CompTIA CV0-004 Online Practice Questions and Exam Preparation

CompTIA CV0-004 Online Questions & Answers

• Question 441:

  A company notices inconsistencies in its cloud environment. After further analysis, the company discovers that some developers have been making manual configuration changes that roll back changes made by the DevOps team.

  Which of the following should the company do to best manage its cloud infrastructure? (Choose two.)

  A. Enable versioning on cloud resources in order to easily roll back changes
  B. Use cloud policies to enforce the company's standards
  C. Restrict access to the cloud console to only the DevOps team
  D. Create scripts that use the cloud provider's CLI
  E. Use IaC to handle the company's cloud resources
  F. Deploy the applications using containers
  B. Use cloud policies to enforce the company's standards
  E. Use IaC to handle the company's cloud resources

  ---

  Explanation

  Using cloud policies enforces organizational standards and prevents unauthorized or noncompliant configuration changes. Policies help ensure resources remain configured according to approved requirements.

  Using Infrastructure as Code (IaC) allows cloud resources to be defined, deployed, and managed consistently through version-controlled code. This reduces configuration drift and prevents manual changes from causing inconsistencies in the environment.

• Question 442:

  A company's website development team made some code changes to implement a new feature. The development team published the changes via a code pipeline and verified that the feature is in the development environment. However, the testing team is unable to see the new feature when executing the test plan.

  Which of the following steps should the cloud administrator take first to identify the cause of the issue?

  A. Roll back the development pipeline to revert and reapply the changes.
  B. Confirm that the deployment has been completed in the QA environment.
  C. Switch the application load balancer to use the blue environment
  D. Update the policies on the CASB to allow access to the test environment.
  B. Confirm that the deployment has been completed in the QA environment.

• Question 443:

  An administrator received a report that company data has been compromised. The compromise occurred on a holiday, and no one in the organization was working. While reviewing the logs from the holiday, the administrator noted the following details:

  

  The most appropriate action for the cloud security analyst to recommend is using CIS-hardened images.

  These images are pre-configured by the Center for Internet Security to provide security benchmark standards that help in mitigating vulnerabilities in publicly available container images.

  Which of the following accounts should the administrator disable to prevent a further breach?

  A. Cloud administrator
  B. Human resources manager
  C. Security engineer
  D. Software developer
  D. Software developer

  ---

  Explanation

  Based on the provided log details, the account of the Software Developer was used to gain unauthorized access. This account should be disabled to prevent further breaches, especially considering no one from the organization was working during the holiday, suggesting a compromised account.

  References:

  CompTIA Cloud+ Study Guide (Exam CV0-004) - Chapter on Cloud Security Posture

• Question 444:

  After receiving multiple complaints that an application is not always available, a cloud engineer reviews the application's performance. According to monitoring data the application receives different volumes of traffic at unpredictable times, which impacts performance.

  Which of the following is the best scaling strategy to improve the application's performance?

  A. Scheduled
  B. Vertical
  C. Manual
  D. Horizontal
  D. Horizontal

  ---

  Explanation

  Horizontal scaling adds more instances automatically as traffic fluctuates, making it the most effective strategy for unpredictable and variable workloads to maintain application availability and performance.

• Question 445:

  A company requests that its cloud administrator provision virtual desktops for every user. Given the following information:

  1. One hundred users are at the company.

  2. A maximum of 30 users work at the same time.

  3. Users cannot be interrupted while working on the desktop.

  Which of the following strategies will reduce costs the most?

  A. Provisioning VMs of varying sizes to match user needs
  B. Configuring a group of VMs to share with multiple users
  C. Using VMs that have spot availability
  D. Setting up the VMs to turn off outside of business hours at night
  D. Setting up the VMs to turn off outside of business hours at night

  ---

  Explanation

  Setting up the VMs to turn off outside of business hours at night will reduce costs the most, especially since a maximum of 30 users work at the same time and users cannot be interrupted while working. This approach ensures that resources are used only when necessary.

