Real CompTIA Cloud+ CV0-002 Free Exam Questions

dumps2021-09-07T06:58:24+08:00

CompTIA Cloud+ CV0-002 exam will retire later Demcember 2021. If you are planning to take CV0-002 exam, you need to take CV0-002 exam English version before the retired date. To take CompTIA certification CV0-002 exam, you need to have 2-3 years in system administration. We provide free CompTIA Cloud+ CV0-002 exam questions for you to check the quality of the questions. Free real CompTIA certification CV0-002 exam questions are available below.

Page 1 of 7

1. A system's application servers need to be patched.

The requirements for maintenance work are as follows:

- System downtime is not allowed.

- The application server in use must be in the sane patch status.

- System performance must be maintained during patching work.

- Testing after patching must be done before the application server is in use.

- If any trouble occurs, recover the previous version in ten minutes.

Which of the following methodologies should be selected?

Rolling update

Patching directly

Blue-green deployment

Three staging environments

2. A cloud administrator is configuring block-level storage. The storage must be configured to be resistant from faults.

Given this scenario, which of the following would aid in establishing fault tolerance with asynchronous redundancy?

NAS with cloning

DAS with mirroring

JBOD with mirroring

SAN with replication

3. A CSA needs to bring a client’s public cloud site online at another location in the same region after a disaster. The RPO is eight hours, and the RTO is four hours.

Which of the following is the BEST way to accomplish this goal?

Restore the site at the new location within six hours by using backups from the failed public cloud site from eight hours earlier. Switch users from the failed site to the online regional public cloud site.

Restore the site at the new location within two hours by using backups from the failed public cloud site from two hours earlier. Switch users from the failed site to the online regional public cloud site.

Restore the site at the new location within eight hours by using backups from the failed public cloud site from six hours earlier. Switch users from the failed site to the online regional public cloud site.

Restore the site at the new location within four and half hours by using backups from the failed public cloud site from a half hour earlier. Switch users from the failed site to the online regional public cloud site.

4. A company has a requirement of an active/active datacenter and wants to implement synchronous replication for all its storage services. The company is doing a proof of concept with a datacenter provider that has two datacenters 200mi (322km) apart that utilize MPLS. Each time the company starts synchronous replication, it fails. All network connectivity has been established and is functioning correctly.

Which of the following is the MOST likely cause?

Latency between datacenters

Applications are latency tolerant

Link bandwidth between datacenters

Link between datacenters is not fiber

5. Joe, a systems administrator, deployed a computer and storage for a system and took it to the application team. The next day, the application team claimed the database was slow.

The deployment request, result, and current utilization data are shown below.

Which of the following descriptions of the situation is correct?

The deployment was done with the wrong memory configuration.

The deployment was unsuccessful due to the cloud failure.

The deployment was successful, but the capacity planning was inaccurate.

The deployment was done with the wrong storage parameter.

6. Due to a competitor's unlimited data plan, a service provider is struggling and wants to transform its business services to be more hosting oriented. A cloud architect is tasked to review current cloud resource capacity and provide recommendations and a plan for better resource utilization.

Given the following report:

Which of the following is the BEST option for the architect to suggest?

Downsize by migrating all media services to one server and decommission two servers.

Downsize by decommissioning servers 2 and 3 and reallocate media servers to hosts.

Downsize by migrating all media services to one server, add one host server, and decommission one server.

Upsize the hosting services by turning server 1 into a host server.

7. A company is implementing a SaaS solution with a large user base. SaaS solution licensing is user based, and user management is critical to keep the cost in check.

Which of the following is the MOST efficient way to meet this requirement?

Have the administrator of the SaaS solution keep track of user activities.

Have a nightly upload to the SaaS provider of the current user base based on API call.

Have users remove their SaaS accounts when they no longer need the service.

Have a weekly user management script maintain the SaaS user base.

8. Worldwide users from an organization are experiencing intermittent access to a global cloud application. The cloud provider availability dashboard shows all resource availability has been 100% in the last two weeks. No network outages have been reported.

Which of the following should the organization’s administrator do BEFORE calling the cloud provider?

Check the firewall rules on the headquarters site.

Restart the application and applicable services.

Allow all traffic at the cloud provider side from any private IP address.

Evaluate the DNS to ensure all configurations are correct.

9. A cloud administrator is analyzing usage trends for a website housed within an IaaS cloud platform. The administrator notices that traffic and visitors to the site quadrupled from the normal baseline during the holiday season. The environment has a load balancer that uses standardized VMs to host the applications.

Given this scenario, which of the following would be the MOST efficient, provide no downtime, and address the temporary spike in traffic?

Implement an upward vertical scaling solution.

Implement a downward vertical scaling solution.

Implement an inward horizontal scaling solution.

Implement an outward horizontal scaling solution.

10. A facilities management company uses a private cloud that bursts to a public cloud at times. The CSA is asked to check the amount of storage that is used when the organization is overutilizing on-premises resources.

Which of the following should the CSA check?

Ensure deduplication is enabled on all storage volumes.

Check storage utilization in the public cloud.

Verify storage utilization in the private cloud.

Confirm storage utilization in the public cloud backup environment.

11. Since the hypervisors were upgraded to the latest version, each new deployment results in an error being displayed at the orchestrator.

To troubleshoot the issue, which of the following should be done FIRST?

Verify the domain account is not locked

Upgrade the orchestrator to the latest version

Confirm the compatibility matrix

Upgrade the VMs to the latest version

12. A company moves all core applications to the public cloud. However, the lead time from business request to delivery is longer than before the migration.

Which of the following should help address the issue?

Integrate change management with the software development life cycle.

Optimize the change management process for the cloud.

Implement an automatic approval process.

Close the change ticket as soon as it is approved.

13. A software solution must be deployed based on the most granular access level.

Which of the following methods should be used to meet the requirements?

Group

RBAC

File-based

LDAP

14. A cloud-based web proxy is blocking key sites that a business requires for operation. After validation, the sites are legitimate, and access is required for end users to complete their work.

Which of the following is the BEST solution to allow access to the sites?

Instruct users to bypass the cloud-based web proxy.

Whitelist the URLs.

Blacklist the URLs.

