Page 5 of 9 · 180 total questions.
A cloud engineer wants to implement a monitoring solution to detect cryptojacking and other cryptomining malware on cloud instances. Which of the following metrics would most likely be used to identify the activity?
The correct answer is D. Option D: Percent of CPU utilization
A cloud service provider requires users to migrate to a new type of VM within three months. Which of the following is the best justification for this requirement?
The correct answer is D. Option D: The equipment is reaching end of life and end of support
An organization has been using an old version of an Apache Log4j software component in its critical software application. Which of the following should the organization use to calculate the severity of the risk from using this component?
The correct answer is B. Option B: CVSS
A company wants to build its new platform using a public cloud. The workload requirements include the following: • Implementation of custom CIS compliance • Patch for vulnerabilities within 24 hours • Warrant at least 1 8001OPS per volume Which of the following meets the requirements?
The correct answer is B. Option B: IaaS
Explanation
Infrastructure as a service provides virtualized compute, storage, and networking while the customer manages the OS and applications.
A cloud security analyst is concerned about security vulnerabilities in publicly available container images. Which of the following is the most appropriate action for the analyst to recommend?
The correct answer is A. Option A: Using CIS-hardened images This option keeps traffic private / properly secured as required.
A critical security patch is required on a network load balancer in a public cloud. The organization has a major sales conference next week, and the Chief Executive Officer does not want any interruptions during the demonstration of an application behind the load balancer. Which of the following approaches should the cloud security engineer take?
The correct answer is C. Option C: Ask the upper management team to approve an emergency patch window This option keeps traffic private / properly secured as required.
A cloud engineer is troubleshooting a connectivity issue. The application server with IP 192.168.1.10 in one subnet is not connecting to the MySQL database server with IP 192.168.2.20 in a different subnet. The cloud engineer reviews the following information: Which of the following should the cloud engineer address to fix the communication issue?
The correct answer is B. Option B: The Application Server Subnet Routing Table
Explanation
Subnetting divides an IP network into smaller routing and broadcast domains for address efficiency and segmentation.
A cloud engineer is migrating a company-hosted application to a cloud provider. The data needs to be secure while stored on the third-party system. Which of the following would best ensure that the data is secure? (Choose two.)
The correct answer is A, D. Option A: Hashing Option D: AES
Explanation
Hashing produces a one-way digest used to verify integrity without exposing the original value. This option keeps traffic private / properly secured as required.
A cloud consultant needs to modernize a legacy application that can no longer address user demand and is expensive to maintain. Which of the following is the best migration strategy?
The correct answer is C. Option C: Refactor
A cloud solution needs to be replaced without interruptions. The replacement process can be completed in phases, but the cost should be kept as low as possible. Which of the following is the best strategy to implement?
The correct answer is B. Option B: Rolling
Which of the following best describes the list of known security vulnerabilities?
The correct answer is D. Option D: Common Vulnerabilities and Exposures This option keeps traffic private / properly secured as required.
A cloud administrator is working on the deployment of an e-commerce website. The administrator evaluates the scaling methods to be implemented when seasonal or flash sales are launched. Which of the following scaling approaches should the administrator use to best manage this scenario?
The correct answer is A. Option A: Scheduled
A cloud security analyst is investigating the impact of a recent cyberattack. The analyst is reviewing the following information: Which of the following has occurred?
The correct answer is D. Option D: Sensitive information from the corporate web server was leaked
Explanation
Recovery point objective defines the maximum acceptable data loss measured in time. This option keeps traffic private / properly secured as required.
A developer at a small startup company deployed some code for a new feature to its public repository. A few days later a data breach occurred. A security team investigated the incident and found that the database was hacked. Which of the following is the most likely cause of this breach?
The correct answer is B. Option B: Hard-coded credentials This option keeps traffic private / properly secured as required.
Which of the following best explains the concept of migrating from on premises to the cloud?
The correct answer is B. Option B: The creation of virtual instances in an external provider to transfer operations of selected servers into a new, remotely managed environment
A cloud engineer is extending on-premises services to a public cloud. The following design requirements must be considered in the overall solution: • The ability to remotely connect systems from both environments • No IP address conflicts or overlap • Cost-effectiveness Which of the following cloud network concepts best meets these requirements?
The correct answer is B. Option B: VPN
Explanation
A VPN creates an encrypted tunnel across an untrusted network for private remote or site connectivity. This option delivers the requirement at the lowest cost.
A cloud engineer wants to replace the current on-premises, unstructured data storage with a solution in the cloud. The new solution needs to be cost-effective and highly scalable. Which of the following types of storage would be best to use?
The correct answer is C. Option C: Object This option delivers the requirement at the lowest cost.
A company has ten cloud engineers working on different manual cloud deployments. In the past, engineers have had difficulty keeping deployments consistent. Which of the following is the best method to address this issue?
The correct answer is C. Option C: Configuration as code
A high-usage cloud resource needs to be monitored in real time on specific events to guarantee its availability. Which of the following actions should be used to meet this requirement?
The correct answer is B. Option B: Create a dashboard with visualizations to filter the status of critical activities This option meets the real-time / low-latency performance requirement.
A security analyst confirms a zero-day vulnerability was exploited by hackers who gained access to confidential customer data and installed ransomware on the server. Which of the following steps should the security analyst take? (Choose two.)
The correct answer is D, F. Option D: Inform the management and legal teams about the data breach Option F: Modify the firewall rules to block the IP addresses and update the ports
Explanation
A firewall enforces traffic policy by permitting or blocking connections based on configured rules. This option keeps traffic private / properly secured as required.
Showing questions 81–100 of 180 · Page 5 of 9