CompTIA Cloud+ CV0-004 Dumps (V8.02) – Pass Your Exam with Our Expertly Corrected Exam Questions

1. An engineer made a change to an application and needs to select a deployment strategy that meets the following requirements:

• Is simple and fast

• Can be performed on two Identical platforms

Which of the following strategies should the engineer use?

2. The change control board received a request to approve a configuration change 10 deploy in the cloud production environment.

Which of the following should have already been competed?

3. A customer is migrating applications to the cloud and wants to grant authorization based on the classification levels of each system.

Which of the following should the customer implement to ensure authorisation to systems is granted when the user and system classification properties match? (Select two).

4. A system surpasses 75% to 80% of resource consumption.

Which of the following scaling approaches is the most appropriate?

5. A network administrator is budding a site-to-site VPN tunnel from the company's headquarters office 10 the company's public cloud development network.

The network administrator confirms the following:

The VPN tunnel is established on the headquarter office firewall.

While inside the office, developers report that they cannot connect to the development network resources.

While outside the office on a client VPN, developers report that they can connect to the development network resources.

The office and the client VPN have different IP subnet ranges.

The firewall flow logs show VPN traffic is reaching the development network from the office.

Which of the following is the next step the next network administrator should take to troubleshoot the VPN tunnel?

6. A company's man web application is no longer accessible via the internet. The cloud administrator investigates and discovers the application is accessible locally and only via an IP access.

Which of the following was misconfigured?

7. A cloud engineer is provisioning a new application that requires access to the organization's public cloud resources.

Which of the following is the best way for the cloud engineer to authenticate the application?

8. A security engineer Identifies a vulnerability m a containerized application. The vulnerability can be exploited by a privileged process to read tie content of the host's memory.

The security engineer reviews the following Dockerfile to determine a solution to mitigate similar exploits:

Which of the following is the best solution to prevent similar exploits by privileged processes?

9. A cross-site request forgery vulnerability exploited a web application that was hosted in a public laaS network. A security engineer determined that deploying a WAF in blocking mode at a CDN would prevent the application from being exploited again. However, a week after implementing the WAF, the application was exploited again.

Which of the following should the security engineer do to make the WAF control effective?

10. A cloud engineer wants containers to run the latest version of a container base image to reduce the number of vulnerabilities. The applications in use requite Python 3.10 and ate not compatible with any other version. The containers' images are created every time a new version is released from the source image.

Given the container Dockerfile below:

Which of the following actions will achieve the objectives with the least effort?

11. An engineer wants lo scale several cloud workloads on demand.

Which of the following approaches is the most suitable?

12. A software engineer is integrating an application lo The cloud that is web socket based.

Which of the following applications is the engineer most likely deploying?

13. A manager wants information about which users signed in to a certain VM during the past month.

Which of the following can the cloud administrator use to obtain this information?

14. A cloud engineer is reviewing the following Dockerfile to deploy a Python web application:

Which of the following changes should the engineer make lo the file to improve container security?

15. A company has decided to adopt a microservices architecture for its applications that are deployed to the cloud.

Which of the following is a major advantage of this type of architecture?

16. A company wants to optimize cloud resources and lower the overhead caused by managing multiple operating systems.

Which of the following compute resources would be best to help to achieve this goal?

17. A developer is deploying a new version of a containerized application.

The DevOps team wants:

• No disruption

• No performance degradation * Cost-effective deployment

• Minimal deployment time

Which of the following is the best deployment strategy given the requirements?

18. An DevOps engineer is receiving reports that users can no longer access the company's web application after hardening of a web server.

The users are receiving the following error: ERR_SSLJ/ERSION_OR_CIPHER_MISMATCH.

Which of the following actions should the engineer take to resolve the issue?

19. A healthcare organization must follow strict compliance requirements to ensure that Pll is not leaked. The cloud administrator needs to ensure the cloud email system can support this requirement.

Which of the following should the organization enable?

20. A cloud engineer wants to implement a monitoring solution to detect cryptojacking and other cryptomining malware on cloud instances.

Which of the following metrics would most likely be used to identify the activity?

21. A developer is testing code that will be used to deploy a web farm in a public cloud.

The main code block is a function to create a load balancer and a loop to create 1.000 web servers, as shown below:

The developer runs the code against the company's cloud account and observes that the load balancer is successfully created, but only 100 web servers have been created.

Which of the following should the developer do to fix this issue?

22. A cloud networking engineer is troubleshooting the corporate office's network configuration. Employees in the IT and operations departments are unable to resolve IP addresses on all devices, and the IT department cannot establish a connection to other departments' subnets.

The engineer identifies the following configuration currently in place to support the office network:

Each employee needs to connect to the network with a maximum of three hosts. Each subnet must be segregated, but the IT department must have the ability to communicate with all subnets.

Which of the following meet the IP addressing and routing requirements? (Select two).

