CompTIA CompTIA Certifications CV0-003 Questions & Answers

• Question 61:

  A large pharmaceutical company needs to ensure it is in compliance with the following requirements:

  1.

  An application must run on its own virtual machine.

  2.

  The hardware the application is hosted on does not change. Which of the following will BEST ensure compliance?

  A. Containers

  B. A firewall

  C. Affinity rules

  D. Load balancers

  Correct Answer: C

  Reference: https://www.cleo.com/blog/knowledge-base-on-premise-vs-cloud

• Question 62:

  A company wants to utilize its private cloud for a new application. The private cloud resources can meet 75% of the application's resource requirements. Which of the following scaling techniques can the cloud administrator implement to accommodate 100% of the application's requirements?

  A. Horizontal

  B. Vertical

  C. Cloud bursting

  D. Autoscaling

  Correct Answer: C

• Question 63:

  A systems administrator is configuring a storage system for maximum performance and redundancy. Which of the following storage technologies should the administrator use to achieve this?

  A. RAID 5

  B. RAID 6

  C. RAID 10

  D. RAID 50

  Correct Answer: C

  The best storage technology to configure for maximum performance and redundancy is RAID 10 (Redundant Array of Independent Disks 10). RAID 10 is a combination of RAID 1 (mirroring) and RAID 0 (striping) that provides both fault tolerance and improved performance. RAID 10 divides and replicates the data across multiple disks in pairs, creating mirrored sets, and then stripes the data across those sets, creating a striped set. RAID 10 can withstand multiple disk failures as long as they are not in the same mirrored set, and can also increase the read and write speed by parallelizing the disk operations. Reference: [CompTIA Cloud+ Certification Exam Objectives], Domain 1.0 Configuration and Deployment, Objective 1.2 Given a scenario involving requirements for deploying an application in the cloud, select an appropriate solution design.

• Question 64:

  A cloud administrator needs to control the connections between a group of web servers and database servers as part of the financial application security review. Which of the following would be the BEST way to achieve this objective?

  A. Create a directory security group

  B. Create a resource group

  C. Create separate VLANs

  D. Create a network security group

  Correct Answer: D

  Reference: https://www.techtarget.com/searchcloudcomputing/definition/cloud-computing

• Question 65:

  A systems administrator needs to modify the replication factors of an automated application container from 3 to 5. Which of the following file types should the systems administrator modify on the master controller?

  A. .yaml

  B. .txt

  C. .conf

  D. .etcd

  Correct Answer: C

  Reference: https://kubernetes.io/docs/concepts/overview/components/#master-components

• Question 66:

  An organization is conducting a performance test of a public application. The following actions have already been completed:

  1.

  The baseline performance has been established

  2.

  A load test has passed.

  3.

  A benchmark report has been generated

  Which of the following needs to be done to conclude the performance test?

  A. Verify the application works well under an unexpected volume of requests.

  B. Assess the application against vulnerabilities and/or misconfiguration exploitation.

  C. Test how well the application can resist a DDoS attack.

  D. Conduct a test with the end users and collect feedback.

  Correct Answer: D

  Reference: https://en.wikipedia.org/wiki/Performance_testing

• Question 67:

  Audit and system logs are being forwarded to a syslog solution. An administrator observes that two application servers have not generated any logs for a period of three days, while others continue to send logs normally. Which of the following BEST explains what is occurring?

  A. There is a configuration failure in the syslog solution

  B. The application servers were migrated to the cloud as IaaS instances

  C. The application administrators have not performed any activity in those servers

  D. There is a local firewall policy restriction on the syslog server

  Correct Answer: C

• Question 68:

  A cloud administrator is evaluating a solution that will limit access to authorized individuals. The solution also needs to ensure the system that connects to the environment meets patching, antivirus and configuration requirements. Which of the following technologies would BEST meet these requirements?

  A. NAC

  B. EDR

  C. IDS

  D. HIPS

  Correct Answer: B

  Reference: https://www.techtarget.com/searchsecurity/tip/Cloud-detection-and-response-CDR-vs-EDR-vs-NDR-vs-XDR

• Question 69:

  A security team is conducting an audit of the security group configurations for the Linux servers that are hosted in a public IaaS The team identifies the following rule as a potential issue:

  

  A cloud administrator, who is working remotely, logs in to the cloud management console and modifies the rule to set the source to "My IP." Shortly after deploying the rule, an internal developer receives the following error message when attempting to log in to the server using SSH: Network error: Connection timed out. However, the administrator is able to connect successfully to the same server using SSH. Which of the following is the BEST option for both the developer and the administrator to access the server from their locations?

  A. Modify the outbound rule to allow the company's external IP address as a source

  B. Add an inbound rule to use the IP address for the company's main office as a source

  C. Modify the inbound rule to allow the company's external IP address as a source

  D. Delete the inbound rule to allow the company's external IP address as a source

  Correct Answer: A

• Question 70:

  A systems administrator has verified that a physical switchport that is connected to a virtualization host is using all available bandwidth. Which of the following would BEST address this issue?

  A. Port mirroring

  B. Link aggregation

  C. Spanning tree

  D. Microsegmentation

  Correct Answer: D