CompTIA CV0-003 Online Practice Questions and Exam Preparation

CompTIA CV0-003 Online Questions & Answers

• Question 271:

  A cloud engineer recently set up a container image repository. The engineer wants to ensure that downloaded images are not modified in transit. Which of the following is the best method to achieve this goal?

  A. SHA-256
  B. IPSec
  C. AES-256
  D. MD5
  E. serpent-256
  A. SHA-256

  ---

  Explanation

  SHA-256 is the best method to ensure that downloaded images are not modified in transit. SHA-256 is a type of cryptographic hash function that can generate a unique and fixed- length digest for any input data. The digest can be used to verify the integrity and authenticity of the data, as any modification or tampering of the data would result in a different digest. SHA-256 is more secure and reliable than MD5, which is an older and weaker hash function that has been proven to be vulnerable to collisions and attacks12. AES-256 and serpent-256 are types of encryption algorithms, not hash functions, and they are used to protect the confidentiality of the data, not the integrity. IPSec is a network security protocol that can use encryption and hashing to secure data in transit, but it is not a method by itself

• Question 272:

  After a few new web servers were deployed, the storage team began receiving incidents in their queue about the web servers. The storage administrator wants to verify the incident tickets that should have gone to the web server team. Which of the following is the MOST likely cause of the issue?

  A. Incorrect assignment group in service management
  B. Incorrect IP address configuration
  C. Incorrect syslog configuration on the web servers
  D. Incorrect SNMP settings
  A. Incorrect assignment group in service management

  ---

  Explanation

• Question 273:

  A cloud administrator is managing two private cloud environments. In cloud A, the disaster recovery solution has an SLA for RPO of five minutes and RTO of one hour. In cloud B, the disaster recovery solution has an SLA for RPO of one hour and RTO of 24 hours. A new customer's application requires that, in case of a disaster, no more than 15 minutes of data can be lost, and it should be fully recovered within one day.

  Which of the following would be the BEST approach to this application?

  A. Tell the customer cloud A is the best solution
  B. Put it in cloud B and ask the customer to create snapshots every 15 minutes
  C. Both cloud A and cloud B would suit the customer's needs
  D. Change the cloud B disaster recovery solution so RPO will be 15 minutes
  A. Tell the customer cloud A is the best solution

  ---

  Explanation

• Question 274:

  Company A has acquired Company B and is in the process of integrating their cloud resources. Company B needs access to Company A's cloud resources while retaining its IAM solution.

  Which of the following should be implemented?

  A. Multifactor authentication
  B. Single sign-on
  C. Identity federation
  D. Directory service
  C. Identity federation

  ---

  Explanation

  Identity federation is a type of authentication mechanism that allows users to access multiple systems or applications across different domains or organizations with a single login credential. Identity federation can help integrate the cloud resources of Company A and Company B after Company A has acquired Company B, as it can enable seamless and secure access to both companies' cloud resources using the same IAM solution. Identity federation can also improve user convenience, productivity, and security, as it can simplify the login process, reduce login errors, and enhance password management.

  References: CompTIA Cloud+ Certification Exam Objectives, page 14, section 2.7

  https://medium.com/@dinika.15/identity-federation-a-brief-introduction-f2f823f8795a

• Question 275:

  A systems administrator needs to implement a way for users to verify software integrity. Which of the following tools would BEST meet the administrator's needs?

  A. TLS 1.3
  B. CRC32
  C. AES-256
  D. SHA-512
  D. SHA-512

  ---

  Explanation

  https://en.wikipedia.org/wiki/SHA-2

• Question 276:

  A systems administrator is troubleshooting performance issues with a VDI environment. The administrator determines the issue is GPU related and then increases the frame buffer on the virtual machines. Testing confirms the issue is solved, and everything is now working correctly. Which of the following should the administrator do NEXT?

