CompTIA CompTIA Certifications CV0-003 Questions & Answers

• Question 161:

  A technician is trying to delete six decommissioned VMs. Four VMs were deleted without issue. However, two of the VMs cannot be deleted due to an error. Which of the following would MOST likely enable the technician to delete the VMs?

  A. Remove the snapshots

  B. Remove the VMs' IP addresses

  C. Remove the VMs from the resource group

  D. Remove the lock from the two VMs

  Correct Answer: D

  Removing the lock from the two VMs is what would most likely enable the technician to delete the VMs that cannot be deleted due to an error. A lock is a feature that prevents certain actions or operations from being performed on a resource or service, such as deleting, modifying, moving, etc. A lock can help to protect a resource or service from accidental or unwanted changes or removals. Removing the lock from the two VMs can enable the technician to delete them by allowing the delete action or operation to be performed on them.

• Question 162:

  A systems administrator is responding to an outage in a cloud environment that was caused by a network-based flooding attack. Which of the following should the administrator configure to mitigate the attack?

  A. NIPS

  B. Network overlay using GENEVE

  C. DDoS protection

  D. DoH

  Correct Answer: C

  DDoS protection is what the administrator should configure to mitigate a network-based flooding attack that caused an outage in a cloud environment. A network- based flooding attack is a type of attack that sends a large amount of network

  traffic or requests to a target system or service, such as a server, website, application, etc., with the intention of overwhelming or exhausting its resources or capacity. A network-based flooding attack can cause an outage in a cloud

  environment by disrupting or degrading the availability or performance of the target system or service, as well as affecting other systems or services that share the same network or infrastructure. DDoS protection is a tool or service that

  detects and prevents network-based flooding attacks, also known as Distributed Denial of Service (DDoS) attacks. DDoS protection can mitigate a network- based flooding attack by providing features such as:

  Filtering: DDoS protection can filter network traffic or requests based on various criteria, such as source, destination, protocol, content, etc., and block or allow them accordingly.

  Diverting: DDoS protection can divert network traffic or requests away from the target system or service to another location or device, such as a scrubbing center, proxy, firewall, etc., where they can be analyzed and processed. Scaling:

  DDoS protection can scale network resources or capacity dynamically and automatically to handle the increased demand or load caused by the network- based flooding attack.

• Question 163:

  A systems administrator is setting up a backup solution to follow the 3-2-1 policy. Currently, the solution is set to back up from the servers to an on-site storage server. Which of the following should the administrator configure to comply with the 3-2-1 policy?

  A. Weekly lull backups, with daily incremental backups

  B. A second on-site storage server for backups

  C. Storage snapshots

  D. An off-site storage server for backups

  Correct Answer: D

  The 3-2-1 backup policy states that there should be three copies of data, stored on two different media, with one copy being off-site. The current backup solution only has one copy of data on one media (the on-site storage server). To comply with the 3- 2-1 policy, the systems administrator should configure an off-site storage server for backups, which will provide another copy of data on a different media and location. Reference: CompTIA Cloud+ Certification Exam Objectives, Domain 3.0 Maintenance, Objective 3.2 Given a scenario, implement backup, restore, disaster recovery and business continuity measures.

• Question 164:

  A systems administrator is troubleshooting performance issues with a Windows VDI environment. Users have reported that VDI performance is very slow at the start of the workday, but the performance is fine during the rest of the day. Which of the following is the MOST likely cause of the issue? (Choose two.)

  A. Disk I/O limits

  B. Affinity rule

  C. CPU oversubscription

  D. RAM usage

  E. Insufficient GPU resources

  F. License issues

  Correct Answer: AC

  Disk I/O limits are restrictions or controls that limit the amount of disk input/output operations per second (IOPS) that a VM can perform on a storage device or system. CPU oversubscription is a situation where more CPU resources are allocated to VMs than are physically available on the host or server. Disk I/O limits and CPU oversubscription are most likely to cause VDI performance being very slow at the start of the workday, but fine during the rest of the day, as they can create bottlenecks or contention for disk and CPU resources when multiple users log in or launch their VDI sessions at the same time, resulting in increased latency or reduced throughput for VDI operations. References: CompTIA Cloud+ Certification Exam Objectives, page 9, section 1.4

• Question 165:

  A systems administrator is troubleshooting issues with network slowness. Traffic analysis shows that uplink bandwidth on the core switch is often sustained at 125Mbps due to a combination of production traffic from other sources. Which of the following would BEST resolve the issue?

  A. Turn off the servers that use the most bandwidth.

  B. Enable QoS to prioritize production traffic.

  C. Increase the buffer size on the core switch.

  D. Reboot the core switch.

  Correct Answer: B

  The best solution to resolve the issue of network slowness caused by high uplink bandwidth utilization on the core switch is to enable quality of service (QoS) to prioritize production traffic over other types of traffic. QoS is a mechanism that allows network administrators to classify and manage network traffic according to its importance, latency, bandwidth, and reliability requirements. By enabling QoS, the core switch can allocate more resources and guarantee better performance for production traffic, while limiting or dropping less critical traffic. Reference: CompTIA Cloud+ Certification Exam Objectives, Domain 4.0 Troubleshooting, Objective 4.1 Given a scenario, troubleshoot connectivity issues related to cloud implementations.

