CompTIA CV0-004 Online Practice Questions and Exam Preparation

CompTIA CV0-004 Online Questions & Answers

• Question 201:

  Which of the following types of storage is read-only and is accessed only when needed?

  A. Cold
  B. Hot
  C. Warm
  D. Archive
  D. Archive

  ---

  Explanation

  Archive storage is designed for long-term retention, is typically read-only, and accessed only when needed, such as for compliance or historical data retrieval.

• Question 202:

  Which of the following storage types requires immediate access to backup data in case of a disaster?

  A. Archive
  B. Hot
  C. Cold
  D. Warm
  B. Hot

  ---

  Explanation

  Hot storage provides immediate, high-speed access to data, making it the appropriate choice for disaster recovery scenarios where backup data must be available without delay.

• Question 203:

  A cloud engineer wants containers to run the latest version of a container base image to reduce the number of vulnerabilities. The applications in use requite Python 3.10 and ate not compatible with any other version.

  The containers' images are created every time a new version is released from the source image. Given the container Dockerfile below:

  

  Which of the following actions will achieve the objectives with the least effort?

  A. Perform docker pull before executing docker run.
  B. Execute docker update using a local cron to get the latest container version.
  C. Change the image to use python:latest on the image build process.
  D. Update the Dockerfile to pin the source image version.
  A. Perform docker pull before executing docker run.

  ---

  Explanation

  Performing a "docker pull" before executing "docker run" ensures that the latest version of the container base image is used, aligning with the objective of reducing vulnerabilities. This command fetches the latest image version from the repository, ensuring that the container runs the most up-to-date and secure version of the base image. This approach is efficient and requires minimal effort, as it automates the process of maintaining the latest image versions for container deployments.

  References:

  Within the CompTIA Cloud+ examination scope, understanding management and technical operations in cloud environments, including container management and security, is critical. This includes best practices for maintaining up-to-date container images to minimize vulnerabilities.

• Question 204:

  A company's cybersecurity team receives the following alert that a production VM was deleted from the virtual network: 21 September 09:19:08 (GMT-5) Resource with ID: PROD-WEB001 was deleted by User: Logging Service.

  The console to manage virtual network resources uses directory authentication. Only users in a particular directory group can interactively access the virtual network management console. The logging service account is not part of this group and requires some local administration privileges to aggregate logs from various resources. The cybersecurity team discovers that the logging service account was previously given full directory administration privileges and they see the following entry: 21 September 09:10:55 (GMT-5) User with ID: Logging Service was added to the Group: VNet Console Administrators by actor: Logging Service.

  The cybersecurity team removes the compromised service account from the directory group.

  Which of the following should the cybersecurity team do next to prevent repeat instances of this issue?

  A. Enable two-factor authentication on the virtual network console.
  B. Reset the logging service account to use a long and complex password.
  C. Disable RDP on the production virtual machines.
  D. Create a scoped administrative role for the logging service account.
  D. Create a scoped administrative role for the logging service account.

  ---

  Explanation

  The issue occurred because the logging service account had excessive privileges, allowing it to escalate and add itself to the admin group. Assigning a scoped administrative role enforces least privilege, limiting the account to only the permissions required for log aggregation, and prevents future privilege escalation.

• Question 205:

  A company wants to build its new platform using a public cloud. The workload requirements include the following:

  1. Implementation of custom CIS compliance

  2. Patch for vulnerabilities within 24 hours

  3. Warrant at least 1,800 IOPS per volume

  Which of the following meets the requirements?

  A. SaaS
  B. laaS
  C. FaaS
  D. PaaS
  B. laaS

  ---

  Explanation

  Infrastructure as a Service (IaaS) provides the most flexibility among cloud service models, allowing for the implementation of custom security and compliance standards, such as CIS compliance. IaaS environments offer control over the infrastructure, enabling patch management within specific time frames. Additionally, IaaS providers typically offer configurable storage options, including the ability to specify IOPS (Input/ Output Operations Per Second) per volume to meet performance requirements.

• Question 206:

  A cloud engineer is exploring options to reduce the management overhead of the servers and network.

  Which of the following cloud service models should the engineer implement?

  A. SaaS
  B. XaaS
  C. PaaS
  D. laaS
  C. PaaS

  ---

  Explanation

  Platform as a Service (PaaS) provides a platform allowing customers to develop, run, and manage applications without the complexity of building and maintaining the infrastructure typically associated with developing and launching an app.

  Adopting PaaS can significantly reduce the management overhead of servers and networks.

  References:

  CompTIA Cloud Essentials+ Certification Study Guide (Exam CLO-002) by Scott Wilson.

• Question 207:

  A company wants to implement a work environment that will have low operational overhead and highly accessible enterprise resource planning, email, and data resources.

  Which of the following cloud service models should the company implement?

  A. laaS
  B. PaaS
  C. DBaaS
  D. SaaS
  D. SaaS

  ---

  Explanation

  A company that requires low operational overhead and highly accessible enterprise resources would benefit from implementing Software as a Service (SaaS). SaaS provides access to applications hosted in the cloud, eliminating the need for internal infrastructure or application development, which aligns with the requirement of having low operational overhead.

  References:

  CompTIA Cloud+ Study Guide (Exam CV0- 004) by Todd Montgomery and Stephen Olson

• Question 208:

  Which of the following has a mandatory <Envelope> tag in the exchange of data between two systems?

  A. JSON
  B. SOAP
  C. JWT
  D. REST
  B. SOAP

  ---

  Explanation

  SOAP uses a structured XML message format, and the <Envelope> element is required because it defines the outer container for the entire message being exchanged between systems.

• Question 209:

  Which of the following models will best reduce the cost of running short-term, non-critical workloads?

  A. Reserved
  B. Spot Instance
  C. Pay-as-you-go
  D. Dedicated host
  B. Spot Instance

• Question 210:

  Which of the following compute resources is the most optimal for running a single scripted task on a schedule?

  A. Bare-metal server
  B. Managed container
  C. Virtual machine
  D. Serverless function
  D. Serverless function

  ---

  Explanation

  Serverless functions are ideal for running scripted tasks on a schedule because they can be triggered by events, run the task, and then shut down, incurring costs only for the actual compute time used. This eliminates the need for a continuously running server and is optimal for sporadic or scheduled tasks.

  References:

  CompTIA Cloud+ Certification Study Guide (Exam CV0-004) by Scott Wilson and Eric Vanderburg.