Create a security group for those users and enforce MF

15. A CSA needs to apply new OS security patches to the application cluster server farm in a

public cloud provider. The CSA wants to ensure the security patch and configuration are consistent for all members of the server farm.

Which of the following deployment practices is the BEST approach to do this?

Update and validate the runbook procedures prior to the patch rollout.

Leverage the infrastructure as code and replace each server farm member.

Configure and patch each server individually and take an OS differential backup.

Snapshot all existing server farm members before installing the patch.

16. Which of the following would be appropriate when considering inbound access security for a web-based SaaS solution?

Antivirus/anti-malware

IPSec

Firewall

Obfuscation

17. A company’s Chief Information Officer (CIO) wants to manage PII by delegating access to sensitive files to the human resources department. The cloud engineer is tasked with selecting and implementing an appropriate technique to achieve the stated objective.

Which of the following control methods would be BEST for the cloud engineer to implement?

Create a group, add users to the group, and apply the appropriate AC

Restrict the access to originate from the home office only.

Create a shared account for users in the human resources department.

Implement multifactor authentication for users in the human resources department.

18. Following is a sample result from a recently completed load test.

Based on the information provided, which of the following would be the BEST recommendation?

Use the test result as a benchmark and document it.

Downsize the CPU and memory assignment.

Decrease assigned storage capacity.

Implement storage compression.

19. A company wants to leverage a SaaS provider for its back-office services, and security is paramount.

Which of the following solutions should a cloud engineer deploy to BEST meet the security requirements?

Firewall

IPS/IDS

Proxy gateway

CASB

20. A critical new security update has been released to fix an identified zero-day vulnerability with the SSH server process. Due to its severity, all development and staging servers must have this update applied immediately.

Which of the following is the FASTEST way for the administrator to apply the patch and ensure all systems are configured consistently?

Shut down all servers and use the server provisioning tools to deploy new ones that have the latest patch applied.

Create a master inventory list of servers that must be patched. Log in to each server and deploy the patch, making sure to check off each server on the list.

Use the existing tooling to clone the existing servers. Update each clone with the latest patch and shut down the original system.

Update the set of configuration management scripts to include the latest patch. Execute these scripts against a master inventory of servers.

Page 2 of 7

21. A cloud architect created a new delivery controller for a large VM farm to scale up according to organizational needs. The old and new delivery controllers now form a cluster. However, the new delivery controller returns an error when entering the license code.

Which of the following is the MOST likely cause?

A firewall is blocking the port on the license server.

The existing license is for a lower version.

The existing license is not supported for clusters.

The existing license has expired.

22. Which of the following provides the BEST approach for deploying multiple new firewalls into an IaaS cloud environment with minimal errors?

Manual deployment configuration

Cloud provider installation

Automated and orchestrated deployment

Firewall configuration clone

23. A user has submitted a ticket to request additional VMs due to long wait times for online ordering.

Given the snapshot of the resources in the table below:

Which of the following is the BEST option for the administrator to resolve the ticket?

Add vCPU to the database server to increase capacity.

Add disks to the database server to increase capacity.

Add virtual network ports to the web server to increase capacity.

Add memory to the web server to increase capacity.

24. There has been a change in requirements for two countries where PCI virtual instances exist. As such three virtual instances need to be added in both countries’ PCI environments, and two instances need to be removed.

Which of the following is the BEST way to ensure compliance is met in those two countries?

By the effective date of the new requirement, in each country, remove the two out-of-compliance virtual instances.

By the effective date of the new requirement, in each country, implement the three new virtual instances.

By the effective date of the new requirement, in each country implement the three new virtual instances. After a month of testing remove the two out-of-compliance virtual instances.

By the effective date of the new requirement, in each country, remove the two out-of-compliance virtual instances and implement the three new virtual instances.

25. A company is in the process of evaluating cloud service providers, as it is planning to move all of its onpremises IT services to the cloud. Most of the applications are mission critical with four 9s and five 9s uptime. The area where the company is located is also prone to natural disasters. One of the main requirements is that IT services need to survive local outages as well as regional outages. One of the company’s main customers is a government entity.

Which of the following is the BEST way for a cloud engineer to address these requirements?

Select a cloud service provider with local, regional, and international failure zones.

Select a cloud service provider with local, national, and international failure zones.

Select a cloud service provider with local, regional, and national failure zones.

Select a cloud service provider with regional, national, and international failure zones.

26. A file server is being migrated from physical hardware into a private cloud. Baselining of the server shows the disks average 90% full at all times. The contents of the file server consist mostly of compressed audio files. Multiple copies of the same files are often saved in different locations on the same disk.

Which of the following storage technologies is MOST likely to help minimize storage utilization when moving this server to the private cloud?

Compression

Thin provisioning

Deduplication

Tokenization

27. A cloud administrator needs to configure multiple web servers to participate actively in workload processing.

Which of the following will BEST help the administrator achieve this goal?

Deploy availability group and enable autoscaling.

Deploy availability group and enable load balancing.

Deploy a reverse proxy in the DM

Deploy an HA group and make each website public.

28. A cloud administrator is managing two private cloud environments. In cloud A, the disaster recovery solution has an SLA for RPO of five minutes and RTO of one hour. In cloud B, the disaster recovery solution has an SLA for RPO of one hour and RTO of 24 hours. A new customer’s application requires that, in case of a disaster, no more than 15 minutes of data can be lost, and it should be fully recovered within one day.

Which of the following would be the BEST approach to this application?

Tell the customer cloud A is the best solution

Put it in cloud B and ask the customer to create snapshots every 15 minutes

Both cloud A and cloud B would suit the customer’s needs

Change the cloud B disaster recovery solution so RPO will be 15 minutes

29. A company needs to extend its on-premises private cloud to an external cloud provider to meet the needs of additional storage and database services. The cloud architect also needs to implement a technique to meet data-in-transit requirements.

Which of the following is the BEST design to meet the company’s needs?

Analyze and implement a network ACL policy.

Analyze the requirements and implement an MPL

Analyze and implement a TLS tunnel.

Analyze and implement site-to-site VP

30. Given the IaaS cloud service model, at which of the following layers of the platform does micro segmentation BEST apply?