23. A cloud developer is creating a static website that customers will be accessing globally.

Which of the following services will help reduce latency?

24. An administrator needs to adhere to the following requirements when moving a customer's data to the cloud:

• The new service must be geographically dispersed.

• The customer should have local access to data

• Legacy applications should be accessible.

Which of the following cloud deployment models is most suitable?

25. A technician receives an email from a vendor who is requesting payment of an invoice for human resources services. The email contains a request for bank account numbers.

Which of the following types of attacks does this behavior most likely indicate?

26. Which of the following best explains the concept of migrating from on premises to the cloud?

27. Which of the following service options would provide the best availability for critical applications in the event of a disaster?

28. A newly configured VM fails to run application updates despite having internet access. The updates download automatically from a third-party network.

Given the following output:

Which of the following troubleshooting steps would be best to take?

29. A company migrated its CRM system to a SaaS solution. The security team is updating the RAG matrix for the newly migrated CRM.

Given the following table:

Which of the following responsibility assignments best aligns with the shared responsibility model for the new CRM?

30. A social networking company operates globally. Some users from Brazil and Argentina are reporting the following error: website address was not found.

Which of the following is the most likely cause of this outage?

31. A cloud engineer is designing a cloud-native, three-tier application.

The engineer must adhere to the following security best practices:

• Minimal services should run on all layers of the stack.

• The solution should be vendor agnostic.

• Virealization could be used over physical hardware.

Which of the following concepts should the engineer use to design the system to best meet these requirements?

32. A high-usage cloud resource needs to be monitored in real time on specific events to guarantee its availability.

Which of the following actions should be used to meet this requirement?

33. A junior cloud administrator was recently promoted to cloud administrator and has been added to the cloud administrator group. The cloud administrator group is the only one that can access the engineering VM. The new administrator unsuccessfully attempts to access the engineering VM. However, the other administrators can access it without issue.

Which of the following is the best way to identify the root cause?

34. A cloud solutions architect is designing a VM-based solution that requires reducing the cost as much as possible.

Which of the following solutions will best satisfy this requirement?

35. A critical security patch is required on a network load balancer in a public cloud. The organization has a major sales conference next week, and the Chief Executive Officer does not want any interruptions during the demonstration of an application behind the load balancer.

Which of the following approaches should the cloud security engineer take?

36. A cloud engineer has provisioned a VM for a high-frequency trading application. After the VM is put into production, users report high latency in trades.

The engineer checks the last six hours of VM metrics and sees the following:

• CPU utilization is between 30% to 60%.

• Networkln is between 50Kbps and 70Kbps.

• NetworkOut is between 3.000Kpbs and 5.000Kbps.

• DiskReadOps is at 30.

• DiskWriteOps is at 70

• Memory utilization is between 50% and 70%.

Which of the following steps should the engineer take next to solve the latency issue?

37. A cloud engineer was deploying the company's payment processing application, but it failed with the following error log:

ERFOR: root: Transaction failed http 429 response, please try again.

Which of the following are the most likely causes for this error? (Select two).

38. An organization's web application experiences penodic bursts of traffic when a new video is launched. Users are reporting poor performance in the middle of the month.

Which of the following scaling approaches should the organization use to scale based on forecasted traffic?

39. A company uses containers stored in Docker Hub to deploy workloads (or its laaS infrastructure. The development team releases changes to the containers several times per hour.

Which of the following should a cloud engineer do to prevent the proprietary code from being exposed to third parties?

40. Which of the following is an auditing procedure that ensures service providers securely manage the data to protect the interests of the organization and the privacy of its clients?

41. A cloud engineer wants to replace the current on-premises. unstructured data storage with a solution in the cloud. The new solution needs to be cost-effective and highly scalable.

Which of the following types of storage would be best to use?

42. A security analyst reviews the daily logs and notices the following suspicious activity:

The analyst investigates the firewall logs and identities the following:

Which of the following steps should the security analyst take next to resolve this issue? (Select two).

43. A security analyst confirms a zero-day vulnerability was exploited by hackers who gained access to confidential customer data and installed ransomware on the server.

Which of the following steps should the security analyst take? (Select two).

44. Which of the following types of storage provides the greatest performance advantage for a traditional relational database?

45. Which of the following is used to detect signals and measure physical properties, such as the temperature of the human body?

46. A company wants to combine solutions in a central and scalable environment to achieve the following goals:

• Control

• Visibility

• Automation

• Cost efficiency

Which of the following best describes what the company should implement?

47. Which of the following requirements are core considerations when migrating a small business's on-premises applications to the cloud? (Select two).

48. The performance of an e-commerce website decreases dramatically during random periods. The IT team is evaluating available resources to mitigate the situation.

Which of the following is the best approach to effectively manage this scenario'?

49. A company needs to deploy its own code directly in the cloud without provisioning additional infrastructure.

Which of the following is the best cloud service model for the company to use?

