CompTIA CV0-003 Online Practice Questions and Exam Preparation

CompTIA CV0-003 Online Questions & Answers

• Question 381:

  A cloud administrator is setting up a DR site on a different zone of the same CSP. The application servers are replicated using the VM replication, and the database replication is set up using log shipping. Upon testing the DR site, the application servers are unable to access the database servers. The administrator has verified the systems are running and are accessible from the CSP portal.

  Which of the following should the administrator do to fix this issue?

  A. Change the database application IP
  B. Create a database cluster between the primary site and the DR site
  C. Update the connection string
  D. Edit the DNS record at the DR site for the application servers
  C. Update the connection string

  ---

  Explanation

  A connection string is a parameter that specifies how to connect to a database server or instance. A connection string typically includes information such as the server name, database name, user name, password, and other options. Updating the connection string is the best way to fix the issue of application servers being unable to access the database servers after setting up a DR site on a different zone of the same CSP and replicating the application and database servers using VM replication and log shipping. Updating the connection string can ensure that the application servers can connect to the correct database server or instance in the DR site, as the server name or IP address may have changed after the replication.

  References: CompTIA Cloud+ Certification Exam Objectives, page 10, section 1.5

• Question 382:

  A cloud administrator has deployed a website and needs to improve the site security to meet requirements. The website architecture is designed to have a DBaaS in the back end and autoscaling instances in the front end using a load balancer to distribute the request. Which of the following will the cloud administrator MOST likely use?

  A. An API gateway
  B. An IPS/IDS
  C. A reverse proxy
  D. A WAF
  D. A WAF

  ---

  Explanation

  https://aws.amazon.com/elasticloadbalancing/applicationloadbalancer/

• Question 383:

  A company has just completed a security audit and received initial results from the auditor. The results show that the ethical hacker was able to gain access to the company servers by exploiting non-hardened VMs and hosts as guests and administrators. Which of the following should be implemented to harden the environment? (Select two.)

  A. Discretionary access controls
  B. Disable unnecessary accounts
  C. Change default passwords
  D. Install antivirus software
  E. Role-based access controls
  B. Disable unnecessary accounts
  E. Role-based access controls

  ---

  Explanation

• Question 384:

  A company is deploying a public cloud solution for an existing application using lift and shift. The requirements for the applications are scalability and external access. Which of the following should the company implement? (Choose two.)

  A. A load balancer
  B. SDN
  C. A firewall
  D. SR-IOV
  E. Storage replication
  F. A VPN
  A. A load balancer
  F. A VPN

  ---

  Explanation

  The best options to implement for a public cloud solution for an existing application using lift and shift that requires scalability and external access are a load balancer and a VPN (virtual private network). A load balancer is a device or service that distributes incoming traffic across multiple servers or instances based on various criteria, such as availability, capacity, or performance. A load balancer can improve scalability by balancing the workload and optimizing resource utilization. A VPN is a technology that creates a secure and encrypted connection over a public network, such as the internet. A VPN can provide external access by allowing remote users or sites to connect to the cloud resources as if they were on the same private network.

  CompTIA Cloud+ Certification Exam Objectives, Domain 1.0 Configuration and Deployment, Objective 1.4 Given a scenario, execute a provided deployment plan.

• Question 385:

  Users currently access SaaS email with five-character passwords that use only letters and numbers. An administrator needs to make access more secure without changing the password policy. Which of the following will provide a more secure way of accessing email at the lowest cost?

  A. Change the email service provider.
  B. Enable MFA with a one-time password.
  C. Implement SSO for all users.
  D. Institute certificate-based authentication
  B. Enable MFA with a one-time password.

  ---

  Explanation

  Enable MFA with a one-time password. MFA stands for multi-factor authentication, which is a method of verifying a user's identity by requiring two or more forms of authentication. A one-time password (OTP) is a code that is generated randomly and valid only for a short period of time. By enabling MFA with OTP, the administrator can make access to the SaaS email more secure without changing the password policy, as users will need to provide both their password and an OTP to sign in.

• Question 386:

  A cloud administrator is responsible for managing a public cloud environment. The administrator needs to deploy new servers that will be domain controllers to authenticate 500,000 users and computer objects. Which of the following storage types would be BEST to select when deploying the servers to achieve the lowest cost per I/O?

  A. Hybrid
  B. SAS
  C. Flash
  D. SSD
  D. SSD

  ---

  Explanation

• Question 387:

  A company is using a method of tests and upgrades in which a small set of end users are exposed to new services before the majority of other users. Which of the following deployment methods is being used?

  A. Blue-green
  B. Canary
  C. Big bang
  D. Rolling
  B. Canary

  ---

  Explanation

  A canary deployment is a software deployment technique where a new feature or version is released to a small subset of users in production prior to releasing it to a larger subset or all the users. It is also sometimes termed a phased rollout or incremental release1. A canary deployment allows the developers to test the new service in a real environment and get feedback from the users before making it available to everyone. It also reduces the risk of failures and enables easy rollbacks if something goes wrong. A canary deployment is different from a blue-green deployment, where two identical environments are used to switch between the old and new versions of the service. A big bang deployment is where the new service is released to all the users at once, without any testing or gradual rollout. A rolling deployment is where the new service is installed in batches or stages, replacing the old service gradually until all the users are on the new version.

