CompTIA CompTIA Certifications CV0-004 Questions & Answers

• Question 201:

  A CI/CD pipeline is used to deploy VMs to an laaS environment. Which of the following can be used to harden the operating system once the VM is running?

  A. Docker

  B. Kubernetes

  C. Git

  D. Ansible

  Correct Answer: D

  Ansible can be used to harden the operating system once the VM is running. It is an automation tool that can configure systems, deploy software, and orchestrate more advanced IT tasks such as continuous deployments or zero downtime

  rolling updates.

  References: Ansible and other configuration management tools are part of the cloud management strategies discussed in the CompTIA Cloud+ certification material.

• Question 202:

  Which of the following best describes a system that keeps all different versions of a software separate from each other while giving access to all of the versions?

  A. Code documentation

  B. Code control

  C. Code repository

  D. Code versioning

  Correct Answer: D

  A system that keeps all different versions of software separate from each other while providing access to all of the versions is best described by Code versioning. Code versioning systems, such as Git, allow developers to keep track of changes, revert to previous states, and manage multiple versions of codebases. References: CompTIA Cloud+ Study Guide (V0-004) by Todd Montgomery and Stephen Olson

• Question 203:

  A cloud engineer needs to integrate a new payment processor with an existing e- commerce website. Which of the following technologies is the best fit for this integration?

  A. RPC over SSL

  B. Transactional SQL

  C. REST API over HTTPS

  D. Secure web socket

  Correct Answer: C

  The best technology for integrating a new payment processor with an existing e-commerce website is a REST API over HTTPS. This method is widely used for web services, allowing secure communication over the internet and a standardized way for applications to communicate with each other. References: CompTIA Cloud+ Study Guide (V0-004) - Chapter on Cloud Integration

• Question 204:

  A cloud consultant needs to modernize a legacy application that can no longer address user demand and is expensive to maintain. Which of the following is the best migration strategy?

  A. Retain

  B. Rehost

  C. Refactor

  D. Replatform

  Correct Answer: C

  Refactoring is the process of restructuring existing computer code without changing its external behavior. In cloud computing, it often means modifying the application to better leverage cloud-native features and services. This can address user demand and reduce maintenance costs by making the application more scalable, resilient, and manageable. References: CompTIA Cloud+ Certification Study Guide (V0-004) by Scott Wilson and Eric Vanderburg

• Question 205:

  A list of CVEs was identified on a web server. The systems administrator decides to close the ports and disable weak TLS ciphers. Which of the following describes this vulnerability management stage?

  A. Scanning

  B. Identification

  C. Assessment

  D. Remediation

  Correct Answer: D

  Closing the ports and disabling weak TLS ciphers as a response to a list of identified CVEs (Common Vulnerabilities and Exposures) describes the vulnerability management stage of 'remediation'. This stage involves taking actions to resolve vulnerabilities and mitigate potential risks.References: Vulnerability management stages, including remediation efforts, are a key aspect of the security measures discussed in CompTIA Cloud+.

• Question 206:

  Which of the following is a customer be responsible for in a provider-managed database service? (Select two).

  A. Operating system patches

  B. Table-level permissions

  C. Minor database engine updates

  D. Cluster configuration

  E. Row-level encryption

  F. Availability of hardware for scaling

  Correct Answer: BE

  In a provider-managed database service, the cloud provider typically manages the infrastructure, operating system, and database engine updates. However, the customer is responsible for the data and its security within the database, which

  includes setting table- level permissions and row-level encryption to ensure that data access and security is managed appropriately. References: CompTIA Cloud+ Guide to Cloud Computing (ISBN:

  978-1-64274-282-2)

• Question 207:

  Which of the following do developers use to keep track of changes made during software development projects?

  A. Code drifting

  B. Code control

  C. Code testing

  D. Code versioning

  Correct Answer: D

  Developers use code versioning to keep track of changes made during software development projects. It is a system that records changes to a file or set of files over time so that specific versions can be recalled later. References: CompTIA Cloud+ Study Guide (V0-004) - Chapter on Software Development in Cloud Environments

• Question 208:

  A company just learned that the data in its object storage was accessed by an unauthorized party. Which of the following should the company have done to make the data unusable?

  A. The company should have switched from object storage to file storage.

  B. The company should have hashed the data.

  C. The company should have changed the file access permissions.

  D. The company should have encrypted the data at rest.

  Correct Answer: D

  Encrypting the data at rest is a crucial security measure to make the data unusable to unauthorized parties. If the object storage data was accessed by an unauthorized party, having the data encrypted would ensure that the data remains confidential and inaccessible without the proper encryption keys, thus mitigating the impact of the breach. References: CompTIA Cloud+ resources and data security practices

• Question 209:

  For compliance purposes, a cloud developer at an insurance company needs to save all customer policies for more than ten years. Which of the following options is the most cost-efficient tier to save the data in the cloud?

  A. Archive

  B. Hot

  C. Cold

  D. Warm

  Correct Answer: A

  For compliance purposes, saving customer policies for more than ten years most cost-efficiently can be achieved by using the Archive storage tier. Archive or archival storage is designed for data that needs to be retained over the long term but accessed infrequently. It is generally the most cost-effective storage tier for this type of data. References: CompTIA Cloud+ Study Guide (V0-004) by Todd Montgomery and Stephen Olson

• Question 210:

  A company's engineering department is conducting a month-long test on the scalability of an in-house-developed software that requires a cluster of 100 or more servers. Which of the following models is the best to use?

  A. PaaS

  B. SaaS

  C. DBaaS

  D. laaS

  Correct Answer: D

  For testing the scalability of an in-house-developed software that requires a cluster of 100 or more servers, Infrastructure as a Service (IaaS) is the best model. IaaS provides the necessary computeresources and allows the engineering department to configure the environment as needed for their specific test without the constraints that might be present in PaaS or SaaS offerings. References: CompTIA Cloud+ Study Guide (V0-004) - Chapter on Cloud Service Models