Compute

Storage

Network

Management

31. A cloud engineer is provisioning a group of servers in a public cloud using a template. The template uses a custom image that includes all the hardening minimum security standards approved by the cybersecurity department. The image is more than 30 days old and is updated on a quarterly basis.

Before deploying the servers in production, the cloud engineer should:

ensure the servers are fully patched.

enable all unneeded ports.

enable NAT to the servers.

apply server patches to the template.

32. A multinational corporation is moving its worldwide cloud presence to a single region, which is called Region A. An administrator attempts to use a workflow, which was previously used to deploy VMs to Region E in the new Region A environment, and receives the following error: Invalid character set.

Which of the following is the MOST likely cause of the error?

Language support

Licensing failure

Authentication issues

Time-zone misconfiguration

33. A programmer is building a new web application for a client's public cloud infrastructure. The client has requested that the web application stay available even in the event of a regional outage at the cloud provider.

Which of the following would BEST address these availability requirements?

Cloud bursting

DNS failover

Clustering

Autoscaling

34. A company has an SLA of 15ms for storage latency.

Given the above metrics, which of the following is the MOST appropriate change to the environment?

Add computing nodes and data nodes on the storage side.

Add more storage shelves to the current array.

Enable compression on the storage side.

Enable deduplication on the storage side.

35. Company A recently acquired Company B. A cloud administrator needs to give access to the accounting and time-reporting systems for Company B’s employees. Company A’s employees use a single account to access both systems.

To give access to Company B’s employees, the cloud administrator should:

add Company B’s user account management system to the federated identity system

create a new account in each system for Company B’s employees and distribute the credentials

create a shared account named “Company B” and distribute the credentials to those who need access

add new accounts in Company A’s account management system, mirroring those in Company B’s

36. A cloud administrator is integrating account logins with Facebook, LinkedIn, and Twitter for marketing and to increase market presence using social media platforms.

Given this scenario, which of the following components are needed to match these requirements? (Select TWO).

SOAP

SAML assertion

Security token

Identity provider

Session state

37. The risk and compliance team mandates that all PII should be sent via secure and encrypted channels via webmail.

As the SaaS administrator, which of the following is the BEST method for implementing data governance?

Data custodian register

Information usage policy

Data classification matrix

Fileshare permissions

38. Network functions have been virtualized in private cloud space. A number of successful user functionality tests were executed, and a load test was run using less than 100 users. The virtual network element was added into a pool of similar physical and virtual network functions. Each virtual function is licensed to handle 1.2 million subscribers. However, following the pool migration, less than 10% of the users of the virtualized network element are able to browse.

Which of the following is the BEST approach to troubleshoot the issue?

Block the virtual network element from taking new traffic. Once isolated, schedule a load test and review engineering plans.

Keep the virtual network element in the pool and start troubleshooting. The engineering capacity plan needs to be reviewed with appropriate planning organization.

Orchestrate another installation of second or third virtual network function, as needed, to add temporary capacity to the pool.

Check on the IP address pool and ensure the virtual functions have the same number of IP addresses available to accommodate the subscribers.

39. A cloud administrator reports a problem with the maximum number of users reached in one of the pools. There are ten VMs in the pool, each with a software capacity to handle ten users. Based on the dashboard metrics, 15% of the incoming new service requests are failing.

Which of the following is the BEST approach to resolve the issue?

Check compute, storage, and networking utilization in the dashboard and increase capacity by adding more resources.

Check current licensed capacity and purchase additional licenses to add more users.

Check the DHCP scope and increase the number of available IP addresses by extending the pool.

Check the rate-of-load increase to determine if the cloud capacity boundary has been exceeded and enable bursting to the pubic cloud.

40. A company uses SaaS and IaaS solutions from multiple cloud providers. Users report that this requires them to manage and remember multiple user accounts and passwords.

Which of the following solutions should be implemented to fix this issue?

SSO

Federation

Password synchronization

Lowered password complexity

Multifactor authentication

Page 3 of 7

41. A company wants to set up a new department using private cloud resources. The new department needs access to sales and financial data, but it should be prohibited from accessing human resources data.

Which of the following is the BEST option to configure on the virtual (software-defined) network to meet these requirements?

VSAN

VLAN

GRE

VPN

42. Cloud developers are experiencing a delay caused by the static code review before each deployment. The security operator and developer must address the issue without cutting corners with security testing.

Which of the following would BEST address the delay issue?

Replace the static code analysis with hardening techniques.

Perform the static code analysis earlier in the SDL

Perform a penetration test instead of a static code analysis.

Replace the static code analysis with a vulnerability analysis.

43. A cloud administrator is given a requirement to maintain a copy of all system logs for seven years. All servers are deployed in a public cloud provider’s environment.

Which of the following is the MOST cost-efficient solution for retaining these logs?

Create a long-term storage repository at the cloud provider. Have all logs copied to the cloud storage device.

Schedule a nightly job on each server to archive all logs. Copy them to a compressed drive on the server.

Configure SMTP services on each server and schedule a nightly job to email the logs to the cloud administrator team’s email account.

Configure a nightly job on each server to copy all logs to a single server. Schedule a job on the server to archive those logs into a compressed drive.

44. A business is demanding faster IT services turnaround from its IT groups. The current lead time between request and delivery is three weeks for a task that would take a competitor two days. An architect is asked to develop a solution to reduce the lead time of the request while ensuring adherence to the company policies.

Which of the following is the BEST approach to achieve the stated objective?

Document the desired state, complete a root cause analysis, and execute the flow.

Revise the schedule, implement a waterfall methodology, and flatten the network.

Identify deficiencies, optimize change management, and automate the workflow.

Follow the company policies, execute the flow, and document results.

45. After load testing on the QA environment, which showed good performance results with 10,000 users, the new version was installed in the production environment. However, users are reporting performance issues, and there are only 7,000 users currently utilizing the application. The configuration of each environment is shown in the table below.

Which of the following is the MOST likely cause of differing performance in the QA and PROD environments?

The load testing does not cover all user scenarios.

Synchronous replication is slowing down production.

The QA environment should have been tested with 7000 users.

