🔍

CV0-004 — questions

Page 3 of 9 · 180 total questions.

Topic 1 · Question 41 · Select all that apply

Department supervisors have requested a report that will help them understand the utilization of cloud resources, make decisions about budgeting for the following year, and reduce costs. Which of the following are the most important requisite steps to create the report? (Choose two.)

  • ASet the desired retention of resource logs.
  • BConfigure application tracing.
  • CIntegrate email alerts with ticketing software.
  • DEnable resource tagging. (correct answer)
  • EConfigure the collection of performance/utilization logs. (correct answer)
  • FConfigure metric threshold alerts.
Reveal answer & explanation
Correct answer: D, E

The correct answer is D, E. Option D: Enable resource tagging. Option E: Configure the collection of performance/utilization logs. This option delivers the requirement at the lowest cost.

Topic 1 · Question 42

A cloud engineer wants to deploy a new application to the cloud and is writing the following script: Which of the following actions will this script perform?

Exhibit 1 for question 42
  • AUpload a new VM image.
  • BCreate a new cloud resource. (correct answer)
  • CBuild a local server.
  • DImport a cloud module.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create a new cloud resource.

Topic 1 · Question 43

A network administrator is building a site-to-site VPN tunnel from the company’s headquarters office to the company’s public cloud development network. The network administrator confirms the following: The VPN tunnel is established on the headquarters office firewall. While inside the office, developers report that they cannot connect to the development network resources. While outside the office on a client VPN, developers report that they can connect to the development network resources. The office and the client VPN have different IP subnet ranges. The firewall flow logs show that traffic is reaching the development network from the office. Which of the following is the next step the network administrator should take to troubleshoot the VPN tunnel?

  • AReview the development network routing table. (correct answer)
  • BChange the ciphers on the site-to-site VPN.
  • CRestart the site-to-site VPN tunnel.
  • DCheck the ACLs on the development workloads.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Review the development network routing table.

Topic 1 · Question 44

A cross-site request forgery vulnerability exploited a web application that was hosted in a public IaaS network. A security engineer determined that deploying a WAF in blocking mode at a CDN would prevent the application from being exploited again. However, a week after implementing the WAF, the application was exploited again. Which of the following should the security engineer do to make the WAF control effective?

  • AConfigure the DDoS protection on the CDN.
  • BInstall endpoint protection software on the VMs.
  • CAdd an ACL to the VM subnet. (correct answer)
  • DDeploy an IDS on the IaaS network.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Add an ACL to the VM subnet.

Explanation

Subnetting divides an IP network into smaller routing and broadcast domains for address efficiency and segmentation. This option keeps traffic private / properly secured as required.

Topic 1 · Question 45

An organization’s critical data was exfiltrated from a computer system in a cyberattack. A cloud analyst wants to identify the root cause and is reviewing the following security logs of a software web application: Which of the following types of attacks occurred?

Exhibit 1 for question 45
  • ASQL injection (correct answer)
  • BCross-site scripting
  • CReuse of leaked credentials
  • DPrivilege escalation
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: SQL injection

Explanation

SQL injection manipulates database queries through untrusted input and is mitigated with parameterized statements. This option keeps traffic private / properly secured as required.

Topic 1 · Question 46

A company operates a website that allows customers to upload, share, and retain full ownership of their photographs. Which of the following could affect image ownership as the website usage expands globally?

  • ASovereignty (correct answer)
  • BData classification
  • CLitigation holds
  • DRetention
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Sovereignty

Topic 1 · Question 47

A systems administrator is provisioning VMs according to the following requirements: A VM instance needs to be present in at least two data centers. During replication, the application hosted on the VM tolerates a maximum latency of one second. When a VM is unavailable, failover must be immediate. Which of the following replication methods will best meet these requirements?

  • ASnapshot
  • BTransactional
  • CLive (correct answer)
  • DPoint-in-time
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Live

Topic 1 · Question 48

A DevOps engineer is performing maintenance on the mail servers for a company’s web application. Part of this maintenance includes checking core operating system updates. The servers are currently running version 3.2 of the operating system. The engineer has two update options—one to version 4.1 and the other to version 3.7. Both versions are fully supported by the operating system manufacturer. Which of the following best describes the action the engineer should take?

  • AUpgrade to 3.7 in the development environment.
  • BUpgrade to 4.1 on one production server at a time.
  • CRead the release notes on version 4.1 (correct answer)
  • DSchedule a maintenance window and upgrade to 3.7 in the production environment.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Read the release notes on version 4.1

Topic 1 · Question 49

Which of the following is the most cost-effective and efficient strategy when migrating containers to the cloud?

  • ARetire
  • BReplatform (correct answer)
  • CRetain
  • DRefactor
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Replatform This option delivers the requirement at the lowest cost.

Topic 1 · Question 50

An organization’s web application experiences periodic bursts of traffic when a new video is launched. Users are reporting poor performance in the middle of the month. Which of the following scaling approaches should the organization use to scale based on forecasted traffic?

