[Aug 30, 2024] Latest CompTIA Cloud+ CV0-003 Actual Free Exam Questions
CompTIA Cloud+ CV0-003 Dumps Updated Practice Test and 404 unique questions
CompTIA Cloud+ Exam Certification Details:
| Passing Score | 750 / 900 |
| Number of Questions | 90 |
| Exam Price | $338 (USD) |
| Schedule Exam | CompTIA Marketplace Pearson VUE |
NEW QUESTION # 83
A company purchased a SaaS CRM application. The signed SLA meets year-round performance requirements. Three months after deployment, customers start reporting a slow application response time. System availability, connectivity, and proper functionality still meet the SL
- A. Which of the following is MOST likely the reason for the poor response time?
- B. Bandwidth restrictions are causing poor performance.
- C. Incorrect business requirements are invalidating the testing results.
- D. Inadequate documentation is affecting the user interface.
- E. The application version is causing compatibility issues.
Answer: B
NEW QUESTION # 84
A cloud administrator has deployed a website and needs to improve the site security to meet requirements. The website architecture is designed to have a DBaaS in the back end and autoscaling instances in the front end using a load balancer to distribute the request. Which of the following will the cloud administrator MOST likely use?
- A. An IPS/IDS
- B. A WAF
- C. A reverse proxy
- D. An API gateway
Answer: B
Explanation:
Explanation
A WAF (web application firewall) is a type of firewall that protects web applications from common web-based attacks, such as SQL injection, cross-site scripting, and denial-of-service. A WAF can be deployed on the load balancer or on the web servers to filter and block malicious requests before they reach the application or the database. A WAF is the most likely option to improve the site security in this scenario, as it can prevent attacks that target the web application layer.
References:
Web Application Firewall (WAF) - AWS WAF, AWS Firewall Manager, and AWS Shield Advanced What is a Web Application Firewall (WAF)?
Web Application Firewall (WAF) - Oracle Cloud Infrastructure
NEW QUESTION # 85
An administrator has recently deployed a private cloud to be used as development environment by the engineering department. The host server has both SSD and SATA drivers. Which of the following should the administrator create to ensure the engineering department can only select SATA storage when using the self-service portal?
- A. Storage tiering
- B. VM template
- C. SAN
- D. VHD
Answer: A
NEW QUESTION # 86
A public cloud provider recently updated one of its services to provide a new type of application load balancer. The cloud administrator is tasked with building out a proof-of-concept using this new service type. The administrator sets out to update the scripts and notices the cloud provider does not list the load balancer as an available option type for deploying this service. Which of the following is the MOST likely reason?
- A. The administrator needs to update the version of the CLI tool.
- B. The administrator can deploy the new load balancer via the cloud provider's web console.
- C. The administrator needs to write a new script function to call this service.
- D. The administrator is not using the correct cloud provider account.
Answer: A
NEW QUESTION # 87
An administrator, who operates a public cloud, has been tasked with implementing a secondary datacenter for failover purposes. Immediate replication has too much of an impact on the WAN link during production hours. Which of the following is the BEST option?
- A. Site mirroring
- B. Storage deduplication
- C. Cold site failover with offsite archiving
- D. Asynchronous replication
Answer: D
NEW QUESTION # 88
Cloud developers are experiencing a delay caused by the static code review before each deployment. The security operator and developer must address the issue without cutting corners with security testing. Which of the following would BEST address the delay issue?
- A. Perform a penetration test instead of a static code analysis.
- B. Replace the static code analysis with a vulnerability analysis.
- C. Perform the static code analysis earlier in the SDLC.
- D. Replace the static code analysis with hardening techniques.
Answer: D
NEW QUESTION # 89
A media company has made the decision to migrate a physical, internal file server to the cloud and use a web- based interface to access and manage the files. The users must be able to use their current corporate logins.
Which of the following is the MOST efficient way to achieve this goal?
- A. Copy the files to the object storage location in a public cloud
- B. Deploy a fileshare in a public cloud and copy the files across
- C. Deploy a VM in a cloud, attach storage, and copy the files across
- D. Use a SaaS service with a directory service federation
Answer: B
NEW QUESTION # 90
A highly regulated business is required to work remotely, and the risk tolerance is very low. You are tasked with providing an identity solution to the company cloud that includes the following:
secure connectivity that minimizes user login
tracks user activity and monitors for anomalous activity
requires secondary authentication
INSTRUCTIONS
Select controls and servers for the proper control points.