50. An administrator is setting up a cloud backup solution that requires the following features:

• Cost effective

• Granular recovery

• Multilocation

Which of the following backup types best meets these requirements?

51. A cloud engineer needs to deploy a new version of a web application to 100 servers. In the past, new

version deployments have caused outages.

Which of the following deployment types should the cloud engineer implement to prevent the outages from happening this time?

52. An organization needs to retain its data for compliance reasons but only when required.

Which of the following would be the most cost-effective type of tiered storage?

53. A developer is building a new application version using a CI/CD pipeline.

The developer receives the following error message log when the build fails:

Which of the following is the most likely cause of this failure?

54. Which of the following cloud deployment strategies is best for an organization that wants to run open-source workloads with other organizations that are sharing the cost?

55. A cloud administrator shortens the amount of time a backup runs. An executive in the company requires a guarantee that the backups can be restored with no data loss.

Which of the following backup features should the administrator lest for?

56. Which of the following is the best type of database for storing different types of unstructured data that may change frequently?

57. A cloud administrator learns that a major version update. 4.6.0. is available for a business-critical application. The application is currently on version 4.5.2. with additional minor versions 3, 4, and 5 available. The administrator needs to perform the update while minimizing downtime.

Which of the following should the administrator do first?

58. A software engineer at a cybersecurity company wants to access the cloud environment. Per company policy, the cloud environment should not be directly accessible via the internet.

Which of the following options best describes how the software engineer can access the cloud resources?

59. A company requests that its cloud administrator provision virtual desktops for every user.

Given the following information:

• One hundred users are at the company.

• A maximum of 30 users work at the same time.

• Users cannot be interrupted while working on the desktop.

Which of the following strategies will reduce costs the most?

60. A user's assigned cloud credentials are locked, and the user is unable to access the project's application. The cloud administrator reviews the logs and notices several attempts to log in with the user's account were made to a different application after working hours.

Which of the following is the best approach for the administrator to troubleshoot this issue?

61. Given the following command:

Sdocker pull images.comptia.org/user1/myimage:latest.

Which of the following correctly identifies images.comptia.org?

62. Once a change has been made to templates, which of the following commands should a cloud architect use next to deploy an laaS platform?

63. Which of the following are best practices when working with a source control system? (Select two).

64. A company is developing a new web application that requires a relational database management system with minimal operational overhead.

Which of the following should the company choose?

65. Which of the following is the most cost-effective and efficient strategy when migrating to the cloud?

66. A list of CVEs was identified on a web server. The systems administrator decides to close the ports and disable weak TLS ciphers.

Which of the following describes this vulnerability management stage?

67. A company wants to use a solution that will allow for quick recovery from ransomware attacks, as well as intentional and unintentional attacks on data integrity and availability.

Which of the following should the company implement that will minimize administrative overhead?

68. A government agency in the public sector is considering a migration from on premises to the cloud.

Which of the following are the most important considerations for this cloud migration? (Select two).

69. Which of the following refers to the idea that data should stay within certain borders or territories?

70. A company recently migrated to a public cloud provider. The company's computer incident response team needs to configure native cloud services tor detailed logging.

Which of the following should the team implement on each cloud service to support root cause analysis of past events? {Select two).

71. A company experienced a data leak through its website. A security engineer, who is investigating the issue, runs a vulnerability scan against the website and receives the following output:

Which of the following is the most likely cause of this leak?

72. A customer's facility is located in an area where natural disasters happen frequently.

The customer requires the following:

• Data resiliency due to exposure to frequent natural disasters

• Data localization because of privacy regulations in the country

• High availability

Which of the following cloud resources should be provisioned to meet these requirements?

73. A software engineer needs to transfer data over the internet using programmatic access while also being able to query the data.

Which of the following will best help the engineer to complete this task?

74. A cloud administrator needs to distribute workloads across remote data centers for redundancy reasons.

Which of the following deployment strategies would eliminate downtime, accelerate deployment, and remain cost efficient?

75. An administrator used a script that worked in the past to create and tag five virtual machines. All of the virtual machines have been created: however, the administrator sees the following results: { tags: [ ] }

Which of the following is the most likely reason for this result?

76. A company has one cloud-based web server that is prone to downtime during maintenance.

Which of the following should the cloud engineer add to ensure high availability?

77. Five thousand employees always access the company's public cloud-hosted web application on a daily basis during the same time frame. Some users have been reporting performance issues while attempting to connect to the web application.

Which of the following is the best configuration approach to resolve this issue?

78. An organization's security policy states that software applications should not exchange sensitive data in cleartext. The security analyst is concerned about a software application that uses Base64 to encode credit card data.

Which of the following would be the best algorithm to replace Base64?

79. Which of the following strategies requires the development of new code before an application can be successfully migrated to a cloud provider?

80. Which of the following application migration strategies will best suit a customer who wants to move a simple web application from an on-premises server to the cloud?