CompTIA CV0-004 Online Practice Questions and Exam Preparation

CompTIA CV0-004 Online Questions & Answers

• Question 161:

  Which of the following situations would require a project manager to revise the communication plan during project execution?

  A. An approved change impacts the project schedule and budget
  B. Test results are not as expected
  C. The team is unclear about required meeting attendance
  D. A stakeholder requests scope changes
  C. The team is unclear about required meeting attendance

• Question 162:

  A cloud engineer is deploying a server in a cloud platform. The engineer reviews a security scan report.

  Which of the following recommended services should be disabled? (Select TWO).

  A. Telnet
  B. FTP
  C. Remote login
  D. DNS
  E. DHCP
  F. LDAP
  A. Telnet
  B. FTP

  ---

  Explanation

  Telnet and FTP are two services that should be disabled on a cloud server because they are insecure and vulnerable to attacks. Telnet and FTP use plain text to transmit data over the network, which means that anyone who can intercept the traffic can read or modify the data, including usernames, passwords, commands, files, etc. This can lead to data breaches, unauthorized access, or malicious actions on the server 1. Instead of Telnet and FTP, more secure alternatives should be used, such as SSH (Secure Shell) and SFTP (Secure File Transfer Protocol). SSH and SFTP use encryption to protect the data in transit and provide authentication and integrity checks for the communication. SSH and SFTP can prevent eavesdropping, tampering, or spoofing of the data and ensure the confidentiality and privacy of the server 2.

  The other options are not services that should be disabled on a cloud server:

  Option C: Remote login. Remote login is a service that allows users to access a remote server from another location using a network connection. Remote login can be useful for managing, configuring, or troubleshooting a cloud server without having to physically access it. Remote login can be secured by using encryption, authentication, authorization, and logging mechanisms 3.

  Option D: DNS (Domain Name System). DNS is a service that translates human-friendly domain names into IP addresses that can be used to communicate over the Internet. DNS is essential for resolving the names of the cloud resources and services that are hosted on the cloud platform. DNS can be secured by using DNSSEC (DNS Security Extensions), which add digital signatures to DNS records to verify their authenticity and integrity.

  Option E: DHCP (Dynamic Host Configuration Protocol). DHCP is a service that assigns IP addresses and other network configuration parameters to devices on a network. DHCP can simplify the management of IP addresses and avoid conflicts or errors in the network. DHCP can be secured by using DHCP snooping, which filters out unauthorized DHCP messages and prevents rogue DHCP servers from assigning IP addresses.

  Option F: LDAP (Lightweight Directory Access Protocol). LDAP is a service that stores and organizes information about users, devices, and resources on a network. LDAP can provide identity management and access control for the cloud environment. LDAP can be secured by using LDAPS (LDAP over SSL/TLS), which encrypts the LDAP traffic and provides authentication and integrity checks.

• Question 163:

  A security engineer Identifies a vulnerability m a containerized application. The vulnerability can be exploited by a privileged process to read tie content of the host's memory. The security engineer reviews the following Dockerfile to determine a solution to mitigate similar exploits: FROM alpine:3.17

  RUN apk update && apk upgrade

  COPY ./myapp

  ENTRYPOINT ["/myapp/app"]

  Which of the following is the best solution to prevent similar exploits by privileged processes?

  A. Adding the USER myappuserinstruction
  B. Patching the host running the Docker daemon
  C. Changing FROM alpiner3.17 to FROM alpine:latest
  D. Running the container with the ready-only filesystem configuration
  A. Adding the USER myappuserinstruction

  ---

  Explanation

  Adding the "USER myappuser" instruction to the Dockerfile is the best solution to prevent similar exploits by privileged processes. This instruction ensures that the container runs as a non-privileged user instead of the root user, significantly reducing the risk of privileged exploits. Running containers with least privilege principles minimizes the potential impact of vulnerabilities, enhancing the overall security posture of the containerized environment.

  References:

  The CompTIA Cloud+ framework includes security concerns, measures, and concepts for cloud operations, highlighting the importance of container security practices, such as running containers as non-root users to prevent unauthorized access and exploitation.

• Question 164:

  A cloud developer is developing a cloud-native application with the following requirements: Must be a web-based application Must be as cost-effective as possible Must have fast response times Must be scalable to meet demand.

  Which of the following technologies will best meet these requirements?

