CompTIA CV0-003 Online Practice Questions and Exam Preparation

CompTIA CV0-003 Online Questions & Answers

• Question 131:

  A cloud administrator is reviewing the annual contracts for all hosted solutions. Upon review of the contract for the hosted mail solution, the administrator notes the monthly subscription rate has increased every year. The provider has been in place for ten years, and there is a large amount of data being hosted. Which of the following is a barrier to switching providers?

  A. Service-level agreement
  B. Vendor lock-in
  C. Memorandum of understanding
  D. Encrypted data
  B. Vendor lock-in

  ---

  Explanation

  Vendor lock-in is a barrier to switching providers for a hosted mail solution that has increased its monthly subscription rate every year. Vendor lock-in is a situation where a customer becomes dependent on a vendor or provider for a product or service and faces difficulties or costs in switching to another vendor or provider. Vendor lock-in can occur due to various factors, such as proprietary technology, contractual obligations, data migration challenges, compatibility issues, etc. In this case, the customer may face vendor lock-in due to the large amount of data being hosted by the mail provider and the potential challenges or costs of transferring or migrating the data to another provider.

• Question 132:

  A systems administrator is configuring a DNS server. Which of the following steps should a technician take to ensure confidentiality between the DNS server and an upstream DNS provider?

  A. Enable DNSSEC.
  B. Implement single sign-on.
  C. Configure DOH.
  D. Set up DNS over SSL.
  C. Configure DOH.

  ---

  Explanation

  DNS (Domain Name System) is a service that translates human-friendly domain names into IP addresses that can be used to communicate over the Internet1. However, DNS queries and responses are usually sent in plain text, which means that anyone who can intercept the network traffic can see the domain names that the users are requesting. This poses a threat to the confidentiality and privacy of the users and their online activities2. To ensure confidentiality between the DNS server and an upstream DNS provider, a technician should configure DOH (DNS over HTTPS). DOH is a protocol that encrypts DNS queries and responses using HTTPS (Hypertext Transfer Protocol Secure), which is a secure version of HTTP that uses SSL/TLS (Secure Sockets Layer/Transport Layer Security) to protect the data in transit3. By using DOH, the technician can prevent eavesdropping, tampering, or spoofing of DNS traffic by malicious actors3. The other options are not the best steps to ensure confidentiality between the DNS server and an upstream DNS provider: Option A: Enable DNSSEC (DNS Security Extensions). DNSSEC is a set of extensions that add digital signatures to DNS records, which can be used to verify the authenticity and integrity of the DNS data. DNSSEC can prevent DNS cache poisoning attacks, where an attacker inserts false DNS records into a DNS server's cache, redirecting users to malicious websites. However, DNSSEC does not encrypt or hide the DNS queries and responses, so it does not provide confidentiality for DNS traffic2. Option B: Implement single sign-on (SSO). SSO is a mechanism that allows users to access multiple services or applications with one set of credentials, such as a username and password. SSO can simplify the authentication process and reduce the risk of password compromise or phishing attacks. However, SSO does not affect the communication between the DNS server and an upstream DNS provider, so it does not provide confidentiality for DNS traffic. Option D: Set up DNS over SSL (DNS over Secure Sockets Layer). This option is not a valid protocol for securing DNS traffic. SSL is a deprecated protocol that has been replaced by TLS (Transport Layer Security), which is more secure and robust. The correct protocol for encrypting DNS traffic using SSL/TLS is DOH (DNS over HTTPS), as explained above.

• Question 133:

  Which of the following service models would be used for a database in the cloud?

  A. PaaS
  B. laaS
  C. CaaS
  D. SaaS
  A. PaaS

  ---

  Explanation

  PaaS (Platform as a Service) is a cloud service model that provides a platform for developing, testing, deploying, and managing applications in the cloud. PaaS includes the underlying infrastructure (servers, storage, network, etc.) as well as the middleware, databases, tools, frameworks, and APIs that are required for application development and delivery. Examples of PaaS are AWS Elastic Beanstalk, Azure App Service, Google App Engine, etc.

• Question 134:

  A cloud administrator is evaluating a solution that will limit access to authorized individuals. The solution also needs to ensure the system that connects to the environment meets patching, antivirus and configuration requirements. Which of the following technologies would BEST meet these requirements?

  A. NAC
  B. EDR
  C. IDS
  D. HIPS
  A. NAC

  ---

  Explanation

  https://www.techtarget.com/searchsecurity/tip/Cloud-detection-and-response-CDR-vs-EDR-vs-NDR-vs-XDR

• Question 135:

  A systems administrator is configuring RAID for a new server. This server will host files for users and replicate to an identical server. While redundancy is necessary, the most important need is to maximize storage.

  Which of the following RAID types should the administrator choose?

  A. 5
  B. 6
  C. 10
  D. 50
  A. 5

  ---

  Explanation

  Since the minimum number of required disks for RAID 60 is 8, we'll use 8, 1TB drives for this example.