46. Last month, a cloud engineer updated all the Linux servers to disallow telnet communication by updating the firewall and uninstalling the application. However, it was recently discovered that three of the servers had the telnet port and application installed and configured.

Which of the following is the BEST way to implement and maintain the change?

Implement a process to rebuild all the Linux servers on a weekly basis.

Disable the local administrator accounts and change all the user passwords.

Configure a configuration management system to update all Linux servers.

Review the system logs to determine who made the changes and disable those accounts.

47. A cloud provider is evaluating an insider threat. A resource from the company operations team has access to the servers’ virtual disks. This poses a risk that someone could copy and move the virtual server image and have access to the data.

Which of the following solutions would help mitigate this problem?

Tokenization

Encryption

Virtual firewall

Hashing

48. A hospital is leveraging a third-party-hosted, SaaS-based EMRS for all its regional locations. The EMRS will consolidate all existent stand-alone regional systems. All regional systems managers are concerned about the new system availability.

Which of the following should the new EMRS architect do to address the manager’s concerns?

Analyze business requirements and design the new EMRS to run the most popular IaaS provider that meets the health industry’s needs.

Analyze and communicate to regional managers that dual service providers will be used at all regional locations.

Analyze business requirements, and design and deploy client-to-site VPN for all regional hospital staff with two-factor authentication or a client certificate.

Analyze business requirements and deploy the SaaS EMRS within the hospital’s headquarters and create a client-to-site VPN from each region.

49. Ann, a cloud administrator, is reporting on how the organization has adhered to its marketing of 99.99999% system availability SLA.

Given this scenario, which of the following should Ann include in her report?

System clock time

System idle percentage

System response time

System uptime

50. With increased traffic to a website, several outages have occurred due to a log files filling the root drive of the web servers. An administrator is considering several possible solutions to prevent future outages.

Which of the following techniques is MOST likely to impact server performance if implemented?

Archiving logs.

Clearing logs.

Log redirection.

Drive compression.

51. A VM was successfully tested in a lab environment. As part of the deployment preparation, the image needs to be backed up for use in the multi-rollout accompanied by orchestration templates.

Which of the following should be used to create the image?

Snapshot

Replica

Full

Clone

52. A cloud administrator is troubleshooting a network issue that was raised after the introduction of a CASB solution. The administrator attempts different ideas during troubleshooting but is unable to resolve the issue.

In which of the following steps of the troubleshooting process is the administrator experiencing an issue?

Identifying the problem

Establishing a theory of probable cause

Testing the theory to determine the cause

Documenting the findings and actions

53. A company is consuming a SaaS solution with a large user base and wants to minimize user management, but also ensure access is as secure as possible.

Which of the following should the cloud administrator select to help meet these requirements? (Choose two.)

MFA

ACL

AAA

SSO

NAC

54. During peak times, users are unable to access their online wealth management applications in a timely fashion. The online banking application resides in a community cloud environment.

Which of the following explains how the cloud systems administrator should start to resolve this issue?

Access the cloud services portal and ensure memory ballooning is enabled.

Access the cloud services portal and ensure there is adequate disk space available.

Access the cloud services portal and ensure all users are accessing it through the same web service.

Access the cloud services portal and ensure the ACLs are set correctly for the user community.

55. A company wants to implement a public IaaS solution but also wants to address site resiliency challenges.

When selecting an IaaS provider, which of the following should a cloud technician look for within the provider’s capabilities to meet the requirements?

Bare metal service

Failure zones

Backup services

Dedicated connectivity

56. An administrator needs to make a file-level backup of a VM before deploying monthly updates. The backup should capture all changes since the last backup but should NOT reset the archive bit on any files.

Which of the following backup types BEST meets these requirements?

Incremental

Full

Snapshot

Differential

Delta Tracking

57. Several suspicious emails are being reported from end users. Organizational email is hosted by a SaaS provider. Upon investigation, the URL in the email links to a phishing site where users are prompted to enter their domain credentials to reset their passwords.

Which of the following should the cloud administrator do to protect potential account compromise?

Forward the email to the systems team distribution list and provide the compromised user list.

Click on the URL link to verify the website and enter false domain credentials.

Change the encryption key for the entire organization and lock out all users from using email until the issue is remediated.

Notify users who received the email to reset their passwords regardless of whether they click on the UR

58. The outputs of the old and new applications were compared side by side.

Which of the following requirements did the testing plan confirm? (Select two.)

High availability

Performance

Connectivity

Data integrity

Sizing

Security

59. A cloud administrator has implemented a cost-savings policy to reduce the number of servers running at a given time. This policy will shut down all servers at 3:30 a.m. and restart them at 8:30 a.m. every morning. The management team has recently communicated that the daily reports are no longer available for the 9:00 a.m. meeting.

Which of the following would be BEST for the administrator to implement?

Add more resources to reduce the duration for the batch jobs.

Change the shutdown policy to begin at 4:00 a.m.

Reschedule the financial_summary batch job to run at 9:00 a.m.

Disable the policy to shut down and restart the servers.

60. A software development company is building cloud-ready applications and needs to determine the best approach for releasing software.

Which of the following approaches should be used?

Perform QA, develop, test, and release to production

Test, perform QA, develop, and release to production

Develop, perform QA, test, and release to production

Develop, test, perform QA, and release to production

Page 4 of 7

61. An e-commerce business recently experienced a two-hour outage from its hosted web service provider. According to the SLA, the business needs to determine how much data can be restored.

On which of the following service-level components should the business focus?

MTTR

RPO

MTBF

RTO

62. Which of the following is the BEST way to ensure accounts in a cloud environment are disabled as soon as they no longer need to be active?

Have the user contact the cloud systems administrator to disable the account when it is no longer needed.

When users leave the company, ensure an account disablement request is initiated and will be fulfilled in less than four hours.

Have accounts checked by the cloud systems administrator once per day to ensure active accounts are still valid.

Reboot directory services servers once a day to ensure all account disablement requests are committed.

63. A mobile subscriber is experiencing random limited-service outages. Customers report being unable to make calls or browse. The service provider management console is not showing any alarms, errors, or critical logs, but does show a large number of connection request failures.

Which of the following could be the problem?

