CompTIA CV0-004 Online Practice Questions and Exam Preparation

CompTIA CV0-004 Online Questions & Answers

• Question 451:

  Which of the following can reduce the risk of CI/CD pipelines leaking secrets?

  A. Protected Git branches
  B. Use of a VM instead of containers
  C. Private image repositories
  D. Canary tests
  A. Protected Git branches

  ---

  Explanation

  Protected Git branches help reduce the risk of CI/CD pipelines leaking secrets by imposing restrictions on who can commit to the branches, enforce status checks before merging, and prevent unauthorized access or changes to sensitive information, such as API keys, passwords, and secret tokens. This ensures that only approved changes can be made to the codebase, and sensitive information is safeguarded.

• Question 452:

  A cloud engineer wants to implement a disaster recovery strategy that:

  1. Is cost-effective.

  2. Reduces the amount of data loss in case of a disaster.

  3. Enables recovery with the least amount of downtime.

  Which of the following disaster recovery strategies best describes what the cloud engineer wants to achieve?

  A. Cold site
  B. Off site
  C. Warm site
  D. Hot site
  D. Hot site

  ---

  Explanation

  A hot site is a disaster recovery strategy that is cost-effective, minimizes data loss, and allows for the fastest recovery time in case of a disaster. It is an exact replica of the original site of the organization, with full computer systems as well as near-complete backups of user data. Hot sites are operational 24/7 and can take over functionality from the primary site immediately or with minimal delay.

  References:

  CompTIA Cloud+ Study Guide (Exam CV0-004) - Chapter on Disaster Recovery

• Question 453:

  Which of the following is an auditing procedure that ensures service providers securely manage the data to protect the interests of the organization and the privacy of its clients?

  A. CIS
  B. ITIL
  C. SOC2
  D. ISO 27001
  C. SOC2

  ---

  Explanation

  SOC2 (Service Organization Control 2) is an auditing procedure that ensures service providers securely manage data to protect the interests of an organization and the privacy of its clients. SOC2 is specifically designed for service providers storing customer data in the cloud, making it pertinent for data management and privacy.

  References:

  SOC2 and its role in auditing and ensuring secure data management by cloud service providers are part of the compliance standards and regulations included in the CompTIA Cloud+ certification material.

• Question 454:

  An administrator is setting up a cloud backup solution that requires the following features:

  4. Cost effective

  5. Granular recovery

  6. Multilocation

  Which of the following backup types best meets these requirements?

  A. Off-site, full, incremental, and differential
  B. Cloud site, full, and differential
  C. On-site. full, and incremental
  D. On-site. full, and differential
  A. Off-site, full, incremental, and differential

  ---

  Explanation

  An off-site cloud backup solution that offers full, incremental, and differential backups would best meet the requirements of being cost-effective, allowing granular recovery, and supporting multi-location storage.

  This combination allows for comprehensive backup strategies that can be tailored to the company's needs while optimizing storage costs.

  References:

  Backup strategies, including full, incremental, and differential backups, are an integral part of data management and protection strategies discussed in the CompTIA Cloud+ objectives.

• Question 455:

  A database administrator performs a full backup periodically and keeps several versions in a cloud instance with increasing storage costs.

  Which of the following should the administrator consider doing to manage backup retention?

  A. Classify backup files based on the sensitivity of data.
  B. Set up a time frame for the deletion of old backup files.
  C. Identify the need for granular and/or bulk recovery.
  D. Determine whether a differential backup will satisfy the operational needs.
  B. Set up a time frame for the deletion of old backup files.

  ---

  Explanation

  To effectively manage backup retention and control increasing storage costs, the administrator should establish a policy for deleting old backup files after a certain time period. This ensures that outdated backups that are no longer needed for recovery are removed, freeing up storage space and reducing costs.

• Question 456:

  An administrator migrates a legacy banking application from a private cloud to a public cloud. Then, the administrator discovers the application's hardware on the private cloud is no longer compatible for reuse.

  Which of the following should the administrator do next?

  A. Perform a full system backup
  B. Apply the latest patches
  C. Extend support
  D. Decommission the infrastructure
  D. Decommission the infrastructure

  ---

  Explanation

  When the legacy hardware can no longer be reused after migrating the application to the public cloud, the appropriate next step is to decommission the unused infrastructure to eliminate unnecessary cost, maintenance, and risk.

• Question 457:

  A newly configured VM fails to run application updates despite having internet access. The updates download automatically from a third-party network. Given the following output:

  

  Which of the following troubleshooting steps would be best to take?

  A. Checking DNS configurations
  B. Reconfiguring routing protocols
  C. Testing the IP address configuration
  D. Running a trace to the router
  A. Checking DNS configurations

  ---

  Explanation

  The best troubleshooting step to take given the output is to check DNS configurations. The failure to resolve the "na.updateserver.net" domain suggests a DNS resolution issue, which could be due to incorrect DNS settings, a failure in the DNS service, or an issue with the DNS server itself.

  References:

  Troubleshooting DNS issues is a crucial skill in cloud management, as DNS plays a fundamental role in network connectivity and access to resources. It is covered under Cloud Concepts in the CompTIA Cloud+ curriculum.

• Question 458:

  A cloud solutions architect needs to deploy a simple, public-facing website with the following requirements: Cost-effective Highly available Self-healing Secure.

  Which of the following will be the most appropriate template to use?

  

  A. <img src="CV0-004_25.jpg">
  B. <img src="CV0-004_26.jpg">
  C. <img src="CV0-004_27.jpg">
  D

  ---

  Explanation

  Cost-effective: The template specifies spot instances, which are cheaper than on-demand instances.

  Highly available: Autoscaling is enabled with a minimum of 2 instances, ensuring redundancy.

  Self-healing: Autoscaling ensures instances are replaced if they fail.

  Secure: The firewall rules allow HTTPS (port 443) from any source for public access while restricting SSH (port 22) to only 192.168.0.0/24, preventing unrestricted administrative access.

  This template aligns best with the requirements of a public-facing, secure, self-healing, and cost-effective website deployment.

• Question 459:

  A cloud administrator is troubleshooting an issue in which clients receive errors when connecting to an application server. The initial investigation shows the following: The application is behind a load balancer.

  The load balancer logs show connections being denied. There are no security issues. There are no infrastructure issues on the application servers. All connected clients are working as expected.

  Which of the following would most likely cause the issue?

  A. The application servers are running low on disk space.
  B. The load balancer is unable to connect to the application servers.
  C. The application is suffering from a memory leak.
  D. The service limit for the load balancer has been met.
  D. The service limit for the load balancer has been met.

  ---

  Explanation

  Since the servers and security configurations are fine and existing client connections work, the problem lies with new connections being denied. This points to the load balancer reaching its connection or service limit, preventing additional clients from connecting.

• Question 460:

  Which of the following is part of software change control?

  A. Rollback plans
  B. Maintenance windows
  C. Validation checks
  D. Requirements definition
  A. Rollback plans