? - **The high cost and complexity associated with migrating data or services between providers** ✅ - Lock-in: avoid tight coupling to provider services. Multi-cloud reduces risk. - A mandatory licensing agreement required for enterprise-tier cloud support - Vendor lock-in is a technical/economic state, not a specific contract type. - A security feature that prevents unauthorized users from accessing cloud consoles - This refers to Identity and Access Management (IAM). - The use of proprietary hardware to speed up specific database workloads - This describes specialized instances or hardware acceleration. **Hint:** Think about switching costs. ### 3. What is cloud agnostic architecture? - **A design approach that minimizes dependencies on provider-specific APIs and services** ✅ - Agnostic: use containers, standard APIs, avoid proprietary services. Improves portability. - An infrastructure model that relies exclusively on a single provider’s ecosystem - This is the definition of a Cloud-Native or Cloud-Specific architecture. - A performance optimization that caches all application data in local memory - This describes in-memory caching (e.g., Redis). - A regulatory framework for storing sensitive data in government-approved clouds - This refers to Government Cloud compliance (e.g., FedRAMP). **Hint:** Think about portable applications. ### 4. What is Kubernetes for multi-cloud? - **A standard orchestration layer providing a consistent interface across AWS, Azure, and GCP** ✅ - Kubernetes: standard interface across clouds. Reduce lock-in, flexibility. - A specialized virtual machine used to bridge on-premises networks with the cloud - This describes a Virtual Private Gateway or VPN Appliance. - An automated billing tool that consolidates invoices from different cloud providers - This describes a Multi-Cloud Billing or FinOps platform. - A proprietary Google Cloud service that cannot be deployed on other providers - Kubernetes is open-source and portable across any environment. **Hint:** Think about standardized orchestration. ### 5. What is multi-cloud storage? - **The use of standardized APIs to manage objects across S3, Blob, and GCS** ✅ - Cloud-agnostic storage: MinIO, Wasabi. Avoid vendor-specific APIs when possible. - A physical storage array located in a data center shared by all cloud vendors - This describes Co-location (Colo) services, not cloud storage APIs. - An encrypted backup solution that only stores data within a single region - Multi-cloud storage implies cross-provider distribution. - A legacy file-sharing protocol used to connect Linux and Windows VMs - This describes NFS or SMB protocols. **Hint:** Think about data portability. ### 6. What is disaster recovery across clouds? - **A failover strategy where secondary workloads are hosted by a different cloud provider** ✅ - Cross-cloud DR: highest availability. Complex, expensive. For critical systems. - A manual data restoration process performed after a provider datacenter failure - DR strategies aim for automation; manual restoration is a last resort. - The use of redundant power supplies within a single availability zone - This is local hardware redundancy, not cross-cloud DR. - A legal requirement to store customer backups on physical offline tapes - This describes offline archiving or "air-gapped" backups. **Hint:** Think about high reliability. ### 7. What is AWS Outposts? - **A service that extends AWS infrastructure and services to on-premises data centers** ✅ - Outposts: extend AWS to data center, consistent APIs, no redesign. - An edge location used specifically for low-latency video streaming to users - This describes CloudFront Edge locations. - A serverless platform for running AWS Lambda functions in third-party clouds - Lambda is an AWS service; Outposts runs it on AWS-managed hardware on-site. - A networking tool that provides a direct fiber connection to AWS regions - This describes AWS Direct Connect. **Hint:** Think about on-premises AWS. ### 8. What is Azure Stack? - **A portfolio of products that allows Azure services to run on-premises** ✅ - Azure Stack: extend Azure, consistent APIs, governance. - A proprietary database engine used only for Azure’s internal billing systems - Azure Stack is an infrastructure product for customers. - A software development kit for building cross-platform mobile applications - This describes tools like .NET MAUI or Xamarin. - An identity provider that synchronizes local Active Directory with the cloud - This describes Azure AD Connect / Entra Connect. **Hint:** Think about on-premises Azure. ### 9. What is GCP Anthos? - **A managed platform for consistent application management across multiple clouds** ✅ - Anthos: Kubernetes-based, portable, unified management. - A big-data processing engine used to analyze petabytes of log data - This describes Google BigQuery. - A specialized hardware module for accelerating machine learning training - This describes Google Cloud TPU (Tensor Processing Unit). - A global routing service that optimizes traffic for static web content - This describes Cloud CDN or Cloud Load Balancing. **Hint:** Think about Google multi-cloud platform. ### 10. What is cost optimization in multi-cloud? - **Selecting providers based on individual service pricing and performance strengths** ✅ - Service selection: compare pricing, capabilities. Different strengths per provider. - Moving all workloads to a single provider to maximize bulk discount rates - This is single-cloud consolidation, which can be the opposite of multi-cloud optimization. - The use of credit cards to pay for small-scale cloud experiments - This is a payment method, not an architectural optimization strategy. - Restricting developer access to expensive cloud regions via IAM policies - This is cost control/governance, but not service-based optimization. **Hint:** Think about using best pricing per service. ### 11. What is multi-cloud networking? - **The architecture of connecting disparate cloud environments via VPNs or private links** ✅ - Networking: AWS Direct Connect, Azure ExpressRoute, GCP Interconnect. Private, low-latency. - A system for automatically switching between WiFi and Cellular data on mobile - This