πŸ”

CV0-004 β€” questions

Page 4 of 9 Β· 180 total questions.

Topic 1 Β· Question 61

A cloud administrator is building a company-standard VM image, which will be based on a public image. Which of the following should the administrator implement to secure the image?

  • AACLs
  • BLeast privilege
  • CHardening (correct answer)
  • DVulnerability scanning
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Hardening This option keeps traffic private / properly secured as required.

Topic 1 Β· Question 62

A cloud deployment uses three different VPCs. The subnets on each VPC need to communicate with the others over private channels. Which of the following will achieve this objective?

  • ADeploying a load balancer to send traffic to the private IP addresses
  • BCreating peering connections between all VPCs (correct answer)
  • CAdding BGP routes using the VPCs’ private IP addresses
  • DEstablishing identical routing tables on all VPCs
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Creating peering connections between all VPCs This option keeps traffic private / properly secured as required.

Topic 1 Β· Question 63

A cloud resource increases its capacity based on seasonal activity. Which of the following best describes this type of cloud instance and the scaling approach?

  • AFixed; triggered by load
  • BPermanent; triggered manually
  • CElastic; triggered by trend (correct answer)
  • DEphemeral; triggered by event
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Elastic; triggered by trend

Topic 1 Β· Question 64

Which of the following can eliminate the risk of CI/CD pipelines leaking secrets on containers?

  • APeer-reviewed pull requests
  • BUse of a VM instead of containers
  • CPrivate image repositories (correct answer)
  • DCanary tests
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Private image repositories

Topic 1 Β· Question 65

A company uses containers to implement a web application. The development team completed internal testing of a new feature and is ready to move the feature to the production environment. Which of the following deployment models would best meet the company’s needs while minimizing cost and targeting a specific subset of its users?

  • ACanary (correct answer)
  • BBlue-green
  • CRolling
  • DIn-place
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Canary

Topic 1 Β· Question 66

Once a change has been made to templates, which of the following commands should a cloud architect use next to deploy an IaaS platform?

  • Agit pull
  • Bgit fetch
  • Cgit commit
  • Dgit push (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: git push

Explanation

Git provides distributed source control with branching, history, and collaborative change tracking.

Topic 1 Β· Question 67

A company is developing a new web application that requires a relational database management system with minimal operational overhead. Which of the following should the company choose?

  • AA database installed on a virtual machine
  • BA managed SQL database on the cloud (correct answer)
  • CA database migration service
  • DA hybrid database setup
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: A managed SQL database on the cloud This option is the most fully managed / serverless choice, so it meets the requirement for the least operational overhead.

Topic 1 Β· Question 68

Which of the following provides secure, private communication between cloud environments without provisioning additional hardware or appliances?

  • AVPN
  • BVPC peering (correct answer)
  • CBGP
  • DTransit gateway
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: VPC peering This option keeps traffic private / properly secured as required.

Topic 1 Β· Question 69

A cloud engineer is running a latency-sensitive workload that must be resilient and highly available across multiple regions. Which of the following concepts best addresses these requirements?

  • ACloning
  • BClustering (correct answer)
  • CHardware passthrough
  • DStand-alone container
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Clustering By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

Topic 1 Β· Question 70

A cloud engineer is in charge of deploying a platform in an IaaS public cloud. The application tracks the state using session cookies and there are no affinity restrictions. Which of the following will help the engineer reduce monthly expenses and allow the application to provide the service?

  • AResource metering
  • BReserved resources
  • CDedicated host
  • DPay-as-you-go model (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Pay-as-you-go model

Topic 1 Β· Question 71

A cloud administrator recently created three servers in the cloud. The goal was to create ACLs so the servers could not communicate with each other. The servers were configured with the following IP addresses: After implementing the ACLs, the administrator confirmed that some servers are still able to reach the other servers. Which of the following should the administrator change to prevent the servers from being on the same network?

Exhibit 1 for question 71
  • AThe IP address of Server 1 to 172.16.12.36
  • BThe IP address of Server 1 to 172.16.12.2
  • CThe IP address of Server 2 to 172.16.12.18 (correct answer)
  • DThe IP address of Server 2 to 172.16.14.14
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: The IP address of Server 2 to 172.16.12.18

Topic 1 Β· Question 72

A company implements a web farm with 100 servers behind an application load balancer. During scaling events, new web servers that are placed in service have not loaded all their modules, which causes some requests to the web farm to fail. Which of the following should the cloud engineer implement to address the scaling issue?

  • AInstance warm-up (correct answer)
  • BScheduled scaling
  • CEvent-based scaling
  • DLoad balancer passthrough
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Instance warm-up

Topic 1 Β· Question 73

A CI/CD pipeline is used to deploy VMs to an IaaS environment. Which of the following can be used to harden the operating system once the VM is running?

  • ADocker
  • BKubernetes
  • CGit
  • DAnsible (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Ansible

Topic 1 Β· Question 74

For compliance purposes, a cloud developer at an insurance company needs to save all customer policies for more than ten years. Which of the following options is the most cost-efficient tier to save the data in the cloud?

  • AArchive (correct answer)
  • BHot
  • CCold
  • DWarm
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Archive

Topic 1 Β· Question 75

Which of the following do developers use to keep track of changes made during software development projects?

  • ACode drifting
  • BCode control
  • CCode testing
  • DCode versioning (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Code versioning

Topic 1 Β· Question 76

Which of the following strategies requires the development of new code before an application can be successfully migrated to a cloud provider?

  • ARefactor (correct answer)
  • BRearchitect
  • CRehost
  • DReplatform
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Refactor

Topic 1 Β· Question 77

Which of the following reduces the chance of introducing a misconfiguration into cloud deployment templates?

  • APerforming a git fetch after every commit
  • BOpening pull requests for changes (correct answer)
  • CUsing the web interface to update files
  • DCommitting updates to the main branch
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Opening pull requests for changes

Topic 1 Β· Question 79

Which of the following AI/ML technologies consumes text input to discern tone?

  • AText recognition
  • BComputer vision
  • CVisual recognition
  • DSentiment analysis (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Sentiment analysis

Topic 1 Β· Question 80

A cloud solutions architect needs to design a solution that will collect a report and upload it to an object storage service every time a virtual machine is gracefully or non-gracefully stopped. Which of the following will best satisfy this requirement?

  • AAn event-driven architecture that will send a message when the VM shuts down to a log-collecting function that extracts and uploads the log directly from the storage volume (correct answer)
  • BCreating a webhook that will trigger on VM shutdown API calls and upload the requested files from the volume attached to the VM into the object-defined storage service
  • CAn API of the object-defined storage service that will scrape the stopped VM disk and self-upload the required files as objects
  • DA script embedded on the stopping VM's OS that will upload the logs on system shutdown
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: An event-driven architecture that will send a message when the VM shuts down to a log-collecting function that extracts and uploads the log directly from the storage volume

Topic 1 Β· Question 81

A cloud architect is preparing environments to develop a new application that will process sensitive data. The project team consists of one internal developer, two external consultants, and three testers. Which of the following is the most important security control for the cloud architect to consider implementing?

  • ASetting up private development, public development, and testing environments
  • BSegregating environments for internal and external teams
  • CConfiguring DDoS protection to mitigate the risk of downtime
  • DUsing IAM and ACL in order to bolster DLP (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Using IAM and ACL in order to bolster DLP

Explanation

Data loss prevention identifies sensitive data and prevents unauthorized disclosure or transfer. This option keeps traffic private / properly secured as required.

Showing questions 61–80 of 180 Β· Page 4 of 9