CompTIA CompTIA Certifications CV0-004 Questions & Answers

• Question 111:

  A company's website suddenly crashed. A cloud engineer investigates the following logs:

  

  Which of the following is the most likely cause of the issue?

  A. SQL injection

  B. Cross-site scripting

  C. Leaked credentials

  D. DDoS

  Correct Answer: D

  The logs indicate a sudden surge in access requests to the website's homepage, followed by 502 errors, which are indicative of server overload or failure to handle incoming requests. This pattern is typical of a Distributed Denial of Service (DDoS) attack, where multiple compromised systems flood the target with traffic, exceeding its capacity to handle requests, leading to service disruption.

• Question 112:

  A security analyst reviews the daily logs and notices the following suspicious activity:

  

  The analyst investigates the firewall logs and identities the following:

  

  Which of the following steps should the security analyst take next to resolve this issue? (Select two).

  A. Submit an IT support ticket and request Kali Linux be uninstalled from John Smith's computer

  B. Block all inbound connections on port 4444 and block the IP address 201.101.25.121.

  C. Contact John Smith and request the Ethernet cable attached to the desktop be unplugged

  D. Check the running processes to confirm if a backdoor connection has been established.

  E. Upgrade the Windows x64 operating system on John Smith's computer to the latest version.

  F. Block all outbound connections from the IP address 10.150.71.151.

  Correct Answer: BD

  Given the suspicious activity and Kali Linux's association with penetration testing and hacking tools, the security analyst should block all inbound connections on port 4444, as it is commonly used for malicious purposes, and block the IP address that's potentially the source of the intrusion. Additionally, checking the running processes on John Smith's computer is crucial to determine if a backdoor or unauthorized connection has been established. References: Incident response and threat mitigation steps such as these are part of the security protocols discussed in the CompTIA Cloud+ certification.

• Question 113:

  A cloud networking engineer is troubleshooting the corporate office's network configuration. Employees in the IT and operations departments are unable to resolve IP addresses on all devices, and the IT department cannot establish a connection to other departments' subnets. The engineer identifies the following configuration currently in place to support the office network: Each employee needs to connect to the network with a maximum of three hosts. Each subnet must be segregated, but the IT department must have the ability to communicate with all subnets.

  

  Which of the following meet the IP addressing and routing requirements? (Select two).

  A. Modifying the subnet mask to 255 255 254.0 for IT and operations departments

  B. Configuring static routing to allow access from each subnet to 10.1.40.1

  C. Modifying the BYOD policy to reduce the volume of devices that are allowed to connect to the corporate network

  D. Configuring static routing to allow access from 10.1.30.1 to each subnet

  E. Combining the subnets and increasing the allocation of IP addresses available to support three hosts for each employee

  F. Modifying the subnet mask to 255.255.255.128 for the IT and operations departments

  Correct Answer: DF

  To meet the requirements of allowing the IT department to communicate with all subnets while keeping each department segregated and ensuring a maximum of three hosts per employee, two actions are required. First, configuring static

  routing from the IT subnet (10.1.30.1) to each of the other subnets would establish the necessary connectivity. Second, modifying the subnet mask to 255.255.255.128 for the IT and operations departments would provide the needed number

  of host addresses while maintaining subnet segregation.

  References: This solution is based on networking and subnetting principles, which are part of the foundational knowledge for cloud networking within the CompTIA Cloud+ framework.

• Question 114:

  A group of cloud administrators frequently uses the same deployment template to recreate a cloud-based development environment. The administrators are unable to go back and review the history of changes they have made to the template.

  Which of the following cloud resource deployment concepts should the administrator start using?

  A. Drift detection

  B. Repeatability

  C. Documentation

  D. Versioning

  Correct Answer: D

  Versioning is a concept that allows cloud administrators to keep track of the history of changes made to deployment templates or any other configuration file. By using version control systems, they can review previous versions, roll back to

  earlier configurations if necessary, and understand the evolution of the deployment template over time.

  References: CompTIA Cloud+ Guide to Cloud Computing (ISBN: 978-1-64274-282-2)

• Question 115:

  A developer is testing code that will be used to deploy a web farm in a public cloud. The main code block is a function to create a load balancer and a loop to create 1.000 web servers, as shown below:

  

  The developer runs the code against the company's cloud account and observes that the load balancer is successfully created, but only 100 web servers have been created. Which of the following should the developer do to fix this issue?