Misconfigured federation

IP address limitations

SSO failure

Unavailable directory service

64. An administrator is using a script to create ten new VMs in a public cloud. The script runs and returns no errors. The administrator confirms that all ten VMs show up in the dashboard, but only the first eight reply to pings.

Which of the following is the MOST likely cause of the issue?

Workflow credential errors

API request limitations

IP address depletion

Batch job scheduling issue

65. A company is migrating some of its consumer-facing services to a cloud provider. The company has been getting more customers since its competitors have gone bankrupt.

Which of the following actions would BEST meet the company’s increased resource needs?

Increase the company’s network bandwidth to 10Gbps.

Install additional load balancers.

Deploy additional web servers to the cloud.

Deploy a local database within the company’s datacenter.

66. A cloud engineer was recently hired at a company. The IT manager has tasked the cloud engineer to perform server maintenance in its public cloud. The cloud engineer is unaware of the process to perform the routine maintenance.

Which of the following should the technician do FIRST?

Request training.

Refer to previous documentation.

Perform updates in the test environment.

Refer to the SO

67. A systems administrator needs to deploy a database that saves a unique ID/hash at the beginning of each block into a private cloud. The administrator needs to maximize storage savings. The administrator has multiple storage policies set.

Which of the following would be the BEST option for this deployment?

Compression enabled

Deduplication enabled

Mirroring enabled

Tokenization enabled

68. Ann, a technician, is using a saved workflow to deploy virtual servers. The script worked yesterday but is now returning an authentication error. Ann confirms that she can manually log in with her own account and create a virtual server.

Which of the following is MOST likely causing the error?

Certificate misconfiguration

Account expiration

Federation issues

Encryption issues

69. All the virtual server instances within an organization’s private cloud environment are having trouble logging into the Kerberos realm. Upon investigation, the CSA notices the time stamps are different on the server virtual instances.

Which of the following should be the CSA’s NEXT step to resolve this issue?

Check the Kerberos token time stamp.

Check the NTP server to see when it last rebooted.

Check the NTP server synchronization.

Check the virtual server time display format.

70. A company wants to ensure production data is not exposed during a functional and load testing exercise, as it will be the source of the data.

Which of the following techniques should the cloud administrator deploy to ensure testing requirements are met?

Data masking

Data Deduplication

Data Mirroring

Data replication

71. A company is subcontracting part of a large project to another company. Management wants to ensure that there is a secure way for employees from both companies to share data without exposing internal information to employees at the other company.

Which of the following cloud models BEST serves this purpose?

Hybrid

Public

Private

Community

72. A cloud engineer needs to deploy a new virtual firewall in a private cloud.

Which of the following should the engineer do as a FIRST step?

Document the deployment in a knowledge base.

Create a change for deploying the firewall.

Put the hypervisor in maintenance mode.

Inform users that the cloud will be momentarily unavailable.

73. A new service request asks for all members of the finance department to have access to the accounting department’s file server VMs on the private cloud environment.

Which of the following is the MOST efficient way to fulfill this service request?

Set up duplicate file server VMs that the finance department has access to and enable two-way replication.

Add all users of the finance department to the accounting departments file server VMs access lists.

Implement a single sign-on and two-factor authentication solution using a soft token.

Create a new group for the finance department that will allow access to the accounting department’s file server VMs.

74. cloud administrator uses a script to automatically restart all the servers running in the public cloud provider environment, which hosts e-commerce applications. The administrator decides to implement the same script for a similar environment that hosts the finance applications. After verifying the script is deployed to the public cloud environment for finance, the administrator schedules a job to run at 9:00 a.m. After 9:00 a.m., the administrator receives a report from the e-commerce team that the application is experiencing outages.

Which of the following should the administrator do to resolve the issue?

Update the version of the CLI tool for the public cloud provider.

Copy the script up to a bastion host in the environment and run it from there.

Validate the access credentials for the cloud provider are correct.

Debug the script and modify it to remove the flawed logic.

75. A cloud administrator was testing a new application on a VM in the private cloud environment with the following requirements:

* Disk IO read latency below 5ms

* Write latency below or equal to 8ms

* Number of IOPS at least 5000

* Overall CPU usage below 80% The test results were:

* Read latency 4ms

* Write latency 800s

* 6000 IOPS

* CPU1 average 75%

* CPU2 average 82%

Which of the following BEST reflects the test results?

The test was not successful because the CPU2 usage was too high.

The test was successful because 800s is the same as 8ms.

The test was successful because the average CPU was below 80%.

The test was not successful because write latency was too high.

76. A cloud administrator has deployed a new web application to a private cloud. The application platform consists of two web servers that communicate to a redundant database back end. The traffic to the web servers is directed by a load balancer appliance. The administrator connects to the website on each of the webservers individually and confirms they are able to log in.

Which of the following aspects of the application has the administrator tested successfully?

Connectivity

Failover

Data Integrity

Performance

77. A cloud administrator is load balancing six VMs on an IaaS cloud service. The organization has an SLA stating the application should be available 99.999% of the time. At present, the six VMs are handling the load from one region and three availability zones. System baselines have confirmed there must be at least six VMs to handle this load.

Given this scenario, which of the following should the administrator recommend to BEST meet these requirements?

Implement and procure three VMs and spread them across three availability zones.

Implement and procure six VMs and add them to the three existing availability zones.

Implement and procure another region and set up three VMs across three availability zones.

Implement and procure another region and set up six VMs across three availability zones.

78. A company is implementing a launchpad within an existing application that will point to an existing SaaS provider. One of the requirements is the user should not have to log on multiple times. SSO is in place. When the launchpad is used, the user is redirected to SaaS providers as designed, but is asked for login credentials.

Which of the following is the MOST likely cause of this issue?

Users do not exist within the SaaS provider.

Group permissions are incorrect.

Users do not exist in directory services.

The federation is failing.

79. A company recently decided to move some of its servers to a public cloud. The engineer has been invited to attend requirement sessions for moving servers to the cloud. The engineer is tasked with ensuring the servers that are being moved to the cloud are still in compliance, as they were on-premises.

Which of the following should the engineer request during the requirement sessions?

