CompTIA CV0-003 Online Practice Questions and Exam Preparation

CompTIA CV0-003 Online Questions & Answers

• Question 331:

  A systems administrator notices that a piece of networking equipment is about to reach its end of support.

  Which of the following actions should the administrator recommend?

  A. Update the firmware
  B. Migrate the equipment to the cloud
  C. Update the OS
  D. Replace the equipment
  D. Replace the equipment

  ---

  Explanation

  Replacing the equipment is the best action to take when a piece of networking equipment is about to reach its end of support. End of support means that the vendor or manufacturer will no longer provide technical assistance, updates, patches, or fixes for the equipment, which can affect its functionality, performance, security, and compatibility. Replacing the equipment with a newer model that has ongoing support can prevent any issues or risks associated with using outdated equipment.

  References: CompTIA Cloud+ Certification Exam Objectives, page 18, section 3.5

• Question 332:

  Which of the following encryption types would be used to protect company information when stored on a cloud server being shared by multiple companies?

  A. Secure socket layer encryption
  B. Transport layer security encryption
  C. Whole disk encryption
  D. File and folder level encryption
  D. File and folder level encryption

  ---

  Explanation

• Question 333:

  A cloud solutions architect needs to determine the best strategy to deploy an application environment in production, given the following requirements:

  1.No downtime

  2.Instant switch to a new version using traffic control for all users

  Which of the following deployment strategies would be the BEST solution?

  A. Hot site
  B. Blue-green
  C. Canary
  D. Rolling
  B. Blue-green

  ---

  Explanation

  Blue-green is the best deployment strategy to deploy an application environment in production, given the requirements of no downtime and instant switch to a new version using traffic control for all users. Blue-green is a deployment strategy that involves having two identical environments, one running the current version of the application (blue) and one running the new version of the application (green). The traffic is directed to the blue environment by default, while the green environment is tested and verified. When the new version is ready to go live, the traffic is switched to the green environment using a router or load balancer, without any downtime or interruption. The blue environment can be kept as a backup or updated with the new version for future deployments.

  https://thenewstack.io/deployment-strategies/

• Question 334:

  A cloud administrator would like to maintain file integrity checks through hashing on a cloud object store. Which of the following is MOST suitable from a performance perspective?

  A. SHA-256
  B. SHA-512
  C. MD5
  D. AES
  C. MD5

  ---

  Explanation

  The most suitable hashing algorithm from a performance perspective to maintain file integrity checks on a cloud object store is MD5 (Message Digest 5). MD5 is a hashing algorithm that generates a 128-bit hash value for any given input data. MD5 is faster and more efficient than other hashing algorithms, such as SHA-256 or SHA-512, which generate longer hash values and require more computational resources. MD5 can be used to verify the integrity of files by comparing their hash values before and after transmission or storage.

  CompTIA Cloud+ Certification Exam Objectives, Domain 2.0 Security, Objective 2.5 Given a scenario, apply data security techniques in the cloud.

• Question 335:

  A systems administrator for an e-commerce company will be migrating the company's main website to a cloud provider. The principal requirement is that the website must be highly available.

  Which of the following will BEST address this requirement?

  A. Vertical scaling
  B. A server cluster
  C. Redundant switches
  D. A next-generation firewall
  B. A server cluster

  ---

  Explanation

  A server cluster is a group of servers that work together to provide high availability, load balancing, and scalability for applications or services. A server cluster can help ensure the high availability requirement for migrating an e-commerce company's main website to a cloud provider, as it can prevent downtime or disruption in case of a server failure or outage by automatically switching the workload to another server in the cluster. A server cluster can also improve performance and reliability, as it can distribute the workload across multiple servers and handle increased traffic or demand.

  References: CompTIA Cloud+ Certification Exam Objectives, page 10, section 1.5

• Question 336:

  An administrator is performing an in-place upgrade on a quest VM operating system.

  Which of the following can be performed as a quick method to roll back to an earlier state, if necessary?

  A. A configuration file backup
  B. A full backup of the database
  C. A differential backup
  D. A VM-level snapshot
  D. A VM-level snapshot

  ---

  Explanation

  https://cloud.google.com/compute/docs/tutorials/performing-in-place-upgrade-windows-serverA VM-level snapshot is a point-in-time copy of the state and data of a virtual machine (VM). A VM-level snapshot can be used as a quick method to roll back to an earlier state, if necessary, as it can restore the VM to the exact condition it was in when the snapshot was taken. A VM-level snapshot can be useful for performing an in-place upgrade on a guest VM operating system, as it can allow the administrator to revert to the previous operating system version in case of any issues or errors.

