CompTIA CV0-004 Online Practice Questions and Exam Preparation

CompTIA CV0-004 Online Questions & Answers

• Question 291:

  An organization's executives would like to allow access to devices that meet the corporate security compliance levels.

  Which of the following criteria are most important for the organization to consider? (Select two).

  A. Serial number
  B. Firmware
  C. Antivirus version and definition
  D. OS patch level
  E. CPU architecture
  F. Manufacturer
  C. Antivirus version and definition
  D. OS patch level

  ---

  Explanation

  Antivirus version and definition and OS patch level are important criteria for the organization to consider when allowing access to devices that meet the corporate security compliance levels. These criteria can help ensure that the devices are protected from malware and vulnerabilities that could compromise the security of the organization's data and systems. Serial number, firmware, CPU architecture, and manufacturer are not directly related to security compliance levels, although they may be relevant for other purposes such as inventory management or compatibility.

  References:

  CompTIA Cloud+ CV0-003 Exam Objectives, Objective 4.2: Given a scenario, apply security configurations and compliance controls1

  CompTIA Quick Start Guide to Tackling Cloud Security Concerns2

• Question 292:

  A company's primary site experiences an outage and must recover as quickly as possible.

  Which of the following backup or recovery methods should the company use?

  A. In-place
  B. Incremental
  C. Full
  D. Parallel
  D. Parallel

  ---

  Explanation

  Parallel recovery allows multiple systems or services to be restored simultaneously, significantly reducing downtime and enabling the fastest possible recovery after a site outage.

• Question 293:

  A developer at a small startup company deployed some code for a new feature to its public repository. A few days later, a data breach occurred. A security team investigated the incident and found that the database was hacked.

  Which of the following is the most likely cause of this breach?

  A. Database core dump
  B. Hard-coded credentials
  C. Compromised deployment agent
  D. Unpatched web servers
  B. Hard-coded credentials

  ---

  Explanation

  Hard-coded credentials within code, especially when deployed in a public repository, are a common security vulnerability. If credentials such as passwords or API keys are embedded in the code, anyone with access to the repository can potentially use them to gain unauthorized access to databases or other sensitive resources. This is a likely cause of the data breach in the scenario described.

  References:

  CompTIA Security+ Guide to Network Security Fundamentals by Mark Ciampa.

• Question 294:

  The PMO wants to streamline the routing and approval of project activities in order to provide up-to-date visibility into project status.

  Which of the following collaboration tools would be most appropriate?

  A. Real-time, multi-authoring tool
  B. Wiki knowledge base and search engine
  C. Workflow and e-signature platform
  D. File-sharing platform and storage system
  C. Workflow and e-signature platform

  ---

  Explanation

  A workflow and e-signature platform automates approvals, routing, and visibility for project tasks. This ensures that documents and activities are approved efficiently and transparently, supporting operational efficiency. Real-time editing tools or file storage systems do not inherently provide workflow automation.

  References:

  CompTIA Project+ PK0-005 - Collaboration and Approval Tools CompTIA Cloud+ CV0-004 Operations and Support domain.

• Question 295:

  A security analyst reviews the daily logs and notices the following suspicious activity:

  

  The analyst investigates the firewall logs and identities the following:

  

  Which of the following steps should the security analyst take next to resolve this issue? (Select two).

  A. Submit an IT support ticket and request Kali Linux be uninstalled from John Smith's computer
  B. Block all inbound connections on port 4444 and block the IP address 201.101.25.121.
  C. Contact John Smith and request the Ethernet cable attached to the desktop be unplugged
  D. Check the running processes to confirm if a backdoor connection has been established.
  E. Upgrade the Windows x64 operating system on John Smith's computer to the latest version.
  F. Block all outbound connections from the IP address 10.150.71.151.
  B. Block all inbound connections on port 4444 and block the IP address 201.101.25.121.
  D. Check the running processes to confirm if a backdoor connection has been established.

  ---

  Explanation

  Given the suspicious activity and Kali Linux's association with penetration testing and hacking tools, the security analyst should block all inbound connections on port 4444, as it is commonly used for malicious purposes, and block the IP address that's potentially the source of the intrusion. Additionally, checking the running processes on John Smith's computer is crucial to determine if a backdoor or unauthorized connection has been established.

  References:

  Incident response and threat mitigation steps such as these are part of the security protocols discussed in the CompTIA Cloud+ certification.

• Question 296:

  A cloud security analyst is concerned about security vulnerabilities in publicly available container images.

  Which of the following is the most appropriate action for the analyst to recommend?

  A. Using CIS-hardened images
  B. Using watermarked images
  C. Using digitally signed images
  D. Using images that have an application firewall
  A. Using CIS-hardened images

• Question 297:

  Which of the following is true of SSDs?

  A. SSDs do not have self-encrypting capabilities.
  B. SSDs have small storage capacities.
  C. SSDs can be used for high-IOP applications.
  D. SSDs are used mostly in cold storage.
  C. SSDs can be used for high-IOP applications.

  ---

  Explanation

  SSDs (Solid State Drives) are known for their high performance and can handle a high number of input/ output operations per second (IOPS). This makes them ideal for applications and workloads thatrequire rapid access to storage, such as databases and high-performance computing applications.

  References:

  CompTIA Cloud+ Study Guide (Exam CV0-004) - Chapter on Cloud Storage Options

• Question 298:

  A company wants to combine solutions in a central and scalable environment to achieve the following goals:

  1. Control

  2. Visibility

  3. Automation

  4. Cost efficiency

  Which of the following best describes what the company should implement?

  A. Batch processing
  B. Workload orchestration
  C. Containerization
  D. Application modernization
  B. Workload orchestration

  ---

  Explanation

  Workload orchestration is the best description of what the company should implement to achieve control, visibility, automation, and cost efficiency. It involves using orchestration tools to manage workloads in cloud environments, ensuring resources are used efficiently and operations are automated.

  References:

  Workload orchestration is a part of cloud management strategies discussed under the Management and Technical Operations domain in the CompTIA Cloud+ objectives.

• Question 299:

  A cloud solutions architect wants to deploy a three-tier web application that requires the minimum amount of operational overhead.

  Which of the following is the best template given these requirements?

  

  A. <img src="CV0-004_29.jpg">
  C. <img src="CV0-004_30.jpg"><img src="CV0-004_31.jpg">
  B

  ---

  Explanation

  Chosen template leverages serverless functions for the backend, managed relational databases with clustering, and object storage with static web content enabled. This setup minimizes operational overhead by avoiding direct management of virtual machines for application and database tiers, using serverless and managed services instead. It aligns best with the requirement for minimal operational overhead in deploying a three-tier web application.

• Question 300:

  A company's engineering department is conducting a month-long test on the scalability of an in-house-developed software that requires a cluster of 100 or more servers.

  Which of the following models is the best to use?

  A. PaaS
  B. SaaS
  C. DBaaS
  D. laaS
  D. laaS

  ---

  Explanation

  For testing the scalability of an in-house-developed software that requires a cluster of 100 or more servers, Infrastructure as a Service (IaaS) is the best model. IaaS provides the necessary computeresources and allows the engineering department to configure the environment as needed for their specific test without the constraints that might be present in PaaS or SaaS offerings.

  References:

  CompTIA Cloud+ Study Guide (Exam CV0-004) - Chapter on Cloud Service Models