CompTIA CompTIA Certifications CV0-003 Questions & Answers

• Question 151:

  While investigating network traffic, a cloud administrator discovers the monthly billing has increased substantially. Upon further review, it appears the servers have been compromised, and sensitive files have been exfiltrated. Which of the following can be implemented to maintain data confidentiality?

  A. Hardening

  B. IAM

  C. Encryption

  D. IPSec

  Correct Answer: C

  The best method to maintain data confidentiality after discovering that the servers have been compromised and sensitive files have been exfiltrated is encryption. Encryption is a process that transforms data into an unreadable format using an algorithm and a key. Encryption can protect data at rest, in transit, or in use from unauthorized access, tampering, or leakage. The systems administrator should encrypt the sensitive files and their backups using strong encryption algorithms and keys, and also encrypt the network traffic using protocols such as SSL or IPSec. Reference: CompTIA Cloud+ Certification Exam Objectives, Domain 2.0 Security, Objective 2.5 Given a scenario, apply data security techniques in the cloud.

• Question 152:

  A cloud security analyst is implementing a vulnerability scan of the web server in the DMZ, which is running in an IaaS compute instance. The default inbound firewall settings are as follows:

  

  Which of the following will provide the analyst with the MOST accurate report?

  A. An agent-based scan

  B. A network vulnerability scan

  C. A default and common credentialed scan

  D. A network credentialed vulnerability scan

  Correct Answer: D

  Reference: https://docs.tenable.com/nessus/Content/NessusCredentialedChecks.htm

• Question 153:

  A local bank has all of its infrastructure in the cloud. An update was applied to the main database server at 5:00 a.m. on Monday morning, and the database was then corrupted and unusable. It had to be restored from backup. The last backup was taken the night before at 10:00 p.m. The database was then restored successfully, but seven hours' worth of data was lost, which is deemed unacceptable. Which of the following needs to be updated in the DR plan?

  A. Recovery point objective

  B. Statement of work

  C. Service-level agreement

  D. Recovery time objective

  Correct Answer: A

  The recovery point objective (RPO) is a metric that defines the maximum amount of data that can be lost or acceptable data loss in the event of a disaster or disruption. The RPO determines how frequently the backups should be performed and how far back in time the recovery should go. In this case, the RPO needs to be updated in the DR plan, as seven hours' worth of data loss is deemed unacceptable. The RPO should be reduced to a lower value, such as one hour or less, to minimize the data loss and meet the business requirements. Reference: CompTIA Cloud+ Certification Exam Objectives, Domain 3.0 Maintenance, Objective 3.2 Given a scenario, implement backup, restore, disaster recovery and business continuity measures.

• Question 154:

  An administrator has been informed that some requests are taking a longer time to respond than other requests of the same type. The cloud consumer is using multiple network service providers and is performing link load balancing for bandwidth aggregation. Which of the following commands will help the administrator understand the possible latency issues?

  A. ping

  B. ipconfig

  C. traceroute

  D. netstat

  Correct Answer: C

• Question 155:

  A cloud administrator is responsible for managing a cloud-based content management solution. According to the security policy, any data that is hosted in the cloud must be protected against data exfiltration. Which of the following solutions should the administrator implement?

  A. HIDS

  B. FIM

  C. DLP

  D. WAF

  Correct Answer: C

  DLP (Data Loss Prevention) is what the administrator should implement to protect data against data exfiltration in a cloud-based content management solution. Data exfiltration is a process of transferring or stealing data from a system or network without authorization or permission. Data exfiltration can cause data breaches, leaks, or losses that may affect confidentiality, integrity, or availability of data. DLP is a tool or service that monitors and controls data movement and usage within a system or network. DLP can help to prevent data exfiltration by detecting and blocking any unauthorized or suspicious data transfers or activities, as well as enforcing policies and rules for data classification, encryption, access, etc.

• Question 156:

  A cloud engineer is performing updates to an application and needs to gracefully stop any new transactions from processing before the updates can be applied. Which of the following steps should the engineer take?

  A. Enable maintenance mode from the application dashboard

  B. Wait until after business hours to conduct the change when the system is not in use

  C. Run a kill command on the system to stop the application services

  D. Use a load balancer to redirect traffic to other systems serving the application

  Correct Answer: A

  The best way to gracefully stop any new transactions from processing before applying updates to an application is to enable maintenance mode from the application dashboard. Maintenance mode is a feature that allows temporarily disabling the access or functionality of an application or service while performing maintenance tasks, such as updates, patches, or backups. It also displays a message or notification to the users or clients informing them about the maintenance and the expected downtime. This method will prevent any new transactions from being initiated or interrupted while the updates are being applied. Reference: [CompTIA Cloud+ Certification Exam Objectives], Domain 3.0 Maintenance, Objective 3.1 Given a scenario, apply appropriate changes to meet performance, security and user requirements.

