CompTIA CompTIA Certifications CV0-004 Questions & Answers

• Question 61:

  A company developed a product using a cloud provider's PaaS platform and many of the platform-based components within the application environment.

  Which of the following would the company MOST likely be concerned about when utilizing a multicloud strategy or migrating to another cloud provider?

  A. Licensing

  B. Authentication providers

  C. Service-level agreement

  D. Vendor lock-in

  Correct Answer: D

  Vendor lock-in is a situation where a customer becomes dependent on a specific vendor for products or services and faces high switching costs or barriers when trying to change vendors. Vendor lock-in is most likely to be a concern for a company that developed a product using a cloud provider's PaaS platform and many of the platform- based components within the application environment when utilizing a multicloud strategy or migrating to another cloud provider, as it can limit the flexibility, scalability, and portability of the product and increase the complexity, risk, and cost of moving or integrating with other cloud platforms or providers. References: CompTIA Cloud+ Certification Exam Objectives, page 8, section 1.2

• Question 62:

  A systems administrator is informed that a database server containing PHI and PII is unencrypted. The environment does not support VM encryption, nor does it have a key management system. The server needs to be able to be rebooted for patching without manual intervention.

  Which of the following will BEST resolve this issue?

  A. Ensure all database queries are encrypted

  B. Create an IPSec tunnel between the database server and its clients

  C. Enable protocol encryption between the storage and the hypervisor

  D. Enable volume encryption on the storage

  E. Enable OS encryption

  Correct Answer: D

  Volume encryption is a type of encryption that protects data at the storage level by encrypting an entire disk or partition. Volume encryption can provide strong security for data at rest, as it prevents unauthorized access to the data even if the storage device is lost, stolen, or compromised. Volume encryption can also support automatic booting without manual intervention, as it can use a pre-boot authentication mechanism that does not require user input. Enabling volume encryption on the storage is the best way to resolve the issue of having an unencrypted database server containing PHI and PII, as it can protect the sensitive data without relying on VM encryption or a key management system. References: CompTIA Cloud+ Certification Exam Objectives, page 14, section 2.7

• Question 63:

  A cloud administrator needs to implement a mechanism to monitor the expense of the company's cloud resources.

  Which of the following is the BEST option to execute this task with minimal effort?

  A. Ask the cloud provider to send a daily expense report

  B. Set custom notifications for exceeding budget thresholds

  C. Use the API to collect expense information from cloud resources

  D. Implement a financial tool to monitor cloud resource expenses

  Correct Answer: B

  Setting custom notifications for exceeding budget thresholds is the best option to execute the task of monitoring the expense of the company's cloud resources with minimal effort, as it can automate and simplify the process of tracking and alerting the cloud administrator about any overspending or wastage of cloud resources. Setting custom notifications can also help optimize the cost and performance of cloud resources, as it can enable timely and proactive actions to adjust or optimize the resource allocation or consumption based on the budget limits. References: CompTIA Cloud+ Certification Exam Objectives, page 13, section 2.5

• Question 64:

  After accidentally uploading a password for an IAM user in plain text, which of the following should a cloud administrator do FIRST? (Choose two.)

  A. Identify the resources that are accessible to the affected IAM user

  B. Remove the published plain-text password

  C. Notify users that a data breach has occurred

  D. Change the affected IAM user's password

  E. Delete the affected IAM user

  Correct Answer: BD

  The first step a cloud administrator should take after accidentally uploading a password for an IAM user in plain text is to remove the published plain-text password. This should be done immediately to prevent unauthorized access to the affected user's resources. The administrator should then change the password for the affected IAM user to a new, strong password. This will ensure that the user's resources are secure and that there is no unauthorized access.

  A. Identifying the resources that are accessible to the affected IAM user is important, but it should not be done before removing the plain-text password and changing the password for the affected user. This step can be taken after the immediate security concerns have been addressed.

  C. While it is important to notify users of a data breach, this step is not necessary in this situation as the password was accidentally uploaded and there is no evidence that any unauthorized access has occurred. However, the cloud administrator should review their security protocols to ensure that similar incidents do not occur in the future.

  E. Deleting the affected IAM user is not necessary in this situation, as the user's resources can be secured by changing the password. Deleting the user may cause unnecessary disruption to the user's workflow and could result in the loss of important data.

  In summary, the first step a cloud administrator should take after accidentally uploading a password for an IAM user in plain text is to remove the published plain-text password, followed by changing the password for the affected user.

• Question 65:

  An organization is developing a new solution for hosting an external website. The systems administrator needs the ability to manage the OS. Which of the following methods would be MOST suitable to achieve this objective?

