CompTIA CompTIA Certifications CLO-002 Questions & Answers

• Question 161:

  Which of the following is a scientific study of algorithms and statistical models that a computer system integrates to improve performance of a specific task effectively based on information?

  A. loT

  B. Big Data

  C. Machine learning

  D. Blockchain

  Correct Answer: C

  Explanation: Machine learning Comprehensive Explanation: Machine learning is a scientific study of algorithms and statistical models that a computer system integrates to improve performance of a specific task effectively based on information1. Machine learning is a subfield of artificial intelligence that uses data and algorithms to imitate the way that humans learn, gradually improving its accuracy2. Machine learning enables machines to perform tasks that would otherwise only be possible for humans, such as categorizing images, analyzing data, or predicting price fluctuations2. Machine learning algorithms are typically created using frameworks that accelerate solution development, such as TensorFlow and PyTorch2. IoT, or Internet of Things, is a network of physical devices, vehicles, appliances, and other items embedded with sensors, software, and connectivity that enable these objects to exchange data and interact with each other3. IoT is not a scientific study of algorithms and statistical models, but a technological paradigm that connects various devices and systems to the internet. Big Data is a term that refers to the large, complex, and diverse sets of data that are generated at high speed from various sources, such as social media, sensors, web logs, or transactions4. Big Data is not a scientific study of algorithms and statistical models, but a data phenomenon that poses challenges and opportunities for analysis and processing. Blockchain is a system of storing and transferring information in a distributed, decentralized, and secure way using cryptographic principles and peer-to-peer networks5. Blockchain is not a scientific study of algorithms and statistical models, but a data structure and protocol that enables trustless and transparent transactions and records. References : Machine learning -Wikipedia; What Is Machine Learning? Definition, Types, and Examples; What is the Internet of Things (IoT)? | IBM; What is big data? | IBM; What is blockchain? | IBM.

• Question 162:

  A company requires 24 hours' notice when a database is taken offline for planned maintenance. Which of the following policies provides the BEST guidance about notifying users?

  A. Communication policy

  B. Access control policy

  C. Information security policy

  D. Risk management policy

  Correct Answer: A

  Explanation: A communication policy is a set of guidelines that defines how an organization communicates with its internal and external stakeholders, such as employees, customers, partners, and regulators. A communication policy typically covers topics such as the purpose, scope, methods, frequency, tone, and responsibilities of communication within and outside the organization. A communication policy also establishes the standards and expectations for communication quality, accuracy, timeliness, and security. A communication policy is essential for ensuring effective, consistent, and transparent communication across the organization and with its stakeholders. A communication policy can help to avoid misunderstandings, conflicts, and errors that may arise from poor or unclear communication. A communication policy can also help to enhance the reputation, trust, and credibility of the organization. A communication policy provides the best guidance about notifying users when a database is taken offline for planned maintenance, because it specifies how, when, and to whom such notifications should be sent. A communication policy can help to ensure that users are informed in advance, in a clear and courteous manner, about the reason, duration, and impact of the maintenance, and that they are updated on the progress and completion of the maintenance. A communication policy can also help to address any questions, concerns, or feedback that users may have regarding the maintenance. A communication policy can thus help to minimize the disruption and inconvenience caused by the maintenance, and to maintain a positive relationship with the users. A communication policy is different from the other policies listed in the question, which are not directly related to notifying users about planned maintenance. An access control policy defines the rules and procedures for granting or denying access to information systems and resources based on the identity, role, and privileges of the users. An information security policy outlines the principles and practices for protecting the confidentiality, integrity, and availability of information assets and systems from unauthorized or malicious use, disclosure, modification, or destruction. A risk management policy describes the process and criteria for identifying, assessing, prioritizing, mitigating, and monitoring the risks that may affect the organization's objectives, operations, and performance. While these policies are important for ensuring the security and reliability of the database and the organization, they do not provide specific guidance about communicating with users about planned maintenance. References: Cloud Essentials+ CLO-002 Study Guide, Chapter 4: Cloud Service Management, Section 4.2: Explain aspects of change management within a cloud environment, p. 115. What is Cloud Communications? Your Getting Started Guide, Cloud Communications ?Defined. Cloud Computing Policy and Guidelines, 1. Introduction. Define corporate policy for cloud governance, Cloud-based IT policies. DEPARTMENT OF COMMUNICATIONS AND DIGITAL TECHNOLOGIES NO. 306 1 April 2021, 5. Function of cloud security policy and standards, Policy should always address.

• Question 163:

  A web application was deployed, and files are available globally to improve user experience. Which of the following technologies is being used?