  RAID 5 Usable storage = 7 TB RAID 6 Usable Storage = 6 TB RAID 50 Usable Storage = 6 TB RAID 60 Usable Storage = 4 TB

  This is not debatable, the best RAID to maximize storage is RAID 5. The question asks nothing about performance, only storage.

• Question 136:

  An engineer is responsible for configuring a new firewall solution that will be deployed in a new public cloud environment. All traffic must pass through the firewall. The SLA for the firewall is 99.999%. Which of the following should be deployed?

  A. Two load balancers behind a single firewall
  B. Firewalls in a blue-green configuration
  C. Two firewalls in a HA configuration
  D. A web application firewall
  C. Two firewalls in a HA configuration

  ---

  Explanation

  Deploying two firewalls in a HA (High Availability) configuration is the best option to ensure all traffic passes through the firewall and meets the SLA (Service Level Agreement) of 99.999%. HA is a design principle that aims to minimize downtime and ensure continuous operation of a system or service. HA can be achieved by using redundancy, failover, load balancing, clustering, etc. Two firewalls in a HA configuration can provide redundancy and failover in case one firewall fails or becomes overloaded.

• Question 137:

  When designing a three-node. load-balanced application, a systems administrator must ensure each node runs on a different physical server for HA purposes. Which of the following does the systems administrator need to configure?

  A. Round-robin methods
  B. Live migration
  C. Anti-affinity rule
  D. Priority queues
  C. Anti-affinity rule

  ---

  Explanation

  The correct answer is

  C. Anti-affinity rule.

  An anti-affinity rule is a configuration option that prevents two or more virtual machines (VMs) from running on the same physical host. This can improve the availability and fault tolerance of the VMs, as it reduces the risk of losing multiple

  VMs due to a single host failure. An anti-affinity rule can also improve the performance and load balancing of the VMs, as it distributes the workload across different hosts and avoids resource contention . A round-robin method is a load

  balancing algorithm that distributes incoming requests to a pool of servers in a circular order. A round-robin method does not consider the availability, capacity, or location of the servers, and may assign requests to servers that are

  overloaded, offline, or far away. A round-robin method does not ensure that each node runs on a different physical server.

  A live migration is a process that allows moving a running VM from one physical host to another without interrupting its operation. A live migration can improve the availability and performance of the VMs, as it enables dynamic load balancing,

  maintenance, and disaster recovery. However, a live migration does not prevent two or more VMs from running on the same physical host in the first place. A priority queue is a data structure that stores elements based on their priority values.

  A priority queue allows inserting and removing elements in order of their priority, such that the element with the highest priority is always at the front of the queue. A priority queue can be used to implement scheduling algorithms for processes

  or tasks, but it does not affect where they run on physical servers.

• Question 138:

  A cloud administrator is investigating slow VM performance. The administrator has checked the physical server performance and has identified the host is under stress due to a peak usage workload. Which of the following is the NEXT step the administrator should complete?

  A. Perform a root cause analysis.
  B. Migrate the VM to a different host.
  C. Document the findings.
  D. Perform a system restart.
  A. Perform a root cause analysis.

  ---

  Explanation

  https://docs.vmware.com/en/VMware-Smart-Assurance/10.1.7/deployment-scenarios/GUID-DD90BD68-5A04-405E-B532-5B928CA39CAE.html

• Question 139:

  After initial stress testing showed that a platform performed well with the specification of a single 32 vCPU node, which of the following will provide the desired service with the LOWEST cost and downtime?

  A. One 32 vCPU node with CDN caching
  B. Two 8 vCPU nodes with load balancing
  C. Three to six 8 vCPU nodes autoscaling group
  D. Four 8 vCPU nodes with DNS round robin
  C. Three to six 8 vCPU nodes autoscaling group

  ---

  Explanation

• Question 140:

  CORRECT TEXT

  The QA team is testing a newly implemented clinical trial management (CTM) SaaS application that uses a business intelligence application for reporting. The UAT users were instructed to use HTTP and HTTPS.

  Refer to the application dataflow:

  1A -The end user accesses the application through a web browser to enter and view clinical data.

  2A -The CTM application server reads/writes data to/from the database server.

  1B -The end user accesses the application through a web browser to run reports on clinical data.

  2B -The CTM application server makes a SOAP call on a non-privileged port to the BI application server.

  3B -The BI application server gets the data from the database server and presents it to the CTM application server.

  When UAT users try to access the application using https://ctm.app.com or http://ctm.app.com, they get a message stating: "Browser cannot display the webpage." The QA team has raised a ticket to troubleshoot the issue.

  INSTRUCTIONS

  You are a cloud engineer who is tasked with reviewing the firewall rules as well as virtual network settings.

  You should ensure the firewall rules are allowing only the traffic based on the dataflow.

  You have already verified the external DNS resolution and NAT are working.

  Verify and appropriately configure the VLAN assignments and ACLs. Drag and drop the appropriate VLANs to each tier from the VLAN Tags table. Click on each Firewall to change ACLs as needed.

  If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.