  A. Deploy web servers into an laaS provider.

  B. Implement a cloud-based VDI solution.

  C. Provision web servers in a container environment.

  D. Use PaaS components in the cloud to implement the product.

  Correct Answer: A

  Deploying web servers into an IaaS (Infrastructure as a Service) provider is the most suitable method to achieve the objective of hosting an external website and managing the OS. IaaS is a cloud service model that provides basic computing resources such as servers, storage, network, etc., to the customers. The customers have full control and flexibility over these resources and can install and configure any software they need on them. IaaS is suitable for hosting web servers and managing the OS, as it allows the customers to choose their preferred OS, web server software, settings, etc., and customize them according to their needs.

• Question 66:

  A company is concerned about the security of its data repository that contains customer PII. A systems administrator is asked to deploy a security control that will prevent the exfiltration of such data.

  Which of the following should the systems administrator implement?

  A. DLP

  B. WAF

  C. FIM

  D. ADC

  Correct Answer: A

  Implementing DLP (Data Loss Prevention) is the best solution to prevent the exfiltration of customer PII (Personally Identifiable Information) from a data repository. DLP is a security control that monitors, detects, and blocks sensitive data from leaving or being accessed by unauthorized parties. DLP can be applied at different levels, such as network, endpoint, storage, or cloud. DLP can help to protect customer PII from being leaked, stolen, or compromised.

  Reference: https://cloud.google.com/blog/products/identity-security/4-steps-to-stop-data-exfiltration-with-google-cloud

• Question 67:

  A systems administrator would like to reduce the network delay between two servers.

  Which of the following will reduce the network delay without taxing other system resources?

  A. Decrease the MTU size on both servers

  B. Adjust the CPU resources on both servers

  C. Enable compression between the servers

  D. Configure a VPN tunnel between the servers

  Correct Answer: A

  The maximum transmission unit (MTU) is the largest size of a packet or frame that can be sent over a network. Decreasing the MTU size on both servers can reduce the network delay between them, as it can reduce the fragmentation and reassembly of packets, improve the transmission efficiency, and avoid packet loss or errors. Decreasing the MTU size can also avoid taxing other system resources, as it does not require additional CPU, memory, or disk resources. References: CompTIA Cloud+ Certification Exam Objectives, page 16, section 3.2

  Reference: https://cseweb.ucsd.edu/~calder/papers/HPDC-01-DynComp.pdf

• Question 68:

  A systems administrator has migrated an internal application to a public cloud. The new web server is running under a TLS connection and has the same TLS certificate as the internal application that is deployed. However, the IT department reports that only internal users who are using new versions of the OSs are able to load the application home page.

  Which of the following is the MOST likely cause of the issue?

  A. The local firewall from older OSs is not allowing outbound connections

  B. The local firewall from older OSs is not allowing inbound connections

  C. The cloud web server is using a self-signed certificate that is not supported by older browsers

  D. The cloud web server is using strong ciphers that are not supported by older browsers

  Correct Answer: D

  Ciphers are algorithms or methods that are used to encrypt and decrypt data for secure communication. Strong ciphers are ciphers that use high-level encryption techniques and keys to provide stronger security and protection for data. The cloud web server is using strong ciphers that are not supported by older browsers is the most likely cause of the issue of only internal users who are using new versions of the OSs being able to load the application home page after the administrator configured a redirect from HTTP to HTTPS on the web server. Older browsers may not support the strong ciphers used by the cloud web server for HTTPS connections, which can result in a failure to establish a secure connection and load the application home page. References: CompTIA Cloud+ Certification Exam Objectives, page 15, section 2.8

• Question 69:

  Once a change has been made to templates, which of the following commands should a cloud architect use next to deploy an laaS platform?

  A. git pull

  B. git fetch

  C. git commit

  D. git push

  Correct Answer: D

  After making changes to templates, a cloud architect should use the git push command to deploy an IaaS platform. This command is used to upload the local repository content to a remote repository, making the new or changed templates

  available for the next deployment.

  References: Version control practices and commands, such as using git for IaaS template management, are covered under the best practices for cloud deployments in the CompTIA Cloud+ certification.

• Question 70:

  A social networking company operates globally. Some users from Brazil and Argentina are reporting the following error: website address was not found.

  Which of the following is the most likely cause of this outage?

  A. Client DNS misconfigutation

  B. Regional DNS provider outage

  C. DNS server misconfiguration

  D. DNS propagation issues

  Correct Answer: B

  The most likely cause of the outage, with users from specific regions like Brazil and Argentina reporting an error that the website address was not found, is a regional DNS provider outage. This type of outage would affect users in particular

  areas, preventing domain name resolution and leading to the reported error.

  References: Regional outages and their impact on service availability are discussed within the Cloud Concepts domain, which includes understanding the importance of DNS in cloud services, as per the CompTIA Cloud+ objectives.