  References:

  Cost management and efficient resource utilization strategies like scheduling VMs to turn off during idle times are discussed within the financial management aspects of cloud services in the CompTIA Cloud+ exam objectives.

• Question 446:

  Which of the following is the most appropriate service to publish an application that requires very low latency connections?

  A. Virtual private cloud
  B. Network load balancer
  C. Application gateway
  D. Application load balancer
  B. Network load balancer

  ---

  Explanation

  A network load balancer operates at the transport layer and is designed to handle extremely high performance and very low latency traffic. It forwards connections based on TCP/UDP without the additional processing required for application-layer inspection, enabling faster packet handling and minimal delay, which is ideal for applications requiring very low latency connections.

• Question 447:

  A cloud engineer needs to migrate an application from on premises to a public cloud. Due to timing constraints, the application cannot be changed prior to migration.

  Which of the following migration strategies is best approach for this use case?

  A. Retire
  B. Rearchitect
  C. Refactor
  D. Rehost
  D. Rehost

  ---

  Explanation

  Rehosting, often referred to as "lift-and-shift," is the process of migrating an application or workload to the cloud without modifying it. This approach is suitable when there are timing constraints that prevent making changes to the application prior to migration. Rehosting can be the quickest migration strategy since it involves moving the existing applications to the cloud with minimal changes.

  References:

  CompTIA Cloud+ resources and cloud migration strategies

• Question 448:

  A cloud engineer deploys a group of new VMs to the cloud environment. The VMs have access to sensitive data.

  Which of the following data protection methods should the engineer use to protect this data from ransomware?

  A. Volume encryption
  B. Immutable storage
  C. Incremental backups
  D. Data replication
  B. Immutable storage

  ---

  Explanation

  Immutable storage protects data from ransomware by preventing stored data from being modified, encrypted, or deleted for a defined retention period. Even if ransomware compromises the VMs, the protected data remains unchanged and recoverable, making immutable storage one of the most effective defenses against ransomware attacks.

• Question 449:

  A healthcare provider contacts a MSP about moving an on-premises infrastructure to the cloud.

  Which of the following requirements are most important for the MSP to consider when migrating this customer? (Choose two.)

  A. Security
  B. Cost
  C. Availability
  D. Storage
  E. Compliance
  F. Compute
  A. Security
  E. Compliance

  ---

  Explanation

  Security is critical to protect sensitive healthcare data during and after migration.

  Compliance ensures the cloud environment meets healthcare regulations such as HIPAA.

• Question 450:

  After accidentally uploading a password for an IAM user in plain text, which of the following should a cloud administrator do FIRST? (Choose two.)

  A. Identify the resources that are accessible to the affected IAM user
  B. Remove the published plain-text password
  C. Notify users that a data breach has occurred
  D. Change the affected IAM user's password
  E. Delete the affected IAM user
  B. Remove the published plain-text password
  D. Change the affected IAM user's password

  ---

  Explanation

  The first step a cloud administrator should take after accidentally uploading a password for an IAM user in plain text is to remove the published plain-text password. This should be done immediately to prevent unauthorized access to the affected user's resources. The administrator should then change the password for the affected IAM user to a new, strong password. This will ensure that the user's resources are secure and that there is no unauthorized access.

  A. Identifying the resources that are accessible to the affected IAM user is important, but it should not be done before removing the plain-text password and changing the password for the affected user. This step can be taken after the immediate security concerns have been addressed.

  C. While it is important to notify users of a data breach, this step is not necessary in this situation as the password was accidentally uploaded and there is no evidence that any unauthorized access has occurred. However, the cloud administrator should review their security protocols to ensure that similar incidents do not occur in the future.

  E. Deleting the affected IAM user is not necessary in this situation, as the user's resources can be secured by changing the password. Deleting the user may cause unnecessary disruption to the user's workflow and could result in the loss of important data. In summary, the first step a cloud administrator should take after accidentally uploading a password for an IAM user in plain text is to remove the published plain-text password, followed by changing the password for the affected user.