  A. SAN

  B. CDN

  C. VDI

  D. API

  Correct Answer: B

  A content delivery network (CDN) is a technology that distributes web content across multiple servers in different geographic locations to improve user experience11. A CDN can be used to deploy web applications and files globally, so that users can access them faster and more reliably from their nearest server12. A CDN also reduces bandwidth consumption and network congestion by caching static content at the edge servers13. References: What is a content delivery network (CDN)?, IBM Where to A/B Test: Front-End vs Back-End vs CDN vs API, Medium Content Delivery Networks (CDNs), MDN Web Docs

• Question 164:

  A business analyst is drafting a risk assessment.

  Which of the following components should be included in the draft? (Choose two.)

  A. Asset management

  B. Database type

  C. Encryption algorithms

  D. Certificate name

  E. Asset inventory

  F. Data classification

  Correct Answer: EF

  Explanation: A risk assessment is a process of identifying, analyzing, and controlling hazards and risks within a situation or a place1. According to the CompTIA Cloud Essentials+ Certification Study Guide, Second Edition (LO-002), a risk assessment should include the following steps2: Identify the assets that are relevant to the scope of the assessment. Assets can be physical, such as hardware and software, or non-physical, such as data and information. Identify the threats and vulnerabilities that could affect the assets. Threats are sources of potential harm, such as natural disasters, cyberattacks, or human errors. Vulnerabilities are weaknesses or gaps in the security or protection of the assets, such as outdated software, misconfigured settings, or lack of encryption. Analyze the likelihood and impact of each threat-vulnerability pair. Likelihood is the probability of a threat exploiting a vulnerability, and impact is the severity of the consequences if that happens. The combination of likelihood and impact determines the level of risk for each pair. Evaluate the risks and prioritize them based on their level. Risks can be categorized as low, medium, high, or critical, depending on the organization's risk appetite and tolerance. Risk appetite is the amount of risk that the organization is willing to accept, and risk tolerance is the degree of variation from the risk appetite that the organization can endure. Implement appropriate controls to mitigate or reduce the risks. Controls are measures or actions that can prevent, detect, or correct the occurrence or impact of a risk. Controls can be administrative, technical, or physical, and they can have different functions, such as preventive, detective, corrective, deterrent, or compensating. Based on these steps, two components that should be included in the draft of a risk assessment are asset inventory and data classification. Asset inventory is the process of identifying and documenting the assets that are within the scope of the assessment1. Data classification is the process of categorizing data based on its sensitivity, value, and criticality to the organization3. These components are essential for determining the potential risks and impacts that could affect the assets and data, and for applying the appropriate controls and protection levels.

  https://www.comptia.org/training/books/cloud-essentials-clo-002-study-guide https://books.google.com/books/about/CompTIA_Cloud_Essentials+_Certification.html?id= S2TNDwAAQBAJ

• Question 165:

  Which of the following documents has the sole purpose of outlining a professional services engagement that governs a proposed cloud migration?

  A. Gap analysis

  B. Statement of work

  C. Feasibility study

  D. Service level agreement

  Correct Answer: B

  Explanation: A statement of work (SOW) is a document that defines the scope, objectives, deliverables, and expectations of a project or contract, such as a cloud migration project or contract. A statement of work can help establish the roles, responsibilities, and expectations of the parties involved in a project or contract, such as the cloud service provider (CSP) and the client. A statement of work can also help specify the details of the project or contract, such as the timeline, budget, quality standards, performance metrics, and payment terms. Therefore, a statement of work has the sole purpose of outlining a professional services engagement that governs a proposed cloud migration. Option B is the correct answer. Gap analysis, feasibility study, and service level agreement are not the best options to describe a document that has the sole purpose of outlining a professional services engagement that governs a proposed cloud migration, as they have different purposes and scopes. Gap analysis is a method of comparing the current state and the desired state of an application or workload, and identifying the gaps or differences between them. Gap analysis can help determine the requirements, challenges, and opportunities of migrating an application or workload to the cloud, but it does not define the scope, objectives, deliverables, and expectations of a cloud migration project or contract. Feasibility study is a comprehensive assessment that evaluates the technical, financial, operational, and organizational aspects of moving an application or workload from one environment to another. Feasibility study can help determine the suitability, viability, and benefits of migrating an application or workload to the cloud, as well as the challenges, risks, and costs involved. However, feasibility study does not define the scope, objectives, deliverables, and expectations of a cloud migration project or contract. Service level agreement (SLA) is a document that defines the level of service and support that a CSP agrees to provide to a client, such as the availability, performance, security, and reliability of the cloud service. SLA can help establish the service standards, expectations, and metrics that a CSP and a client agree to follow, as well as the remedies and penalties for any service failures or breaches. However, SLA does not define the scope, objectives, deliverables, and expectations of a cloud migration project or contract. References: CompTIA Cloud Essentials+ CLO-002 Study Guide, Chapter 7: Cloud Migration, Section 7.1: Cloud Migration Concepts, Page 2031 and What is a Statement of Work (SOW)? | Smartsheet

• Question 166:

  Which of the following is used to connect on-premises resources to resources located in a cloud environment?