Syslog server

Administrator access to the cloud service

Configuration management tool

Orchestration tool

80. A cloud administrator is securing data-at-rest and data-in-transit featured on an IaaS cloud platform. The volume to be secured is mounted storage from the same region and availability zone. The data is transferred via FTP to another Linux server in a secure manner in another availability zone, with the same data-at-rest requirements.

Given this scenario, which of the following security tools, services, and/or protocols would satisfy these requirements in the MOST secure manner? (Choose three.)

Ensure SSHv1 remote connection protocol is enabled.

Ensure SSHv2 remote connection protocol is enabled.

Ensure SSLv3 transport protocol is enabled.

Ensure TLSv1.2 transport protocol is enabled.

Ensure AES encryption is enabled.

Ensure 3DES encryption is enabled.

Ensure MD5 hashing is enabled.

Page 5 of 7

81. A cloud service administrator is consuming PaaS services and is performing baseline configuration tests.

Which of the following is part of the PaaS consumer’s responsibility with respect to the baseline confirmation tests?

Application versions

CPU utilization

RAM utilization

Operating system versions

82. The access control department creates a process to grant elevated administrator privileges for only a certain amount of time for a specific administrator task in an IaaS-hosted VM resource.

Which of the following access control method is used?

SSO

Policy-based

Two-factor authentication

RBAC

83. A company security policy mandates education and training for new employees. The policy must outline acceptable use policies for SaaS applications.

Given these requirements, which of the following security controls is BEST suited?

Preventive

Detective

Corrective

Physical

84. A storage administrator must choose the best replication methodology for storage.

The datacenters are on opposite sides of the country. The RPO is 24 hours.

Replication and customer access use the same connections. Replication should not impact customer access during the day.

Which of the following solutions would BEST meet these requirements?

Asynchronous

Regional

Multiregional

Synchronous

85. A new version of an e-commerce application was deployed using a standard template configuration of 4 vCPU and 8GB of RAM. The administrator has configured the application to automatically add 4 GB of RAM after 80% utilization of continuous use over a period of time.

Which of the following testing techniques should be used to test this scenario?

Integration testing

Load testing

Penetration testing

Automation testing

86. A company is required to ensure all access to its cloud instance for all users to utilize two-factor authentication.

The QA team confirms all functional requirements successfully test. After deployment, all business users report the two-factor authentication is not enforced while accessing the instance.

Which of the following would be the MOST likely reason the QA team did not catch the issue?

The business users are using the wrong hardware token to log in.

The administrator configured to use two-factor authentication by default.

The QA team only tested functional requirements.

The business users are accessing the instance located in their country.

87. A customer wants to remove a user’s access to the SaaS CRM system.

Which of the following methods should be executed FIRST?

User account removal

User account lockout

User account password change

User account disablement

88. IaaS users are reporting longer than expected wait times when accessing the virtual file repository. There are more than 2TB of free disk space, and vCPU and vRAM do not reach more than 75% utilization. In which of the following ways should the cloud systems administrator analyze this issue?

Access the cloud services portal and increase the amount of available disk space by 25%.

Access the cloud services portal and check the amount of CPU and RAM on the host machine.

Access the cloud services portal and look at the historical performance numbers.

Access the cloud services portal and check the security log for access denied requests.

89. A recent advertisement campaign has increased traffic to an e-commerce application that is hosted within a public cloud environment. Customers are reporting that it takes too long to load their pages and submit orders. A cloud administrator looks at the metrics from the environment and sees high utilization of the CPU and memory resources. The cloud provider offers several preconfigured sizes for server template: x-small, small, medium, large, x-large, and 2x-large.

Given an expected increase in workload, which of the following is the BEST solution to improve application performance?

Change the server template size for Inxpc003 to 2x-large.

Provision additional Inxpc servers using the 2x-large template.

Add memory to Inxpc002, Inxpc003, and Inxpc003.

Change the role of Inxw001 from web to application.

90. A consultant is helping a gaming-as-a-service company set up a new cloud. The company recently bought several graphic cards that need to be added to the servers.

Which of the following should the consultant suggest as the MOST cost effective?

Private

Public

Community

SaaS

91. A technician receives a report of system utilization:

Which of the following additional resources should the technician add FIRST given the trend data shown above?

CPU

Disk

Bandwidth

RAM

92. The administrator at a SaaS provider wants to improve security of the systems hosting the SaaS application. The administrator has created a script that monitors malware research sites and automatically creates and uploads signatures when new vulnerabilities are announced.

To which of the following security services is the script MOST likely to upload these signatures?

Proxy

VPN

Firewall

IDP

93. An automation performs the following on a monthly basis:

- Disable accounts that have not logged on in the last 60 days

- Remove firewall rules with zero hits in the last 30 days

- Remove DNS entries that have not been updated in the last 60 days

- Archive all logs that are more than 30 days old

Six weeks after this new automation is implemented, an internal client reports that quarterly replication failover testing has failed.

Which of the following is the MOST likely cause of the failed test?

Disabling accounts

Removing firewall rules

Removing DNS entries

Archiving logs

94. An organization is replacing its internal human resources system with a SaaS-based application. The solution is multi-tenant, and the organization wants to ensure ubiquitous access while preventing password replay attacks.

Which of the following would BEST help to mitigate the risk?

Implement destination resources authentication.

Require and implement two-factor authentication.

Remove administrator privileges from users’ laptops.

Combine network authentication and physical security in one card/token.

95. A cloud administrator has finished building a virtual server template in a public cloud environment. The administrator is now cloning six servers from that template. Each server is configured with one private IP address and one public IP address. After starting the server instances, the cloud administrator notices that two of the servers do not have a public IP address.

Which of the following is the MOST likely cause?

The maximum number of public IP addresses has already been reached.

The two servers are not attached to the correct public subnet.

There is no Internet gateway configured in the cloud environment.

The two servers do not have enough virtual network adapters attached.

96. A company's security policy requires full disk encryption on all clients with preboot enabled. The encryption server is hosted, and the requirement is to push an update to all endpoints.

Which of the following is the BEST method to test and apply the update with minimal disruption to end users?

Access the API of the encryption server, develop a custom script, and then update all endpoints.

