CompTIA CV0-004 Online Practice Questions and Exam Preparation

CompTIA CV0-004 Online Questions & Answers

• Question 301:

  An organization was preparing to harden an environment before granting access to external auditors.

  Vulnerability testing was completed, and only one low-priority, informational vulnerability remained outstanding:

  

  Two weeks later, the auditors review the system on a new machine without an existing browser cache.

  Credentials are not required when accessing the application login page.

  Which of the following tests were skipped, causing this issue?

  A. Functionality testing
  B. Usability testing
  C. Regression testing
  D. Penetration testing
  C. Regression testing

  ---

  Explanation

  References:

  https://www.techtarget.com/searchsecurity/definition/penetration-testing

• Question 302:

  A cloud administrator is building a company-standard VM image, which will be based on a public image.

  Which of the following should the administrator implement to secure the image?

  A. ACLs
  B. Least privilege
  C. Hardening
  D. Vulnerability scanning
  C. Hardening

  ---

  Explanation

  Hardening a VM image involves implementing security measures to reduce vulnerabilities and protect against threats. This process includes removing unnecessary software, services, and permissions, ensuring that the remaining software is updated with the latest security patches, and configuring settings to enhance security. Starting with a public image, the administrator should apply hardening techniques to ensure the custom company-standard VM image is secure and resilient against attacks.

• Question 303:

  Which of the following strategies requires the development of new code before an application can be successfully migrated to a cloud provider?

  A. Refactor
  B. Rearchitect
  C. Rehost
  D. Replatform
  A. Refactor

  ---

  Explanation

  Refactoring requires the development of new code before an application can be successfully migrated to a cloud provider. It often involves restructuring and optimizing the existing code without changing its external behavior to fit into the new cloud environment.

  References:

  Application migration strategies and the requirements for each, like refactoring, are included in cloud migration best practices covered in CompTIA Cloud+.

• Question 304:

  An IT professional is selecting the appropriate cloud storage solution for an application that has the following requirements: The owner of the objects should be the object writer.

  The storage system must enforce TLS encryption.

  Which of the following should the IT professional configure?

  A. A bucket
  B. A CIFS endpoint
  C. A SAN
  D. An NFS mount
  A. A bucket

  ---

  Explanation

  A bucket Comprehensive A bucket is a cloud storage solution that allows users to store and access objects, such as files, images, videos, etc. A bucket is typically associated with object storage services, such as Amazon S3, Google Cloud Storage, or Microsoft Azure Blob Storage123. A bucket has the following characteristics that match the requirements of the application: The owner of the objects is the object writer.

  This means that the user who uploads or writes an object to the bucket becomes the owner of that object and can control its access permissions 456. The storage system enforces TLS encryption. This means that the data in transit between the client and the bucket is encrypted using the Transport Layer Security (TLS) protocol, which provides security and privacy for the communication . A CIFS endpoint, a SAN, and an NFS mount are not cloud storage solutions, but rather network protocols or architectures that enable access to storage devices

• Question 305:

  A company has one cloud-based web server that is prone to downtime during maintenance.

  Which of the following should the cloud engineer add to ensure high availability?

  A. A redundant web server behind a load balancer
  B. A backup cloud web server
  C. A secondary network link to the web server
  D. An autoscaling feature on the web server
  A. A redundant web server behind a load balancer

  ---

  Explanation

  Adding a redundant web server behind a load balancer is the solution that will ensure high availability. If one server goes down for maintenance, the other can take over, ensuring that the web service remains available without interruption.

  References:

  High availability concepts, including the use of load balancers and redundant servers, are part of cloud infrastructure design as per CompTIA Cloud+.

• Question 306:

  A systems engineer is migrating a batch of 25 VMs from an on-premises compute cluster to a public cloud using the public cloud's migration agent. The migration job shows data copies at a rate of 250Mbps. After five servers migrated, the remaining data copied at a rate of 25Mbps.

  Which of the following is the most likely cause of the issue?

  A. The local VM host hardware utilization
  B. The ISP throttling rate
  C. The IOPS on the SAN backing the on-premises cluster
  D. The compute utilization of the VMs being migrated
  C. The IOPS on the SAN backing the on-premises cluster

  ---

  Explanation

  As more VMs are migrated simultaneously, the underlying SAN must handle increasing read operations. If the SAN's IOPS capacity becomes saturated, throughput drops significantly, causing the migration rate to fall from 250Mbps to 25Mbps. This makes storage IOPS the most likely bottleneck.

