CompTIA CV0-004 Online Practice Questions and Exam Preparation

CompTIA CV0-004 Online Questions & Answers

• Question 191:

  A cloud solutions architect needs to design a solution that will collect a report and upload it to an object storage service every time a virtual machine is gracefully or non-gracefully stopped.

  Which of the following will best satisfy this requirement?

  A. An event-driven architecture that will send a message when the VM shuts down to a log-collecting function that extracts and uploads the log directly from the storage volume
  B. Creating a webhook that will trigger on VM shutdown API calls and upload the requested files from the volume attached to the VM into the object-defined storage service
  C. An API of the object-defined storage service that will scrape the stopped VM disk and self-upload the required files as objects
  D. A script embedded on the stopping VM's OS that will upload the logs on system shutdown
  A. An event-driven architecture that will send a message when the VM shuts down to a log-collecting function that extracts and uploads the log directly from the storage volume

  ---

  Explanation

  An event-driven architecture is suited for this scenario, where an event (like a VM shutdown) triggers a function to execute specific tasks (log collection and upload). This approach is efficient and ensures that the logs are collected and uploaded to an object storage service every time the VM is stopped, regardless of whether it is a graceful or non-graceful shutdown.

  References:

  CompTIA Cloud+ Study Guide (Exam CV0-004) - Chapter on Cloud Delivery Implementations

• Question 192:

  Department supervisors have requested a report that will help them understand the utilization of cloud resources, make decisions about budgeting for the following year, and reduce costs.

  Which of the following are the most important requisite steps to create the report? (Select two).

  A. Set the desired retention of resource logs.
  B. Configure application tracing.
  C. Integrate email alerts with ticketing software.
  D. Enable resource tagging.
  E. Configure the collection of performance/utilization logs.
  F. Configure metric threshold alerts.
  D. Enable resource tagging.
  E. Configure the collection of performance/utilization logs.

  ---

  Explanation

  To create a report that helps understand the utilization of cloud resources, make budget decisions, and reduce costs, the most important steps are to enable resource tagging and configure the collection of performance/utilization logs. Resource tagging helps in categorizing and tracking costs by associating tags with resources, while performance/utilization logs are essential for analyzing resource usage over time.

  References:

  CompTIA Cloud+ Study Guide (Exam CV0- 004) - Chapter on Cloud Management

• Question 193:

  A user's assigned cloud credentials are locked, and the user is unable to access the project's application.

  The cloud administrator reviews the logs and notices several attempts to log in with the user's account were made to a different application after working hours.

  Which of the following is the best approach for the administrator to troubleshoot this issue?

  A. Create new credentials for the user and restrict access to the authorized application.
  B. Track the source of the log-in attempts and block the IP address of the source in the WAR
  C. Reset the user's account and implement a stronger lock-out policy.
  D. Install an IDS on the network to monitor suspicious activity
  B. Track the source of the log-in attempts and block the IP address of the source in the WAR

  ---

  Explanation

  The administrator should track the source of the log-in attempts and block the IP address in the Web Application Firewall (WAF). This will prevent further unauthorized attempts from that source. It is also advisable to reset the user's account credentials as a precautionary measure.

  References:

  Incident response and addressing unauthorized access attempts, including tracking and blocking IP addresses, are security measures addressed in the CompTIA Cloud+ material.

• Question 194:

  A cloud administrator must increase uptime for an application.

  Which of the following methods keeps costs to a minimum while increasing uptime?

  A. Deploying on-premises services
  B. Deploying a geo-redundant cluster
  C. Deploying services to a cold DR site
  D. Deploying services to availability zones
  D. Deploying services to availability zones

  ---

  Explanation

  Availability zones provide high availability by distributing application components across physically separate locations within the same cloud region. This protects against failures in a single data center while avoiding the higher costs associated with geo-redundant deployments. Availability zones offer a cost-effective way to increase uptime with minimal additional infrastructure and operational complexity.

