CompTIA CompTIA Cloud+ CV1-003 Questions & Answers

• Question 11:

  Which of the following cloud services is fully managed?

  A. IaaS

  B. GPU in the cloud

  C. IoT

  D. Serverless compute

  E. SaaS

  Correct Answer: C

  Reference: https://developers.google.com/iot

• Question 12:

  An IaaS application has a two-hour RTO and a four-hour RPO. The application takes one hour to back up its data or restore from a local backup file. A systems administrator is tasked with configuring the backup policy. Which of the following should the administrator configure to achieve the application requirements with the LEAST cost?

  A. Back up to long-term storage every night

  B. Back up to object storage every three hours

  C. Back up to long-term storage every four hours

  D. Back up to object storage every hour

  Correct Answer: B

• Question 13:

  Lateral-moving malware has infected the server infrastructure.

  Which of the following network changes would MOST effectively prevent lateral movement in the future?

  A. Implement DNSSEC in all DNS servers

  B. Segment the physical network using a VLAN

  C. Implement microsegmentation on the network

  D. Implement 802.1X in the network infrastructure

  Correct Answer: B

• Question 14:

  A systems administrator is troubleshooting performance issues with a Windows VDI environment. Users have reported that VDI performance is very slow at the start of the work day, but the performance is fine during the rest of the day. Which of the following is the MOST likely cause of the issue?

  A. Disk I/O limits

  B. Affinity rule

  C. CPU oversubscription

  D. RAM usage

  Correct Answer: C

• Question 15:

  A systems administrator is deploying a solution that requires a virtual network in a private cloud environment. The solution design requires the virtual network to transport multiple payload types. Which of the following network virtualization options would BEST satisfy the requirement?

  A. VXLAN

  B. STT

  C. NVGRE

  D. GENEVE

  Correct Answer: C

• Question 16:

  The security team for a large corporation is investigating a data breach. The team members are all trying to do the same tasks but are interfering with each other's work. Which of the following did the team MOST likely forget to implement?

  A. Incident type categories

  B. A calling tree

  C. Change management

  D. Roles and responsibilities

  Correct Answer: D

• Question 17:

  A technician is working with an American company that is using cloud services to provide video-based training for its customers. Recently, due to a surge in demand, customers in Europe are experiencing latency. Which of the following services should the technician deploy to eliminate the latency issue?

  A. Auto-scaling

  B. Cloud bursting

  C. A content delivery network

  D. A new cloud provider

  Correct Answer: A

• Question 18:

  A web server has been deployed in a public IaaS provider and has been assigned the public IP address of 72.135.10.100. Users are now reporting that when they browse to the website, they receive a message indicating the service is unavailable. The cloud administrator logs into the server, runs a netstat command, and notices the following relevant output:

  

  Which of the following actions should the cloud administrator take to resolve the issue?

  A. Assign a new IP address of 192.168.100.10 to the web server

  B. Modify the firewall on 72.135.10.100 to allow only UDP

  C. Configure the WAF to filter requests from 17.3.130.3

  D. Update the gateway on the web server to use 72.135.10.1

  Correct Answer: D

• Question 19:

  A cloud architect wants to minimize the risk of having systems administrators in an IaaS compute instance perform application code changes. The development group should be the only group allowed to modify files in the directory. Which of the following will accomplish the desired objective?

  A. Remove the file write permissions for the application service account.

  B. Restrict the file write permissions to the development group only.

  C. Add access to the fileshare for the systems administrator's group.

  D. Deny access to all development user accounts

  Correct Answer: B

• Question 20:

  An SQL injection vulnerability was reported on a web application, and the cloud platform team needs to mitigate the vulnerability while it is corrected by the development team. Which of the following controls will BEST mitigate the risk of exploitation?

  A. DLP

  B. HIDS

  C. NAC

  D. WAF

  Correct Answer: A