Question bank
AXP Public Cloud Administrator
30 AXP Public Cloud Administrator questions with the correct answer and a written explanation, organised across 4 exam domains.
- 30 questions
- 4 domains
- Foundation level
certilumQuestion index
Jump straight to any question. Answers and explanations are inline.
Cloud Architecture & Design
8 questions in this domain
- Question 1Single Choice
Which Avaya AXP component is responsible for secure SIP trunking and NAT traversal?
- AAXP Core
- BAvaya Aura Communication Manager
- CAvaya Session Border Controller (SBC)Correct answer
- DAvaya Aura Media Server
Why this is the answer
The SBC secures SIP sessions, performs NAT traversal, and enforces call admission control.
- Question 2Multiple Select
Which two statements about multi-tenancy in Avaya AXP are correct? (Select two)
- AA tenant can contain multiple projectsCorrect answer
- BTraffic between tenants is allowed by default
- CIdentity federation can be configured per tenantCorrect answer
- DAll tenants share the same media resources
Why this is the answer
Tenants can have multiple projects, and identity federation is per tenant. Traffic between tenants is blocked by default, and media resources are logically separated.
- Question 3Interactive
Review the following configuration snippet from an Avaya SBC. Which protocol does the highlighted line permit?
- ASIPCorrect answer
- BRTP
- CHTTPS
- DICMP
Why this is the answer
The line 'allow sip from any to any' explicitly permits SIP traffic.
- Question 4Single Choice
Which AWS storage service is best suited for long-term archival of Avaya call recordings?
- AS3 Standard
- BS3 GlacierCorrect answer
- CAmazon EBS
- DAmazon EFS
Why this is the answer
S3 Glacier is designed for long-term archival with low cost, suitable for call recordings older than 90 days.
- Question 5Multiple Select
Which two characteristics apply to the Bring Your Own License (BYOL) model in Avaya AXP? (Select two)
- ARequires existing Avaya license entitlementsCorrect answer
- BBilling is based on per-minute consumption
- CIncludes annual maintenance feesCorrect answer
- DNo upfront capital expense required
Why this is the answer
BYOL uses existing licenses and still requires maintenance fees. It is not consumption-based and involves upfront capital.
- Question 6Interactive
The following entry appears in the Avaya License Manager. Based on the procedure, what is the next step to apply this license to an AXP tenant?
- AGenerate a cloud activation codeCorrect answer
- BDecommission the on-premises system
- CEnable PAYG billing
- DChange the license type to subscription
Why this is the answer
After verifying the license, the administrator must generate a cloud activation code in the ALM portal, then apply it to the tenant.
- Question 7Single Choice
In which Avaya AXP deployment model does the customer have full control over the underlying virtual machines?
- APublic Cloud (SaaS)
- BPrivate Cloud (IaaS)Correct answer
- CHybrid Cloud
- DMulti-Cloud
Why this is the answer
In Private Cloud (IaaS), the customer controls VMs, networking, and OS. Public cloud is managed by Avaya.
- Question 8Multiple Select
Which two advantages does Direct Connect offer over a Site-to-Site VPN for Avaya workloads? (Select two)
- ALower and consistent latencyCorrect answer
- BLower monthly cost
- CDedicated bandwidth with no internet variabilityCorrect answer
- DFaster provisioning time
Why this is the answer
Direct Connect provides dedicated, low-latency connectivity. VPN is cheaper but has variable performance and slower provisioning.
Operations & Monitoring
7 questions in this domain
- Question 9Single Choice
What does a CloudWatch Alarm evaluate to trigger an action?
- ACloudWatch Metric
- BCloudWatch AlarmCorrect answer
- CCloudWatch Logs
- DAWS Config Rule
Why this is the answer
CloudWatch Alarms evaluate metric thresholds and trigger actions like SNS notifications or Lambda functions.
- Question 10Multiple Select
Which two are key metrics for AXP-specific monitoring beyond CPU? (Choose two.)
- ACallAttemptCountCorrect answer
- BMediaQualityScoreCorrect answer
- CNetworkIn
- DCPUUtilization
Why this is the answer
CallAttemptCount and MediaQualityScore are custom AXP metrics; NetworkIn and CPU are general infrastructure metrics.
- Question 11Interactive
Examine the CloudWatch Logs Insights query. What operation does the filter perform?
- AIt filters logs with ERROR or CRITICAL levelCorrect answer
- BIt counts all log entries
- CIt sorts logs by session ID
- DIt limits results to the last 5 minutes
Why this is the answer
The filter `@message like /(ERROR|CRITICAL)/` selects only log entries containing those severity levels.
- Question 12Single Choice
Which pricing model offers the highest discount for steady-state AXP workloads?
- AOn-Demand
- BReserved InstancesCorrect answer
- CSpot Instances
- DSavings Plans
Why this is the answer
Reserved Instances with 1- or 3-year terms can reduce costs by up to 72% for steady-state workloads.
- Question 13Multiple Select
Which two are required for routine maintenance of Avaya cloud solutions? (Choose two.)
- AApplying security patchesCorrect answer
- BRotating TLS certificatesCorrect answer
- CUpdating agent software on endpoints
- DReplacing hypervisor firmware
Why this is the answer
Patch management and certificate rotation are cloud-side tasks; endpoint agent updates are client-side; hypervisor is provider's responsibility.
- Question 14Interactive
This AWS CLI command creates a resource for cost management. What kind of resource is it?
- AA budget with an alertCorrect answer
- BA CloudWatch alarm
- CA cost allocation tag
- DAn S3 bucket for logs
Why this is the answer
The `aws budgets create-budget` command creates a budget; `NotificationThreshold` sets the alert trigger.