• Question 157:

  A systems administrator is configuring updates on a system. Which of the following update branches should the administrator choose to ensure the system receives updates that are maintained for at least four years?

  A. LTS

  B. Canary

  C. Beta

  D. Stable

  Correct Answer: A

  LTS (Long Term Support) is the update branch that the administrator should choose to ensure the system receives updates that are maintained for at least four years. An update branch is a category or group of updates that have different characteristics or features, such as frequency, stability, duration, etc. An update branch can help customers to choose the type of updates that suit their needs and preferences. LTS is an update branch that provides updates that are stable, reliable, and secure, and are supported for a long period of time, usually four years or more. LTS can help customers who value stability and security over new features or functions, and who do not want to change or upgrade their systems frequently.

• Question 158:

  A systems administrator has been asked to restore a VM from backup without changing the current VM's operating state. Which of the following restoration methods would BEST fit this scenario?

  A. Alternate location

  B. Rolling

  C. Storage live migration

  D. In-place

  Correct Answer: A

• Question 159:

  A systems administrator is troubleshooting performance issues with a VDI environment. The administrator determines the issue is GPU related and then increases the frame buffer on the virtual machines. Testing confirms the issue is solved, and everything is now working correctly. Which of the following should the administrator do NEXT?

  A. Consult corporate policies to ensure the fix is allowed

  B. Conduct internal and external research based on the symptoms

  C. Document the solution and place it in a shared knowledge base

  D. Establish a plan of action to resolve the issue

  Correct Answer: C

  Documenting the solution and placing it in a shared knowledge base is what the administrator should do next after troubleshooting performance issues with a VDI (Virtual Desktop Infrastructure) environment, determining that the issue is GPU (Graphics Processing Unit) related, increasing the frame buffer on the virtual machines, and testing that confirms that the issue is solved and everything is now working correctly. Documenting the solution is a process of recording and describing what was done to fix or resolve an issue, such as actions, steps, methods, etc., as well as why and how it worked. Placing it in a shared knowledge base is a process of storing and organizing documented solutions in a central location or repository that can be accessed and used by others. Documenting the solution and placing it in a shared knowledge base can provide benefits such as:

  Learning: Documenting the solution and placing it in a shared knowledge base can help to learn from past experiences and improve skills and knowledge. Sharing: Documenting the solution and placing it in a shared knowledge base can help

  to share information and insights with others who may face similar issues or situations.

  Reusing: Documenting the solution and placing it in a shared knowledge base can help to reuse existing solutions for future issues or situations.

• Question 160:

  An organization is using multiple SaaS-based business applications, and the systems administrator is unable to monitor and control the use of these subscriptions. The administrator needs to implement a solution that will help the organization apply security policies and monitor each individual SaaS subscription. Which of the following should be deployed to achieve these requirements?

  A. DLP

  B. CASB

  C. IPS

  D. HIDS

  Correct Answer: B

  CASB (Cloud Access Security Broker) is what should be deployed to monitor and control the use of multiple SaaS-based business applications in a cloud environment. SaaS (Software as a Service) is a cloud service model that provides

  customers with access to software applications hosted on remote servers over a network or internet connection. SaaS can provide customers with convenience, flexibility, and scalability, but it may also introduce security risks such as data

  breaches, leaks, losses, etc., especially if customers have multiple SaaS subscriptions from different providers. CASB is a tool or service that acts as an intermediary between customers and SaaS providers. CASB can help to monitor and

  control the use of multiple SaaS subscriptions by providing features such as:

  Visibility: CASB can provide visibility into what SaaS applications are being used, by whom, when, where, how, etc., as well as identify any unauthorized or suspicious activities.

  Compliance: CASB can provide compliance with various laws, regulations, standards, policies, etc., that apply to SaaS applications and data, such as GDPR, HIPAA, PCI DSS, etc., as well as enforce them using rules or actions. Security:

  CASB can provide security for SaaS applications and data by detecting and preventing any threats or attacks, such as malware, phishing, ransomware, etc., as well as protecting them using encryption, authentication, authorization, etc.