CompTIA CompTIA Certifications CV0-004 Questions & Answers

• Question 81:

  A DevOps engineer is performing maintenance on the mail servers for a company's web application. Part of this maintenance includes checking core operating system updates. The servers are currently running version 3.2 of the operating system. The engineer has two update options--one to version 4.1 and the other to version 3.7. Both versions are fully supported by the operating system manufacturer.

  Which of the following best describes the action the engineer should take?

  A. Upgrade to 3.7 in the development environment.

  B. Upgrade to 4.1 on one production server at a time.

  C. Read the release notes on version 4.1.

  D. Schedule a maintenance window and upgrade to 3.7 in the production environment.

  Correct Answer: A

  Before making any updates to the production environment, the best course of action is to perform the update in a development or testing environment. Upgrading to version 3.7, which is a minor update, is generally less risky and should be

  tested first to ensure compatibility and stability before considering the major update to version 4.1.

  References: The process of updating and maintaining servers, including the validation of updates in a non-production environment, is part of the technical operations management covered in CompTIA Cloud+.

• Question 82:

  A cloud engineer is developing an operating expense report that will be used to purchase various cloud billing models for virtual machine instances. The cloud billing model must meet the following requirements:

  1.

  The instance cannot be ephemeral.

  2.

  The minimum life cycle of the instance is expected to be five years.

  3.

  The software license is charged per physical CPU count.

  Which of the following models would best meet these requirements?

  A. Dedicated host

  B. Spot instance

  C. Pay-as-you-go

  D. Reserved resources

  Correct Answer: D

  Reserved resources, or Reserved Instances, are ideal for workloads with predictable usage and a long-term commitment, such as a minimum lifecycle of five years. This model allows for significant cost savings compared to on-demand pricing, and the instance is not ephemeral, meaning it persists and is dedicated to the user for the duration of the reservation. The licensing charged per physical CPU count aligns with dedicated host or reserved instance models, but the long- term commitment points more towards reserved resources.

• Question 83:

  A company wants to build its new platform using a public cloud. The workload requirements include the following:

  1.

  Implementation of custom CIS compliance

  2.

  Patch for vulnerabilities within 24 hours

  3.

  Warrant at least 1,800 IOPS per volume Which of the following meets the requirements?

  A. SaaS

  B. laaS

  C. FaaS

  D. PaaS

  Correct Answer: B

  Infrastructure as a Service (IaaS) provides the most flexibility among cloud service models, allowing for the implementation of custom security and compliance standards, such as CIS compliance. IaaS environments offer control over the infrastructure, enabling patch management within specific time frames. Additionally, IaaS providers typically offer configurable storage options, including the ability to specify IOPS (Input/Output Operations Per Second) per volume to meet performance requirements.

• Question 84:

  A company receives files daily from a bank. The company requires that the files must be copied from the cloud storage resource to another cloud storage resource for further processing. Which of the following methods requires the least amount of effort to achieve the task?

  A. Remote procedure call

  B. SOAP

  C. Event-driven architecture

  D. REST

  Correct Answer: C

  An event-driven architecture is the most efficient method for automating the task of copying files from one cloud storage resource to another upon their arrival. This architecture allows systems to automatically trigger actions based on specific events, such as the arrival of new files, minimizing manual effort and ensuring timely processing. References: CompTIA Cloud+ resources and cloud service architectures

• Question 85:

  A cloud engineer wants to run a script that increases the volume storage size if it is below 100GB. Which of the following should the engineer run?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: A

  The correct script is Option A, which uses a conditional test to check if the volume size is less than 100GB. If it is, then it performs a resize operation; otherwise, it outputs a message indicating the volume is already the desired size. References: CompTIA Cloud+ Study Guide (V0-004) - Chapter on Automation

• Question 86:

  A security analyst confirms a zero-day vulnerability was exploited by hackers who gained access to confidential customer data and installed ransomware on the server. Which of the following steps should the security analyst take? (Select two).

  A. Contact the customers to inform them about the data breach.

  B. Contact the hackers to negotiate payment lo unlock the server.

  C. Send a global communication to inform all impacted users.

  D. Inform the management and legal teams about the data breach

  E. Delete confidential data used on other servers that might be compromised.

  F. Modify the firewall rules to block the IP addresses and update the ports.

  Correct Answer: AD

  After a zero-day exploit resulting in a data breach and ransomware installation, it is critical to inform affected customers about the breach and the potential impact on their data. Additionally, the management and legal teams should be notified

  to handle the situation in compliance with regulatory requirements and to coordinate an appropriate response.

  References: Handling security incidents and communication strategies after a data breach are crucial elements of the governance and risk compliance domains in CompTIA Cloud+.

• Question 87:

  A company serves customers globally from its website hosted in North America. A cloud engineer recently deployed new instances of the website in the Europe region.

  Which of the following is the most likely reason?

  A. To simplify workflow

  B. To enhance security

  C. To reduce latency

  D. To decrease cost

  Correct Answer: C

  The most likely reason for deploying new instances of a website in the Europe region, in addition to the ones hosted in North America, is to reduce latency for users located in Europe. By having the website's resources closer to the end-users,

  the data has a shorter distance to travel, resulting in faster load times and better performance.

  References: CompTIA Cloud+ Study Guide (V0-004) by Todd Montgomery and Stephen Olson

• Question 88:

  A cloud engineer is in charge of deploying a platform in an laaS public cloud. The application tracks the state using session cookies, and there are no affinity restrictions. Which of the following will help the engineer reduce monthly expenses and allow the application to provide the service?

  A. Resource metering

  B. Reserved resources

  C. Dedicated host

  D. Pay-as-you-go model

  Correct Answer: D

  A pay-as-you-go model would be beneficial for the cloud engineer because it allows the application to be scaled based on demand, reducing monthly expenses since costs are only incurred for the resources actually used. Since there are no affinity restrictions and the application uses session cookies for state tracking, the pay-as-you-go model can handle fluctuating workloads without the need to pay for unused reserved resources or dedicated hosts. References: CompTIA Cloud+ Study Guide (V0-004)- Chapter on Cloud Service Models

• Question 89:

  Two CVEs are discovered on servers in the company's public cloud virtual network. The CVEs are listed as having an attack vector value of network and CVSS score of 9.0. Which of the following actions would be the best way to mitigate the vulnerabilities?

  A. Patching the operating systems

  B. Upgrading the operating systems to the latest beta

  C. Encrypting the operating system disks

  D. Disabling unnecessary open ports

  Correct Answer: A

  For vulnerabilities with a high CVSS score and a network attack vector, the most effective and direct mitigation action is to patch the operating systems. Patching addresses the specific vulnerabilities that have been identified and helps to

  secure the servers against the known exploits that could take advantage of these CVEs.

  References: CompTIA Cloud+ Guide to Cloud Computing (ISBN: 978-1-64274-282-2)

• Question 90:

  A company migrated its CRM system to a SaaS solution. The security team is updating the RAG matrix for the newly migrated CRM. Given the following table:

  

  Which of the following responsibility assignments best aligns with the shared responsibility model for the new CRM?

  A. Data-center security

  B. CRM software security

  C. CRM server patching

  D. CRM development life cycle

  Correct Answer: A

  For the newly migrated SaaS CRM, the responsibility assignment that best aligns with the shared responsibility model is data-center security. In a SaaS model, the cloud service provider (CSP) is responsible for the security of the infrastructure, including data centers, while the customer is typically responsible for the data and possibly the user access management. References: The shared responsibility model and its implications for different service models are foundational concepts included in the CompTIA Cloud+ certification, under the domain of Governance, Risk, Compliance, and Security.