CompTIA CV0-004 Online Practice Questions and Exam Preparation

CompTIA CV0-004 Online Questions & Answers

• Question 361:

  An organization's security policy states that software applications should not exchange sensitive data in cleartext. The security analyst is concerned about a software application that uses Base64 to encode credit card data.

  Which of the following would be the best algorithm to replace Base64?

  A. 3DES
  B. AES
  C. RC4
  D. SHA-3
  B. AES

  ---

  Explanation

  AES (Advanced Encryption Standard) is the best algorithm to replace Base64 for secure data exchange.

  Base64 is an encoding method that is not secure by itself, as it's easily reversible. AES, on the other hand, is a widely used encryption standard that ensures data is protected and is not readable without the correct encryption key.

  References:

  Encryption standards and practices, including the use of AES for securing data, are essential knowledge in cloud security covered in CompTIA Cloud+.

• Question 362:

  A high-usage cloud resource needs to be monitored in real time on specific events to guarantee its availability.

  Which of the following actions should be used to meet this requirement?

  A. Configure a ping command to identify when the cloud instance is out of service.
  B. Create a dashboard with visualizations to filter the status of critical activities.
  C. Collect all the daily activity from the cloud instance and create a dump file for analysis.
  D. Schedule an hourly scan of the network to check for the availability of the resource.
  B. Create a dashboard with visualizations to filter the status of critical activities.

  ---

  Explanation

  To guarantee real-time monitoring of a high-usage cloud resource, creating a dashboard with visualizations to filter the status of critical activities is effective. This allows for a quick visual assessment of the system's health and performance, enabling immediate action if specific events indicate potential issues with availability.

  References:

  Real-time monitoring and the use of dashboards for tracking critical cloud resources are part of the cloud management best practices covered under the CompTIA Cloud+ objectives.

• Question 363:

  A systems administrator would like to reduce the network delay between two servers.

  Which of the following will reduce the network delay without taxing other system resources?

  A. Decrease the MTU size on both servers
  B. Adjust the CPU resources on both servers
  C. Enable compression between the servers
  D. Configure a VPN tunnel between the servers
  A. Decrease the MTU size on both servers

  ---

  Explanation

  The maximum transmission unit (MTU) is the largest size of a packet or frame that can be sent over a network. Decreasing the MTU size on both servers can reduce the network delay between them, as it can reduce the fragmentation and reassembly of packets, improve the transmission efficiency, and avoid packet loss or errors. Decreasing the MTU size can also avoid taxing other system resources, as it does not require additional CPU, memory, or disk resources.

  References:

  CompTIA Cloud+ Certification Exam Objectives, page 16, section 3.2 Reference: (https://cseweb.ucsd.edu/~calder/papers/HPDC-01-DynComp.pdf)

• Question 364:

  A systems administrator is implementing a new file storage service that has been deployed in the company's private cloud instance. The key requirement is fast read/write times for the targeted users, and the budget for this project is not a concern.

  Which of the following storage types should the administrator deploy?

  A. Spinning disks
  B. NVMe
  C. SSD
  D. Hybrid
  B. NVMe

• Question 365:

  Which of the following commands is used to deploy a container in which the image name is "working"?

  A. $docker run -p 80:8080 -it working images.comptia.org/development:latest - e /bin/bash
  B. $docker run -p 80:8080 -it images.comptia.org/working/production:latest -e / bin/bash
  C. $docker run -p 80:8080 -it images.comptia.org/abcd123/working:latest -e / bin/bash
  D. $docker run -p 80:8080 -it working.images.comptia.org/abcd12:latest -e /bin/ bash
  C. $docker run -p 80:8080 -it images.comptia.org/abcd123/working:latest -e / bin/bash

  ---

  Explanation

  In a Docker image reference, the image name is the component immediately preceding the tag. In images.comptia.org/abcd123/working:latest, the image name is working and the tag is latest. The command correctly references and runs the image named working.

• Question 366:

  A company has developed an online trading platform. The engineering team selected event-based scaling for the platform's underlying resources. The platform resources scale up with every 2,000 subscribed users.

