CompTIA CV0-002 Online Practice Questions and Exam Preparation

CompTIA CV0-002 Online Questions & Answers

• Question 321:

  Anne, an administrator, notices unusual activity on a database server. After reviewing the logs, she notices a number of successful anonymous FTP logins and transferring of data to an external server. Which of the following hardening techniques would have helped stop this attack from succeeding? (Select two.)

  A. Changing default account settings
  B. Up-to-date patching for operating system software
  C. Current updates for the NIDS
  D. Disabling unused ports and services
  E. Up-to-date patching for application system software
  F. Current updates for antivirus software
  B. Up-to-date patching for operating system software
  D. Disabling unused ports and services

• Question 322:

  Which of the following BEST describes the process of restoring service to a primary datacenter in a controlled manner, following a disaster?

  A. Failover
  B. Replication
  C. Failback
  D. Geographical diversity
  C. Failback

• Question 323:

  A VM was deleted by mistake today at 11:05 a.m. Below are the backups currently available for the VM:

  

  Crash-consistent restore is acceptable. Which of the following backups should be chosen?

  A. Snapshot from today at 11:00
  B. Full from three days ago at 00:00
  C. Incremental from today at 00:00
  D. Synthetic-full from yesterday at 12:00
  A. Snapshot from today at 11:00

• Question 324:

  A company recently decided to move some of its servers to a public cloud. The engineer has been invited to attend requirement sessions for moving servers to the cloud. The engineer is tasked with ensuring the servers that are being moved to the cloud are still in compliance, as they were on-premises.

  Which of the following should the engineer request during the requirement sessions?

  A. Syslog server
  B. Administrator access to the cloud service
  C. Configuration management tool
  D. Orchestration tool
  C. Configuration management tool

• Question 325:

  A company wants to take advantage of cloud benefits while retaining control of and maintaining compliance with all its security policy obligations. Based on the non-functional requirements, which of the following should the company use?

  A. Hybrid cloud, as use is restricted to trusted customers
  B. IaaS, as the cloud provider has a minimal level of security responsibility
  C. PaaS, as the cloud customer has the most security responsibility
  D. SaaS, as the cloud provider has less security responsibility
  A. Hybrid cloud, as use is restricted to trusted customers

• Question 326:

  A manufacturing company's current security policy mandates PII is not stored in the SaaS solution. Which of the following configuration controls should be used to block sensitive information from being stored in the SaaS solution?

  A. Implement file-level encryption.
  B. Implement a network ACL.
  C. Implement an IPS.
  D. Implement content filtering.
  B. Implement a network ACL.

• Question 327:

  A company is implementing a SaaS solution with a large user base. SaaS solution licensing is user based, and user management is critical to keep the cost in check. Which of the following is the MOST efficient way to meet this requirement?

  A. Have the administrator of the SaaS solution keep track of user activities.
  B. Have a nightly upload to the SaaS provider of the current user base based on API call.
  C. Have users remove their SaaS accounts when they no longer need the service.
  D. Have a weekly user management script maintain the SaaS user base.
  A. Have the administrator of the SaaS solution keep track of user activities.

• Question 328:

  Tenants in a shared datacenter environment are concerned with the privacy of their data as it moves from the application to the database servers in clear text. Which of the following can the provider implement to isolate tenants' data?

  A. Bandwidth hard limits
  B. Reservations
  C. Resource pooling
  D. VLANs
  D. VLANs

• Question 329:

  A cloud provider is increasingly discovering hard-to-find issues within the growing infrastructure. The provider has all the basic necessary tools implemented to collect and store data regarding the environment. To allow the cloud provider to focus on relevant events, which of the following is the MOST appropriate technique to build intelligence?

  A. Event correlation
  B. Event collection
  C. Event alerts
  D. Event-based workflows
  B. Event collection

• Question 330:

  Which of the following can be used to physically restrict employees from accessing a datacenter?

  A. Access badge
  B. Password
  C. Mantrap
  D. PIN
  A. Access badge