CompTIA CV0-004 Online Practice Questions and Exam Preparation

CompTIA CV0-004 Online Questions & Answers

• Question 121:

  A company has decided to adopt a microservices architecture for its applications that are deployed to the cloud.

  Which of the following is a major advantage of this type of architecture?

  A. Increased security
  B. Simplified communication
  C. Reduced server cost
  D. Rapid feature deployment
  D. Rapid feature deployment

  ---

  Explanation

  A major advantage of adopting a microservices architecture is rapid feature deployment. Microservices allow for independent development, deployment, and scaling of individual service components, enabling teams to bring new features to market more quickly and efficiently compared to monolithic architectures.

  References:

  The CompTIA Cloud+ certification covers cloud design aspects, including architectural models like microservices, emphasizing their role in facilitating agile development practices and rapid feature release cycles in cloud environments.

• Question 122:

  A cloud administrator needs to provide secure access within the cloud environment to an outsourced development company's users who conduct business using personal laptops. The administrator needs to protect proprietary data from leaking or being copied on unauthorized devices.

  Which of the following mechanisms best fulfills these requirements?

  A. VDI
  B. API
  C. VPN
  D. SSH
  A. VDI

  ---

  Explanation

  A Virtual Desktop Infrastructure (VDI) provides outsourced developers secure, centralized access to the cloud environment. Since applications and data remain within the controlled environment and are not stored on personal laptops, this prevents data leakage or unauthorized copying.

• Question 123:

  SIMULATION

  A company has decided to scale its e-commerce application from its corporate datacenter to a commercial cloud provider to meet an anticipated increase in demand during an upcoming holiday.

  The majority of the application load takes place on the application server under normal conditions. For this reason, the company decides to deploy additional application servers into a commercial cloud provider using the on-premises orchestration engine that installs and configures common software and network configurations.

  The remote computing environment is connected to the on-premises datacenter via a site-to-site IPSec tunnel. The external DNS provider has been configured to use weighted round-robin routing to load balance connections from the Internet.

  During testing, the company discovers that only 20% of connections completed successfully.

  INSTRUCTIONS

  Review the network architecture and supporting documents and fulfill these requirements:

  Part 1:

  1. Analyze the configuration of the following components: DNS, Firewall 1, Firewall 2, Router 1, Router 2, VPN and Orchestrator Server.

  2. Identify the problematic device(s).

  Part 2:

  1. Identify the correct options to provide adequate configuration for hybrid cloud architecture.

  2. If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

  Part 1:

  Cloud Hybrid Network Diagram

  

  

  

  

  

  

  

  

  Part 2:

  Only select a maximum of TWO options from the multiple choice question

  A. Update the PSK (Pre-shared key) in Router 2.
  B. Update the A record on the DNS from 2.2.2.2 to 1.1.1.1.
  C. Promote deny All to allow All in Firewall 1 and Firewall 2.
  D. Change the Address Space on Router 2.
  E. Change internal IP Address of Router 1.
  F. Reverse the Weight property in the two CNAME records on the DNS.
  G. Add the Application Server at on-premises to the Load Balancer.
  A. Update the PSK (Pre-shared key) in Router 2.
  D. Change the Address Space on Router 2.

  ---

  Explanation

  Part 1: Router 2

  The problematic device is Router 2, which has an incorrect configuration for the IPSec tunnel. The IPSec tunnel is a secure connection between the on-premises datacenter and the cloud provider, which allows the traffic to flow between the two networks. The IPSec tunnel requires both endpoints to have matching parameters, such as the IP addresses, the pre-shared key (PSK), the encryption and authentication algorithms, and the security associations (SAs) .

  According to the network diagram and the configuration files, Router 2 has a different PSK and a different address space than Router 1. Router 2 has a PSK of "1234567890", while Router 1 has a PSK of "0987654321". Router 2 has an address space of 10.0.0.0/8, while Router 1 has an address space of 192.168.0.0/16. These mismatches prevent the IPSec tunnel from establishing and encrypting the traffic between the two networks. The other devices do not have any obvious errors in their configuration.

  The DNS provider has two CNAME records that point to the application servers in the cloud provider, with different weights to balance the load. The firewall rules allow the traffic from and to the application servers on port 80 and port 443, as well as the traffic from and to the VPN server on port 500 and port 4500. The orchestration server has a script that installs and configures the application servers in the cloud provider, using the DHCP server to assign IP addresses.