• Question 388:

  A cloud engineer needs to perform a database migration_ The database has a restricted SLA and cannot be offline for more than ten minutes per month The database stores 800GB of data, and the network bandwidth to the CSP is

  100MBps.

  Which of the following is the BEST option to perform the migration?

  A. Copy the database to an external device and ship the device to the CSP
  B. Create a replica database, synchronize the data, and switch to the new instance.
  C. Utilize a third-patty tool to back up and restore the data to the new database
  D. use the database import/export method and copy the exported file.
  B. Create a replica database, synchronize the data, and switch to the new instance.

  ---

  Explanation

  Create a replica database, synchronize the data, and switch to the new instance. This option is the best option to perform the migration because it can minimize the downtime and data loss during the migration process. A replica database is a copy of the source database that is kept in sync with the changes made to the original database. By creating a replica database in the cloud, the cloud engineer can transfer the data incrementally and asynchronously, without affecting the availability and performance of the source database. When the replica database is fully synchronized with the source database, the cloud engineer can switch to the new instance by updating the connection settings and redirecting the traffic. This can reduce the downtime to a few minutes or seconds, depending on the complexity of the switch. Some of the tools and services that can help create a replica database and synchronize the data are AWS Database Migration Service (AWS DMS) 1, Azure Database Migration Service 2, and Striim 3. These tools and services can support various source and target databases, such as Oracle, MySQL, PostgreSQL, SQL Server, MongoDB, etc. They can also provide features such as schema conversion, data validation, monitoring, and security. The other options are not the best options to perform the migration because they can cause more downtime and data loss than the replica database option. Copying the database to an external device and shipping the device to the CSP is a slow and risky option that can take days or weeks to complete. It also exposes the data to physical damage or theft during transit. Moreover, this option does not account for the changes made to the source database after copying it to the device, which can result in data inconsistency and loss. Utilizing a third-party tool to back up and restore the data to the new database is a faster option than shipping a device, but it still requires a significant amount of downtime and bandwidth. The source database has to be offline or in read-only mode during the backup process, which can take hours or days depending on the size of the data and the network speed. The restore process also requires downtime and bandwidth, as well as compatibility checks and configuration adjustments. Additionally, this option does not account for the changes made to the source database after backing it up, which can result in data inconsistency and loss. Using the database import/ export method and copying the exported file is a similar option to using a third-party tool, but it relies on native database features rather than external tools. The import/export method involves exporting the data from the source database into a file format that can be imported into the target database. The file has to be copied over to the target database and then imported into it. This option also requires downtime and bandwidth during both export and import processes, as well as compatibility checks and configuration adjustments. Furthermore, this option does not account for the changes made to the source database after exporting it, which can result in data inconsistency and loss.

• Question 389:

  A cloud administrator needs to reduce the cost of cloud services by using the company's off-peak period. Which of the following would be the BEST way to achieve this with minimal effort?

  A. Create a separate subscription.
  B. Create tags.
  C. Create an auto-shutdown group.
  D. Create an auto-scaling group.
  C. Create an auto-shutdown group.

  ---

  Explanation

  Creating an auto-shutdown group is the best way to reduce the cost of cloud services by using the company's off-peak period with minimal effort. An auto-shutdown group is a feature that allows customers to automatically turn off or shut down certain cloud resources or services during a specified time period or schedule. An auto-shutdown group can help to reduce the cost of cloud services by minimizing the consumption of resources or services during off-peak periods, when they are not needed or used. An auto-shutdown group can also help to reduce the effort of managing cloud resources or services by automating the shutdown process, without requiring any manual intervention or configuration.

• Question 390:

  An IaaS provider has numerous devices and services that are commissioned and decommissioned automatically on an ongoing basis. The cloud administrator needs to implement a solution that will help reduce administrative overhead.

  Which of the following will accomplish this task?

  A. IPAM
  B. NAC
  C. NTP
  D. DNS
  A. IPAM

  ---

  Explanation

  IP address management (IPAM) is a type of tool or system that automates and standardizes the allocation, tracking, and management of IP addresses in an IP network. IPAM can help reduce administrative overhead for an IaaS provider that has numerous devices and services that are commissioned and decommissioned automatically on an ongoing basis, as it can simplify and centralize the process of assigning and reclaiming IP addresses for different devices and services without manual intervention or errors. IPAM can also help optimize network performance and security, as it can monitor and report any issues or conflicts related to IP addresses.

  References: CompTIA Cloud+ Certification Exam Objectives, page 15, section 2.8

  https://www.infoblox.com/glossary/ipam-ip-address-management/