  A. Virtual private network

  B. Access control list

  C. Secure file transfer protocol

  D. Software-defined network

  Correct Answer: A

  Explanation: A virtual private network (VPN) is a technology that creates a secure and encrypted connection over a public network, such as the internet, between two or more endpoints1. A VPN can be used to connect on-premises resources to resources located in a cloud environment, such as a virtual private cloud (VPC), which is a private network hosted within a public cloud2. A VPN allows the on-premises and cloud resources to communicate with each other as if they were on the same local network, without exposing the traffic to the public internet. A VPN can help to ensure the privacy, security, and reliability of the data and applications that are transferred between the on-premises and cloud environments3. A VPN is different from the other options listed in the question, which are not directly related to connecting on-premises resources to resources located in a cloud environment. An access control list (ACL) is a list of rules that defines who or what can access a specific resource, such as a file, a folder, a network, or a service. An ACL can help to enforce the security and authorization policies of the resource owner, but it does not create a secure connection between the on-premises and cloud environments. A secure file transfer protocol (SFTP) is a protocol that uses Secure Shell (SSH) to securely transfer files over a network. SFTP can help to protect the files from unauthorized access, modification, or interception, but it does not create a secure connection between the on-premises and cloud environments. A software-defined network (SDN) is a network architecture that decouples the network control and data planes, and allows the network to be programmatically configured and managed by software applications. SDN can help to improve the flexibility, scalability, and performance of the network, but it does not create a secure connection between the on-premises and cloud environments. References: What is a VPN? | How VPNs Work and Why You Need One | AVG, What is a VPN? What is a virtual private cloud (VPC)? - Cloudflare, What is a virtual private cloud (VPC)? What is a VPN and why is it important for cloud computing? | IBM, What is a VPN and why is it important for cloud computing? [What is an Access Control List (ACL)? - Definition from Techopedia], Access Control List (ACL) Definition. [What is SFTP? | How SFTP Works | Cloudflare], What is SFTP? [What is Software-Defined Networking (SDN)? | Cisco], Software-defined networking (SDN).

• Question 167:

  A company has defined a multicloud model.

  Which of the following is the MOST important aspect to consider when defining the company's needs?

  A. Change management

  B. Data sovereignty

  C. Data portability

  D. Data classification

  Correct Answer: B

  Explanation: Data sovereignty is the most important aspect to consider when defining the company's needs for a multicloud model. Data sovereignty refers to the legal and regulatory requirements that apply to the data based on its location and ownership. Different cloud providers and regions may have different laws and regulations that affect how the data can be stored, processed, accessed, and transferred. For example, some countries may require that data generated within their borders must be stored locally and not transferred to other jurisdictions. Some cloud providers may also have different policies and practices regarding data security, privacy, and compliance. Therefore, the company needs to understand the data sovereignty implications of using multiple cloud platforms and ensure that they comply with the relevant laws and regulations. References: CompTIA Cloud Essentials+ CLO-002 Study Guide, Chapter 2: Cloud Concepts and Models, Section 2.3: Cloud Deployment Models, p. 66-67.

• Question 168:

  Which of the following BEST describes decreasing the resources assigned to a system to avoid paying for unused capacity?

  A. Orchestration

  B. Auto-scaling

  C. Right-sizing

  D. Scalability

  Correct Answer: C

  Explanation: Right-sizing is the process of adjusting the resources allocated to a system to match its actual needs and avoid paying for unused capacity. Right-sizing can be done manually or automatically, and it can involve increasing or

  decreasing the resources as needed. Right-sizing is one of the benefits of cloud computing, as it allows for more efficient and cost-effective use of resources. References: CompTIA Cloud Essentials+ (CLO-002) Study Guide, Chapter 2:

  Cloud Computing Concepts, Section 2.2: Cloud Service Models, page 3812

  Learn more:

  1. comptia.org2. comptia.org3. globalknowledge.com4. partners.comptia.org 1of30

• Question 169:

  Which of the following are examples of capital expenditures? (Select TWO).