• Question 166:

  A systems administrator needs to implement a service to protect a web application from external attacks. The administrator must have session-based granular control of all HTTP traffic. Which of the following should the administrator configure?

  A. IDS

  B. WAF

  C. DLP

  D. NAC

  Correct Answer: B

  A web application firewall (WAF) is a type of firewall that monitors and filters HTTP traffic to and from a web application. It can detect and block malicious requests, such as SQL injection, cross-site scripting, or denial-of-service attacks. It can also provide session-based granular control of HTTP traffic, such as allowing or denying access based on user identity, location, or behavior. Reference: CompTIA Cloud+ Certification Exam Objectives, Domain 2.0 Security, Objective 2.2 Given a scenario, implement appropriate network security controls for a cloud environment.

  Reference: https://en.wikipedia.org/wiki/Web_application_firewall

• Question 167:

  A company wants to move its environment from on premises to the cloud without vendor lock-in. Which of the following would BEST meet this requirement?

  A. DBaaS

  B. SaaS

  C. IaaS

  D. PaaS

  Correct Answer: C

  IaaS (Infrastructure as a Service) is what would best meet the requirement of moving an environment from on premises to the cloud without vendor lock-in. Vendor lock- in is a situation where customers become dependent on or tied to a specific vendor or provider for their products or services, and face difficulties

• Question 168:

  A systems administrator has received an email from the virtualized environment's alarms indicating the memory was reaching full utilization. When logging in, the administrator notices that one out of a five-host cluster has a utilization of 500GB out of 512GB of RAM. The baseline utilization has been 300GB for that host. Which of the following should the administrator check NEXT?

  A. Storage array

  B. Running applications

  C. VM integrity

  D. Allocated guest resources

  Correct Answer: D

  Allocated guest resources is what the administrator should check next after receiving an email from the virtualized environment's alarms indicating the memory was reaching full utilization and noticing that one out of a five-host cluster has a utilization of 500GB out of 512GB of RAM. Allocated guest resources are the amount of resources or capacity that are assigned or reserved for each guest system or device within a host system or device. Allocated guest resources can affect performance and utilization of host system or device by determining how much resources or capacity are available or used by each guest system or device. Allocated guest resources should be checked next by comparing them with the actual usage or demand of each guest system or device, as well as identifying any overallocation or underallocation of resources that may cause inefficiency or wastage.

• Question 169:

  A cloud solutions architect has received guidance to migrate an application from on premises to a public cloud. Which of the following requirements will help predict the operational expenditures in the cloud?

  A. Average resource consumption

  B. Maximum resource consumption

  C. Minimum resource consumption

  D. Actual hardware configuration

  Correct Answer: B

  Maximum resource consumption is what will help predict the operational expenditures in the cloud for an application that is being migrated from on premises to a public cloud provider. Operational expenditures are the ongoing costs of running

  and maintaining a system or service, such as cloud resources or services. Operational expenditures can vary depending on various factors, such as usage, demand, performance, etc. Maximum resource consumption is the highest amount of

  resources or capacity that are used or consumed by a system or service during peak periods of activity or load. Maximum resource consumption can help predict operational expenditures in the cloud by providing information such as:

  Resource type: This indicates what type of resources are used or consumed by the system or service, such as compute, storage, network, etc. Resource amount: This indicates how much of each resource type are used or consumed by the

  system or service, such as CPU cores, memory, disk space, bandwidth, etc.

  Resource price: This indicates how much each resource type costs in the cloud provider's pricing model, such as per hour, per GB, per Mbps, etc.

• Question 170:

  A cloud administrator is troubleshooting a highly available web application running within three containers behind a Layer 7 load balancer with a WAF inspecting all traffic. The application frequently asks the users to log in again even when the session timeout has not been reached. Which of the following should the cloud administrator configure to solve this issue?

  A. Firewall outbound rules

  B. Firewall inbound rules

  C. Load balancer certificates

  D. Load balancer stickiness

  E. WAF transaction throttling

  Correct Answer: D

  Load balancer stickiness is what the cloud administrator should configure to solve the issue of the application frequently asking the users to log in again even when the session timeout has not been reached for a highly available web application running within three containers behind a Layer 7 load balancer with a WAF inspecting all traffic. Load balancer stickiness is a feature that allows customers to maintain user sessions or connections with the same server or node that provides a service or function, such as a web application, database, etc., even when there are multiple servers or nodes behind a load balancer. Load balancer stickiness can solve the issue by providing benefits such as:

  Consistency: Load balancer stickiness can provide consistency by ensuring that users receive the same service or function from the same server or node throughout their session or connection, without any changes or variations. Performance: Load balancer stickiness can provide performance by reducing the latency or overhead of switching between different servers or nodes during a session or connection, which may cause delays or errors.

  Security: Load balancer stickiness can provide security by preserving and protecting user authentication or authorization information on the same server or node during a session or connection, without exposing or transferring it to other servers or nodes.

  Reference: https://docs.aws.amazon.com/elasticloadbalancing/latest/application/application-load-balancers.html#sticky-sessions