Answer:
Explanation:
Explanation
VPN Client
MFA
SIEM
NEW QUESTION # 91
A VDI administrator is deploying 512 desktops for remote workers. Which of the following would meet the minimum number of IP addresses needed for the desktops?
- A. /23
- B. /22
- C. /25
- D. /24
Answer: A
Explanation:
A /23 subnet mask has 9 bits for the host portion, which allows up to 512 IP addresses for the desktops. A /22 subnet mask has 10 bits for the host portion, which allows up to 1024 IP addresses, but this is more than the minimum required. A /24 subnet mask has 8 bits for the host portion, which allows up to 256 IP addresses, but this is not enough for the desktops. A /25 subnet mask has 7 bits for the host portion, which allows up to 128 IP addresses, but this is also not enough for the desktops. Reference: CompTIA Cloud+ Certification Exam Objectives, Domain 1.0: Cloud Concepts, Objective 1.2: Given a scenario, analyze and compare the characteristics of various cloud service models (SaaS, IaaS, PaaS). Subnet Mask Cheat Sheet - aelius.com
NEW QUESTION # 92
A systems administrator has migrated a web application to the cloud with a synchronous uplink speed of
100Mbps. After the migration, the administrator receives reports of slow connectivity to the web application.
The administrator logs into the firewall and notices the WAN port is transmitting at a constant 12.5MBps.
Which of the following BEST explains the reason for the issue?
- A. Misconfigured subnetting
- B. Insufficient compute
- C. Firewall issues
- D. Not enough upload bandwidth
Answer: D
Explanation:
Explanation
Not enough upload bandwidth is what best explains the reason for slow connectivity to a web application that has been migrated to a cloud environment with a synchronous uplink speed of 100Mbps. Bandwidth is a measure of how much data can be transferred over a network or connection in a given time period. Upload bandwidth is a measure of how much data can be sent from one location to another over a network or connection in a given time period. Upload bandwidth can affect connectivity to a web application by determining how fast data can be uploaded from clients to servers or vice versa. Not enough upload bandwidth can cause slow connectivity to a web application by creating congestion or bottleneck in data transfer, which may result in delays or errors in web requests or responses.
NEW QUESTION # 93
A cloud administrator has configured a connection between two virtual private cloud environments at a public cloud provider that are each in different accounts. The administrator has configured the accounts correctly so they can connect to each other's resources. Both cloud environments have policies that allow anyone from 0.0.0.0/0 on TCP port 22. The following table shows the network configuration information:
However, the administrator is unable to establish an SSH connection from a server in
10.250.40.100 to 10.250.48.214. Which of the following is the MOST likely issue?
- A. The network ACL is not configured to allow SSH access.
- B. The routing tables have not been updated correctly.
- C. The administrator does not have sufficient credentials.
- D. The IP configuration on one of the servers is incorrect.
Answer: B
NEW QUESTION # 94
A cloud administrator needs to deploy a security virtual appliance in a private cloud environment, but this appliance will not be part of the standard catalog of items for other users to request. Which of the following is the BEST way to accomplish this task?
- A. Acquire the build scripts from the vendor and recreate the appliance using the baseline templates
- B. Import the virtual appliance into the environment and deploy it as a VM
- C. Create an empty VM. import the hard disk of the virtual appliance. and configure the CPU and memory.
- D. Convert the virtual appliance to a template and deploy a new VM using the template.
Answer: B
Explanation:
Explanation
The correct answer is C. Import the virtual appliance into the environment and deploy it as a VM.
A virtual appliance is a pre-packaged and pre-configured software solution that runs on a virtual machine (VM). A virtual appliance typically consists of an operating system, an application, and any required dependencies, and is designed to provide a specific function or service. A virtual appliance can be distributed as a single file or a set of files that can be imported into a virtualization platform, such as VMware, Hyper-V, or KVM .
A cloud administrator can deploy a security virtual appliance in a private cloud environment by importing the virtual appliance into the environment and deploying it as a VM. This is the best way to accomplish this task because it preserves the original configuration and functionality of the virtual appliance, and does not require any additional installation or customization. The cloud administrator can also control the access and visibility of the virtual appliance, and prevent other users from requesting it from the standard catalog of items .
Creating an empty VM, importing the hard disk of the virtual appliance, and configuring the CPU and memory is not the best way to accomplish this task because it involves more steps and complexity than importing the virtual appliance as a whole. It also introduces the risk of losing or corrupting some data or settings during the import process, or misconfiguring the CPU and memory for the virtual appliance.