  A. Request an increase of Instance quota.

  B. Run the code multiple times until all servers are created.

  C. Check the my_web_server () function to ensure it is using the right credentials.

  D. Place the my_load_balancer () function after the loop.

  Correct Answer: A

  The developer should request an increase of the instance quota from the cloud provider. Cloud services often have a limit on the number of instances that can be created, which is known as an instance quota. If the load balancer is successfully created but the number of web servers is limited to 100, it suggests that the quota has been reached. Increasing the quota will allow the creation of additional web server instances up to the desired number. References: The scenario reflects an understanding of cloud resource management and limitations, which is a part of the CompTIA Cloud+ curriculum, specifically under the domain of Management and Technical Operations.

• Question 116:

  An engineer made a change to an application and needs to select a deployment strategy that meets the following requirements:

  1.

  Is simple and fast

  2.

  Can be performed on two Identical platforms

  Which of the following strategies should the engineer use?

  A. Blue-green

  B. Canary

  C. Rolling

  D. in-place

  Correct Answer: A

  The blue-green deployment strategy is ideal for scenarios where simplicity and speed are crucial. It involves two identical production environments: one (blue) hosts the current application version, while the other (green) is used to deploy the new version. Once testing is completed on the green environment and it's ready to go live, traffic is switched from blue to green, ensuring a quick and efficient rollout with minimal downtime. This method allows for immediate rollback if issues arise, by simply redirecting the traffic back to the blue environment. References: CompTIA Cloud+ material emphasizes the importance of understanding various cloud deployment strategies, including blue-green, and their application in real-world scenarios to ensure efficient and reliable software deployment in cloud environments.

• Question 117:

  Which of the following best explains the concept of migrating from on premises to the cloud?

  A. The configuration of a dedicated pipeline to transfer content to a remote location

  B. The creation of virtual instances in an external provider to transfer operations of selected servers into a new. remotely managed environment

  C. The physical transportation, installation, and configuration of company IT equipment in a cloud services provider's facility

  D. The extension of company IT infrastructure to a managed service provider

  Correct Answer: B

  Migrating from on-premises to the cloud generally involves creating virtual instances in an external provider's environment and transferring the operations of selected servers to this new, remotely managed setup. This process allows

  organizations to leverage the cloud provider's resources and services.

  References: The migration process and strategies are topics included in the Business Principles of Cloud Environments within the CompTIA Cloud+ curriculum.

• Question 118:

  A company recently set up a CDN for its photography and image-sharing website. Which of the following is the most likely reason for the company's action?

  A. To eliminate storage costs

  B. To improve site speed

  C. To enhance security of static assets

  D. To prevent unauthorized access

  Correct Answer: B

  The most likely reason for setting up a Content Delivery Network (CDN) is to improve site speed, especially for a photography and image-sharing website. CDNs cache content at edge locations closer to end-users, significantly reducing load times for static assets like images and videos. This enhancement in speed can improve user experience and site performance. References: CompTIA Cloud+ resources and CDN functionality

• Question 119:

  A security team recently hired multiple interns who all need the same level of access. Which of the following controls should the security team implement to provide access to the cloud environment with the least amount of overhead?

  A. MFA

  B. Discretionary access

  C. Local user access

  D. Group-based access control

  Correct Answer: D

  Implementing group-based access control is the most efficient way to provide access to multiple interns who require the same level of access. This method allows the security team to assign permissions to a group rather than to individual user accounts, thereby reducing the administrative overhead involved in managing access rights for each intern individually. References: CompTIA Cloud+ Certification Study Guide (V0- 004) by Scott Wilson and Eric Vanderburg

• Question 120:

  An IT manager needs to deploy a cloud solution that meets the following requirements:

  1.

  Users must use two authentication methods to access resources.

  2.

  Each user must have 10GB of storage space by default.

  Which of the following combinations should the manager use to provision these requirements?

  A. OAuth 2.0 and ephemeral storage

  B. OIDC and persistent storage

  C. MFA and storage quotas

  D. SSO and external storage

  Correct Answer: C

  The combination that should be used to provision the requirements of two authentication methods and 10GB of storage space by default for each user is Multi-Factor Authentication (MFA) and storage quotas. MFA provides an additional layer of security beyond just a username and password, and storage quotas can be used to allocate a specific amount of storage space for each user. References: CompTIA Cloud+ Study Guide (V0-004) by Todd Montgomery and Stephen Olson