CompTIA CompTIA Certifications CV0-002 Questions & Answers

• Question 31:

  A company provides IaaS services. Which of the following disk provisioning models for creating standard template should the company use to provision virtual instances?

  A. Thin disk

  B. SCSI disk

  C. SATA disk

  D. Thick disk

  Correct Answer: A

• Question 32:

  All the virtual server instances within an organization's private cloud environment are having trouble logging into the Kerberos realm. Upon investigation, the CSA notices the time stamps are different on the server virtual instances. Which of the following should be the CSA's NEXT step to resolve this issue?

  A. Check the Kerberos token time stamp.

  B. Check the NTP server to see when it last rebooted.

  C. Check the NTP server synchronization.

  D. Check the virtual server time display format.

  Correct Answer: C

• Question 33:

  Cloud developers are experiencing a delay caused by the static code review before each deployment. The security operator and developer must address the issue without cutting corners with security testing. Which of the following would BEST address the delay issue?

  A. Replace the static code analysis with hardening techniques.

  B. Perform the static code analysis earlier in the SDLC.

  C. Perform a penetration test instead of a static code analysis.

  D. Replace the static code analysis with a vulnerability analysis.

  Correct Answer: A

• Question 34:

  A law firm wants to limit log retention to the minimum required by law and regulation. Which of the following is the engineer most likely to do FIRST?

  A. Create a 2GB external hard drive to log all activities.

  B. Configure all systems in scope to log activities in support of company policies.

  C. Configure a daily rotation on all workstations to limit the logs' discovery scope.

  D. Deduplicate, compress, and encrypt all logs before archiving them.

  Correct Answer: B

• Question 35:

  A company is migrating its application to a cloud provider. Six months before going live, a representative from each stakeholder group validated the functionality and performance in the QA environment and did not identify any issues. After going live, the system response time is slower that the testing environment. Which of the following is the MOST likely gap in the testing plan?

  A. The test scenario audiences are different between QA and production.

  B. The application version deployed in production is different than the one deployed in QA.

  C. System configuration testing in QA and production is different.

  D. The test plan in QA is different than the production environment.

  Correct Answer: A

• Question 36:

  A security analyst is reviewing logs and sees a former employee's account has been used to access critical information on a private cloud resource. The analyst examines firewall and IPS logs but does not find traffic that is relevant to the breach. Which of the following is the MOST likely source of the compromise?

  A. External attack

  B. Internal role change

  C. External privilege escalation

  D. Internal attack

  Correct Answer: D

• Question 37:

  A new cloud infrastructure needs to meet the following requirements:

  1.

  Resources are accessible to internal and external clients.

  2.

  Existing hardware assets are utilized.

  3.

  Security controls are managed by company employees.

  Which of the following deployment models BEST fit these requirements?

  A. Public cloud using IPS

  B. Community cloud with IDS

  C. Private cloud with a DMZ

  D. Public cloud using PaaS

  Correct Answer: B

• Question 38:

  Company A acquires Company B. The resources need to be added accordingly to the SaaS environment. Which of the following resources should be changed by the tenant?

  A. Compute

  B. Storage

  C. Users

  D. Application

  Correct Answer: B

• Question 39:

  A CSA is reviewing the deployment of an e-commerce application in a public cloud provider. The CSA wants to ensure the sizing is optimal to keep the cost of the environment down. The available server configurations are as follows:

  

  A review of the current system shows the following utilization information:

  

  Which of the following should the CSA implement to ensure the MOST optimal sizing?

  A. Change the MW01, MW02, and MW03 servers to the MEDIUM instance type.

  B. Change the PROXY01 server to the MEDIUM instance type.

  C. Change the DB01 server to the LARGE instance type.

  D. Change the WEB01 server to the SMALL instance type.

  Correct Answer: D

• Question 40:

  A cloud engineer is migrating an application running on an on-premises server to a SaaS solution. The cloud engineer has validated the SaaS solution, as well as created and tested a migration plan. Which of the following should the cloud engineer do before performing the migration? (Choose two.)

  A. Document in the change management database.

  B. Document the test findings.

  C. Gain approval from the CAB.

  D. Create a rollback plan.

  E. Submit a request for change.

  F. Agree upon a change windows.

  G. Establish a plan of action.

  Correct Answer: DG