CompTIA CompTIA Certifications CV0-003 Questions & Answers

• Question 181:

  A cloud administrator set up a link between the private and public cloud through a VPN tunnel. As part of the migration, a large set of files will be copied. Which of the following network ports are required from a security perspective?

  A. 22, 53, 445

  B. 22, 443, 445

  C. 25, 123, 443

  D. 137, 139, 445

  Correct Answer: B

  These are the network ports that are required from a security perspective to copy a large set of files between the private and public cloud through a VPN tunnel. A VPN (Virtual Private Network) tunnel is a secure and encrypted connection that allows data to be transferred between two networks or locations over the public internet. To copy files between the private and public cloud, the following ports are needed: Port 22: This is the port used by SSH (Secure Shell) protocol, which is a method of remotely accessing and managing cloud resources or systems using a command- line interface. SSH can also be used to securely transfer files using SCP (Secure Copy Protocol) or SFTP (SSH File Transfer Protocol). Port 443: This is the port used by HTTPS (Hypertext Transfer Protocol Secure), which is a protocol that encrypts and secures web traffic. HTTPS can also be used to transfer files using web browsers or tools such as curl or wget. Port 445: This is the port used by SMB (Server Message Block) protocol, which is a protocol that allows file sharing and access over a network. SMB can also be used to transfer files using tools such as robocopy or rsync.

• Question 182:

  A company is preparing a hypervisor environment to implement a database cluster. One of the requirements is to share the disks between the nodes of the cluster to access the same LUN. Which of the following protocols should the company use? (Choose two.)

  A. CIFS

  B. FTP

  C. iSCSI

  D. RAID 10

  E. NFS

  F. FC

  Correct Answer: CF

  These are the protocols that should be used to share the disks between the nodes of a database cluster to access the same LUN (Logical Unit Number). A LUN is an identifier that represents a logical unit of storage, such as a disk, partition,

  volume, etc., that can be accessed by a host system or device. To share the disks between the nodes of a cluster, the following protocols can be used:

  iSCSI (Internet Small Computer System Interface): This is a protocol that allows SCSI commands to be sent over IP networks. iSCSI can enable block-level storage access over a network, which means that the host system or device can

  access the storage as if it were a local disk.

  FC (Fibre Channel): This is a protocol that provides high-speed and low-latency data transfer over optical fiber cables. FC can also enable block-level storage access over a network, which means that the host system or device can access

  the storage as if it were a local disk.

  Reference: https://www.vembu.com/blog/shared-storage-cluster-shared-volumes-configuration/

• Question 183:

  A cloud security analyst needs to ensure the web servers in the public subnet allow only secure communications and must remediate any possible issue. The stateful configuration for the public web servers is as follows:

  

  Which of the following actions should the analyst take to accomplish the objective?

  A. Remove rules 1, 2, and 5.

  B. Remove rules 1, 3, and 4.

  C. Remove rules 2, 3, and 4.

  D. Remove rules 3, 4, and 5.

  Correct Answer: A

  To ensure the web servers in the public subnet allow only secure communications and remediate any possible issue, the analyst should remove rules 1, 2, and 5 from the stateful configuration. These rules are allowing insecure or unnecessary traffic to or from the web servers, which may pose security risks or performance issues. The rules are: Rule 1: This rule allows inbound traffic on port 80 (HTTP) from any source to any destination. HTTP is an unencrypted and insecure protocol that can expose web traffic to interception, modification, or spoofing. The analyst should remove this rule and use HTTPS (port 443) instead, which encrypts and secures web traffic. Rule 2: This rule allows outbound traffic on port 25 (SMTP) from any source to any destination. SMTP is a protocol that is used to send email messages. The web servers in the public subnet do not need to send email messages, as this is not their function. The analyst should remove this rule and block outbound SMTP traffic, which may prevent spamming or phishing attacks from compromised web servers. Rule 5: This rule allows inbound traffic on port 22 (SSH) from any source to any destination. SSH is a protocol that allows remote access and management of systems or devices using a command-line interface. The web servers in the public subnet do not need to allow SSH access from any source, as this may expose them to unauthorized or malicious access. The analyst should remove this rule and restrict SSH access to specific sources, such as the administrator's workstation or a bastion host.

• Question 184:

  A systems administrator created several new VMs on a private cloud and wants to ensure the new baseline still meets corporate guidelines. The administrator finds the following new load numbers on the hosts:

  

  If corporate policy requires N+1 host capacity, which of the following metrics is MOST likely to present a problem?

  A. CPU

  B. RAM

  C. DISK

  D. NETWORK

  Correct Answer: C

• Question 185:

  A company has an SLA of 15ms for storage latency.

  

  Given the above metrics, which of the following is the MOST appropriate change to the environment?

  A. Add computing nodes and data nodes on the storage side.

  B. Add more storage shelves to the current array.

  C. Enable compression on the storage side.

  D. Enable deduplication on the storage side.

  Correct Answer: C

• Question 186:

  A company wants to take advantage of cloud benefits while retaining control of and maintaining compliance with all its security policy obligations. Based on the non-functional requirements, which of the following should the company use?

  A. Hybrid cloud, as use is restricted to trusted customers

  B. IaaS, as the cloud provider has a minimal level of security responsibility

  C. PaaS, as the cloud customer has the most security responsibility

  D. SaaS, as the cloud provider has less security responsibility

  Correct Answer: B

• Question 187:

  A cloud engineer notices on a dashboard that the host is close to reaching maximum capacity for the CPU and memory in the cloud environment, which could cause performance issues. The cloud environment has 100 servers, with 25% of the servers consuming their compute only during peak business hours, 25% consuming half of the allocated resources, and the remaining 50% using the compute during off hours. Which of the following should the engineer perform to

  optimize the efficiency of the compute usage in the cloud?

  A. Add additional CPUs and RAM to the host that is serving the cloud.

  B. Adjust the cloud workload by migrating resource-intensive applications to different hosts.

  C. Add additional hosts to the environment using the cloud management tool.

  D. Enable automatic scaling in the cloud management tool.

  Correct Answer: B

• Question 188:

  A cloud administrator is provisioning five VMs, each with a minimum of 8GB of RAM and a varying load throughout the day. The hypervisor has only 32GB of RAM. Which of the following features should the administrator use?

  A. Memory overcommitment

  B. Thin-provisioned model

  C. Process scheduling

  D. Hyperthreading

  Correct Answer: C

• Question 189:

  A company changed its policy to have seven-year data retention in the public cloud. Which of the following would be the MOST cost-effective way to meet retention requirements?

  A. Site mirroring

  B. Automated archiving

  C. Replication

  D. Third-party sites

  Correct Answer: B

• Question 190:

  A cloud administrator updates the syslog forwarder configuration on a local server in production to use a different port. The development team is no longer receiving the audit logs from that server. However, the security team can retrieve and search the logs for the same server. Which of the following is MOST likely the issue?

  A. The development team is not looking at the correct server when querying for the logs.

  B. The security team has greater permissions than the development team.

  C. The audit logging service has been disabled on the server.

  D. The development team's syslog server is configured to listen on the wrong port.

  Correct Answer: B