  A. Cloud consultant fees

  B. Data center wiring

  C. Data center electric bill

  D. Server purchases

  E. Spot instances

  F. Disposable virtual machine

  Correct Answer: BE

  Explanation: Capital expenditures are costs that a business incurs to acquire or improve long-term assets that will provide benefits beyond the current year. Capital expenditures are also known as PPandE, which stands for Property, Plant, and Equipment. Capital expenditures are usually one-time purchases of fixed assets that have a high initial cost and a long useful life. Capital expenditures are recorded as assets on the balance sheet and depreciated over time12 Data center wiring and server purchases are examples of capital expenditures, because they are part of the physical infrastructure that supports the IT operations of a business. Data center wiring and server purchases have a high upfront cost and a long lifespan, and they provide benefits for several years. Data center wiring and server purchases are also recorded as assets on the balance sheet and depreciated over time34 Cloud consultant fees, data center electric bill, spot instances, and disposable virtual machines are not examples of capital expenditures, but rather operating expenses. Operating expenses are costs that a business incurs to run its day-to-day operations and generate revenue. Operating expenses are also known as OPEX, which stands for Operating Expenses. Operating expenses are usually recurring payments for variable or consumable resources that have a low cost and a short useful life. Operating expenses are recorded as expenses on the income statement and deducted from revenue to calculate profit12 Cloud consultant fees are operating expenses, because they are payments for professional services that help a business implement or optimize its cloud strategy. Cloud consultant fees are recurring payments that vary depending on the scope and duration of the project, and they do not result in the acquisition or improvement of any long-term assets. Cloud consultant fees are also recorded as expenses on the income statement and deducted from revenue to calculate profit5 Data center electric bill is an operating expense, because it is a payment for the utility service that powers the data center equipment. Data center electric bill is a recurring payment that varies depending on the consumption and the rate of electricity, and it does not result in the acquisition or improvement of any long-term assets. Data center electric bill is also recorded as an expense on the income statement and deducted from revenue to calculate profit. Spot instances and disposable virtual machines are operating expenses, because they are payments for cloud computing resources that are available on-demand and for a short duration. Spot instances and disposable virtual machines are recurring payments that vary depending on the usage and the market price of the resources, and they do not result in the acquisition or improvement of any long-term assets. Spot instances and disposable virtual machines are also recorded as expenses on the income statement and deducted from revenue to calculate profit. References: 1: https://www.investopedia.com/terms/c/capitalexpenditure.asp 2: https://www.comptia.org/training/books/cloud-essentials-clo-002-study-guide, page 46 3: https://www.cloudzero.com/blog/capex-vs-opex, 1 4: https://learn.microsoft.com/en- us/azure/cloud-adoption-framework/strategy/business-outcomes/fiscal-outcomes, 3 5: https://www.cloudcomputing-news.net/news/2020/jun/04/how-to-choose-the-right-cloud- consulting-partner/ : https://www.datacenterknowledge.com/energy/how-much-energy- does-data-center-consume : https://aws.amazon.com/ec2/spot/ : https://docs.microsoft.com/en-us/azure/virtual-machines/disposable-vm

• Question 170:

  A company decommissioned its testing environment. Which of the following should the company do FIRST to avoid charges?

  A. Detach and delete disposable resources.

  B. Empty the logging directory.

  C. Delete infrastructure as code templates.

  D. Disable alerts and alarms.

  Correct Answer: A

  Explanation: Disposable resources are cloud resources that are not needed for the long- term operation of an application or service, and can be easily created and deleted on- demand. Examples of disposable resources include temporary storage, spot instances, and disposable virtual machines. Disposable resources can help to reduce costs and improve flexibility, but they also incur charges when they are in use or attached to other resources. Therefore, when a company decommissioned its testing environment, it should detach and delete disposable resources first to avoid charges12 Emptying the logging directory is not the best option to avoid charges, because logging directory is a folder that stores the records of events and activities that occur in an application or service. Logging directory can help to monitor and troubleshoot the performance and issues of the application or service, but it does not directly affect the charges of the cloud resources. Emptying the logging directory may also result in the loss of valuable information and insights that can be used for future improvement or analysis. Deleting infrastructure as code templates is not the best option to avoid charges, because infrastructure as code templates are files that define and configure the cloud resources using code or scripts. Infrastructure as code templates can help to automate and standardize the deployment and management of the cloud resources, but they do not directly affect the charges of the cloud resources. Deleting infrastructure as code templates may also make it harder to recreate or modify the cloud resources in the future. Disabling alerts and alarms is not the best option to avoid charges, because alerts and alarms are notifications that are triggered by certain conditions or thresholds that are set for the cloud resources. Alerts and alarms can help to notify and respond to the changes or issues of the cloud resources, but they do not directly affect the charges of the cloud resources. Disabling alerts and alarms may also make it difficult to detect and resolve any problems or anomalies that may occur in the cloud resources. References: 1: https://docs.microsoft.com/en-us/azure/virtual-machines/disposable-vm 2: https://www.comptia.org/training/books/cloud-essentials-clo-002-study-guide, page 46