CompTIA CV0-003 Online Practice Questions and Exam Preparation

CompTIA CV0-003 Online Questions & Answers

• Question 211:

  After accidentally uploading a password for an IAM user in plain text, which of the following should a cloud administrator do FIRST? (Choose two.)

  A. Identify the resources that are accessible to the affected IAM user
  B. Remove the published plain-text password
  C. Notify users that a data breach has occurred
  D. Change the affected IAM user's password
  E. Delete the affected IAM user
  B. Remove the published plain-text password
  D. Change the affected IAM user's password

  ---

  Explanation

  The first step a cloud administrator should take after accidentally uploading a password for an IAM user in plain text is to remove the published plain-text password. This should be done immediately to prevent unauthorized access to the affected user's resources. The administrator should then change the password for the affected IAM user to a new, strong password. This will ensure that the user's resources are secure and that there is no unauthorized access.

  A. Identifying the resources that are accessible to the affected IAM user is important, but it should not be done before removing the plain-text password and changing the password for the affected user. This step can be taken after the immediate security concerns have been addressed.

  C. While it is important to notify users of a data breach, this step is not necessary in this situation as the password was accidentally uploaded and there is no evidence that any unauthorized access has occurred. However, the cloud administrator should review their security protocols to ensure that similar incidents do not occur in the future.

  E. Deleting the affected IAM user is not necessary in this situation, as the user's resources can be secured by changing the password. Deleting the user may cause unnecessary disruption to the user's workflow and could result in the loss of important data.

  In summary, the first step a cloud administrator should take after accidentally uploading a password for an IAM user in plain text is to remove the published plain-text password, followed by changing the password for the affected user.

• Question 212:

  A cloud administrator is configuring several security appliances hosted in the private IaaS environment to forward the logs to a central log aggregation solution using syslog. Which of the following firewall rules should the administrator add to allow the web servers to connect to the central log collector?

  A. Allow UDP 161 outbound from the web servers to the log collector
  B. Allow TCP 514 outbound from the web servers to the log collector
  C. Allow UDP 161 inbound from the log collector to the web servers
  D. Allow TCP 514 inbound from the log collector to the web servers
  B. Allow TCP 514 outbound from the web servers to the log collector

  ---

  Explanation

  https://serverfault.com/questions/144427/how-to-store-etckeeper-repositories-on-a-central-server-via-git/678371#678371

• Question 213:

  A systems administrator wants to be notified every time an application's configuration files are updated. Which of the following should the administrator implement to achieve the objective?

  A. ZFS
  B. FIM
  C. MAC
  D. DLP
  B. FIM

  ---

  Explanation

  FIM stands for File Integrity Monitoring, and it is a security technique that monitors and detects changes in files and directories. FIM can help the systems administrator to be notified every time an application's configuration files are updated by generating alerts or reports when the files are modified, added, deleted, or accessed. FIM can also help verify the integrity and authenticity of the files by comparing their hashes or signatures with a baseline or a trusted source. FIM can be implemented using software tools or agents that run on the host or the network.

  References: CompTIA Cloud+ CV0-003 Certification Study Guide, Chapter 9, Objective 9.1: Given a scenario, apply security controls and techniques.

• Question 214:

  Which of the following is a hardening technique that an administrator would perform when creating a standard VM template that would be used for deploying servers in a production environment?

  A. Create a standard user account
  B. Disable unneeded services
  C. Establish a performance baseline
  D. Follow change management process
  D. Follow change management process

  ---

  Explanation

• Question 215:

  A technician deployed a VM with NL-SAS storage to host a critical application. Two weeks later, users have begun to report high application latency. Which of the following is the BEST action to correct the latency issue?

  A. Increase the capacity of the data storage.
  B. Migrate the data to SAS storage.
  C. Increase the CPU of the VM.
  D. Migrate the data to flash storage.
  D. Migrate the data to flash storage.

  ---

  Explanation

  The correct answer is

  D. Migrate the data to flash storage. Flash storage is a type of solid- state storage that uses flash memory to store data. Flash storage has much faster performance and lower latency than NL-SAS storage, which is a type of hard disk drive that uses nearline serial attached SCSI interface. According to the web search results, NL-SAS devices have much higher response times than flash devices123. Therefore, migrating the data to flash storage can reduce the application latency and improve the user experience. Increasing the capacity of the data storage, migrating the data to SAS storage, or increasing the CPU of the VM are not likely to solve the latency issue, as they do not address the root cause of the problem, which is the slow performance of NL-SAS storage. For more information on flash storage and its benefits, you can refer to the Dell EMC Unity: FAST Technology Overview2 or the Dell Technologies website4.