  • AScheduled (correct answer)
  • BManual
  • CEvent
  • DLoad
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Scheduled This option scales automatically to match demand.

Topic 1 · Question 51

A cloud infrastructure administrator updated the IP tables to block incoming connections and outgoing responses to 104.225.110.203. Which of the following vulnerability management steps is this an example of?

  • AScanning scope
  • BRemediation (correct answer)
  • CIdentification
  • DAssessment
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Remediation

Topic 1 · Question 52

An administrator needs to adhere to the following requirements when moving a customer’s data to the cloud: The new service must be geographically dispersed. The customer should have local access to data. Legacy applications should be accessible. Which of the following cloud deployment models is most suitable?

  • AOn-premises
  • BPrivate
  • CHybrid (correct answer)
  • DPublic
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Hybrid

Topic 1 · Question 53

A company’s VMs that are created using the noncritical application tag are automatically shut down at 5:00 p.m. using a cronjob. Which of the following actions would allow a cloud engineer to stop all unresponsive instances with the least effort in case the automation fails?

  • AUsing the cloud audit logs for tagging and stopping events
  • BUsing the cloud provider web console to check and stop the instances
  • CUsing the cloud provider command line to stop the instances based on tags (correct answer)
  • DUsing a Bash script to shut down all instances
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Using the cloud provider command line to stop the instances based on tags This option is the most fully managed / serverless choice, so it meets the requirement for the least operational overhead.

Topic 1 · Question 54

A company uses containers stored in Docker Hub to deploy workloads for its IaaS infrastructure. The development team releases changes to the containers several times per hour. Which of the following should a cloud engineer do to prevent the proprietary code from being exposed to third parties?

  • AUse IaC to deploy the IaaS infrastructure.
  • BConvert the containers to VMs.
  • CDeploy the containers over SSH.
  • DUse private repositories for the containers. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Use private repositories for the containers.

Explanation

A container packages an application and dependencies while sharing the host kernel for lightweight isolation.

Topic 1 · Question 55

A social networking company operates globally. Some users from Brazil and Argentina are reporting the following error: website address was not found. Which of the following is the most likely cause of this issue?

  • AClient DNS misconfiguration
  • BRegional DNS provider outage (correct answer)
  • CDNS server misconfiguration
  • DDNSSEC key mismatch
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Regional DNS provider outage

Explanation

DNS resolves host names to records such as IP addresses and service locations.

Topic 1 · Question 56

A junior cloud administrator was recently promoted to cloud administrator and has been added to the cloud administrator group. The cloud administrator group is the only one that can access the engineering VM. The new administrator unsuccessfully attempts to access the engineering VM. However, the other administrators can access it without issue. Which of the following is the best way to identify the root cause?

  • ARebooting the engineering VM
  • BReviewing the administrator’s permissions to access the engineering VM (correct answer)
  • CAllowing connections from 0.0.0.0/0 to the engineering VM
  • DPerforming a packet capture on the engineering VM
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Reviewing the administrator’s permissions to access the engineering VM

Topic 1 · Question 57

Which of the following describes the main difference between public and private container repositories?

  • APrivate container repository access requires authorization, while public repository access does not require authorization. (correct answer)
  • BPrivate container repositories are hidden by default and containers must be directly referenced, while public container repositories allow browsing of container images.
  • CPrivate container repositories must use proprietary licenses, while public container repositories must have open-source licenses.
  • DPrivate container repositories are used to obfuscate the content of the Dockerfile, while public container repositories allow for Dockerfile inspection.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Private container repository access requires authorization, while public repository access does not require authorization.

Explanation

A container packages an application and dependencies while sharing the host kernel for lightweight isolation. This option keeps traffic private / properly secured as required.

Topic 1 · Question 58

A DevOps engineer is receiving reports that users can no longer access the company’s web application after hardening of a web server. The users are receiving the following error: ERR SSL VERSION OR CIPHER MISMATCH. Which of the following actions should the engineer take to resolve the issue?

  • ARestart the web server.
  • BConfigure TLS 1.2 or newer. (correct answer)
  • CUpdate the web server.
  • DReview logs on the WAF.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Configure TLS 1.2 or newer.

Explanation

TLS protects data in transit with authenticated encryption between network endpoints.

Topic 1 · Question 59

A company’s engineering department is conducting a month-long test on the scalability of an in-house-developed software that requires a cluster of 100 or more servers. Which of the following models is the best to use?

  • APaaS
  • BSaaS
  • CDBaaS
  • DIaaS (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: IaaS

Explanation

Infrastructure as a service provides virtualized compute, storage, and networking while the customer manages the OS and applications. This option scales automatically to match demand.

Topic 1 · Question 60

A cloud administrator shortens the amount of time a backup runs. An executive in the company requires a guarantee that the backups can be restored with no data loss. Which of the following backup features should the administrator test for?

  • AEncryption
  • BRetention
  • CSchedule
  • DIntegrity (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Integrity

Showing questions 4160 of 180 · Page 3 of 9