  A. Consult corporate policies to ensure the fix is allowed
  B. Conduct internal and external research based on the symptoms
  C. Document the solution and place it in a shared knowledge base
  D. Establish a plan of action to resolve the issue
  C. Document the solution and place it in a shared knowledge base

  ---

  Explanation

  Documenting the solution and placing it in a shared knowledge base is what the administrator should do next after troubleshooting performance issues with a VDI (Virtual Desktop Infrastructure) environment, determining that the issue is GPU (Graphics Processing Unit) related, increasing the frame buffer on the virtual machines, and testing that confirms that the issue is solved and everything is now working correctly. Documenting the solution is a process of recording and describing what was done to fix or resolve an issue, such as actions, steps, methods, etc., as well as why and how it worked. Placing it in a shared knowledge base is a process of storing and organizing documented solutions in a central location or repository that can be accessed and used by others. Documenting the solution and placing it in a shared knowledge base can provide benefits such as: Learning: Documenting the solution and placing it in a shared knowledge base can help to learn from past experiences and improve skills and knowledge. Sharing: Documenting the solution and placing it in a shared knowledge base can help to share information and insights with others who may face similar issues or situations. Reusing: Documenting the solution and placing it in a shared knowledge base can help to reuse existing solutions for future issues or situations.

• Question 277:

  A cloud administrator is performing automated deployment of cloud infrastructure for clients. The administrator notices discrepancies from the baseline in the configuration of infrastructure that was deployed to a new client. Which of the following is MOST likely the cause?

  A. The deployment user account changed.
  B. The deployment was done to a different resource group.
  C. The deployment was done by a different cloud administrator.
  D. The deployment template was modified.
  D. The deployment template was modified.

  ---

  Explanation

  Modifications to the deployment template can result in differences from the baseline configuration, potentially leading to unexpected changes in the deployed infrastructure. It's essential to track and manage changes to deployment templates carefully to maintain consistency and reliability in automated deployments.

• Question 278:

  A cloud administrator is responsible for managing a cloud-based content management solution. According to the security policy, any data that is hosted in the cloud must be protected against data exfiltration. Which of the following solutions should the administrator implement?

  A. HIDS
  B. FIM
  C. DLP
  D. WAF
  C. DLP

  ---

  Explanation

  DLP (Data Loss Prevention) is what the administrator should implement to protect data against data exfiltration in a cloud-based content management solution. Data exfiltration is a process of transferring or stealing data from a system or network without authorization or permission. Data exfiltration can cause data breaches, leaks, or losses that may affect confidentiality, integrity, or availability of data. DLP is a tool or service that monitors and controls data movement and usage within a system or network. DLP can help to prevent data exfiltration by detecting and blocking any unauthorized or suspicious data transfers or activities, as well as enforcing policies and rules for data classification, encryption, access, etc.

• Question 279:

  A company just successfully completed a DR test and is ready to shut down its DR site and resume normal operations. Which of the following actions should the cloud administrator take FIRST?

  A. Initiate a failover
  B. Restore backups
  C. Configure the network
  D. Perform a failback
  D. Perform a failback

  ---

  Explanation

  A failback is a process of restoring or returning a system or service to its original state or location after a failure or disaster recovery event. Performing a failback is the first action that a cloud administrator should take after successfully completing a DR test and being ready to shut down its DR site and resume normal operations, as it can ensure that all data and configurations are synchronized and consistent between the primary site and the DR site before switching back to the primary site. Performing a failback can also help minimize downtime or disruption, as it can verify that all systems or services are functioning properly before resuming normal operations.

  References: CompTIA Cloud+ Certification Exam Objectives, page 10, section 1.5

• Question 280:

  A systems administrator is reviewing the logs from a company's IDS and notices a large amount of outgoing traffic from a particular server. The administrator then runs a scan on the server, which detects malware that cannot be removed. Which of the following should the administrator do first?

  A. Determine the root cause.
  B. Disconnect the server from the network.
  C. Perform a more intrusive scan.
  D. Restore the server from a backup.
  B. Disconnect the server from the network.

  ---

  Explanation

  The first step in any incident response procedure is to contain the incident and prevent it from spreading or causing more damage. In this scenario, the systems administrator is reviewing the logs from a company's IDS and notices a large amount of outgoing traffic from a particular server. The administrator then runs a scan on the server, which detects malware that cannot be removed. This indicates that the server is compromised and may be sending malicious or sensitive data to an external source. Therefore, the best thing to do first is to disconnect the server from the network, which will isolate it from the rest of the system and stop the data exfiltration. Determining the root cause, performing a more intrusive scan, and restoring the server from a backup are all important steps, but they should be done after the server is disconnected from the network.

  References: CompTIA Cloud+ CV0-003 Certification Study Guide, Chapter 10, Incident Response Procedures, page 1771.