Acquiring the build scripts from the vendor and recreating the appliance using the baseline templates is not the best way to accomplish this task because it involves more time and effort than importing the virtual appliance directly. It also depends on whether the vendor provides the build scripts or not, and whether they are compatible with the baseline templates or not.
Converting the virtual appliance to a template and deploying a new VM using the template is not the best way to accomplish this task because it adds an unnecessary step of creating a template from the virtual appliance. It also does not prevent other users from accessing or requesting the template from the catalog of items.
NEW QUESTION # 95
A company has hired a security firm to perform a vulnerability assessment of its environment. In the first phase, an engineer needs to scan the network services exposed by the hosts. Which of the following will help achieve this with the LEAST privileges?
- A. A credentialed scan
- B. An application scan
- C. An agent-based scan
- D. A network-based scan
Answer: D
NEW QUESTION # 96
Due to a competitor's unlimited data plan, a service provider is struggling and wants to transform its business services to be more hosting oriented. A cloud architect is tasked to review current cloud resource capacity and provide recommendations and a plan for better resource utilization.
Given the following report:
Which of the following is the BEST option for the architect to suggest?
- A. Downsize by migrating all media services to one server, add one host server, and decommission one server.
- B. Upsize the hosting services by turning server 1 into a host server.
- C. Downsize by decommissioning servers 2 and 3 and reallocate media servers to hosts.
- D. Downsize by migrating all media services to one server and decommission two servers.
Answer: D
NEW QUESTION # 97
A company is interested in a DRP. The purpose of the plan is to recover business as soon as possible.
The MOST effective technique is:
- A. network clustering.
- B. archiving.
- C. active/active.
- D. site mirroring.
Answer: C
NEW QUESTION # 98
A systems administrator has been notified of possible illegal activities taking place on the network and has been directed to ensure any relevant emails are preserved for court use.
Which of the following is this MOST likely an example of?
- A. Version control
- B. File integrity monitoring
- C. Email archiving
- D. Legal hold
Answer: D
Explanation:
The correct answer is C. Legal hold.
A legal hold is a process that organizations use to preserve relevant electronic information when they anticipate litigation or have an active e-discovery request. A legal hold requires that certain email messages be retained and unaltered until they are no longer required for court use. Legal hold requirements apply both to the content of messages as well as the metadata which can provide proof of delivery and other critical non-repudiation information12.
Email archiving is a process that organizations use to store email messages for long-term retention, compliance, and backup purposes. Email archiving does not necessarily imply that the email messages are preserved for legal purposes, although some email archiving solutions may offer legal hold capabilities1.
File integrity monitoring is a process that security professionals use to detect unauthorized or malicious changes to files and directories on a system. File integrity monitoring helps to protect the system from malware, data breaches, and configuration errors. File integrity monitoring does not apply to email messages or legal hold.
NEW QUESTION # 99
A company is utilizing a private cloud solution that is hosted within its datacenter. The company wants to launch a new business application, which requires the resources below:
The current private cloud has 30 vCPUs and 512GB RAM available. The company is looking for a quick solution to launch this application, with expected maximum sessions to be close to 24,000 at launch and an average of approximately 5,000 sessions.
Which of the following solutions would help the company accommodate the new workload in the SHORTEST amount of time and with the maximum financial benefits?
- A. Set up cloud bursting for the additional resources
- B. Migrate all workloads to a public cloud provider
- C. Add more capacity to the private cloud
- D. Configure auto-scaling within the private cloud
Answer: A
Explanation:
Explanation
Cloud Bursting can be used for both compute and storage. This question is about compute capability.
"Compute Bursting" unleashes the high-performance compute capabilities of the cloud for processing locally created datasets. (reference: https://www.ctera.com/it-initiatives/cloud-bursting/)
https://azure.microsoft.com/en-us/overview/what-is-cloud-bursting/
NEW QUESTION # 100
A web server has been deployed in a public IaaS provider and has been assigned the public IP address of 72.135.10.100. Users are now reporting that when they browse to the website, they receive a message indicating the service is unavailable. The cloud administrator logs into the server, runs a netstat command, and notices the following relevant output:
Which of the following actions should the cloud administrator take to resolve the issue?
