CompTIA CV0-003 Online Practice Questions and Exam Preparation

CompTIA CV0-003 Online Questions & Answers

• Question 251:

  A cloud administrator is building a new VM for machine-learning training. The developer requesting the VM has stated that the machine will need a full GPU dedicated to it.

  Which of the following configuration options would BEST meet this requirement?

  A. Virtual GPU
  B. External GPU
  C. Passthrough GPU
  D. Shared GPU
  C. Passthrough GPU

  ---

  Explanation

  Passthrough GPU is a configuration option that allows a VM to access a physical GPU directly without any virtualization layer or sharing mechanism. This provides the VM with full and exclusive access to the GPU resources and performance. Passthrough GPU is suitable for applications that require intensive graphics processing or machine learning training.

  https://blogs.vmware.com/apps/2018/09/using-gpus-with-virtual-machines-on-vsphere-part-2-vmdirectpath-i-o.html

• Question 252:

  A cloud architect is reviewing the design for a new cloud-based ERP solution. The solution consists of eight servers with a single network interface. The allocated IP range is 172.16.0.0/28. One of the requirements of the solution is that it must be able to handle the potential addition of 16 new servers to the environment. Because of the complexity of the firewall and related ACL requirements, these new servers will need to be in the same network range. Which of the following changes would allow for the potential server addition?

  A. Change the IP address range to use a 10.0.0.0 address.
  B. Change the server template to add network interfaces.
  C. Change the subnet mask to use a 255.255.255.128 range.
  D. Change the server scaling configuration to increase the maximum limit.
  C. Change the subnet mask to use a 255.255.255.128 range.

  ---

  Explanation

• Question 253:

  A systems administrator deployed a new application release to the green stack of a blue- green infrastructure model and made the green stack primary. Immediately afterward, users began reporting application issues. The systems administrator must take action to bring the service online as quickly as possible. Which of the following is the FASTEST way to restore the service?

  A. Reboot all the servers in the green stack
  B. Failback to the blue stack
  C. Restore from backups
  D. Troubleshoot and resolve the application issues
  B. Failback to the blue stack

  ---

  Explanation

  The fastest way to restore the service after deploying a new application release to the green stack of a blue-green infrastructure model and making the green stack primary is to failback to the blue stack. Failing back means switching back to

  the previous version of the application that is running on the blue stack, which is still available and functional. This will minimize the downtime and impact on the users, while allowing the systems administrator to troubleshoot and fix the issues

  on the green stack.

  [CompTIA Cloud+ Certification Exam Objectives], Domain 4.0 Troubleshooting, Objective 4.4 Given a scenario, troubleshoot deployment issues.

• Question 254:

  A web application server farm has the following configuration:

  1.16vCPU

  2.128GB of memory

  3.512GB of local storage

  The performance-testing team reports the web application farm is unable to process requests beyond 5,000 concurrent connections. Which of the following should be performed?

  A. Review the memory capacity parameters in the web server
  B. Restart and redeploy the application.
  C. Restart the performance-testing tool.
  D. Review the application configuration
  D. Review the application configuration

  ---

  Explanation

• Question 255:

  An organization's web server farm, which is hosted in the cloud with DNS load balancing, is experiencing a spike in network traffic. This has caused an outage of the organization's web server infrastructure.

  Which of the following should be implemented to prevent this in the future as a mitigation method?

  A. Enable DLP
  B. Configure microsegmentation
  C. Enable DNSSEC
  D. Deploy a vADC appliance
  D. Deploy a vADC appliance

  ---

  Explanation

  A virtual application delivery controller (vADC) is a type of network device or software that provides load balancing, security, and optimization for web applications or services. Deploying a vADC appliance can help prevent an outage of the organization's web server infrastructure due to a spike in network traffic, as it can distribute the traffic across multiple web servers and improve the performance and availability of web applications or services. Deploying a vADC appliance can also provide mitigation methods such as DDoS protection, SSL offloading, and caching to enhance the security and efficiency of web traffic delivery.

  References: CompTIA Cloud+ Certification Exam Objectives, page 15, section 2.8

• Question 256:

  One of the web applications in a public subnet is vulnerable to a newly discovered zero-day vulnerability. Which of the following actions can a security engineer perform to reduce the risk of exploitation and application downtime?