  References: CompTIA Cloud+ Certification Exam Objectives, page 10, section 1.5

  https://cloud.google.com/compute/docs/tutorials/performing-in-place-upgrade- windows-server

• Question 337:

  Which of the following strategies will mitigate the risk of a zero-day vulnerability MOST efficiently?

  A. Using only open-source technologies
  B. Keeping all resources up to date
  C. Creating a standby environment with a different cloud provider
  D. Having a detailed incident response plan
  D. Having a detailed incident response plan

  ---

  Explanation

  An incident response plan is a document or procedure that defines the roles, responsibilities, and actions to be taken in the event of a security incident or breach. Having a detailed incident response plan can help mitigate the risk of a zero-day vulnerability most efficiently, as it can provide a clear and consistent framework for identifying, containing, analyzing, and resolving any potential threats or exploits related to the unknown or unpatched vulnerability. Having a detailed incident response plan can also help minimize the impact and damage of a security incident or breach, as it can enable timely and effective recovery and restoration processes.

  References: CompTIA Cloud+ Certification Exam Objectives, page 14, section 2.7

• Question 338:

  A development team recently completed testing changes to a company's web-based CMS in the sandbox environment. The cloud administrator deployed these CMS application changes to the staging environment as part of the next phase in the release life cycle. The deployment was successful, but after deploying the CMS application, the web page displays an error message stating the application is unavailable. After reviewing the application logs, the administrator sees an error message that the CMS is unable to connect to the database. Which of the following is the BEST action for the cloud administrator to perform to resolve the issue?

  A. Modify the deployment script to delete and recreate the database whenever the CMS application is deployed.
  B. Modify the ACL to allow the staging environment to access the database in the sandbox environment.
  C. Modify the CMS application deployment to use the previous version and redeploy the application.
  D. Modify the configuration settings of the CMS application to connect to the database in the current environment.
  D. Modify the configuration settings of the CMS application to connect to the database in the current environment.

  ---

  Explanation

  Modifying the configuration settings of the CMS (Content Management System) application to connect to the database in the current environment is what the cloud administrator should do to resolve the issue of web page displaying an error message stating the application is unavailable after deploying CMS application changes to the staging environment. A CMS is a software or platform that allows users to create, manage, and publish web content. A CMS may use a database to store and retrieve web content and information. A staging environment is a testing or pre-production environment that simulates the production environment and allows users to verify and validate changes or updates before deploying them to production. Modifying the configuration settings of the CMS application can help to resolve the issue by ensuring that the CMS application can access and communicate with the database in the current environment, rather than using the previous or default settings that may point to a different or non-existent database.

• Question 339:

  A cloud security analyst is implementing a vulnerability scan of the web server in the DMZ, which is running in an IaaS compute instance. The default inbound firewall settings are as follows: Which of the following will provide the analyst with the MOST accurate report?

  

  A. An agent-based scan
  B. A network vulnerability scan
  C. A default and common credentialed scan
  D. A network credentialed vulnerability scan
  D. A network credentialed vulnerability scan

  ---

  Explanation

  https://docs.tenable.com/nessus/Content/NessusCredentialedChecks.htm

• Question 340:

  After an infrastructure-as-code cloud migration to an laaS environment, the cloud engineer discovers that configurations on DB servers have drifted from the corporate standard baselines. Which of the following should the cloud engineer do to best ensure configurations are restored to the baselines?

  A. Utilize a template to automate and update the DB configuration.
  B. Create an image of the DB, delete the previous DB server, and restore from the image.
  C. Manually log in to the DB servers and update the configurations.
  D. Rename and change the IP of the old DB server and rebuild a new DB server.
  A. Utilize a template to automate and update the DB configuration.

  ---

  Explanation

  A template is a file that defines the desired state and configuration of a cloud resource, such as a server, a network, or a database. Infrastructure as code (IaC) is the practice of using templates to automate and manage cloud resources, rather than manually configuring them. IaC can help prevent configuration drift, which is the deviation of the actual state of a resource from the desired state defined by the template. In this scenario, the cloud engineer discovers that configurations on DB servers have drifted from the corporate standard baselines after an IaC cloud migration to an IaaS environment. The best way to ensure configurations are restored to the baselines is to utilize a template to automate and update the DB configuration. This way, the cloud engineer can apply the same template to all the DB servers, and ensure they are consistent and compliant with the corporate standards. Creating an image of the DB, deleting the previous DB server, and restoring from the image is not a good solution, as it may cause data loss, downtime, and additional costs. Manually logging in to the DB servers and updating the configurations is not a good solution, as it is time-consuming, error-prone, and not scalable. Renaming and changing the IP of the old DB server and rebuilding a new DB server is not a good solution, as it may cause compatibility issues, network disruptions, and security risks.

  References: CompTIA Cloud+ CV0-003 Certification Study Guide, Chapter 23, Infrastructure as Code and Configuration Management, page 3691.