  A. Serverless function
  B. VM
  C. CDN
  D. API gateway
  A. Serverless function

  ---

  Explanation

  Serverless functions are highly cost-effective because resources are consumed only when code executes.

  They provide rapid response times, automatically scale based on demand, and eliminate the need to manage underlying infrastructure. These characteristics make serverless technology an excellent fit for a scalable cloud-native web application.

• Question 165:

  Which of the following best explains the use of CDN?

  A. To control traffic to and from the cloud environment and prevent unauthorized connections
  B. To protect the perimeter of on-premises and cloud networks through segmentation
  C. To create a secure communication channel to protect traffic between two geographically distant sites
  D. To allow access to content through the geographic distribution and replication of data
  D. To allow access to content through the geographic distribution and replication of data

  ---

  Explanation

  A Content Delivery Network (CDN) improves content delivery by distributing and replicating data across geographically dispersed edge locations. Users access content from the nearest location, reducing latency, improving performance, and increasing availability.

• Question 166:

  A cloud engineer deploys two virtual machines and migrates a local web application and database, respectively. After the engineer updates the DNS records, the web application does not respond.

  Which of the following should the cloud engineer do to troubleshoot the issue?

  A. Increase the size and throughput of the virtual machines to allow more concurrent sessions.
  B. Verify whether the operating systems in the virtual machines are compatible with the web application and database.
  C. Check to ensure the new web application server configuration file points to the correct database location.
  D. Repeat the migration to discard any inconsistencies during the data transfer.
  C. Check to ensure the new web application server configuration file points to the correct database location.

  ---

  Explanation

  The web application not responding after DNS updates often indicates a misconfiguration, such as the web server not correctly pointing to the migrated database location. Verifying this ensures proper connectivity between the application and database.

• Question 167:

  A cloud consultant needs to modernize a legacy application that can no longer address user demand and is expensive to maintain.

  Which of the following is the best migration strategy?

  A. Retain
  B. Rehost
  C. Refactor
  D. Replatform
  C. Refactor

  ---

  Explanation

  Refactoring is the process of restructuring existing computer code without changing its external behavior.

  In cloud computing, it often means modifying the application to better leverage cloud-native features and services. This can address user demand and reduce maintenance costs by making the application more scalable, resilient, and manageable.

  References:

  CompTIA Cloud+ Certification Study Guide (Exam CV0-004) by Scott Wilson and Eric Vanderburg

• Question 168:

  A developer is building a new application version using a CI/CD pipeline. The developer receives the following error message log when the build fails:

  

  Which of the following is the most likely cause of this failure?

  A. Incorrect version
  B. Test case failure
  C. Broken build pipeline
  D. Dependency issue
  D. Dependency issue

  ---

  Explanation

  The error message indicates that the 'requests' module, which is a dependency, is not found. The failure is most likely due to the 'requests' library not being installed or not included in the environment where the application is running.

  References:

  Dependency management is a crucial part of maintaining a CI/CD pipeline, a topic included in the CompTIA Cloud+ examination objectives.

• Question 169:

  An administrator attempts to use a script to deploy a cloud-based virtual machine with five data disks. After running the script, the administrator sees the following message: ERROR: Response 403 storage API provisioning error.

  Which of the following is the reason the deployment failed?

  A. Permission issues
  B. Partial outage
  C. Functionality deprecation
  D. Sizing issues
  A. Permission issues

  ---

  Explanation

  A 403 error indicates "forbidden," meaning the administrator's account or script lacks the required permissions to use the storage API for provisioning. This points to an access or authorization problem, not an outage or sizing limitation.

• Question 170:

  An organization's two-node, hybrid container cluster is experiencing failures during horizontal scaling to the cloud cluster instance. The on-premises IP range is 192.168.0.0/16, and the cloud environment is 10.168.0.0/16. Overlapping or stretched VLANs are not permitted, and a node is deployed in each location.

  The cloud monitoring agent reports a healthy status for the second instance, but when pinging the clusters from on premises, the following output is received:

  pinging cluster1. comptia. containers.com C192.168.100 reply pinging cluster2. comptia. containers.com [192.16B .100 .

  128] request timed out

  Which of the following is the most likely reason for the scaling failure?

  A. Incorrect DNS entry
  B. Offline cluster node
  C. Incorrect proxy entry
  D. Incorrect cluster IP
  E. Incorrect IP route
  A. Incorrect DNS entry