  A. Stop the web server in the affected host.
  B. Insert a deny rule in the host firewall.
  C. Add a new signature in the network IDS.
  D. Implement a virtual patch in the WAF.
  D. Implement a virtual patch in the WAF.

  ---

  Explanation

  D. Implement a virtual patch in the WAF: A virtual patch in the Web Application Firewall (WAF) provides immediate protection against a zero-day vulnerability by filtering malicious traffic, without requiring downtime for system updates.

  References:

  CompTIA Cloud+ CV0-003 Study Guide Chapter 8: Data Security and Compliance Controls.

• Question 257:

  A systems administrator is using a configuration management tool to perform maintenance tasks in a system. The tool is leveraging the target system's API to perform these maintenance tasks After a number of features and security updates are applied to the target system, the configuration management tool no longer works as expected. Which of the following is the MOST likely cause of the issue?

  A. The target system's API functionality has been deprecated
  B. The password for the service account has expired
  C. The IP addresses of the target system have changed
  D. The target system has failed after the updates
  A. The target system's API functionality has been deprecated

  ---

  Explanation

  The target system's API (Application Programming Interface) functionality has been deprecated is what will most likely cause the issue of configuration management tool no longer working as expected after using it to perform maintenance tasks in a system using its API, and applying features and security updates to it. An API is a set of rules or specifications that defines how different software components or systems can communicate and interact with each other. An API functionality is a feature or function that an API provides or supports, such as methods, parameters, responses, etc. An API functionality can be deprecated when it is no longer maintained or supported by the API provider or developer, and is replaced or removed by a newer or better functionality. The target system's API functionality has been deprecated can cause the issue by making the configuration management tool unable to use or access the API functionality that it relies on to perform maintenance tasks in the system, which may result in errors or failures.

• Question 258:

  After a hardware upgrade on a private cloud system, the systems administrator notices a considerable drop in network performance. Which of the following is MOST likely the cause?

  A. The driver
  B. The memory
  C. The cluster placement
  D. The CPU
  A. The driver

  ---

  Explanation

  The driver is the most likely cause of the drop in network performance after a hardware upgrade on a private cloud system. A driver is a software component that enables communication and interaction between hardware devices and operating systems or applications. A driver may need to be updated or reinstalled after a hardware upgrade to ensure compatibility and functionality. If the driver is outdated, missing, or corrupted, it may affect the network performance of the system.

• Question 259:

  A systems administrator is planning to deploy a database cluster in a virtualization environment. The administrator needs to ensure the database nodes do not exist on the same physical host. Which of the following would best meet this requirement?

  A. Oversubscription
  B. Anti-affinity
  C. A firewall
  D. A separate cluster
  B. Anti-affinity

  ---

  Explanation

  Anti-affinity is a rule that specifies that certain virtual machines should not run on the same physical host. This can help to improve availability and performance by avoiding single points of failure and resource contention. For example, if the

  database nodes are running on the same host and the host fails, the entire database cluster will be unavailable. By using anti-affinity rules, the systems administrator can ensure the database nodes are distributed across different hosts in the

  virtualization environment.

  References:

  CompTIA Cloud+ CV0-003 Study Guide, Chapter 2: Deploying a Cloud Environment, page 76.

• Question 260:

  A systems administrator is securing a new email system for a large corporation. The administrator wants to ensure private corporate information is not emailed to external users. Which of the following would be MOST useful to accomplish this task?

  A. DLP
  B. EDR
  C. DNSSEC
  D. SPF
  A. DLP

  ---

  Explanation

  The most useful tool to prevent private corporate information from being emailed to external users is data loss prevention (DLP). DLP is a type of security solution that monitors and controls the flow of data in and out of a system or network. It can detect and prevent unauthorized access, transmission, or leakage of sensitive data, such as personal information, financial records, or intellectual property. DLP can also enforce encryption, masking, or deletion of sensitive data to protect its confidentiality.

  CompTIA Cloud+ Certification Exam Objectives, Domain 2.0 Security, Objective 2.5 Given a scenario, apply data security techniques in the cloud.