• Question 216:

  A cloud administrator has deployed several VM instances that are running the same applications on VDI nodes. Users are reporting that a role instance is looping between STARTED, INITIALIZING, BUSY, and STOP. Upon investigation, the cloud administrator can see the status changing every few minutes. Which of the following should be done to resolve the issue?

  A. Reboot the hypervisor.
  B. Review the package and configuration file.
  C. Configure service healing.
  D. Disable memory swap.
  C. Configure service healing.

  ---

  Explanation

• Question 217:

  A cloud architect wants to minimize the risk of having systems administrators in an IaaS compute instance perform application code changes. The development group should be the only group allowed to modify files in the directory.

  Which of the following will accomplish the desired objective?

  A. Remove the file write permissions for the application service account.
  B. Restrict the file write permissions to the development group only.
  C. Add access to the fileshare for the systems administrator's group.
  D. Deny access to all development user accounts
  B. Restrict the file write permissions to the development group only.

  ---

  Explanation

  File write permissions are permissions that control who can modify or delete files in a directory or system. Restricting the file write permissions to the development group only can help minimize the risk of having systems administrators in an IaaS compute instance perform application code changes, as it can prevent anyone other than the development group from altering or removing any files in the directory where the application code is stored. Restricting the file write permissions can also help maintain consistency and integrity, as it can ensure that only authorized and qualified users can make changes to the application code.

  References: CompTIA Cloud+ Certification Exam Objectives, page 14, section

• Question 218:

  An organization's two-node, hybrid container cluster is experiencing failures during horizontal scaling to the cloud cluster instance. The on-premises IP range is 192.168.0.0/16, and the cloud environment is 10.168.0.0/16. Overlapping or stretched VLANs are not permitted, and a node is deployed in each location. The cloud monitoring agent reports a healthy status for the second instance, but when pinging the clusters from on premises, the following output is received:

  pinging cluster1. comptia. containers.com C192.168.100 reply pinging cluster2. comptia. containers.com [192.16B .100 .128] request timed out

  Which of the following is the most likely reason for the scaling failure?

  A. Incorrect DNS entry
  B. Offline cluster node
  C. Incorrect proxy entry
  D. Incorrect cluster IP
  E. Incorrect IP route
  A. Incorrect DNS entry

  ---

  Explanation

• Question 219:

  A systems administrator deployed a new web application in a public cloud and would like to test it, but the company's network firewall is only allowing outside connections to the cloud provider network using TCP port 22. While waiting for the network administrator to open the required ports, which of the following actions should the systems administrator take to test the new application? (Select two).

  A. Create an IPSec tunnel.
  B. Create a VPN tunnel.
  C. Open a browser using the default gateway IP address.
  D. Open a browser using the localhost IP address.
  E. Create a GRE tunnel.
  F. Create a SSH tunnel.
  B. Create a VPN tunnel.
  F. Create a SSH tunnel.

  ---

  Explanation

  To test the new web application in the public cloud, the systems administrator should create a replica database, synchronize the data, and switch to the new instance, and create a SSH tunnel. Creating a replica database can help minimize the downtime and ensure data consistency during the migration. Synchronizing the data can help keep the replica database up to date with the original database. Switching to the new instance can help activate the new web application in the public cloud. Creating a SSH tunnel can help bypass the network firewall and access the web application using TCP port

  22. SSH is a secure protocol that can create encrypted tunnels between the local and remote hosts. By creating a SSH tunnel, the systems administrator can forward the web application traffic through the tunnel and test it using a web

  browser.

  References:

  [CompTIA Cloud+ CV0-003 Certification Study Guide], Chapter 7, Objective 7.1: Given a scenario, migrate applications and data to the cloud.

• Question 220:

  A media company has made the decision to migrate a physical, internal file server to the cloud and use a web-based interface to access and manage the files. The users must be able to use their current corporate logins. Which of the following is the MOST efficient way to achieve this goal?

  A. Deploy a VM in a cloud, attach storage, and copy the files across
  B. Use a SaaS service with a directory service federation
  C. Deploy a fileshare in a public cloud and copy the files across
  D. Copy the files to the object storage location in a public cloud
  B. Use a SaaS service with a directory service federation

  ---

  Explanation

  Software as a service (SaaS) is a type of cloud service model that provides software applications over the Internet that are hosted and managed by a cloud service provider. Directory service federation is a type of authentication mechanism that allows users to access multiple systems or applications across different domains or organizations with a single login credential. Using a SaaS service with a directory service federation can help migrate an internal file server to the cloud and use a web-based interface to access and manage the files, as it can eliminate the need for maintaining an on-premises file server and enable seamless and secure access to cloud-based files using the same corporate logins.

  References: CompTIA Cloud+ Certification Exam Objectives, page 8, section 1.2