CompTIA CV0-003 Online Practice Questions and Exam Preparation

CompTIA CV0-003 Online Questions & Answers

• Question 341:

  A technician deployed a VM with NL-SAS storage to host a critical application. Two weeks later, users have begun to report high application latency. Which of the following is the best action to correct the latency issue?

  A. Increase the capacity of the data storage.
  B. Migrate the data to SAS storage.
  C. Increase the CPU of the VM.
  D. Migrate the data to flash storage.
  D. Migrate the data to flash storage.

  ---

  Explanation

  

  Flash memory Explore One possible answer is:

  D. Migrate the data to flash storage.

  Flash storage is a type of solid-state storage technology that uses flash memory chips to store data. Flash storage has several advantages over NL-SAS storage, which is a hybrid of SATA and SAS technologies that uses spinning disks to

  store data. Flash storage can provide much faster performance, lower latency, higher reliability, and lower power consumption than NL-SAS storage12. Therefore, migrating the data to flash storage can help correct the latency issue for the

  critical application. However, flash storage may also be more expensive and have lower capacity than NL-SAS storage, so these factors should also be considered before making the migration decision12.

• Question 342:

  A security analyst is investigating incidents in which attackers are able to access sensitive data from a corporate application's database. The attacks occur periodically and usually after the release of a new application's version. The following log confirms the compromise:

  USER: WebApp access--key accepted WebApp user assumed DBA role GetData API call executed

  The following actions are made after every incident occurrence:

  1.Validation of firewall rules

  2.Scripted rebuild of the database and web instances

  3.Application deployment from a cloud code repository

  Which of the following actions will MOST likely prevent future compromises?

  A. Rotating the account credentials
  B. Migrating the database to be on premises
  C. Forbidding the use of API calls to retrieve data
  D. Implementing a new database service account
  D. Implementing a new database service account

  ---

  Explanation

  One possible cause for the incidents in which attackers are able to access sensitive data from a corporate application's database is that the account credentials used by the web application to access the database are compromised or leaked. The log confirms that the attackers are using the WebApp user account to assume the DBA role and execute the GetData API call, which could allow them to retrieve any data from the database. The account credentials could be compromised or leaked due to various reasons, such as weak passwords, phishing attacks, code injection, or insecure storage or transmission. Therefore, one action that will most likely prevent future compromises is to rotate the account credentials, which means changing them periodically or after every incident occurrence. Rotating the account credentials can reduce the risk of unauthorized access by invalidating the old or stolen credentials and enforcing strong and unique passwords for each account.

• Question 343:

  A company changed its policy to have seven-year data retention in the public cloud. Which of the following would be the MOST cost-effective way to meet retention requirements?

  A. Site mirroring
  B. Automated archiving
  C. Replication
  D. Third-party sites
  B. Automated archiving

  ---

  Explanation

• Question 344:

  A systems administrator disabled TLS 1.0 and 1.1, as well as RC4, 3DES, and AES-128 ciphers for TLS 1.2, on a web server. A client now reports being unable to access the web server, but the administrator verifies that the server is online, the web service is running, and other users can reach the server as well.

  Which of the following should the administrator recommend the user do FIRST?

  A. Disable antivirus/anti-malware software
  B. Turn off the software firewall
  C. Establish a VPN tunnel between the computer and the web server
  D. Update the web browser to the latest version
  D. Update the web browser to the latest version

  ---

  Explanation

  Updating the web browser to the latest version is the first action that the user should do when experiencing a connection timeout error after the administrator configured a redirect from HTTP to HTTPS on the web server. Updating the web browser can ensure that it supports the latest security protocols and standards, such as TLS 1.2 or 1.3, which are required for HTTPS connections. If the web browser is outdated or incompatible with the security protocols or standards used by the web server, it may fail to establish a secure connection and result in a connection timeout error.

  References: CompTIA Cloud+ Certification Exam Objectives, page 15, section 2.8

• Question 345:

  A company is preparing a hypervisor environment to implement a database cluster. One of the requirements is to share the disks between the nodes of the cluster to access the same LUN. Which of the following protocols should the company use? (Choose two.)