Access the web UI portal of the encryption server, apply the update to the test group, validate, and then update all endpoints.

Add the update to the standard desktop configuration image, apply the update to a test VM, and then reimage clients.

Access the web UI of the encryption server and disable preboot, apply the update, test, and then deploy the update to all endpoints.

97. A consumer is performing a comparison between different IaaS providers for upcoming cloud migrations.

Which of the following is the MOST appropriate option to make a comparison for the selection process?

Hardware technology used

Virtualization platform

Backup services

SLA offerings

98. A cloud administrator runs a maintenance script to remove unused resources. After the maintenance has been performed, users report they can no longer access the application website. The administrator confirms the server is up and responding on the proper ports.

Which of the following cleanup actions MOST likely caused the problem?

Removing inactive accounts

Removing outdated firewall rules

Removing stale DNS entries

Removing orphaned resources

99. A company is looking for a hardware feature with the least amount of downtime in terms of firmware upgrades.

Which of the following features BEST meet this requirement?

In-service upgrades

Rolling upgrades

Failover upgrades

User-mode upgrades

100. A company changed its policy to have seven-year data retention in the public cloud.

Which of the following would be the MOST cost-effective way to meet retention requirements?

Site mirroring

Automated archiving

Replication

Third-party sites

Page 6 of 7

101. A SaaS customer reports that no one can access the application portal. After some troubleshooting, the cloud administrator finds a problem and provides a remedy by restarting the cluster. After documenting the solution, the support case is closed. Multiple tenants lose access to their hosts the following day.

Which of the following troubleshooting steps did the administrator miss?

Identify the problem.

Establish a theory.

Verify full system functionality.

Test the theory.

Establish a plan of action.

102. A company is migrating its application to a cloud provider. Six months before going live, a

representative from each stakeholder group validated the functionality and performance in the QA environment and did not identify any issues. After going live, the system response time is slower that the testing environment.

Which of the following is the MOST likely gap in the testing plan?

The test scenario audiences are different between QA and production.

The application version deployed in production is different than the one deployed in Q

System configuration testing in QA and production is different.

The test plan in QA is different than the production environment.

103. A company has deployed a four-node cluster in a COLO environment with server configurations listed below. The company wants to ensure there is 50% overhead for failover and redundancy. There are currently eight VMs running within the cluster with four vCPUs x32GB each.

The company wants to better utilize its resources within the cluster without compromising failover and redundancy.

Given the information above, which of the following should a cloud administrator do to BEST accommodate failover and redundancy requirements?

Ensure hyperthreading is being utilized with physical server CPUs.

Ensure dynamic resource allocation is being utilized.

Overcommit memory, and the systems will allocate resources as required.

Set hard limits for VM resources and turn on hyperthreading.

104. A cloud engineer recently applied the troubleshooting process for a major connectivity issue.

Which of the following is the FINAL step in the troubleshooting methodology?

Document findings, actions, and outcomes.

Establish a plan of action to resolve the problem and implement the solution.

Confirm the root cause of the issue.

Verify full system functionality and, if applicable, implement preventive measures.

105. A company needs to meet the security requirements for PII.

Which of the following cloud service models allows the company to have the MOST control to meet the security requirements?

SaaS

IaaS

PaaS

XaaS

106. A company has implemented a change management process that allows standard changes during business hours. The company’s private cloud hardware needs firmware updates and supports rolling upgrades.

Which of the following considerations should be given to upgrade firmware and make the change as transparent as possible to users?

Implement the change as a standard change.

Notify users before applying the change during the day.

Fail the application over to perform the upgrade.

Perform the change during off-hours to minimize the impact on users.

107. The InfoSec team has directed compliance database activity monitoring without agents on a hosted database server in the public IaaS.

Which of the following configurations is needed to ensure this requirement is achieved?

Configure the agent configuration file to log to the syslog server.

Configure sniffing mode on database traffic.

Implement built-in database tracking functionality.

Implement database encryption and secure copy to the NA

108. A cloud-based web store is experiencing poor website performance and unavailability.

Which of the following approaches would prevent the issue without administrator intervention?

Install and deploy a load balancer in the front of the web server.

Increase the computing resources to the web server.

Increase the network’s bandwidth to handle the spike.

Partner with a cloud provider to scale the required resources as needed.

109. A cloud architect is tasked with isolating traffic between subnets in an IaaS platform. The networks should be able to statefully communicate with each other.

Given this scenario, which of the following should the architect implement?

Configure security groups.

Configure HIPS policies.

Configure IDS policies.

Configure a network AC

110. A cloud administrator configures a new web server for the site https://companyname.com. The administrator installs a wildcard SSL certificate for *.companyname.com. When users attempt to access the site, a certificate error is received.

Which of the following is the MOST likely cause of the error?

Certificate misconfigured

Certificate expired

Certificate revoked

Certificate not signed

111. A company uses its own private cloud, which has few available resources. Mission-critical systems and other information systems are running on it. A new system will be deployed on the private cloud.

The following tests are included in the test plan:

✑ Load test (2h)

✑ Backup/restore test (6h)

✑ Functional test (8h)

✑ Failover test (1h)

The work schedule of the existing system is shown below.

To minimize the effect to the existing system, which of the following schedules is MOST suitable for the load test?

02:00-04:00

09:00-12:00

18:00-20:00

22:00-00:00

112. A new private cloud platform is being deployed by an engineer. SLA requirements state that any clusters should have a baseline redundancy sufficient to handle the failure of at least two hosts.

The engineer records the following metrics after the deployment:

Which of the following metrics is MOST likely to represent a violation of SLA?

RAM utilization

NIC utilization

CPU utilization

Disk utilization

113. A CSA is reviewing the deployment of an e-commerce application in a public cloud provider. The CSA wants to ensure the sizing is optimal to keep the cost of the environment down.

The available server configurations are as follows:

A review of the current system shows the following utilization information:

Which of the following should the CSA implement to ensure the MOST optimal sizing?

Change the MW01, MW02, and MW03 servers to the MEDIUM instance type.

Change the PROXY01 server to the MEDIUM instance type.

Change the DB01 server to the LARGE instance type.

Change the WEB01 server to the SMALL instance type.