• Question 195:

  A cloud engineer must scan cloud resources for vulnerabilities.

  Which of the following is the first step the cloud engineer should take?

  A. Remediate the vulnerabilities
  B. Assess the systems.
  C. Define the scope
  D. Research the CVEs
  C. Define the scope

  ---

  Explanation

  Defining the scope is the first step in a vulnerability assessment. Before scanning begins, the cloud engineer must determine which cloud resources, systems, applications, and environments are included in the assessment. Establishing the scope ensures the scan is properly targeted and that all relevant assets are evaluated.

• Question 196:

  An application that is running on containers writes files to the operating system after processing data. The produced output files are stored under /project-files owned by root. A cloud engineer needs to make sure no output files are owned by root.

  Which of the following actions should the engineer take to best achieve this objective?

  A. Mount the volume in Docker using --user=myapp.
  B. Add USER myapp to the Dockerfile and rebuild the container.
  C. Run chown myapp:myapp /project-files with cron every minute.
  D. Modify the container application to execute sudo -u myapp myapp.
  B. Add USER myapp to the Dockerfile and rebuild the container.

  ---

  Explanation

  By adding USER myapp to the Dockerfile, the container will run processes as the specified non-root user instead of the default root user. This ensures that any files created inside the container, including those in / project-files, are owned by myapp rather than root. Running containers as a non-root user is also a best practice for security.

• Question 197:

  Which of the following services is most appropriate for routing requests in front of a replica set of virtual machines that host multiple websites?

  A. Forward proxy
  B. Content delivery network
  C. Layer 7 load balancer
  D. Web application firewall
  C. Layer 7 load balancer

  ---

  Explanation

  A Layer 7 load balancer can inspect HTTP/HTTPS traffic and route requests based on application-level data, such as host headers or URLs, making it ideal for distributing traffic across multiple websites hosted on a replica set of VMs.

• Question 198:

  A cloud engineer is running a latency-sensitive workload that must be resilient and highly available across multiple regions.

  Which of the following concepts best addresses these requirements?

  A. Cloning
  B. Clustering
  C. Hardware passthrough
  D. Stand-alone container
  B. Clustering

  ---

  Explanation

  Clustering refers to the use of multiple servers/computers to form what appears to be a single system. This concept is key for achieving high availability and resilience, especially for latency-sensitive workloads. By distributing the workload across a cluster that spans multiple regions, the system can continue to operate even if one or more nodes fail, thus maintaining performance and availability.

  References:

  CompTIA Cloud

  + Guide to Cloud Computing (ISBN: 978-1-64274- 282-2)

• Question 199:

  A systems administrator needs to configure backups for the company's on-premises VM cluster. The storage used for backups will be constrained on free space until the company can implement cloud backups.

  Which of the following backup types will save the most space, assuming the frequency of backups is kept the same?

  A. Snapshot
  B. Ful
  C. Differential
  D. Incremental
  D. Incremental

  ---

  Explanation

  An incremental backup strategy saves space because it only backs up data that has changed since the last backup. Compared to full and differential backups, incremental backups are smaller and save more space, which is essential when storage is constrained.

  References:

  CompTIA Cloud+ Guide to Cloud Computing (ISBN: 978-1-64274-282-2)

• Question 200:

  A cloud engineer is troubleshooting an application that consumes multiple third-party REST APIs. The application is randomly experiencing high latency.

  Which of the following would best help determine the source of the latency?

  A. Configuring centralized logging to analyze HTTP requests
  B. Running a flow log on the network to analyze the packets
  C. Configuring an API gateway to track all incoming requests
  D. Enabling tracing to detect HTTP response times and codes
  D. Enabling tracing to detect HTTP response times and codes

  ---

  Explanation

  Enabling tracing in the application can help determine the source of high latency by providing detailed information on HTTP request and response times, as well as response codes. This can identify which API calls are experiencing delays and contribute to overall application latency, allowing for targeted troubleshooting and optimization.