describes mobile device networking. - The practice of hosting all web servers on the same local subnet - This refers to local network topology. - An encryption standard used for protecting data at rest in a database - This refers to disk or database encryption (AES-256). **Hint:** Think about connecting clouds. ### 12. What is a service mesh in multi-cloud? - **A layer for managing traffic, security, and observability across distributed services** ✅ - Service mesh: Istio, Linkerd. Works with multi-cloud Kubernetes. - A physical network of fiber optic cables connecting global datacenters - This describes the physical backbone of the internet. - A collaborative tool for developers to share code snippets during a build - This describes social coding platforms or internal wikis. - An automated testing framework for validating REST API endpoints - This describes tools like Postman or Jest. **Hint:** Think about traffic management. ### 13. What is federated learning in multi-cloud? - **Machine learning training conducted across clouds without centralizing raw data** ✅ - Federated: privacy-preserving, distributed. Advanced pattern for sensitive data. - A certification program for cloud architects to master all major providers - This describes multi-cloud professional certifications. - The use of a single central server to process all AI model requests - This is the opposite of federated learning (Centralized ML). - An algorithm that automatically categorizes files based on metadata - This describes standard supervised learning or classification. **Hint:** Think about distributed ML. ### 14. What is data sovereignty? - **Legal requirements that data must reside within the jurisdiction where it was collected** ✅ - Sovereignty: GDPR (EU), CCPA (California), regional restrictions. Multi-cloud handles this. - The ability of a cloud provider to delete data without user permission - This refers to data ownership and terms of service policies. - A technical limit on the total amount of data stored in a single region - This describes a storage quota or capacity limit. - The encryption of data using keys that only the cloud provider manages - This describes provider-managed encryption. **Hint:** Think about data location requirements. ### 15. What is multi-cloud identity management? - **The implementation of federated identity and SSO across multiple providers** ✅ - Identity: Okta, Azure AD, SAML for federation. Reduces credential sprawl. - Requiring users to have different passwords for every cloud account - This is a lack of identity management (Credential Sprawl). - An automated system for creating fake user profiles for load testing - This describes a performance testing tool. - A physical keycard system for accessing on-premises server racks - This describes physical security/access control. **Hint:** Think about authentication across providers. ### 16. What is FinOps (Financial Operations)? - **A cultural practice for maximizing cloud business value through cross-team accountability** ✅ - FinOps: chargeback models, reserved instances, tagging strategy. Shared accountability. - A software package used to automate corporate tax filings - FinOps is specific to cloud cost management. - A team of accountants who manually review every cloud invoice - FinOps is a framework involving engineering, not just manual accounting. - An investment strategy for purchasing shares in cloud service providers - This describes stock market investment. **Hint:** Think about cloud cost management. ### 17. What is multi-cloud data consistency? - **Managing state across clouds through event-driven replication and synchronization** ✅ - Consistency: Kafka, DynamoDB Streams, Event Grid. Accept latency for resilience. - The requirement that all cloud providers use the same database engine - Multi-cloud can use different engines; consistency is about data synchronization. - The process of ensuring all code follows the same naming conventions - This describes code linting or style guides. - A hardware standard that ensures all storage drives have the same latency - This describes disk hardware specifications. **Hint:** Think about synchronizing data. ### 18. What is API-first for multi-cloud? - **Standardizing internal interfaces to hide the differences between cloud providers** ✅ - API gateway: Kong, Apigee, AWS API Gateway. Abstracts provider-specific details. - A development rule where mobile apps are built before web applications - This describes "Mobile-First" development. - The practice of charging customers a fee for every API request made - This describes an API monetization model. - Ensuring that every developer has an API key for the Azure portal - This is an access management task. **Hint:** Think about abstraction layers. ### 19. What is Infrastructure as Code (IaC) across clouds? - **Using tools like Terraform to provision resources across multiple providers using code** ✅ - IaC: Terraform (HCL), Pulumi (code), CloudFormation. Provider-agnostic approach. - Writing manual scripts to install updates on local desktop computers - This describes desktop maintenance or patching. - A documentation standard that lists all hardware in a data center - This is an asset inventory, not IaC. - A coding style that emphasizes comments over executable logic - This describes a documentation practice. **Hint:** Think about declarative provisioning. ### 20. What is cloud arbitrage? - **Taking advantage of price differences between clouds for the same resource** ✅ - Arbitrage: AWS spot cheaper, Azure reserved, GCP sustained discounts. Multi-cloud optimizes. - A legal dispute between two major cloud service providers - Arbitration is a legal process; cloud arbitrage is an economic one. - The process of merging two different cloud companies into one - This describes a corporate merger or acquisition. - An encryption method that hides the identity of a cloud user - This describes anonymity or obfuscation. **Hint:** Think about cost advantages. ### 21. What is data residency vs sovereignty? - **Residency concerns the physical location; Sovereignty concerns legal jurisdiction** ✅ - Residency: physical location; Sovereignty: legal jurisdiction. Both matter. - Residency concerns