114. A rural manufacturing company wants to move all IT services, including the industrial control systems, to the cloud.

Given this scenario, which of the following cloud services elements would be a challenge to the deployment?

Computing capacity flexibility

Industrial control system security

Integrated service digital network

Network broadband access

115. A technician uses a workflow to create new virtual servers in a private cloud. The workflow reports that the process was successful, but the virtual servers do not appear in the cloud dashboard.

Which of the following is the MOST likely reason the servers were not created?

Job validation issue

Location changes

Version feature mismatch

Bandwidth limitations

116. A user cannot consume SaaS services while working remotely. IP whitelisting is implemented to connect to a SaaS provider as a security mechanism.

Which of the following describes the MOST likely reason why the user cannot access the SaaS resources?

The user is not utilizing VPN to connect to the home office.

The user account does not exist in the SaaS provider.

The user account is not assigned the correct role in RBAC policy.

The user account has consumed all of the available subscriptions.

117. Email users report that it takes more than one minute to open emails, including those without attachments. There are three email instances in three different regions hosted by the same CSP. Other applications hosted by the same CSP have no reported issues.

Which of the following solutions BEST resolves the issue?

Confirm that the email instances have sufficient bandwidth.

Install monitoring software on the email instances.

Check the antivirus software settings and disable real-time message scanning.

Ensure the requested IOPS are being provided to the email instances.

118. An administrator defines a backup as follows:

✑ One weekly full backup

✑ Daily incremental backup

Which of the following BEST describes where the administrator would define this?

Backup SLA document

Backup orchestration workflow

Backup schedule

Provisioning schedule

119. A company is using storage-as-a-service from an IaaS provider for application services. The company has a mandate to protect personal information being stored on the cloud. The service provided includes encryption for in-transit data and requires a security solution for data-at-rest.

Which of the following should be deployed to secure the personal information?

Implement data tokenization.

Implement hardware-based encryption.

Implement centralized key management.

Implement database-embedded encryption.

120. Identify the problematic device(s).

Instructions:

If at any time you would like to bring back the initial state of the simulation, please select the Reset button. When you have completed the simulation, please select the Done button to submit. Once the simulation is submitted, please select the Next button to continue.

Simulation

Page 7 of 7

121. After deploying a VM with a baseline CPU utilization below 80%, a cloud engineer notices the current CPU utilization stays in the 95% to 99% range.

Which of the following describes how this should be fixed to BEST meet the baseline?

Deploy an additional VM based on the baseline.

Enable CPU hyperthreading.

Increase the CPU amount on the V

Add more RAM to the VM to decrease CPU utilization.

122. Based on demand, an IaaS provider wants to deploy a security application for its customers.

Which of the following is the BEST technique for the IaaS provider to apply this to target systems?

Vendor application

Scripting

Orchestration

Custom programming

123. A cloud implementation engineer successfully created a new VM. However, the engineer notices the new VM is not accessible from another network. A ping test works from another VM on the same subnet.

Which of the following is the MOST likely problem?

Incorrect subnet

Incorrect host IP address

Incorrect VLAN

Incorrect gateway

124. A cloud engineer is deploying a new application to a multicloud platform. After running the script, the engineer sees the VMs were not created on one of the cloud providers. The engineer confirms the proper credentials are being used for all cloud providers and there is available capacity.

Which of the following is the MOST likely cause of the deployment failure?

The cloud provider was not available.

The application does not have an adequate number of licenses.

The additional cloud provider is in a separate time zone.

The script created to be deployed does not match the cloud provider AP

125. A cloud administrator is receiving alerts that the disk on several systems is 90% full. Upon reviewing the systems, the administrator determines that the log directory is using 50% of the disk. The company has a 14- day retention policy for all logs.

Which of the following is the BEST solution to implement to minimize future alerts?

Orchestrate a job to rotate the logs and upload to external storage.

Delete any log files in the directory that are larger than 20M

Archive the existing logs in the directory and upload to external storage.

Add additional storage space to the log directory for the servers.

126. A new startup company is growing and wants to deploy a human resources management system on a private cloud that is only accessible to the human resources department.

Which of the following is the BEST method of access control?

Discretionary access control

Mandatory access control

Non-discretionary access control

Comprehensive access control

127. A cloud engineer is required to ensure all servers in the cloud environment meet requirements for PCI compliance. One of the requirements is to make certain all administrator logins and commands are logged.

Which of the following is the BEST approach to meet these requirements?

Enable configuration change tracking for all servers in the public cloud provider’s dashboard.

Enable detailed monitoring for all servers in the public cloud provider’s dashboard.

Define and enable audit tracking rules on each server in the public cloud environment.

Modify the cloud provider’s role-based authorization policies to log user session activity.

128. In a private cloud environment, which of the following is the BEST way to update 20 VMs with the same patch that has been regression tested and approved for rollout?

Automate the distribution of the patch and use an orchestration tool to roll it out.

Roll out the patch manually to the 20 VMs and reboot the system.

Deploy the patch to ten VMs for testing and then install it on the remaining VMs.

Install the patch on as many VMs as possible during the next maintenance window.

129. A cloud administrator for a state government agency is tasked with giving access to the voter registration application to a government agency in another state. Only authorized officials from each state should access the application. These agencies have a common environment where applications have been deployed in the past.

Which of the following should the cloud administrator do to give access to the application?

Deploy part of the application into a public cloud and establish secure connections to a private cloud environment.

Deploy the application to a community cloud that is shared with multiple state government agencies only.

Deploy the application to a public cloud and implement ACLs and security access policies to limit access.

Deploy the application to the state’s private cloud and give authentication credentials to the other state’s authorized officials.

130. A VM was deleted by mistake today at 11:05 a.m.

Below are the backups currently available for the VM:

Crash-consistent restore is acceptable.

Which of the following backups should be chosen?

Snapshot from today at 11:00

Full from three days ago at 00:00

Incremental from today at 00:00

Synthetic-full from yesterday at 12:00

Real CompTIA Cloud+ CV0-002 Free Exam Questions

Real CompTIA Cloud+ CV0-002 Free Exam Questions

Share this post

Leave a Reply Cancel reply

Related Posts