CompTIA CompTIA Certifications CV0-003 Questions & Answers

• Question 51:

  During a security incident, an IaaS compute instance is detected to send traffic to a host related to cryptocurrency mining. The security analyst handling the incident determines the scope of the incident is limited to that particular instance. Which of the following should the security analyst do NEXT?

  A. Isolate the instance from the network into quarantine

  B. Perform a memory acquisition in the affected instance

  C. Create a snapshot of the volumes attached to the instance

  D. Replace the instance with another from the baseline

  Correct Answer: C

• Question 52:

  A systems administrator is writing a script for provisioning nodes in the environment. Which of the following would be BEST for the administrator to use to provision the authentication credentials to the script?

  A. password='curl https://10.2.3.4/api/sytemops?op=provision'

  B. password=$env_password

  C. password=$(cat /opt/app/credentials)

  D. password="MyS3cretP4sswordIsVeryL0ng"

  Correct Answer: C

  Reference: https://serverfault.com/questions/850825/passing-a-password-to-a-shell-script

• Question 53:

  A cloud administrator is configuring several security appliances hosted in the private IaaS environment to forward the logs to a central log aggregation solution using syslog. Which of the following firewall rules should the administrator add to allow the web servers to connect to the central log collector?

  A. Allow UDP 161 outbound from the web servers to the log collector

  B. Allow TCP 514 outbound from the web servers to the log collector

  C. Allow UDP 161 inbound from the log collector to the web servers

  D. Allow TCP 514 inbound from the log collector to the web servers

  Correct Answer: B

  Reference: https://serverfault.com/questions/144427/how-to-store-etckeeper-repositories-on-a-central-server-via-git/678371#678371

• Question 54:

  A company is using an IaaS environment. Which of the following licensing models would BEST suit the organization from a financial perspective to implement scaling?

  A. Subscription

  B. Volume-based

  C. Per user

  D. Socket-based

  Correct Answer: D

  Reference: https://www.fingent.com/blog/cloud-service-models-saas-iaas-paas-choose-the-right-one-for-your-business/

• Question 55:

  A cloud security engineer needs to ensure authentication to the cloud provider console is secure. Which of the following would BEST achieve this objective?

  A. Require the user's source IP to be an RFC1918 address

  B. Require the password to contain uppercase letters, lowercase letters, numbers, and symbols

  C. Require the use of a password and a physical token.

  D. Require the password to be ten characters long

  Correct Answer: C

  Reference: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_two-step-verification.html

• Question 56:

  A cloud administrator has deployed a website and needs to improve the site security to meet requirements. The website architecture is designed to have a DBaaS in the back end and autoscaling instances in the front end using a load balancer to distribute the request. Which of the following will the cloud administrator MOST likely use?

  A. An API gateway

  B. An IPS/IDS

  C. A reverse proxy

  D. A WAF

  Correct Answer: D

  Reference: https://aws.amazon.com/elasticloadbalancing/applicationloadbalancer/

• Question 57:

  An administrator manages a file server that has a lot of users accessing and creating many files. As a result, the storage consumption is growing quickly. Which of the following would BEST control storage usage?

  A. Compression

  B. File permissions

  C. User quotas

  D. Access policies

  Correct Answer: C

  Reference: https://www.techtarget.com/searchstorage/Data-storage-management-What-is-it-and-why-is-it-important

• Question 58:

  A product-based company wants to transition to a method that provides the capability to enhance the product seamlessly and keep the development iterations to a shorter time frame. Which of the following would BEST meet these requirements?

  A. Implement a secret management solution

  B. Create autoscaling capabilities

  C. Develop CI/CD tools

  D. Deploy a CMDB tool

  Correct Answer: C

  Reference: https://en.wikipedia.org/wiki/Continuous_integration

• Question 59:

  A company is performing a DR drill and is looking to validate its documentation. Which of the following metrics will determine the service recovery duration?

  A. MTTF

  B. SLA

  C. RTO

  D. RPO

  Correct Answer: C

• Question 60:

  A company is migrating workloads from on premises to the cloud and would like to establish a connection between the entire data center and the cloud environment. Which of the following VPN configurations would accomplish this task?

  A. Site-to-site

  B. Client-to-site

  C. Point-to-site

  D. Point-to-point

  Correct Answer: A