CompTIA CompTIA Certifications CV0-004 Questions & Answers

• Question 151:

  A system surpasses 75% to 80% of resource consumption. Which of the following scaling approaches is the most appropriate?

  A. Trending

  B. Manual

  C. Load

  D. Scheduled

  Correct Answer: C

  Load scaling is the most appropriate approach when a system surpasses 75% to 80% of resource consumption. This method involves adjusting resources dynamically in response to the current load, ensuring the system can handle increased demand without performance degradation. Load scaling can be automatic, allowing systems to scale up or down based on predefined metrics like CPU usage, memory, or network traffic, providing an efficient way to manage resources and maintain optimal performance. References: The CompTIA Cloud+ exam objectives include understanding cloud management and technical operations, which encompass knowledge of various scaling approaches, including load scaling, to ensure efficient resource utilization in cloud environments.

• Question 152:

  Which of the following can reduce the risk of CI/CD pipelines leaking secrets?

  A. Protected Git branches

  B. Use of a VM instead of containers

  C. Private image repositories

  D. Canary tests

  Correct Answer: A

  Protected Git branches help reduce the risk of CI/CD pipelines leaking secrets by imposing restrictions on who can commit to the branches, enforce status checks before merging, and prevent unauthorized access or changes to sensitive information, such as API keys, passwords, and secret tokens. This ensures that only approved changes can be made to the codebase, and sensitive information is safeguarded.

• Question 153:

  Which of the following service options would provide the best availability for critical applications in the event of a disaster?

  A. Edge computing

  B. Cloud bursting

  C. Availability zones

  D. Multicloud tenancy

  Correct Answer: C

  Availability zones provide the best availability for critical applications in the event of a disaster. They are distinct locations within a cloud region that are engineered to be isolated from failures in other availability zones, thus providing

  redundancy and failover capabilities, which is essential for maintaining high availability of critical applications.

  References: The concept of availability zones and their importance in disaster recovery and high availability is covered under the domain of Management and Technical Operations in the CompTIA Cloud+ objectives.

• Question 154:

  A software engineer needs to transfer data over the internet using programmatic access while also being able to query the data. Which of the following will best help the engineer to complete this task?

  A. SQL

  B. Web sockets

  C. RPC

  D. GraphQL

  Correct Answer: D

  GraphQL is the best option for transferring data over the internet with programmatic access and querying capabilities. It is a query language for APIs and a runtime for executing those queries with existing data, providing a more efficient,

  powerful, and flexible alternative to the REST API.

  References: Data transfer and querying methods are part of the technical knowledge associated with cloud computing, as included in CompTIA Cloud+.

• Question 155:

  A cloud developer is creating a static website that customers will be accessing globally. Which of the following services will help reduce latency?

  A. VPC

  B. Application load balancer

  C. CDN

  D. API gateway

  Correct Answer: C

  A Content Delivery Network (CDN) is the service that will help reduce latency for a static website accessed globally. CDNs distribute content across multiple geographically dispersed servers, allowing users to connect to a server that is closer

  to them, thereby reducing the time it takes to load the website.

  References: The use of CDNs is a common practice to enhance global access and improve user experience, as covered under Cloud Concepts in the CompTIA Cloud+ certification.

• Question 156:

  A cloud engineer hardened the WAF for a company that operates exclusively in North America. The engineer did not make changes to any ports, and all protected applications have continued to function as expected.

  Which of the following configuration changes did the engineer most likely apply?

  A. The engineer implemented MFA to access the WAF configurations.

  B. The engineer blocked all traffic originating outside the region.

  C. The engineer installed the latest security patches on the WAF.

  D. The engineer completed an upgrade from TLS version 1.1 to version 1.3.

  Correct Answer: B

  Given that the WAF was hardened without changing any ports and all protected applications continued to function as expected, it is most likely that the engineer blocked all traffic originating outside of North America, which is the company's operating region. References: CompTIA Cloud+ Study Guide (V0-004) - Chapter on Cloud Security Best Practices

• Question 157:

  A cloud security analyst is concerned about security vulnerabilities in publicly available container images.

  Which of the following is the most appropriate action for the analyst to recommend?

  A. Using CIS-hardened images

  B. Using watermarked images

  C. Using digitally signed images

  D. Using images that have an application firewall

  Correct Answer: A

• Question 158:

  A cloud engineer is reviewing a disaster recovery plan that includes the following requirements:

  1.

  System state, files, and configurations must be backed up on a weekly basis.

  2.

  The system state, file, and configuration backups must be tested annually.

  Which of the following backup methods should the engineer implement for the first week the plan is executed?

  A. Differential

  B. Incremental

  C. Snapshot

  D. Full

  Correct Answer: D

  A full backup method should be implemented for the first week the disaster recovery plan is executed. This will ensure that a complete copy of the system state, files, and configurations are backed up. Subsequent backups can be differential or incremental as per the plan.References: Backup methodologies, including the importance of full backups, are part of the data management strategies in cloud computing covered in the CompTIA Cloud+ certification.

• Question 159:

  An organization has been using an old version of an Apache Log4j software component in its critical software application.

  Which of the following should the organization use to calculate the severity of the risk from using this component?

  A. CWE

  B. CVSS

  C. CWSS

  D. CVE

  Correct Answer: B

  The Common Vulnerability Scoring System (CVSS) is what the organization should use to calculate the severity of the risk from using an old version of Apache Log4j software component. CVSS provides an open framework for communicating the characteristics and impacts of IT vulnerabilities. References: CompTIA Cloud+ Study Guide (V0-004) - Chapter on Risk Management

• Question 160:

  A cloud deployment uses three different VPCs. The subnets on each VPC need to communicate with the others over private channels. Which of the following will achieve this objective?

  A. Deploying a load balancer to send traffic to the private IP addresses

  B. Creating peering connections between all VPCs

  C. Adding BGP routes using the VPCs' private IP addresses

  D. Establishing identical routing tables on all VPCs

  Correct Answer: B

  To allow subnets on different VPCs to communicate with each other over private channels, the cloud engineer should create peering connections between all the VPCs. VPC Peering allows networks to connect and route traffic using private IP addresses without the need for gateways, VPN connections, or separate physical hardware. References: CompTIA Cloud+ Study Guide (V0-004) by Todd Montgomery and Stephen Olson