CompTIA CV0-004 Online Practice Questions and Exam Preparation

CompTIA CV0-004 Online Questions & Answers

• Question 431:

  Which of the following cloud deployment strategies is best for an organization that wants to run open-source workloads with other organizations that are sharing the cost?

  A. Community
  B. Public
  C. Hybrid
  D. Private
  A. Community

  ---

  Explanation

  A community cloud deployment strategy is best for an organization that wants to run open-source workloads with other organizations while sharing the cost. Community clouds are collaborative efforts where infrastructure is shared between several organizations with common concerns, which could be regulatory, security, or compliance-related.

  References:

  The concept of community clouds is discussed in the domain of Cloud Concepts within the CompTIA Cloud+ exam objectives.

• Question 432:

  A public cloud environment customer wants to encrypt the data it puts in the cloud. However, the CSP

  prohibits customer encryption keys.

  Which of the following principles is the CSP violating?

  A. Data ownership
  B. Data sovereignty
  C. Data classification
  D. Data retention
  A. Data ownership

  ---

  Explanation

  Data ownership means the customer retains full control over their data, including how it is encrypted and protected. By prohibiting customer-managed encryption keys, the CSP is violating the customer's right to exercise ownership and control of their data.

• Question 433:

  Which of the following is a field of computer science that enables computers to identify and understand objects and people in images and videos?

  A. Image reconstruction
  B. Facial recognition
  C. Natural language processing
  D. Computer vision
  D. Computer vision

  ---

  Explanation

  Computer vision is a field of computer science that enables computers to identify and understand objects and people in images and videos. It involves the development of systems that can capture and interpret visual information from the world, similar to the way humans do.

  References:

  The application of computer vision and its role in cloud services, particularly in relation to AI and machine learning capabilities, is discussed in CompTIA Cloud+.

• Question 434:

  A technician deployed a VM with NL-SAS storage to host a critical application. Two weeks later, users have begun to report high application latency.

  Which of the following is the BEST action to correct the latency issue?

  A. Increase the capacity of the data storage.
  B. Migrate the data to SAS storage.
  C. Increase the CPU of the VM.
  D. Migrate the data to flash storage.
  D. Migrate the data to flash storage.

  ---

  Explanation

  The correct answer is D. Migrate the data to flash storage. Flash storage is a type of solid-state storage that uses flash memory to store data. Flash storage has much faster performance and lower latency than NL-SAS storage, which is a type of hard disk drive that uses nearline serial attached SCSI interface.

  According to the web search results, NL-SAS devices have much higher response times than flash devices 123. Therefore, migrating the data to flash storage can reduce the application latency and improve the user experience. Increasing the capacity of the data storage, migrating the data to SAS storage, or increasing the CPU of the VM are not likely to solve the latency issue, as they do not address the root cause of the problem, which is the slow performance of NL-SAS storage. For more information on flash storage and its benefits, you can refer to the

  Dell EMC Unity: FAST Technology Overview2 or the Dell Technologies website 4.

• Question 435:

  A workload runs in an IaaS public cloud environment. An engineering team must secure access to the VMs for managing the services. The VMs currently expose the SSH service to the internet.

  Which of the following solutions reduces the risk of hacking with the least maintenance?

  A. Deploying MFA for the SSH connections
  B. Adding a managed IaaS instance and using it as bastion host to access the VMs
  C. Blocking SSH with a network ACL and using private endpoints for management
  D. Replacing SSH with RDP
  B. Adding a managed IaaS instance and using it as bastion host to access the VMs

  ---

  Explanation

  A bastion host provides a secure, controlled entry point for administrative access to private VMs, eliminating the need to expose SSH directly to the internet. Using a managed IaaS instance as a bastion host significantly reduces the attack surface while requiring minimal ongoing maintenance compared to managing additional authentication systems or custom network configurations.

• Question 436:

  A systems administrator notices the host filesystem is running out of storage space.

  Which of the following will best reduce the storage space on the system?

  A. Deduplication
  B. Compression
  C. Adaptive optimization
  D. Thin provisioning
  A. Deduplication

  ---

  Explanation

  Deduplication is a technique that reduces the storage space by eliminating duplicate data blocks and replacing them with pointers to the original data. Deduplication can help free up the host filesystem by removing redundant data and increasing the storage efficiency. Deduplication can be performed at the source or the target, and it can be applied at the file or block level.

  References:

  [CompTIA Cloud+ CV0- 003 Certification Study Guide], Chapter 4, Objective 4.3: Given a scenario, troubleshoot common storage issues.

• Question 437:

  Which of the following is the best tool to deploy template-based, containerized workloads on premises and on the cloud?

  A. Docker
  B. Terraform
  C. Jenkins
  D. Git
  B. Terraform

  ---

  Explanation

  Terraform is designed to deploy and manage infrastructure as code, including template-based, containerized workloads across both on-premises and cloud environments.

• Question 438:

  A security analyst confirms a zero-day vulnerability was exploited by hackers who gained access to confidential customer data and installed ransomware on the server.

  Which of the following steps should the security analyst take? (Select two).

  A. Contact the customers to inform them about the data breach.
  B. Contact the hackers to negotiate payment lo unlock the server.
  C. Send a global communication to inform all impacted users.
  D. Inform the management and legal teams about the data breach
  E. Delete confidential data used on other servers that might be compromised.
  F. Modify the firewall rules to block the IP addresses and update the ports.
  A. Contact the customers to inform them about the data breach.
  D. Inform the management and legal teams about the data breach

  ---

  Explanation

  After a zero-day exploit resulting in a data breach and ransomware installation, it is critical to inform affected customers about the breach and the potential impact on their data. Additionally, the management and legal teams should be notified to handle the situation in compliance with regulatory requirements and to coordinate an appropriate response.

  References:

  Handling security incidents and communication strategies after a data breach are crucial elements of the governance and risk compliance domains in CompTIA Cloud+.

• Question 439:

  A company has hired a security firm to perform a vulnerability assessment of its environment. In the first phase, an engineer needs to scan the network services exposed by the hosts.

  Which of the following will help achieve this with the LEAST privileges?

  A. An agent-based scan
  B. A credentialed scan
  C. A network-based scan
  D. An application scan
  C. A network-based scan

  ---

  Explanation

  A network-based scan is a type of vulnerability assessment that scans the network services exposed by the hosts without requiring any credentials or agents. This type of scan will help achieve the objective of scanning the network services with the least privileges, as it does not need any access to the hosts or their internal configurations. A network-based scan can identify open ports, running services, and potential vulnerabilities on the hosts.

  References:

  CompTIA Cloud+ Certification Exam Objectives, Domain 2.0

  Security, Objective 2.4 Given a scenario, implement security automation and orchestration in a cloud environment.

• Question 440:

  Five thousand employees always access the company's public cloud-hosted web application on a daily basis during the same time frame. Some users have been reporting performance issues while attempting to connect to the web application.

  Which of the following is the best configuration approach to resolve this issue?

  A. Scale vertically based on a trend.
  B. Scale horizontally based on a schedule
  C. Scale vertically based on a load.
  D. Scale horizontally based on an event
  B. Scale horizontally based on a schedule

  ---

  Explanation

  For a web application accessed by a large number of employees daily during the same time frame, the best configuration approach to resolve performance issues is to scale horizontally based on a schedule.

  This means adding more server instances to handle the load during known peak times.

  References:

  Cloud resource scaling strategies, including scheduled horizontal scaling, are discussed in the CompTIA Cloud+ curriculum under cloud management and optimization.