CompTIA CV0-003 Online Practice Questions and Exam Preparation

CompTIA CV0-003 Online Questions & Answers

• Question 491:

  An IT administrator is implementing security controls on an OS. Which of the following will provide the best protection against a brute-force attack? (Select two).

  A. Implementing MFA
  B. Enforcing strong passwords
  C. Configuring user passwords to change every 30 days
  D. Limiting failed log-in requests
  E. Using API keys
  F. Implementing SSH keys
  A. Implementing MFA
  D. Limiting failed log-in requests

  ---

  Explanation

  Implementing MFA (multi-factor authentication) and limiting failed log-in requests are two effective ways to prevent brute-force attacks on an OS. MFA requires users to provide more than one piece of evidence to prove their identity, such as a password and a code sent to their phone. This makes it harder for attackers to guess the correct credentials. Limiting failed log-in requests prevents attackers from trying too many password combinations in a short time, by locking out the account or the IP address after a certain number of attempts. This slows down the attack and alerts the administrator of a possible intrusion.

  References: How To Prevent Brute Force Attacks With 8 Easy Tactics, Blocking Brute Force Attacks

• Question 492:

  An organization hosts an ERP database in on-premises infrastructure. A recommendation has been made to migrate the ERP solution to reduce operational overhead in the maintenance of the data center. Which of the following should be considered when migrating this on-premises database to DBaaS?

  A. Database application version compatibility Database IOPS values Database storage utilization
  B. Physical database server CPU cache value Physical database server DAS type Physical database server network I/O
  C. Database total user count Database total number of tables Database total number of storage procedures
  D. Physical database server operating system Physical database server memory configuration Physical database server CPU frequency
  A. Database application version compatibility Database IOPS values Database storage utilization

  ---

  Explanation

  These considerations are relevant when migrating to DBaaS. Ensuring compatibility with the database application version is crucial to ensure that the application works seamlessly with the DBaaS offering. Database IOPS (Input/Output Operations Per Second) values and storage utilization are important performance metrics to assess and optimize for efficient operation in the DBaaS environment.

• Question 493:

  A cloud administrator needs to establish a secure connection between two different locations. Which of the following is the BEST option to implement the secure connection?

  A. HTTPS
  B. IPSec
  C. TLS
  D. SSH
  B. IPSec

  ---

  Explanation

  The best option to implement a secure connection between two different locations is IPSec (Internet Protocol Security). IPSec is a protocol suite that provides security for IP-based communications over networks. IPSec can encrypt and authenticate the data packets between two endpoints, such as routers, firewalls, or VPN gateways. IPSec can also provide integrity, confidentiality, and replay protection for the data.

  CompTIA Cloud+ Certification Exam Objectives, Domain 2.0 Security, Objective 2.2 Given a scenario, implement appropriate network security controls for a cloud environment.

• Question 494:

  A new development team requires workstations hosted in a PaaS to develop a new website. Members of the team also require remote access to the workstations using their corporate email addresses. Which of the following solutions will best meet these requirements? (Select two).

  A. Deploy new virtual machines.
  B. Configure email account replication.
  C. Integrate identity services.
  D. Implement a VDI solution.
  E. Migrate local VHD workstations.
  F. Create a new directory service.
  C. Integrate identity services.
  D. Implement a VDI solution.

  ---

  Explanation

  To meet the requirements of the development team, the cloud administrator should integrate identity services and implement a VDI solution. Identity services are used to authenticate and authorize users and devices to access cloud resources. By integrating identity services, the cloud administrator can enable the development team to use their corporate email addresses to log in to the PaaS workstations. A VDI solution is a virtualization technology that allows users to access remote desktops hosted on a cloud platform. By implementing a VDI solution, the cloud administrator can provide the development team with workstations that have the necessary tools and configurations for web development.

  References: [CompTIA Cloud+ CV0-003 Certification Study Guide], Chapter 2, Objective 2.1: Given a scenario, deploy cloud services and solutions.

• Question 495:

  Following the deployment of a new VM, a cloud engineer notices the backup platform has not added the machine to the appropriate job. The backup platform uses a text-based variable for job configuration. This variable is based on the RPO requirements for the workload. Which of the following did the cloud engineer forget to configure when deploying the virtual machine?

  A. Tags
  B. RPO
  C. RTO
  D. Server name
  E. Template
  A. Tags

  ---

  Explanation

  Tags are key-value pairs that can be applied to cloud resources to organize, categorize, and filter them. Tags can also be used to assign resources to backup jobs based on their RPO requirements. The cloud engineer forgot to configure the appropriate tag for the new VM that matches the text-based variable of the backup platform. Therefore, the backup platform did not add the VM to the correct job.

