CompTIA CV0-004 Online Practice Questions and Exam Preparation

CompTIA CV0-004 Online Questions & Answers

• Question 171:

  An DevOps engineer is receiving reports that users can no longer access the company's web application after hardening of a web server. The users are receiving the following error: ERR_SSLJ/ERSION_OR_CIPHER_MISMATCH.

  Which of the following actions should the engineer take to resolve the issue?

  A. Restart the web server.
  B. Configure TLS 1.2 or newer.
  C. Update the web server.
  D. Review logs on the WAF
  B. Configure TLS 1.2 or newer.

  ---

  Explanation

  To resolve the ERR_SSL_VERSION_OR_CIPHER_MISMATCH error after hardening a web server, the engineer should configure the server to use TLS 1.2 or newer. This error often occurs when the server or client supports an outdated version of SSL/TLS or incompatible cipher suites. Updating to a modern, secure version of TLS ensures compatibility and enhances security.

  References:

  The CompTIA Cloud+ certification includes governance, risk, compliance, and security for the cloud, emphasizing the importance of implementing up-to-date security protocols like TLS to protect data in transit and ensure secure communications in cloud environments.

• Question 172:

  A project team handling sensitive data has onboarded three new employees.

  What should the project manager do first?

  A. Verify employee security clearance
  B. Allow internet access on corporate devices
  C. Train employees on handling sensitive data
  D. Perform a sensitive data analysis
  A. Verify employee security clearance

• Question 173:

  A cloud solutions architect has received guidance to migrate an application from on premises to a public cloud.

  Which of the following requirements will help predict the operational expenditures in the cloud?

  A. Average resource consumption
  B. Maximum resource consumption
  C. Minimum resource consumption
  D. Actual hardware configuration
  A. Average resource consumption

  ---

  Explanation

  Understanding the average resource consumption of the application is essential for estimating the cost of running it in the cloud. By analyzing historical data or using monitoring tools, you can determine the average amount of CPU, memory, storage, and network resources the application uses over time. This data is crucial for selecting the right cloud instance types, storage options, and network configurations to meet performance requirements while optimizing costs.

• Question 174:

  A cloud engineer is selecting a model for a data center that will host a workload. The database must reside within the data center on the company's SAN solution. However, the workload will be hosted by a third-party vendor.

  Which of the following models should the cloud engineer select to meet these requirements?

  A. Community
  B. Hybrid
  C. Public
  D. Private
  B. Hybrid

  ---

  Explanation

  A hybrid model allows the database to remain on-premises within the company's SAN while the application workload is hosted by a third-party provider, meeting both location and operational requirements.

• Question 175:

  A company is building a loosely coupled application. The engineering team discovers issues with how the application is handling events.

  Which of the following should the team implement to resolve this issue?

  A. Host affinity
  B. Monolithic services
  C. Fan-out architecture
  D. ELK stack
  C. Fan-out architecture

  ---

  Explanation

  A fan-out architecture enables events from a single source to be distributed to multiple independent consumers. This approach supports loose coupling by allowing components to process events asynchronously without direct dependencies on one another, improving scalability, flexibility, and reliability in event-driven applications.

• Question 176:

  Which of the following costs would increase significantly for data transfer when comparing a multiregion to a single-region cloud platform design?

  A. Storage
  B. Power and cooling
  C. Network
  D. Compliance and regulation
  C. Network

  ---

  Explanation

  In a multiregion cloud design, data must often travel between regions, incurring inter-region transfer fees.

  This makes network costs significantly higher compared to a single-region design.

• Question 177:

  A company wants to move to a multicloud environment and utilize the technology that provides the most portability.

  Which of the following technology solutions would BEST meet the company's needs?

  A. Bootstrap
  B. Virtual machines
  C. Clusters
  D. Containers
  D. Containers

  ---

  Explanation

  The technology that provides the most portability for a multicloud environment is containers. Containers are units of software that package an application and its dependencies into a standardized and isolated environment that can run on any platform or cloud service. Containers are lightweight, scalable, and portable, as they do not depend on the underlying infrastructure or operating system. Containers can also be managed by orchestration tools that automate the deployment, scaling, and networking of containerized applications across multiple clouds.

  References:

  [CompTIA Cloud+ Certification Exam Objectives], Domain 1.0 Configuration and Deployment, Objective 1.3 Given a scenario involving integration between multiple cloud environments, select an appropriate solution design.

• Question 178:

  A cloud engineer is designing a solution that requires end users: To be authenticated To be authorized To be in approved locations. To use only corporate devices.

  Which of the following is the best way to meet these requirements?

  A. Secure by design
  B. Principle of least privilege
  C. Zero Trust
  D. Defense in depth
  C. Zero Trust

  ---

  Explanation

  Zero Trust requires continuous verification of users, devices, and access conditions before granting access to resources. It validates authentication, enforces authorization policies, verifies device compliance, and can restrict access based on approved locations, making it the best approach for meeting all the stated requirements.

• Question 179:

  A systems administrator is informed that a database server containing PHI and PII is unencrypted. The environment does not support VM encryption, nor does it have a key management system. The server needs to be able to be rebooted for patching without manual intervention.

  Which of the following will BEST resolve this issue?

  A. Ensure all database queries are encrypted
  B. Create an IPSec tunnel between the database server and its clients
  C. Enable protocol encryption between the storage and the hypervisor
  D. Enable volume encryption on the storage
  E. Enable OS encryption
  D. Enable volume encryption on the storage

  ---

  Explanation

  Volume encryption is a type of encryption that protects data at the storage level by encrypting an entire disk or partition. Volume encryption can provide strong security for data at rest, as it prevents unauthorized access to the data even if the storage device is lost, stolen, or compromised. Volume encryption can also support automatic booting without manual intervention, as it can use a pre-boot authentication mechanism that does not require user input. Enabling volume encryption on the storage is the best way to resolve the issue of having an unencrypted database server containing PHI and PII, as it can protect the sensitive data without relying on VM encryption or a key management system.

  References:

  CompTIA Cloud+ Certification Exam Objectives, page 14, section 2.7

• Question 180:

  A cloud administrator used a deployment script to recreate a number of servers hosted in a public-cloud provider_However, after the script completes, the administrator receives the following error when attempting to connect to one of the servers Via SSH from the administrators workstation: CHANGED.

  Which of the following IS the MOST likely cause of the issue?

  A. The DNS records need to be updated
  B. The cloud provider assigned a new IP address to the server.
  C. The fingerprint on the server's RSA key is different
  D. The administrator has not copied the public key to the server.
  C. The fingerprint on the server's RSA key is different

  ---

  Explanation

  This error indicates that the SSH client has detected a change in the server's RSA key, which is used to authenticate the server and establish a secure connection. The SSH client stores the fingerprints of the servers it has previously connected to in a file called known_hosts, which is usually located in the ~/.ssh directory. When the SSH client tries to connect to a server, it compares the fingerprint of the server's RSA key with the one stored in the known_hosts file. If they match, the connection proceeds. If they do not match, the SSH client warns the user of a possible man-in-the-middle attack or a host key change, and aborts the connection. The most likely cause of this error is that the deployment script has recreated the server with a new RSA key, which does not match the one stored in the known_hosts file. This can happen when a server is reinstalled, cloned, or migrated. To resolve this error, the administrator needs to remove or update the old fingerprint from the known_hosts file, and accept the new fingerprint when connecting to the server again.

  Alternatively, the administrator can use a tool or service that can synchronize or manage the RSA keys across multiple servers, such as AWS Key Management Service (AWS KMS) 1, Azure Key Vault 2, or HashiCorp Vault 3.