CompTIA CV0-004 Online Practice Questions and Exam Preparation

CompTIA CV0-004 Online Questions & Answers

• Question 51:

  A cloud engineer is applying a critical security patch to multiple servers that have an SSH vulnerability.

  Which of the following is the fastest way to patch the servers and uses the fewest compute resources?

  A. Log in to each server simultaneously and apply the patch, then restart the servers.
  B. Update configuration management scripts to include the patch, then apply the configuration to a primary list of servers.
  C. Clone the servers using a readily available cloning tool, apply the patch to the new servers, and delete the old ones.
  D. Launch new servers from a patched image, install server configurations, and shut down the old servers.
  B. Update configuration management scripts to include the patch, then apply the configuration to a primary list of servers.

  ---

  Explanation

  Updating the configuration management scripts and pushing the patch to the target servers automates the change quickly across many systems while reusing the existing infrastructure. This avoids the extra compute overhead of cloning or launching replacement servers and is much faster than patching each server manually.

• Question 52:

  A large corporation, which operates exclusively on private cloud environments, is considering a merger and acquisition of two smaller companies, which operate on premises and in public cloud environments.

  Which of the following considerations is the most important for the parent corporation?

  A. Data centers, storage, and cost implications
  B. Networking, hardware, and computing
  C. Platform compatibility and migration strategies
  D. Management overhead and vendor lock-in
  C. Platform compatibility and migration strategies

  ---

  Explanation

  The most important consideration for the parent corporation in this scenario is platform compatibility and migration strategies. The parent company, operating entirely in a private cloud environment, will need to carefully evaluate how to integrate the smaller companies' on-premises and public cloud environments into its existing infrastructure. This requires assessing the compatibility of platforms and developing strategies for migrating applications, data, and workloads between the different environments to ensure a seamless transition.

• Question 53:

  A company that performs passive vulnerability scanning at its transit VPC has detected a vulnerability related to outdated web-server software on one of its public subnets.

  Which of the following can the use to verify if this is a true positive with the LEAST effort and cost? (Select TWO).

  A. A network-based scan
  B. An agent-based scan
  C. A port scan
  D. A red-team exercise
  E. A credentialed scan
  F. A blue-team exercise
  G. Unknown environment penetration testing
  B. An agent-based scan
  E. A credentialed scan

  ---

  Explanation

  1. An agent-based scan can also reduce the network bandwidth and performance impact of scanning, as well as avoid triggering false alarms from intrusion detection systems 2. A credentialed scan is a type of vulnerability scan that uses valid login credentials to access the target systems and perform a more thorough and comprehensive assessment of their configuration, patch level, and vulnerabilities. A credentialed scan can identify vulnerabilities that are not visible or exploitable from the network level, such as missing updates, weak passwords, or misconfigured services

  3. A credentialed scan can also reduce the risk of false positives and false negatives, as well as avoid causing damage or disruption to the target systems 3.

  A network-based scan, a port scan, a red-team exercise, a blue-team exercise, and unknown environment penetration testing are not the best options to verify if the vulnerability is a true positive with the least effort and cost. A network-based scan and a port scan may not be able to detect the vulnerability if it is not exposed or exploitable from the network level. A red-team exercise, a blue-team exercise, and unknown environment penetration testing are more complex, time-consuming, and costly methods that involve simulating real-world attacks or defending against them. These methods are more suitable for testing the overall security posture and resilience of an organization, rather than verifying a specific vulnerability 4.

• Question 54:

  1. The company updates the image to version 2 and would like to replace some of the version 1 images with version

  2. During the replacement process, a minimum percentage of version 1 replicas need to be kept running while starting image version 2 containers alongside them.

  Which of the following deployment methods is best given the company's requirements?

  A. In-place
  B. Rolling
  C. Upgrading
  D. Patching
  B. Rolling

  ---

  Explanation

  A rolling deployment gradually replaces old container replicas with new ones, ensuring a minimum number of the old version remain available while new version containers start, meeting the requirement for continuous availability during the update.

• Question 55:

  Which of the following best describes a benefit of the CI/CD process?

  A. Software delivery is accelerated without compromising quality
  B. Incremental changes occur only at the end of the project
  C. Software is easily integrated with other projects
  D. Updates are released every sprint
  A. Software delivery is accelerated without compromising quality

• Question 56:

  Which of the following cloud services has the highest level of vendor lock-in?

  A. Object storage
  B. PaaS database
  C. Virtual machine
  D. File server
  B. PaaS database

  ---

  Explanation

  PaaS databases often use vendor-specific APIs, features, and management tools, making migration to another provider difficult. This creates a high level of vendor lock-in compared to more standardized services like VMs or object storage.

• Question 57:

  A cloud engineer is collecting web server application logs to troubleshoot intermittent issues. However, the logs are piling up and causing storage issues.

  Which of the following log mechanisms should the cloud engineer implement to address this issue?

  A. Splicing
  B. Rotation
  C. Sampling
  D. Inspection
  B. Rotation

  ---

  Explanation

  Log rotation is the mechanism the cloud engineer should implement to address the issue of logs piling up and causing storage issues. Log rotation involves automatically archiving old log files and creating new ones after a certain size or time period, preventing storage issues.

  References:

  CompTIA Cloud+ Study Guide (Exam CV0-004) - Chapter on Cloud Monitoring and Management

• Question 58:

  A cloud deployment uses three different VPCs. The subnets on each VPC need to communicate with the others over private channels.

  Which of the following will achieve this objective?

  A. Deploying a load balancer to send traffic to the private IP addresses
  B. Creating peering connections between all VPCs
  C. Adding BGP routes using the VPCs' private IP addresses
  D. Establishing identical routing tables on all VPCs
  B. Creating peering connections between all VPCs

  ---

  Explanation

  To allow subnets on different VPCs to communicate with each other over private channels, the cloud engineer should create peering connections between all the VPCs. VPC Peering allows networks to connect and route traffic using private IP addresses without the need for gateways, VPN connections, or separate physical hardware.

  References:

  CompTIA Cloud+ Study Guide (Exam CV0-004) by Todd Montgomery and Stephen Olson

• Question 59:

  A systems administrator notices a surge of network traffic is coming from the monitoring server. The administrator discovers that large amounts of data are being downloaded to an external source. While investigating, the administrator reviews the following logs:

  

  Which of the following ports has been compromised?

  A. Port 20
  B. Port 22
  C. Port 443
  D. Port 4443
  E. Port 8048
  E. Port 8048

  ---

  Explanation

  Based on the logs provided, the port that has been compromised is Port 8048. The state "TIME_WAIT" indicates that this port was recently used to establish a connection that has now ended. This could be indicative of the recent activity where large amounts of data were downloaded to an external source, suggesting a potential security breach.

  References:

  CompTIA Cloud+ Study Guide (Exam CV0-004) by Todd Montgomery and Stephen Olson

• Question 60:

  A project team is deciding how to break a large project into smaller components so the project can be delivered without increasing iteration cycle duration.

  Which of the following describes the grouping of these smaller components?

  A. An issue
  B. A goal
  C. A backlog item
  D. An epic
  D. An epic