  References: Tags and labels | Cloud Storage | Google Cloud, CompTIA Cloud+ Certification Exam Objectives, Domain 4.0: Operations and Support, Objective 4.3: Given a scenario, apply the appropriate methods for cost control in a cloud environment.

• Question 496:

  Audit and system logs are being forwarded to a syslog solution. An administrator observes that two application servers have not generated any logs for a period of three days, while others continue to send logs normally. Which of the following BEST explains what is occurring?

  A. There is a configuration failure in the syslog solution
  B. The application servers were migrated to the cloud as IaaS instances
  C. The application administrators have not performed any activity in those servers
  D. There is a local firewall policy restriction on the syslog server
  A. There is a configuration failure in the syslog solution

  ---

  Explanation

• Question 497:

  Users of a public website that is hosted on a cloud platform are receiving a message indicating the connection is not secure when landing on the website. The administrator has found that only a single protocol is opened to the service and accessed through the URL https://www.comptiasite.com. Which of the following would MOST likely resolve the issue?

  A. Renewing the expired certificate
  B. Updating the web-server software
  C. Changing the crypto settings on the web server
  D. Upgrading the users' browser to the latest version
  A. Renewing the expired certificate

  ---

  Explanation

  Renewing the expired certificate is what would most likely resolve the issue of users receiving a message indicating the connection is not secure when landing on a website that is hosted on a cloud platform and accessed through https:// www.comptiasite.com. A certificate is a digital document that contains information such as identity, public key, expiration date, etc., that can be used to prove one's identity and establish secure communication over a network. A certificate can expire when it reaches its validity period and needs to be renewed or replaced. An expired certificate can cause users to receive a message indicating the connection is not secure by indicating that the website's identity or security cannot be verified or trusted. Renewing the expired certificate can resolve the issue by extending its validity period and restoring its identity or security verification or trust.

• Question 498:

  A systems administrator needs to convert ten physical servers to virtual.

  Which of the following would be the MOST efficient conversion method for the administrator to use?

  A. Rebuild the servers from scratch
  B. Use the vendor's conversion tool
  C. Clone the hard drive
  D. Restore from backup
  B. Use the vendor's conversion tool

  ---

  Explanation

  A vendor's conversion tool is a type of software or utility that automates and simplifies the process of converting physical servers to virtual machines by capturing the configuration and data of the physical servers and creating virtual disks and files for the virtual machines. Using the vendor's conversion tool can be the most efficient conversion method for a systems administrator to use to convert ten physical servers to virtual, as it can save time and effort by avoiding manual steps or errors involved in rebuilding, cloning, or restoring the physical servers to virtual machines. Using the vendor's conversion tool can also ensure compatibility and consistency, as it can match the hardware and software requirements and settings of the physical servers to the virtual machines.

  References: CompTIA Cloud+ Certification Exam Objectives, page 10, section 1.5

• Question 499:

  An organization is conducting a performance test of a public application. The following actions have already been completed:

  1.The baseline performance has been established

  2.A load test has passed.

  3.A benchmark report has been generated

  Which of the following needs to be done to conclude the performance test?

  A. Verify the application works well under an unexpected volume of requests.
  B. Assess the application against vulnerabilities and/or misconfiguration exploitation.
  C. Test how well the application can resist a DDoS attack.
  D. Conduct a test with the end users and collect feedback.
  A. Verify the application works well under an unexpected volume of requests.

  ---

  Explanation

  After establishing a baseline, passing a load test, and generating a benchmark report, the final step in a performance test typically involves stress testing. This means verifying how well the application handles unexpected or peak volumes of requests to ensure it can maintain performance under extreme conditions

• Question 500:

  A cloud administrator is building a new VM for a network security appliance. The security appliance installer says the CPU clock speed does not meet the requirements.

  Which of the following will MOST likely solve the issue?

  A. Move the VM to a host with a faster CPU
  B. Add more vCPUs to the VM
  C. Enable CPU masking on the VM
  D. Enable hyperthreading on the virtual host
  A. Move the VM to a host with a faster CPU

  ---

  Explanation

  Moving the VM to a host with a faster CPU is the best way to solve the issue of the security appliance installer saying the CPU clock speed does not meet the requirements when building a new VM for a network security appliance. Moving the VM to a host with a faster CPU can ensure that the VM meets the minimum CPU clock speed requirement for the security appliance, as it can use the physical CPU resources of the host. Moving the VM to a host with a faster CPU can also improve the performance and reliability of the security appliance, as it can reduce latency, contention, and overhead.

  References: CompTIA Cloud+ Certification Exam Objectives, page 11, section 1.6