  Part 2:

  The correct options to provide adequate configuration for hybrid cloud architecture are:

  Update the PSK (Pre-shared key) in Router 2.

  Change the Address Space on Router 2.

  These options will fix the IPSec tunnel configuration and allow the traffic to flow between the on-premises datacenter and the cloud provider. The PSK should match the one on Router 1, which is "0987654321". The address space should also match the one on Router 1, which is 192.168.0.0/16.

• Question 124:

  A cloud security engineer discovers that service account information has been committed to the company's code repository.

  Which of the following steps should the cloud security engineer take first? (Choose two.)

  A. Change the cipher suite
  B. Enable multifactor authentication
  C. Set up a virtual private network.
  D. Disable the account
  E. Run a port scan
  F. Rotate the credentials
  D. Disable the account
  F. Rotate the credentials

  ---

  Explanation

  Disabling the account is an immediate containment action that prevents any further use of the exposed service account while the incident is being investigated.

  Rotating the credentials ensures that any secrets, keys, or tokens exposed in the repository become invalid and can no longer be used by unauthorized parties. This is a critical step after credential exposure.

• Question 125:

  An organization's internal security team mandated that public cloud resources must be accessible only by a corporate VPN and not by direct public internet access.

  Which of the following would achieve this objective?

  A. WAF
  B. ACL
  C. VPC
  D. SSH
  C. VPC

  ---

  Explanation

  A Virtual Private Cloud (VPC) allows users to create a secluded section of the public cloud where resources can be launched in a defined virtual network. This enables an organization to have a section of the cloud that is secured and isolated from the public internet, thus, access to public cloud resources can be restricted to only a corporate VPN.

  References:

  CompTIA Cloud+ Study Guide (Exam CV0-004) - Chapter on Cloud Security

• Question 126:

  A company operates a website that allows customers to upload, share, and retain full ownership of their photographs.

  Which of the following could affect image ownership as the website's usage expands globally?

  A. Sovereignty
  B. Data classification
  C. Litigation holds
  D. Retention
  A. Sovereignty

  ---

  Explanation

  Data sovereignty refers to the legal implications of storing data in a country, subject to that country's laws.

  As the website's usage expands globally, data sovereignty becomes a critical concern because laws governing data ownership, privacy, and rights can vary significantly from one jurisdiction to another, potentially affecting the users' ownership rights over their photographs.

• Question 127:

  Which of the following migration types is best to use when migrating a highly available application, which is normally hosted on a local VM cluster, for usage with an external user population?

  A. Cloud to on-premises
  B. Cloud to cloud
  C. On-premises to cloud
  D. On-premises to on-premises
  C. On-premises to cloud

  ---

  Explanation

  When migrating a highly available application normally hosted on a local VM cluster for usage with an external user population, the best migration type would be on-premises to cloud. This allows the application to leverage the cloud's scalability and reach, providing better access to the external users.

  References:

  CompTIA Cloud+ Study Guide (Exam CV0-004) - Chapter on Cloud Migration

• Question 128:

  Which of the following is an intended outcome of a stand-up meeting?

  A. Identifying team members for upcoming tasks
  B. Identifying future tasks
  C. Identifying stakeholders for upcoming tasks
  D. Identifying blocking tasks
  D. Identifying blocking tasks

• Question 129:

  Which of the following vulnerability management phases includes the process of discovering newly introduced security vulnerabilities?

  A. Scanning
  B. Identification
  C. Reporting
  D. Remediation
  A. Scanning

• Question 130:

  A log-parsing application requires significant processing power to ingest the logs streaming from web servers. The engineering team presents the cloud architect with four proposals using the same underlying hardware.

  Which of the following should the cloud architect select in order to minimize the impact of an instance failure while keeping the cost as low as possible?

  A. Four instances of 4vCPU, 8GB RAM, 80GB SSD
  B. Four instances of 4vCPU, 8GB RAM, 80GB HDD
  C. Two instances of 8vCPU, 16GB RAM, 80GB SSD
  D. Two instances of 8vCPU, 16GB RAM, 80GB HDD
  A. Four instances of 4vCPU, 8GB RAM, 80GB SSD

  ---

  Explanation

  Choosing four instances with the given specifications would distribute the load and reduce the impact of any single instance failure. Using SSDs over HDDs would provide faster data processing capabilities which is crucial for a log-parsing application. This setup also retains cost efficiency by not over-provisioning resources.

  References:

  CompTIA Cloud+ Certification Study Guide (Exam CV0-004) by Scott Wilson and Eric Vanderburg.