CompTIA CompTIA Certifications CV0-003 Questions & Answers

• Question 221:

  A systems administrator needs to configure a set of policies to protect the data to comply with mandatory regulations.

  Which of the following should the administrator implement to ensure DLP efficiently prevents the exposure of sensitive data in a cloud environment?

  A. Integrity

  B. Versioning

  C. Classification

  D. Segmentation

  Correct Answer: C

  Classification is a process of assigning labels or categories to data based on its sensitivity, value, or risk level. Classification can help implement data loss prevention (DLP) policies by identifying which data needs to be protected and how to protect it according to its classification level. Classification can also help comply with mandatory regulations by ensuring that data is handled and stored appropriately based on its legal or contractual requirements. Classification is essential for DLP to efficiently prevent the exposure of sensitive data in a cloud environment. References: CompTIA Cloud+ Certification Exam Objectives, page 14, section 2.7

• Question 222:

  A company needs to access the cloud administration console using its corporate identity. Which of the following actions would MOST likely meet the requirements?

  A. Implement SSH key-based authentication.

  B. Implement cloud authentication with local LDAP.

  C. Implement multifactor authentication.

  D. Implement client-based certificate authentication.

  Correct Answer: D

  Implementing client-based certificate authentication is what the administrator should do to access the cloud administration console using corporate identity. Client-based certificate authentication is a method of verifying and authenticating users or devices based on digital certificates issued by a trusted authority. Digital certificates are electronic documents that contain information such as identity, public key, expiration date, etc., that can be used to prove one's identity and establish secure communication over a network. Client-based certificate authentication can allow users or devices to access cloud resources or services using their corporate identity without requiring passwords or other credentials.

• Question 223:

  A cloud administrator has built a new private cloud environment and needs to monitor all computer, storage, and network components of the environment.

  Which of the following protocols would be MOST useful for this task?

  A. SMTP

  B. SCP

  C. SNMP

  D. SFTP

  Correct Answer: C

  Simple Network Management Protocol (SNMP) is a protocol that enables monitoring and managing network devices and components in an IP network. SNMP can help monitor all computer, storage, and network components of a private cloud environment, as it can collect and report information about their status, performance, configuration, and events. SNMP can also help troubleshoot and optimize the private cloud environment, as it can detect and alert any issues or anomalies related to the network devices and components. References: CompTIA Cloud+ Certification Exam Objectives, page 15, section 2.8

• Question 224:

  Some VMs that are hosted on a dedicated host server have each been allocated with 32GB of memory. Some of VMs are not utilizing more than 30% of the allocation. Which of the following should be enabled to optimize the memory utilization?

  A. Auto-scaling of compute

  B. Oversubscription

  C. Dynamic memory allocations on guests

  D. Affinity rules in the hypervisor

  Correct Answer: C

  Enabling dynamic memory allocations on guests is the best option to optimize memory utilization for VMs that have been allocated with 32GB of memory but are not utilizing more than 30% of it. Dynamic memory allocation is a feature that allows a VM to adjust its memory usage according to its workload and demand, without requiring a reboot or manual intervention. Dynamic memory allocation can help to improve memory utilization and efficiency by allocating more memory to VMs that need it and releasing memory from VMs that do not need it.

• Question 225:

  A systems administrator is using VMs to deploy a new solution that contains a number of application VMs.

  Which of the following would provide high availability to the application environment in case of hypervisor failure?

  A. Anti-affinity rules

  B. Cold migration

  C. Live migration

  D. Affinity rules

  Correct Answer: A

  Anti-affinity rules are rules or policies that prevent two or more VMs from running on the same host or cluster in a cloud environment. Anti-affinity rules can provide high availability to an application environment in case of hypervisor failure, as they can distribute or separate the application VMs across different hosts or clusters and avoid having a single point of failure. Anti-affinity rules can also improve performance and reliability, as they can reduce contention and load by

  balancing the resource utilization across multiple hosts or clusters. References: CompTIA Cloud+ Certification Exam Objectives, page 10, section 1.5

  Reference: https://www.vmware.com/products/vsphere/high-availability.html

• Question 226:

  A systems administrator is analyzing a report of slow performance in a cloud application. This application is working behind a network load balancer with two VMs, and each VM has its own digital certificate configured. Currently, each VM is consuming 85% CPU on average. Due to cost restrictions, the administrator cannot scale vertically or horizontally in the environment.

  Which of the following actions should the administrator take to decrease the CPU utilization? (Choose two.)