  The engineering team finds out that although compute utilization is low, scaling is still occurring.

  Which of the following statements best explains why this is the case?

  A. Event-based scaling does not scale down resources.
  B. Event-based scaling should not be triggered at the 2,000-user frequency.
  C. Event-based scaling should not track user subscriptions.
  D. Event-based scaling does not take resource load into account.
  D. Event-based scaling does not take resource load into account.

  ---

  Explanation

  Event-based scaling triggers based on specific events, such as the number of user subscriptions in this case. It does not necessarily account for the actual load or utilization of compute resources. This is why the platform's resources continue to scale up even though compute utilization is low; the scaling decision is being made based on the number of subscribed users rather than the current resource usage.

  References:

  CompTIA Cloud+ Certification Study Guide (Exam CV0-004) by Scott Wilson and Eric Vanderburg

• Question 367:

  A cloud infrastructure administrator updated the IP tables to block incoming connections and outgoing responses to 104.225.110.203.

  Which of the following vulnerability management steps is this an example of?

  A. Scanning scope
  B. Remediation
  C. Identification
  D. Assessment
  B. Remediation

  ---

  Explanation

  Updating the IP tables to block connections to a specific IP address as a response to vulnerabilities is an example of remediation. Remediation involves taking direct action to fixvulnerabilities, such as by applying patches, changing configurations, or, in this case, updating firewall rules to block potentially harmful traffic.

  References:

  CompTIA Cloud+ resources and vulnerability management processes

• Question 368:

  A government agency in the public sector is considering a migration from on premises to the cloud.

  Which of the following are the most important considerations for this cloud migration? (Select two).

  A. Compliance
  B. laaS vs. SaaS
  C. Firewall capabilities
  D. Regulatory
  E. Implementation timeline
  F. Service availability
  A. Compliance
  D. Regulatory

  ---

  Explanation

  For a government agency considering cloud migration, compliance and regulatory considerations are of utmost importance. The agency must ensure that the migration aligns with legal requirements, industry standards, and government regulations specific to the public sector.

  References:

  Compliance and regulatory considerations are crucial factors in the cloud migration process for government entities, as emphasized in the CompTIA Cloud+ certification.

• Question 369:

  SIMULATION

  The QA team is testing a newly implemented clinical trial management (CTM) SaaS application that uses a business intelligence application for reporting. The UAT users were instructed to use HTTP and HTTPS.

  Refer to the application dataflow:

  1. 1A -The end user accesses the application through a web browser to enter and view clinical data.

  2. 2A -The CTM application server reads/writes data to/from the database server.

  3. 1B -The end user accesses the application through a web browser to run reports on clinical data.

  4. 2B -The CTM application server makes a SOAP call on a non-privileged port to the BI application server.

  5. 3B -The BI application server gets the data from the database server and presents it to the CTM application server.

  When UAT users try to access the application using https://ctm.app.com or http://ctm.app.com, they get a message stating: "Browser cannot display the webpage." The QA team has raised a ticket to troubleshoot the issue.

  INSTRUCTIONS

  You are a cloud engineer who is tasked with reviewing the firewall rules as well as virtual network settings.

  You should ensure the firewall rules are allowing only the traffic based on the dataflow.

  You have already verified the external DNS resolution and NAT are working.

  Verify and appropriately configure the VLAN assignments and ACLs. Drag and drop the appropriate VLANs to each tier from the VLAN Tags table. Click on each Firewall to change ACLs as needed.

  If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

  

  

  

  

  

  A. Check the answer in explanation.
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. Check the answer in explanation.

  ---

  Explanation

  On firewall 3, change the DENY 0.0.0.0 entry to rule 3 not rule 1.

• Question 370:

  A cloud developer addresses a bug in one of the company's applications. The developer wants to record the changes and retain the application history.

  Which of the following steps should the developer take?

  A. Code commit
  B. Code refactor
  C. Code review
  D. Code request
  A. Code commit

  ---

  Explanation

  A code commit records changes made to the application's source code in a version control system and preserves the history of those changes. This allows developers to track modifications, review past versions, and maintain an audit trail of bug fixes and enhancements.