CompTIA CV0-004 Online Practice Questions and Exam Preparation

CompTIA CV0-004 Online Questions & Answers

• Question 131:

  Unknown attackers targeted a bank's website using HTTP flooding and infiltration via a SQL injection.

  Which of the following should the cloud engineer implement as a protection mechanism?

  A. DLP
  B. IPS
  C. Security group
  D. WAF
  D. WAF

  ---

  Explanation

  A web application firewall protects against application-layer attacks such as HTTP floods and SQL injection by filtering and blocking malicious web traffic before it reaches the application.

• Question 132:

  A project sponsor requests a record of all identified bugs within a project.

  Which document should be provided?

  A. Change log
  B. Issue log
  C. Risk register
  D. Defect log
  D. Defect log

• Question 133:

  Which of the following best describes the focus of DevSecOps?

  A. Securing, testing, and maintaining new software
  B. Developing, testing, and maintaining software
  C. Developing, maintaining, and securing software
  D. Developing, securing, and testing software
  D. Developing, securing, and testing software

• Question 134:

  A cloud engineer wants to replace the current on-premises. unstructured data storage with a solution in the cloud. The new solution needs to be cost-effective and highly scalable.

  Which of the following types of storage would be best to use?

  A. File
  B. Block
  C. Object
  D. SAN
  C. Object

  ---

  Explanation

  Object storage is ideal for cost-effective and highly scalable unstructured data. It allows for the storage of massive amounts of unstructured data in a flat namespace and is not constrained by the rigid structures of file or block storage. Object storage is highly durable and designed for high levels of scalability and accessibility.

  References:

  The suitability of object storage for unstructured data and scalability is a part of cloud storage technologies covered in CompTIA Cloud+ materials.

• Question 135:

  The following is a code excerpt of a playbook.yaml file:

  

  Which of the following functions does this code perform?

  A. Registers the variable needed to debug the web server stdout result
  B. Executes the command to restart the web server and lists the result
  C. Prints the amount of time the server has been online
  D. Troubleshoots the web server configurations and standard output
  C. Prints the amount of time the server has been online

  ---

  Explanation

  The Ansible playbook runs the uptime command on the hosts in the webservers group and stores the output in the variable u_result. The debug task then prints the contents of u_result.stdout_lines, which displays the output of the uptime command, including how long the server has been running.

• Question 136:

  An organization needs to retain its data for compliance reasons but only when required.

  Which of the following would be the most cost-effective type of tiered storage?

  A. Warm
  B. Hot
  C. Archive
  D. Cold
  C. Archive

  ---

  Explanation

  Archive storage is the most cost-effective type of tiered storage for retaining data that is infrequently accessed and only when required for compliance reasons. It is designed for long-term storage and offers lower storage costs compared to hot, cold, or warm storage tiers.

  References:

  Understanding data storage and the various tiers, including archival storage, is part of cloud storage strategies covered in the CompTIA Cloud+ certification.

• Question 137:

  A cloud engineer hardened the WAF for a company that operates exclusively in North America. The engineer did not make changes to any ports, and all protected applications have continued to function as expected.

  Which of the following configuration changes did the engineer most likely apply?

  A. The engineer implemented MFA to access the WAF configurations.
  B. The engineer blocked all traffic originating outside the region.
  C. The engineer installed the latest security patches on the WAF.
  D. The engineer completed an upgrade from TLS version 1.1 to version 1.3.
  B. The engineer blocked all traffic originating outside the region.

  ---

  Explanation

  Given that the WAF was hardened without changing any ports and all protected applications continued to function as expected, it is most likely that the engineer blocked all traffic originating outside of North America, which is the company's operating region.

  References:

  CompTIA Cloud+ Study Guide (Exam CV0-004) - Chapter on Cloud Security Best Practices

• Question 138:

  A cloud engineer enables API access on a user account for automation on a SaaS-based tool.

  Which of the following is needed to authenticate with the REST API?

  A. Client ID
  B. Password
  C. Workstation name
  D. Secret key
  E. Username
  F. Cookie
  A. Client ID
  D. Secret key

  ---

  Explanation

  REST API authentication for SaaS automation commonly requires an application-level credential pair: a client ID to identify the application and a secret key to securely authenticate it.

• Question 139:

  A cloud engineer is migrating a website to the cloud. The website was developed with a legacy programming language framework and must be upgraded to a newer version to remediate code vulnerabilities and improve performance.

  Which of the following is the best strategy to perform the migration?

  A. Refactor
  B. Rehost
  C. Replatform
  D. Re-architect
  A. Refactor

  ---

  Explanation

  Refactoring involves modifying the application code to improve its structure, performance, and security while modernizing it for the target environment. Upgrading a legacy programming framework to a newer version requires changes to the application code to address vulnerabilities and improve efficiency, which aligns with the refactoring migration strategy.

• Question 140:

  Once a change has been made to templates, which of the following commands should a cloud architect use next to deploy an laaS platform?

  A. git pull
  B. git fetch
  C. git commit
  D. git push
  D. git push

  ---

  Explanation

  After making changes to templates, a cloud architect should use the git push command to deploy an IaaS platform. This command is used to upload the local repository content to a remote repository, making the new or changed templates available for the next deployment.

  References:

  Version control practices and commands, such as using git for IaaS template management, are covered under the best practices for cloud deployments in the CompTIA Cloud+ certification.