CompTIA CompTIA Cloud+ CV0-002 Questions & Answers

• Question 1:

  A CSA needs to apply new OS security patches to the application cluster server farm in a public cloud provider. The CSA wants to ensure the security patch and configuration are consistent for all members of the server farm. Which of the following deployment practices is the BEST approach to do this?

  A. Update and validate the runbook procedures prior to the patch rollout.

  B. Leverage the infrastructure as code and replace each server farm member.

  C. Configure and patch each server individually and take an OS differential backup.

  D. Snapshot all existing server farm members before installing the patch.

  Correct Answer: D

• Question 2:

  The access control department creates a process to grant elevated administrator privileges for only a certain amount of time for a specific administrator task in an IaaS-hosted VM resource. Which of the following access control method is used?

  A. SSO

  B. Policy-based

  C. Two-factor authentication

  D. RBAC

  Correct Answer: B

• Question 3:

  A communications service operator is planning to start migrating its complex network infrastructure to cloud by NFV, including a pool of media gateway servers, routers, and firewalls. The network elements consist of two controller cards, two redundant drives, and redundant ASIC boards. Which of the following virtualization requirements outlines the correct deployment plan?

  A. The deployment and implementation should be on public cloud space with network elements shared across different functions with central database/storage.

  B. The deployment and implementation should be on hosted private cloud space with a VM for each controller card, ASIC board, and storage mapped to existing databases.

  C. The deployment and implementation should be done in a hybrid model with VMs for controller cards and storage hosted in a private cloud; any functional cards are in a public cloud.

  D. The deployment and implementation should be done using SaaS; only configuration of database storage needs to be considered during deployment.

  Correct Answer: A

• Question 4:

  A new company policy requires all data stored in a private cloud to be encrypted at rest. Which of the following is the MOST efficient way to achieve this requirement with the least performance impact?

  A. Enable encryption of the file systems in VM templates.

  B. Enable encryption on the hypervisor side.

  C. Enable encryption on storage arrays.

  D. Enable encryption using the host's TPM.

  Correct Answer: C

• Question 5:

  The administrator at a SaaS provider wants to improve security of the systems hosting the SaaS application. The administrator has created a script that monitors malware research sites and automatically creates and uploads signatures when new vulnerabilities are announced. To which of the following security services is the script MOST likely to upload these signatures?

  A. Proxy

  B. VPN

  C. Firewall

  D. IDP

  Correct Answer: D

  Reference: https://www.juniper.net/documentation/us/en/software/junos/idp-policy/topics/topic-map/security-idp-signature-database.html

• Question 6:

  A cloud administrator wants to make a web application on the company's private cloud available to multiple remote sites. Which of the following protocols BEST provides IP packet encapsulation?

  A. L2TP

  B. GRE

  C. PPTP

  D. SIP

  Correct Answer: B

• Question 7:

  A company is migrating a website to a CSP to improve availability and performance. After testing the application, the systems engineer realizes the website stores the session state in a database system. Which of the following is the BEST way to ensure a successful migration?

  A. Configure the new website to use the database system.

  B. Migrate to a DBaaS and keep the session state.

  C. Implement a new database system to store the session state.

  D. Deploy a load balancer to store the session state.

  Correct Answer: A

• Question 8:

  A CSA needs to migrate 200TB of on-premises SAN data to a private cloud located in the same region. Which of the following should the CSA analyze? (Choose two.)

  A. VPN restrictions

  B. DNS settings

  C. Network bandwidth

  D. SSO settings

  E. Maintenance windows

  F. Legal restrictions

  Correct Answer: CE

• Question 9:

  Which of the following provides the BEST approach for deploying multiple new firewalls into an IaaS cloud environment with minimal errors?

  A. Manual deployment configuration

  B. Cloud provider installation

  C. Automated and orchestrated deployment

  D. Firewall configuration clone

  Correct Answer: C

• Question 10:

  A systems administrator created several new VMs on a private cloud and wants to ensure the new baseline still meets corporate guidelines. The administrator finds the following new load numbers on the hosts:

  

  If corporate policy requires N+1 host capacity, which of the following metrics is MOST likely to present a problem?

  A. CPU

  B. RAM

  C. DISK

  D. NETWORK

  Correct Answer: C