• Question 307:

  SIMULATION

  A company hosts various containerized applications for business uses. A client reports that one of its routine business applications fails to load the web-based login prompt hosted in the company cloud.

  

  INSTRUCTIONS

  Click on each device and resource. Review the configurations, logs, and characteristics of each node in the architecture to diagnose the issue. Then, make the necessary changes to the WAF configuration to remediate the issue.

  Web app 1

  

  Web app 2

  

  Web app 3

  

  Web app 4

  

  Client app

  

  

  

  

  A. Check the Explanation for the complete Solution.
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. Check the Explanation for the complete Solution.

  ---

  Explanation

  The issue is with Web app 1 (Finance application).

  From the WAF logs, we can see that requests to https://webapp1.comptia.org/FIN/login.htmlare being blocked (Rule ID 1006). The rule is configured to block access to the finance application's login page. This corresponds to the reported issue of the web-based login prompt not loading. To remediate the issue, the WAF configuration for Rule ID 1006 should be changed from "Block" to "Allow". This will enable the web-based login prompt to load for the client. Additionally, the client app configuration indicates that the client laptop (IP 192.168.10.142) is trying to access the service, and the WAF logs show that requests from this IP are being blocked due to the current rule set. Changing the action for Rule ID 1006 will also ensure that legitimate attempts to access the login page from this IP are not blocked.

  Steps for remediation:

  Go to the WAF configuration.

  Find Rule ID 1006 for the Finance application 1.

  Change the action from "Block" to "Allow".

  Save the changes.

  References:

  Web application firewall (WAF) configurations typically include rules that define which traffic should be allowed or blocked. Blocking legitimate traffic to login pages can prevent users from accessing the application, which seems to be the case here.

  Client application configurations and WAF logs provide valuable insights into the source of the traffic and the rules that are affecting it. It's important to ensure that the rules align with the intended access policies for the application.

• Question 308:

  Which of the following industry standards mentions that credit card data must not be exchanged or stored in cleartext?

  A. CSA
  B. GDPR
  C. SOC2
  D. PCI-DSS
  D. PCI-DSS

  ---

  Explanation

  The Payment Card Industry Data Security Standard (PCI-DSS) is the industry standard that mandates that credit card data must not be stored or transmitted in cleartext. It includes requirements for encryption, access control, and other security measures to protect cardholder data.

  References:

  Official PCI Security Standards Council Site.

• Question 309:

  A project manager is creating a project charter.

  Which of the following should be included?

  A. Project schedule
  B. Resource allocation
  C. Risk plan
  D. Stakeholder identification
  D. Stakeholder identification

• Question 310:

  A company has a web application running in an on-premises environment that needs to be migrated to the cloud. The company wants to implement a solution that maximizes scalability, availability, and security, while requiring no infrastructure administration.

  Which of the following services would be BEST to meet this goal?

  A. A PaaS solution
  B. A hybrid solution
  C. An laaS solution
  D. A SaaS solution
  A. A PaaS solution

  ---

  Explanation

  1. A PaaS solution would meet the company's goal of maximizing scalability, availability, and security, while requiring no infrastructure administration, because:

  Scalability: A PaaS solution can automatically scale up or down the resources needed to run the application based on the demand and traffic. The company does not need to worry about provisioning or managing servers, storage, network, or load balancers

  23. Availability: A PaaS solution can ensure high availability and reliability of the application by replicating it across multiple regions and zones. The company does not need to worry about backup, recovery, or failover

  23. Security: A PaaS solution can provide built-in security features such as encryption, authentication, authorization, and firewall.

  The company does not need to worry about installing or updating security patches or software 23. No infrastructure administration: A PaaS solution can abstract away the underlying infrastructure and hardware from the company. The company only needs to focus on developing and deploying the application code and data. The PaaS provider takes care of the rest 23.

  A hybrid solution (B) is a cloud computing service that combines on-premises and cloud resources. It may offer some benefits such as flexibility and cost optimization, but it would not meet the company's goal of requiring no infrastructure administration. The company would still need to manage and maintain the on-premises part of the solution 4. An IaaS solution ? or infrastructure as a service, is a