data encryption; Sovereignty concerns data backup - Both concepts are primarily about geographic and legal location. - Residency is for public data; Sovereignty is for private data - Both residency and sovereignty apply to all sensitive data types. - They are identical terms used interchangeably in cloud contracts - They are distinct concepts (Physical location vs. Legal jurisdiction). **Hint:** Think about location compliance. ### 22. What is a service mesh for multi-cloud? - **An infrastructure layer that manages cross-cloud traffic, mTLS, and observability** ✅ - Service mesh: mTLS encryption, traffic policies, circuit breakers. Works across platforms. - A decentralized cloud storage system built on blockchain technology - This describes decentralized storage (e.g., Filecoin). - A specialized team that manually monitors cloud network cables - Networking monitoring is automated; service mesh is software. - A project management tool used to coordinate multi-cloud developers - This describes tools like Jira or Trello. **Hint:** Think about service-to-service communication. ### 23. What is DNS and routing in multi-cloud? - **Using global DNS providers to direct traffic based on health and geolocation** ✅ - DNS routing: direct users to closest cloud, automatic failover. Critical for HA. - A method for translating website URLs into different human languages - This describes localization (L10n) or translation. - The physical routing of data through undersea internet cables - This describes global backbone networking. - A security feature that blocks all traffic from unknown IP addresses - This describes an IP Whitelist or Firewall rule. **Hint:** Think about traffic direction. ### 24. What is multi-cloud disaster recovery? - **Defining RTO/RPO targets for failing over workloads between cloud providers** ✅ - DR: Zerto, Commvault replicate between clouds. Different RTO/RPO for each scenario. - Increasing the size of a database until it can no longer fail - Scaling does not prevent failure; DR is about recovery from failure. - The practice of printing out hard copies of all digital data - This is not a viable cloud disaster recovery strategy. - A marketing strategy used to regain customers after a data breach - This describes crisis management or PR. **Hint:** Think about business continuity. ### 25. What is compliance across clouds? - **Ensuring consistent audit trails and security controls across all providers** ✅ - Compliance: SOC2, ISO27001, HIPAA. Some certifications differ by cloud. - The requirement that all cloud providers charge the same hourly rate - Pricing is not part of regulatory compliance frameworks. - A rule that prohibits using more than one cloud for financial data - Multi-cloud is often used specifically to satisfy compliance and resilience. - The process of checking that all code is written in the same language - This is a development standard, not a compliance requirement. **Hint:** Think about regulatory requirements. ### 26. What is container orchestration in multi-cloud? - **The use of Kubernetes to manage container life cycles across AWS, Azure, and GCP** ✅ - Kubernetes: true portability. Container image runs same on all clouds. - The manual organization of physical server racks in a datacenter - This describes datacenter facility management. - A tool for resizing images so they fit on different screen sizes - This refers to responsive design or image processing. - The process of grouping virtual machines into alphabetical folders - This is a basic organizational task, not orchestration. **Hint:** Think about managing containers. ### 27. What is multi-cloud monitoring and observability? - **Using third-party tools to provide a unified view of health across all clouds** ✅ - Observability: single pane of glass, cross-cloud traces. Vendor tool critical. - Monitoring the personal web browsing habits of cloud engineers - This is an employee privacy concern, not infrastructure observability. - A camera system that records the activity inside cloud datacenters - This describes physical surveillance. - The use of log files to track the total number of cloud providers used - Observability is about system health, performance, and traces. **Hint:** Think about unified visibility. ### 28. What is network latency in multi-cloud? - **The delay introduced when data travels between different cloud provider networks** ✅ - Latency: inter-cloud 50-100ms, intra-cloud 1-5ms. Architecture matters. - The total amount of disk space consumed by a virtual network - Networks do not consume disk space; they consume bandwidth. - A security vulnerability that allows hackers to slow down a website - This describes a Denial of Service (DoS) attack effect. - The physical weight of the cables used to connect two servers - Latency refers to time delay, not physical weight. **Hint:** Think about data transfer time. ### 29. What is the multi-cloud adoption progression? - **An iterative process of lifting, refactoring, and optimizing for each platform** ✅ - Progression: move quick (lift-shift), then refactor, then multi-cloud optimize. Iterative. - Moving every piece of infrastructure to all clouds on the first day - This is high-risk and rarely feasible (Big Bang migration). - The decision to stop using clouds and return to on-premises servers - This is cloud repatriation, not adoption progression. - A training plan for teaching sales teams how to sell cloud services - Adoption progression is a technical and architectural journey. **Hint:** Think about implementation stages. ### 30. What is multi-cloud governance? - **Applying consistent policies and cost guardrails across all cloud environments** ✅ - Governance: Cloudinary, CloudHealth enforce standards. Avoid rogue resources, shadow IT. - A government agency that regulates the pricing of all cloud services - Cloud governance is internal to an organization, not a government body. - A specific programming language used to write cloud security rules - Governance uses various tools/languages (e.g., Rego, HCL, Python). - The process of electing a single leader for a cloud engineering team - This describes team leadership or management structure. **Hint:** Think about policies and controls.