CompTIA CV0-004 Online Practice Questions and Exam Preparation

CompTIA CV0-004 Online Questions & Answers

• Question 271:

  A company's man web application is no longer accessible via the internet. The cloud administrator investigates and discovers the application is accessible locally and only via an IP access.

  Which of the following was misconfigured?

  A. IP
  B. DHCP
  C. NAT
  D. DNS
  D. DNS

  ---

  Explanation

  When a web application is accessible locally via an IP address but not via the internet, the issue likely lies with the Domain Name System (DNS). DNS is responsible for translating domain names into IP addresses.

  A misconfiguration in DNS records or failure in DNS resolution can prevent users from accessing the application through its domain name, even though the application itself is running and accessible via its direct IP address.

  References:

  In the CompTIA Cloud+ curriculum, understanding cloud concepts and networking fundamentals, including DNS, is crucial for troubleshooting and ensuring applications are accessible and perform optimally in cloud environments.

• Question 272:

  A customer relationship management application, which is hosted in a public cloud laaS network, is vulnerable to a remote command execution vulnerability.

  Which of the following is the best solution for the security engineer to implement to prevent the application from being exploited by basic attacks?

  A. IPS
  B. ACL
  C. DLP
  D. WAF
  D. WAF

  ---

  Explanation

  A Web Application Firewall (WAF) is the best solution to implement for a public cloud IaaS hosted customer relationship management application vulnerable to remote command execution attacks. WAFs are designed to monitor, filter, and block malicious HTTP/S traffic to and from a web application to protect against various application layer attacks, including remote command execution.

  References:

  CompTIA Cloud+ Study Guide (Exam CV0-004) - Chapter on Security in the Cloud

• Question 273:

  An independent security researcher discovers a potential vulnerability in a package. The vulnerability could lead to exposure.

  Which of the following is the first action the security researcher should take?

  A. Uninstall the package to remove the threat.
  B. Write a blog post describing how the package vulnerability was discovered.
  C. Report the vulnerability to the package vendor's security email.
  D. Open a public-facing issue on the vendor's Git repository.
  C. Report the vulnerability to the package vendor's security email.

  ---

  Explanation

  The first action in responsible disclosure is to privately notify the vendor through their security contact so they can investigate and fix the vulnerability before it becomes public knowledge.

• Question 274:

  A cloud engineer creates a new private subnet within a VPC that contains existing subnets. The new subnet is unreachable from the other subnets. The existing subnets can reach each other.

  Which of the following best describes the cause of this issue?

  A. DNS issues
  B. WAF blocking
  C. Incorrect IP address
  D. Missing route
  D. Missing route

  ---

  Explanation

  For subnets within a VPC to communicate, the routing tables must contain the appropriate routes. Since the existing subnets can already reach each other and only the newly created private subnet is unreachable, the most likely cause is that the subnet is not associated with the correct route table or is missing the necessary route entries to enable communication with the other subnets.

• Question 275:

  An organization's critical data was exfiltrated from a computer system in a cyberattack. A cloud analyst wants to identify the root cause and is reviewing the following security logs of a software web application:

  

  Which of the following types of attacks occurred?

  A. SQL injection
  B. Cross-site scripting
  C. Reuse of leaked credentials
  D. Privilege escalation
  A. SQL injection

  ---

  Explanation

  The security logs of the software web application show patterns that are typical of an SQL injection attack.

  This is evidenced by the inclusion of SQL syntax in the user input fields in an attempt to manipulate the database.

  References:

  CompTIA Cloud+ Study Guide (Exam CV0-004) - Chapter on Cloud Security Threats

• Question 276:

  Which of the following is the most common characteristic of SSDs?

  A. SSDs are less expensive than spinning disks.
  B. SSDs have small storage capacities.
  C. SSDs can be used for high-IOP applications.
  D. SSDs are used mostly in cold storage.
  C. SSDs can be used for high-IOP applications.

  ---

  Explanation

  SSDs provide significantly higher input/output operations per second (IOPs) compared to traditional spinning hard disks (HDDs). This makes them ideal for high-performance applications such as databases, virtualization, and real-time analytics. They offer low latency and fast data access, which is crucial for workloads requiring rapid read and write speeds.

• Question 277:

  Between 11:00 a.m. and 1:00 p.m. on workdays, users report that the sales database is either not accessible, sluggish, or difficult to connect to. A cloud administrator discovers that during the impacted time, all hypervisors are at capacity. However, when 70% of the users are using the same database, those issues are not reported.

  Which of the following is the most likely cause?

  A. Oversubscription
  B. Resource allocation
  C. Sizing issues
  D. Service quotas
  A. Oversubscription

  ---

  Explanation

  The most likely cause of accessibility and performance issues during specific times is oversubscription.

  This happens when more users are trying to access the database than the hypervisors can handle, due to their resources being allocated to more virtual machines or processes than they can efficiently support.

  References:

  Resource management concepts such as avoiding oversubscription are covered under the Management and Technical Operations domain of the CompTIA Cloud+ exam objectives.

• Question 278:

  A software engineer at a cybersecurity company wants to access the cloud environment. Per company policy, the cloud environment should not be directly accessible via the internet.

  Which of the following options best describes how the software engineer can access the cloud resources?

  A. SSH
  B. Bastion host
  C. Token-based access
  D. Web portal
  B. Bastion host

  ---

  Explanation

  A bastion host is the best option described for accessing cloud resources without direct internet access. It acts as a secure gateway to access internal networks from external sources and is often used in conjunction with other security measures such as SSH for secure connections.

  References:

  The use of bastion hosts as a secure access point to cloud resources is a security best practice covered in the CompTIA Cloud+ certification's domain on cloud security.

• Question 279:

  A cloud administrator wants to provision a host with two VMs. The VMs require the following:

  

  After configuring the servers, the administrator notices that during certain hours of the day, the performance heavily degrades.

  Which of the following is the best explanation?

  A. The host requires additional physical CPUs.
  B. A higher number of processes occur at those times.
  C. The RAM on each VM is insufficient.
  D. The storage is overutilized.
  C. The RAM on each VM is insufficient.

  ---

  Explanation

  Given the provided table, the VMs have been allocated 2GB of RAM each, which may be insufficient for their workload, especially during peak hours which could lead to performance degradation. Insufficient RAM can cause the VMs to use swap space on disk, which is significantly slower and can lead to poor performance.

  References:

  CompTIA Cloud+ Certification Study Guide (Exam CV0-004) by Scott Wilson and Eric Vanderburg.

• Question 280:

  A cloud administrator is working on the deployment of an e-commerce website. The administrator evaluates the scaling methods to be implemented when seasonal or flash sales are launched.

  Which of the following scaling approaches should the administrator use to best manage this scenario?

  A. Scheduled
  B. Load
  C. Event
  D. Trending
  B. Load