- Question 15Single Choice
What is the purpose of cross-region snapshot copy for Avaya disaster recovery?
- AReduce recovery time objective (RTO)
- BProtect against a regional cloud failureCorrect answer
- CLower storage costs
- DComply with license terms
Why this is the answer
Cross-region copies ensure backups survive a full region outage, which is critical for disaster recovery.
Provisioning & Configuration
9 questions in this domain
- Question 16Single Choice
Which AWS instance family is recommended for Avaya AXP Media Servers handling heavy transcoding?
- AT2
- BC5Correct answer
- CR5
- DM5
Why this is the answer
Compute-optimized instances like C5 provide high network throughput and CPU performance required for media transcoding.
- Question 17Multiple Select
Which of the following correctly describes security groups in AWS? (Choose two.)
- AStatefulCorrect answer
- BStateless
- CApply at subnet level
- DApply at instance levelCorrect answer
Why this is the answer
Security groups are stateful and apply to instances (or ENIs), not subnets.
- Question 18Interactive
Review the IAM trust policy snippet. Which element must be added to prevent the confused deputy problem?
- AExternalIdCorrect answer
- BSourceIp
- CMfaAuth
- DResourceArn
Why this is the answer
An external ID is required to prevent the confused deputy problem in cross-account role assumption.
- Question 19Single Choice
Which deployment strategy involves maintaining two identical environments and switching traffic between them?
- ARolling update
- BBlue-greenCorrect answer
- CCanary
- DIn-place
Why this is the answer
Blue-green deployment uses two environments (blue=current, green=updated) and switches traffic after validation.
- Question 20Multiple Select
Which tools can be used for Infrastructure as Code to provision AXP cloud resources? (Choose two.)
- AAnsible
- BCloudFormationCorrect answer
- CARM templatesCorrect answer
- DAWS CLI
Why this is the answer
CloudFormation (AWS) and ARM templates (Azure) are declarative IaC tools for provisioning resources.
- Question 21Interactive
Based on the security group rule snippet, what Avaya protocol is permitted?
- ASIP over TLSCorrect answer
- BRTP
- CHTTPS
- DSSH
Why this is the answer
Port 5061 is used for SIP over TLS (SIP-TLS).
- Question 22Single Choice
Which protocol uses XML-based assertions for identity federation in Avaya AXP?
- AOIDC
- BSAML 2.0Correct answer
- CLDAP
- DOAuth
Why this is the answer
SAML 2.0 uses XML assertions for federated authentication.
- Question 23Multiple Select
Which steps should be taken before applying an AXP update in the cloud? (Choose two.)
- ATake snapshots of all instancesCorrect answer
- BApply patch immediately
- CBack up tenant configurationsCorrect answer
- DDisable all health checks
Why this is the answer
Backups and snapshots ensure recoverability; tenant configurations must be backed up separately.
- Question 24Interactive
What is the purpose of 'changed_when: false' in the Ansible task?
- AForce the task to always report changed
- BPrevent the task from reporting changesCorrect answer
- COnly run the task when file changes
- DEnsure idempotency
Why this is the answer
changed_when: false makes the task always report 'ok' rather than 'changed', useful for tasks that might not be idempotent.
Security & Compliance
6 questions in this domain
- Question 25Single Choice
What is the key difference between a Security Group and a Network ACL?
- ASGs are stateful; NACLs are statelessCorrect answer
- BSGs are stateless; NACLs are stateful
- CBoth are stateful
- DBoth are stateless
Why this is the answer
Security Groups automatically allow return traffic (stateful), while NACLs require explicit rules in both directions (stateless).
- Question 26Multiple Select
Which two protocols are used to encrypt signaling and media in Avaya AXP?
- ATLSCorrect answer
- BSRTPCorrect answer
- CSSH
- DSSL
Why this is the answer
SIP signaling is encrypted using TLS, while media streams are encrypted using SRTP. SSH is for management, and SSL is outdated.
- Question 27Interactive
Examine the CloudTrail configuration below. Which compliance requirement does it address?
- APCI-DSS Requirement 10.5 (log integrity)Correct answer
- BHIPAA 164.312(b) (audit controls)
- CGDPR Article 30 (records of processing)
- DSOC 2 CC6.1 (logical and physical access)
Why this is the answer
Log file validation ensures tamper-proof logs, directly addressing PCI-DSS Requirement 10.5 for integrity of audit trails.
- Question 28Single Choice
What is the purpose of a permission boundary in cloud IAM for Avaya AXP?
- ASets the maximum permissions a role can haveCorrect answer
- BAllows all actions for the role
- CReplaces the need for an IAM policy
- DGrants full admin access to the role
Why this is the answer
A permission boundary defines the upper limit of permissions an IAM entity can have, preventing privilege escalation.
- Question 29Multiple Select
Which two actions must be taken to ensure CloudTrail logs are tamper-proof?
- AEnable log file validationCorrect answer
- BEncrypt logs with KMS CMKCorrect answer
- CEnable multi-region trail
- DUse default S3 encryption
Why this is the answer
Log file validation generates digests for integrity verification, and KMS encryption protects against unauthorized access and tampering.
- Question 30Interactive
Review the IAM policy below. Which principle does it implement for Avaya AXP tenant isolation?
- AAttribute-Based Access Control (ABAC) with tagsCorrect answer
- BRole-Based Access Control (RBAC) with groups
- CImplicit allow, explicit deny
- DResource-based policies
Why this is the answer
The policy uses a condition on the resource tag 'axp-tenant-id' to enforce tenant-specific access, which is ABAC.
Frequently asked questions
Everything about the AXP Public Cloud Administrator question bank and how to use it.