- A. Update the gateway on the web server to use 72.135.10.1
- B. Assign a new IP address of 192.168.100.10 to the web server
- C. Configure the WAF to filter requests from 17.3.130.3
- D. Modify the firewall on 72.135.10.100 to allow only UDP
Answer: A
Explanation:
Updating the gateway on the web server to use 72.135.10.1 is the best action to take to resolve the issue of the web server being unavailable after being deployed in a public IaaS provider and assigned the public IP address of 72.135.10.100. Updating the gateway can ensure that the web server can communicate with the Internet and other networks by using the correct router or device that connects the web server's network to other networks. Updating the gateway can also improve performance and reliability, as it can avoid any routing errors or conflicts that may prevent the web server from responding to remote login requests. Reference: CompTIA Cloud+ Certification Exam Objectives, page 15, section 2.8
NEW QUESTION # 101
A company wants to ensure production data is not exposed during a functional and load testing exercise, as it will be the source of the data.
Which of the following techniques should the cloud administrator deploy to ensure testing requirements are met?
- A. Data Mirroring
- B. Data replication
- C. Data masking
- D. Data Deduplication
Answer: C
NEW QUESTION # 102
A physical server with SSD drives that hosts an IO-intensive database has been migrated into a private cloud to ensure further growth possibilities and accommodate quarterly load spikes (up to 10,000 IOPs).
The requirement is to have log partition latency below 5ms and data partition latency below 10ms, irrespective of the load spikes.
A cloud administrator has conducted extensive tests after the migration.
Which of the following test results would ensure the migration is successful?
- A.
- B.
- C.
- D.
Answer: A
NEW QUESTION # 103
A systems administrator is helping to develop a disaster recovery solution. The solution must ensure all production capabilities are available within two hours. Which of the following will BEST meet this requirement?
- A. A cold site
- B. A backup site
- C. A warm site
- D. A hot site
Answer: D
Explanation:
https://searchdisasterrecovery.techtarget.com/definition/hot-site
NEW QUESTION # 104
A media company has made the decision to migrate a physical, internal file server to the cloud and use a web- based interface to access and manage the files. The users must be able to use their current corporate logins.
Which of the following is the MOST efficient way to achieve this goal?
- A. Use a SaaS service with a directory service federation
- B. Copy the files to the object storage location in a public cloud
- C. Deploy a VM in a cloud, attach storage, and copy the files across
- D. Deploy a fileshare in a public cloud and copy the files across
Answer: A
Explanation:
Software as a service (SaaS) is a type of cloud service model that provides software applications over the Internet that are hosted and managed by a cloud service provider. Directory service federation is a type of authentication mechanism that allows users to access multiple systems or applications across different domains or organizations with a single login credential. Using a SaaS service with a directory service federation can help migrate an internal file server to the cloud and use a web-based interface to access and manage the files, as it can eliminate the need for maintaining an on-premises file server and enable seamless and secure access to cloud-based files using the same corporate logins. Reference: CompTIA Cloud+ Certification Exam Objectives, page 8, section 1.2
NEW QUESTION # 105
A systems administrator in a large enterprise needs to alter the configuration of one of the finance department's database servers.
Which of the following should the administrator perform FIRST?
- A. Backups
- B. Patching
- C. Change management
- D. Capacity planning
Answer: C
Explanation:
The SA would do the other three regardless of the need to alter configurations. In this situation, the SA would have to present the change to the CCB in order to do the alteration.
There is no clarification on whether the change management process has been gone through. Any changes, regardless of how small or big, must go through the change management process. This allows proposals to be heard by end-users, management, and possibly stockholders. From there, it will be reviewed and either approved or denied, with reasons specified. From there, the administrator(s) can do whatever processes are necessary.
NEW QUESTION # 106
An administrator has been informed that some requests are taking a longer time to respond than other requests of the same type. The cloud consumer is using multiple network service providers and is performing link load balancing for bandwidth aggregation. Which of the following commands will help the administrator understand the possible latency issues?
- A. ping
- B. ipconfig
- C. traceroute
- D. netstat
Answer: C
NEW QUESTION # 107
A courier company has virtualized its packing software application. The CSA needs to confirm the deployment is utilizing the correct amount of CPU per virtual instance. After confirming the deployment requirements, the CSA should log into the cloud services portal to ensure that:
- A. smaller VMs are being selected to reduce the total deployment cost.
- B. the alarms on CPU utilization have been enabled.
- C. the deployment is utilizing the recommended amount of CPUs per VM.
- D. the VMs with the most CPU cores available have been selected.
Answer: C
NEW QUESTION # 108
......
Verified CV0-003 dumps Q&As - 100% Pass from TestPassed: https://www.testpassed.com/CV0-003-still-valid-exam.html
Latest 100% Exam Passing Ratio - CV0-003 Dumps PDF: https://drive.google.com/open?id=1bmt-bl1dX3pO0WBTpcpnCKH1ge6VR1BS