  A. Configure the communication between the load balancer and the VMs to use a VPN.

  B. Move the digital certificate to the load balancer.

  C. Configure the communication between the load balancer and the VMs to use HTTP.

  D. Reissue digital certificates on the VMs.

  E. Configure the communication between the load balancer and the VMs to use HTTPS.

  F. Keep the digital certificates on the VMs.

  Correct Answer: BE

  By moving the digital certificate to the load balancer, the system administrator is offloading the processing of the SSL/TLS encryption to the load balancer and not the VMs. This can help to decrease the CPU utilization on the VMs. Additionally, configuring the communication between the load balancer and the VMs to use HTTPS also eliminates the need to process encryption on the VMs, this will also decrease the CPU utilization on the VMs.

• Question 227:

  The security team for a large corporation is investigating a data breach. The team members are all trying to do the same tasks but are interfering with each other's work.

  Which of the following did the team MOST likely forget to implement?

  A. Incident type categories

  B. A calling tree

  C. Change management

  D. Roles and responsibilities

  Correct Answer: D

  Roles and responsibilities are definitions or descriptions of what each team member or stakeholder is expected to do or perform in a project or process. Roles and responsibilities can help clarify the scope, authority, and accountability of each team member or stakeholder and avoid any confusion or duplication of work. The security team most likely forgot to implement roles and responsibilities when investigating a data breach, as they are all trying to do the same tasks but are interfering with each other's work. Implementing roles and responsibilities can help improve efficiency and effectiveness, as it can ensure that each team member or stakeholder knows what tasks they need to do and how they need to coordinate with others. References: CompTIA Cloud+ Certification Exam Objectives, page 13, section 2.5

• Question 228:

  Users of an enterprise application, which is configured to use SSO, are experiencing slow connection times. Which of the following should be done to troubleshoot the issue?

  A. 1. Perform a memory dump of the OS.

  2.

  Analyze the memory dump.

  3.

  Upgrade the host CPU to a higher clock speed CPU.

  B. 1. Perform a packet capture during authentication.

  2.

  Validate the load-balancing configuration.

  3.

  Analyze the network throughput of the load balancer.

  C. 1. Analyze the storage system IOPS.

  2.

  Increase the storage system capacity.

  3.

  Replace the storage system disks to SSD.

  D. 1. Evaluate the OS ACLs.

  2.

  Upgrade the router firmware.

  3.

  Increase the memory of the router.

  Correct Answer: B

  These are the steps that should be done to troubleshoot the issue of slow connection times for users of an enterprise application that is configured to use SSO (Single Sign-On). SSO is a feature that allows users to access multiple applications or services with one login credential, without having to authenticate separately for each application or service. SSO can improve user experience and security, but it may also introduce performance issues if not configured properly. To troubleshoot the issue, the administrator should perform a packet capture during authentication to analyze the network traffic and identify any delays or errors in the SSO process. The administrator should also validate the load-balancing configuration to ensure that the SSO requests are distributed evenly and efficiently among the available servers or instances. The administrator should also analyze the network throughput of the load balancer to check if there is any congestion or bottleneck that may affect the SSO performance.

• Question 229:

  A SaaS provider wants to maintain maximum availability for its service.

  Which of the following should be implemented to attain the maximum SLA?

  A. A hot site

  B. An active-active site

  C. A warm site

  D. A cold site

  Correct Answer: B

  An active-active site is a type of disaster recovery (DR) site that runs simultaneously with the primary site and handles part of the normal workload or traffic. An active-active site can help maintain maximum availability for a SaaS service, as it can provide load balancing, redundancy, and failover capabilities for the SaaS service in case of an outage or disruption at the primary site. An active-active site can also improve performance and scalability, as it can distribute the workload or traffic across multiple sites and handle increased demand or peak periods. References: CompTIA Cloud+ Certification Exam Objectives, page 10, section 1.5

• Question 230:

  A systems administrator in a large enterprise needs to alter the configuration of one of the finance department's database servers.

  Which of the following should the administrator perform FIRST?

  A. Capacity planning

  B. Change management

  C. Backups

  D. Patching

  Correct Answer: B

  The SA would do the other three regardless of the need to alter configurations. In this situation, the SA would have to present the change to the CCB in order to do the alteration. There is no clarification on whether the change management process has been gone through. Any changes, regardless of how small or big, must go through the change management process. This allows proposals to be heard by end-users, management, and possibly stockholders. From there, it will be reviewed and either approved or denied, with reasons specified. From there, the administrator(s) can do whatever processes are necessary. Change management is a process or procedure that defines the steps, roles, and responsibilities for implementing, documenting, and communicating any changes or updates to a system or service. Change management can help ensure that any changes or updates are done in a controlled and consistent manner, minimizing any risks or impacts to the system or service. Performing change management is the first thing that a systems administrator should do before altering the configuration of one of the finance department's database servers, as it can ensure that the change request is approved, authorized, tested, and verified before applying it to the database server. References: CompTIA Cloud+ Certification Exam Objectives, page 13, section 2.5