CompTIA CV0-004 Online Practice Questions and Exam Preparation

CompTIA CV0-004 Online Questions & Answers

• Question 401:

  A cloud engineer needs to determine a scaling approach for a payroll-processing solution that runs on a biweekly basis. Given the complexity of the process, the deployment to each new VM takes about 25 minutes to get ready.

  Which of the following would be the best strategy?

  A. Horizontal
  B. Scheduled
  C. Trending
  D. Event
  B. Scheduled

  ---

  Explanation

  For a biweekly payroll-processing solution that takes a significant amount of time to deploy to each new VM, the best scaling strategy is Scheduled scaling. This strategy involves preparing new instances in advance of when they are needed based on a known schedule, which in this case is the biweekly payroll process. By scheduling the scaling actions in advance, the cloud engineer ensures that the resources are ready when needed without incurring extra costs for running them all the time.

  References:

  CompTIA Cloud+ Study Guide (Exam CV0-004) by Todd Montgomery and Stephen Olson

• Question 402:

  During an incident, a cloud security engineer finds that a suspicious file was run in a virtual desktop. The cloud security engineer obtains a list of users involved in the incident:

  

  The cloud security engineer also obtains the system logs:

  

  Which of the following types of vulnerabilities did the malicious application most likely exploit?

  A. Privilege escalation
  B. Improper permissions
  C. Data exfiltration
  D. Leaked credentials
  A. Privilege escalation

  ---

  Explanation

  The logs show that user_a attempted to add themselves to the Admins group but was denied because they were not in the sudoers list. Shortly afterward, a suspicious script (app.sh) was granted execute permissions and successfully run. Later, user_a successfully executed the same administrative command that had previously failed, indicating the malicious application enabled the user to obtain elevated privileges. This behavior is characteristic of a privilege escalation vulnerability, where a user gains permissions beyond those originally assigned.

• Question 403:

  A cloud developer receives a security vulnerability scan report and needs to analyze and record the true positives.

  Which of the following vulnerability management steps is this an example of?

  A. Assessment
  B. Identification
  C. Scanning scope
  D. Remediation
  B. Identification

• Question 404:

  An IT manager needs to deploy a cloud solution that meets the following requirements:

  1. Users must use two authentication methods to access resources.

  2. Each user must have 10GB of storage space by default.

  Which of the following combinations should the manager use to provision these requirements?

  A. OAuth 2.0 and ephemeral storage
  B. OIDC and persistent storage
  C. MFA and storage quotas
  D. SSO and external storage
  C. MFA and storage quotas

  ---

  Explanation

  The combination that should be used to provision the requirements of two authentication methods and 10GB of storage space by default for each user is Multi-Factor Authentication (MFA) and storage quotas.

  MFA provides an additional layer of security beyond just a username and password, and storage quotas can be used to allocate a specific amount of storage space for each user.

  References:

  CompTIA Cloud+ Study Guide (Exam CV0-004) by Todd Montgomery and Stephen Olson

• Question 405:

  A project manager is assigned to a project that includes vendor contracts.

  Which of the following actions should the project manager perform most frequently? (Select two.)

  A. Update the issue log
  B. Create a project charter
  C. Validate the status report
  D. Monitor performance
  E. Approve deliverables
  F. Baseline the project schedule
  A. Update the issue log
  D. Monitor performance

• Question 406:

  A vulnerability exists on a critical cloud server. The cloud administrator needs to resolve the issue with minimal interruptions.

  Which of the following should the administrator do next?

  A. Perform a patch installation during lunchtime.
  B. Run a vulnerability scan.
  C. Install major updates after business hours.
  D. Apply fixes in the testing environment.
  D. Apply fixes in the testing environment.

  ---

  Explanation

  Applying fixes in the testing environment first allows the administrator to verify the patch's effectiveness and stability before deploying it to the critical server, minimizing interruptions.

• Question 407:

  Which of the following should be used on containers to process data and keep the output in files for later review?

  A. Standard output
  B. Optical disk mount
  C. Ephemeral storage
  D. Persistent volumes
  D. Persistent volumes

  ---

  Explanation

  Persistent volumes allow containerized applications to store output data in a durable location that remains available even after the container stops, ensuring files can be reviewed later.

• Question 408:

  Which of the following concepts refers to edge computing?

  A. Compute resources at a retail store sending data to the cloud
  B. Compute resources at a retail store analyzing point-of-sale transactions
  C. Compute resources in a public cloud data center analyzing recent sales data
  D. Compute resources in an on-premises data center analyzing quarterly sales reports
  B. Compute resources at a retail store analyzing point-of-sale transactions

  ---

  Explanation

  Edge computing involves processing data as close as possible to where it is generated. Analyzing point-of-sale transactions directly at the retail store exemplifies local, near-source computation, which is the core concept of edge computing.

• Question 409:

  Which of the following vulnerability management concepts is best defined as the process of discovering vulnerabilities?

  A. Scanning
  B. Assessment
  C. Remediation
  D. Identification
  D. Identification

  ---

  Explanation

  In vulnerability management, 'Identification' is the concept best defined as the process of discovering vulnerabilities. This step is crucial as it involves detecting vulnerabilities in systems, software, and networks, which is the first step in the vulnerability management process before moving on to assessment, remediation, and reporting.

• Question 410:

  A cloud architect is preparing environments to develop a new application that will process sensitive data.

  The project team consists of one internal developer, two external consultants, and three testers.

  Which of the following is the most important security control for the cloud architect to consider implementing?

  A. Setting up private development, public development, and testing environments
  B. Segregating environments for internal and external teams
  C. Configuring DDoS protection to mitigate the risk of downtime
  D. Using IAM and ACL in order to bolster DLP
  D. Using IAM and ACL in order to bolster DLP

  ---

  Explanation

  In a project handling sensitive data with a mix of internal and external team members, implementing Identity and Access Management (IAM) and Access Control Lists (ACL) is crucial for Data Loss Prevention (DLP).

  These controls ensure that only authorized individuals have access to specific resources, and actions are governed according to the principle of least privilege, minimizing the risk of data leakage or unauthorized access.