CompTIA CompTIA Certifications CV0-004 Questions & Answers

• Question 51:

  A systems administrator created several new VMs on a private cloud and wants to ensure the new baseline still meets corporate guidelines. The administrator finds the following new load numbers on the hosts:

  

  If corporate policy requires N+1 host capacity, which of the following metrics is MOST likely to present a problem?

  A. CPU

  B. RAM

  C. DISK

  D. NETWORK

  Correct Answer: C

• Question 52:

  An organization is currently deploying a private cloud model. All devices should receive the time from the local environment with the least administrative effort. Which of the following ports needs to be opened to fulfill this requirement?

  A. 53

  B. 67

  C. 123

  D. 161

  Correct Answer: C

  Port 123 is what needs to be opened to ensure all devices receive the time from the local environment with the least administrative effort in a private cloud model. Port 123 is the port used by NTP (Network Time Protocol), which is a protocol that synchronizes the clocks of network devices and systems. NTP can help to ensure accurate and consistent time across different devices and systems in a cloud environment, which can facilitate coordination, communication, logging, auditing, etc.

  Reference: https://www.sciencedirect.com/topics/computer-science/network-time-protocol#:~:text=NTP%20is%20a%20built%2Don,for%20example%2C%20a%20desktop).

• Question 53:

  A company hosts its server in a public IaaS cloud. The company's management decides to migrate the servers to a different geographical region that is closer to the user base. A cloud administrator creates a new environment in that geographical region.

  Which of the following is the BEST way to migrate the VM from the original geographic region to the new region?

  A. 1. Create a full backup of the VM.

  2.

  Copy the backup files into the new region using FTP.

  3.

  Restore the VM from the backup files.

  B. 1. Create a VM image.

  2.

  Export the VM image to the new region using vendor's tools.

  3.

  Deploy a new VM based on the created image.

  C. 1. Create a VM clone.

  2.

  Copy the clone into the new region using FTP.

  3.

  Apply the network and security groups from the new region to the cloned VM and start it.

  D. 1. Create a new VM in the new region.

  2.

  Restore a full-system backup from the original VM.

  3.

  Apply the network and security groups from the original region to the new VM.

  Correct Answer: D

• Question 54:

  A cloud administrator has built a new private cloud environment and needs to monitor all computer, storage, and network components of the environment.

  Which of the following protocols would be MOST useful for this task?

  A. SMTP

  B. SCP

  C. SNMP

  D. SFTP

  Correct Answer: C

  Simple Network Management Protocol (SNMP) is a protocol that enables monitoring and managing network devices and components in an IP network. SNMP can help monitor all computer, storage, and network components of a private cloud environment, as it can collect and report information about their status, performance, configuration, and events. SNMP can also help troubleshoot and optimize the private cloud environment, as it can detect and alert any issues or anomalies related to the network devices and components. References: CompTIA Cloud+ Certification Exam Objectives, page 15, section 2.8

• Question 55:

  Which of the following strategies will mitigate the risk of a zero-day vulnerability MOST efficiently?

  A. Using only open-source technologies

  B. Keeping all resources up to date

  C. Creating a standby environment with a different cloud provider

  D. Having a detailed incident response plan

  Correct Answer: D

  An incident response plan is a document or procedure that defines the roles, responsibilities, and actions to be taken in the event of a security incident or breach. Having a detailed incident response plan can help mitigate the risk of a zero-day vulnerability most efficiently, as it can provide a clear and consistent framework for identifying, containing, analyzing, and resolving any potential threats or exploits related to the unknown or unpatched vulnerability. Having a detailed incident response plan can also help minimize the impact and damage of a security incident or breach, as it can enable timely and effective recovery and restoration processes. References: CompTIA Cloud+ Certification Exam Objectives, page 14, section 2.7

• Question 56:

  A database analyst reports it takes two hours to perform a scheduled job after onboarding 10,000 new users to the system. The analyst made no changes to the scheduled job before or after onboarding the users. The database is hosted in an IaaS instance on a cloud provider.

  Which of the following should the cloud administrator evaluate to troubleshoot the performance of the job?

  A. The laaS compute configurations, the capacity trend analysis reports, and the storage IOPS

  B. The hypervisor logs, the memory utilization of the hypervisor host, and the network throughput of the hypervisor

  C. The scheduled job logs for successes and failures, the time taken to execute the job, and the job schedule

  D. Migrating from laaS to on premises, the network traffic between on-premises users and the laaS instance, and the CPU utilization of the hypervisor host

  Correct Answer: A

  To troubleshoot the performance of a scheduled job that takes two hours to run after onboarding 10,000 new users to a cloud-based system, the administrator should evaluate the IaaS compute configurations, the capacity trend analysis reports, and the storage IOPS. These factors can affect the performance of a database job in an IaaS instance on a cloud provider. The IaaS compute configurations include the CPU, memory, and network resources assigned to the instance. The capacity trend analysis reports show the historical and projected usage and demand of the resources. The storage IOPS (Input/Output Operations Per Second) measure the speed and performance of the disk storage. The administrator should check if these factors are sufficient, optimal, or need to be adjusted to improve the performance of the job.

• Question 57:

  A systems administrator is configuring network management but is concerned about confidentiality.

  Which of the following should the administrator configure to address this concern?

  A. Community strings

  B. IPSec tunnels

  C. ACLs

  D. SNMPv3

  Correct Answer: D

  SNMPv3 is the protocol that the administrator should configure to address the concern about confidentiality for network management. SNMP (Simple Network Management Protocol) is a standard protocol that allows network devices and systems to exchange information and perform management tasks. SNMPv3 is the latest version of SNMP that provides security enhancements, such as authentication, encryption, and access control, to protect the confidentiality, integrity, and availability of network data.

• Question 58:

  A company has deployed a new cloud solution and is required to meet security compliance.

  Which of the following will MOST likely be executed in the cloud solution to meet security requirements?

  A. Performance testing

  B. Regression testing

  C. Vulnerability testing

  D. Usability testing

  Correct Answer: C

  Vulnerability testing is a type of security testing that identifies and evaluates the weaknesses or flaws in a system or service that could be exploited by attackers. Vulnerability testing can help meet security compliance requirements when deploying a new cloud solution, as it can reveal any potential security risks or gaps in the cloud environment and provide recommendations for remediation or mitigation. Vulnerability testing can also help improve security posture and performance, as it can prevent or reduce the impact of cyberattacks, data breaches, or service disruptions. References: CompTIA Cloud+ Certification Exam Objectives, page 14, section 2.7

• Question 59:

  An update is being deployed to a web application, and a systems administrator notices the cloud SQL database has stopped running. The VM is responding to pings, and there were not any configuration changes scheduled for the VM.

  Which of the following should the administrator check NEXT?

  A. Logs on the VM

  B. Firewall on the VM

  C. Memory on the VM

  D. vGPU performance on the VM

  Correct Answer: A

  Checking the logs on the VM is the next step that the administrator should take if the cloud SQL database has stopped running after an update deployment. Logs are records of events and activities that occur on a system or application. Logs can provide useful information for troubleshooting and identifying the root cause of an issue. The administrator should look for any errors, warnings, or messages that indicate what happened to the SQL database service and why it stopped running.

• Question 60:

  A company needs to rehost its ERP system to complete a datacenter migration to the public cloud. The company has already migrated other systems and configured VPN connections.

  Which of the following MOST likely needs to be analyzed before rehosting the ERP?

  A. Software

  B. Licensing

  C. Right-sizing

  D. The network

  Correct Answer: B