  A. CIFS
  B. FTP
  C. iSCSI
  D. RAID 10
  E. NFS
  F. FC
  C. iSCSI
  F. FC

  ---

  Explanation

  These are the protocols that should be used to share the disks between the nodes of a database cluster to access the same LUN (Logical Unit Number). A LUN is an identifier that represents a logical unit of storage, such as a disk, partition,

  volume, etc., that can be accessed by a host system or device. To share the disks between the nodes of a cluster, the following protocols can be used:

  iSCSI (Internet Small Computer System Interface): This is a protocol that allows SCSI commands to be sent over IP networks. iSCSI can enable block-level storage access over a network, which means that the host system or device can

  access the storage as if it were a local disk.

  FC (Fibre Channel): This is a protocol that provides high-speed and low-latency data transfer over optical fiber cables. FC can also enable block-level storage access over a network, which means that the host system or device can access

  the storage as if it were a local disk.

  https://www.vembu.com/blog/shared-storage-cluster-shared-volumes-configuration/

• Question 346:

  A product-based company wants to transition to a method that provides the capability to enhance the product seamlessly and keep the development iterations to a shorter time frame. Which of the following would BEST meet these requirements?

  A. Implement a secret management solution
  B. Create autoscaling capabilities
  C. Develop CI/CD tools
  D. Deploy a CMDB tool
  C. Develop CI/CD tools

  ---

  Explanation

  https://en.wikipedia.org/wiki/Continuous_integration

• Question 347:

  An organization provides integration services for finance companies that use web services. A new company that sends and receives more than 100,000 transactions per second has been integrated using the web service. The other integrated companies are now reporting slowness with regard to the integration service. Which of the following is the cause of the issue?

  A. Incorrect configuration in the authentication process
  B. Incorrect configuration in the message queue length
  C. Incorrect configuration in user access permissions
  D. Incorrect configuration in the SAN storage pool
  B. Incorrect configuration in the message queue length

  ---

  Explanation

  https://www.ibm.com/docs/en/ibm-mq/9.1?topic=i-determining-problems-applications-commands-messages

• Question 348:

  A cloud administrator who is troubleshooting DNS issues discovers zone transfers are not occurring between the primary and secondary name servers due to an error in the serial numbers. Which of the following records should the administrator query for the serial number?

  A. PTR
  B. TXT
  C. SOA
  D. SRV
  C. SOA

  ---

  Explanation

  SOA stands for Start of Authority, and it is a type of DNS record that contains information about a DNS zone, such as the name of the primary name server, the email address of the zone administrator, the serial number of the zone, and other parameters. The serial number is used to indicate when a zone has been updated, and it is incremented by the primary name server whenever a change is made to the zone data. The secondary name servers use the serial number to determine if they need to request a zone transfer from the primary name server to synchronize their data.

  References: [CompTIA Cloud+ Study Guide], page 207.

• Question 349:

  An organization recently deployed a private cloud on a cluster of systems that delivers compute, network, and storage resources in a single hardware, managed by an intelligent software. Which of the following BEST describes this type of deployment?

  A. High-performance computing
  B. Hyperconverged infrastructure
  C. Stand-alone computing
  D. Dynamic allocations
  B. Hyperconverged infrastructure

  ---

  Explanation

  Hyperconverged infrastructure (HCI) is a type of deployment that combines compute, network, and storage resources in a single hardware appliance that is managed by an intelligent software layer. HCI simplifies the configuration and management of cloud resources, reduces hardware costs and complexity, and improves scalability and performance.

  CompTIA Cloud+ Certification Exam Objectives, Domain 1.0 Configuration and Deployment, Objective 1.2 Given a scenario involving requirements for deploying an application in the cloud, select an appropriate solution design.

• Question 350:

  A cloud administrator must ensure all servers are in compliance with the company's security policy. Which of the following should the administrator check FIRST?

  A. The application version
  B. The OS version
  C. Hardened baselines
  D. Password policies
  C. Hardened baselines

  ---

  Explanation

  https://www.securitymetrics.com/blog/system-hardening-standards-how-comply-pci-requirement-22