Page 7 of 9 · 180 total questions.
An on-call cloud engineer receives a critical alert about an e-commerce web server being unresponsive. Which of the following steps should the engineer take first?
The correct answer is A. Option A: Triage
Which of the following files should be used to install software with a package manager?
The correct answer is C. Option C: package.deb
An application that is running on containers writes files to the operating system after processing data. The produced output files are stored under /project-files owned by root. A cloud engineer needs to make sure no output files are owned by root. Which of the following actions should the engineer take to best achieve this objective?
The correct answer is B. Option B: Add USER myapp to the Dockerfile and rebuild the container.
Explanation
A container packages an application and dependencies while sharing the host kernel for lightweight isolation.
A cloud engineer is receiving multiple alerts from the infrastructure monitoring agent. The alerts state that all the VMs in the public subnet are at 100% CPU utilization. However, when the engineer checks the network utilization of the VMs, the network throughput is at normal levels. Which of the following is the most likely cause of this issue?
The correct answer is B. Option B: Cryptojacking
A cloud engineer is implementing a deployment strategy with the following requirements: • At least two environments for production and development must be supported. • Changes in one environment must not impact the other environment. • The highest possible availability must be achieved. Which of the following deployment strategies should the engineer implement?
The correct answer is B. Option B: Blue-green
Which of the following interfaces is most commonly used for SSDs but not for HDDs?
The correct answer is A. Option A: NVMe
A company experienced a data leak through its website. A security engineer, who is investigating the issue, runs a vulnerability scan against the website and receives the following output: Which of the following is the most likely cause of this leak?
The correct answer is D. Option D: Insecure protocol This option keeps traffic private / properly secured as required.
A cloud developer receives a security vulnerability scan report and needs to analyze and record the true positives. Which of the following vulnerability management steps is this an example of?
The correct answer is A. Option A: Assessment This option keeps traffic private / properly secured as required.
A company recently experienced a ransomware attack. The recovery process was slow because the on-site backups were compromised and off-site backups were required. Which of the following features would enable a faster recovery if a ransomware attack would happen again?
The correct answer is C. Option C: Immutability
A SaaS provider introduced new software functionality for customers as part of quarterly production enhancements. After an update is implemented, users cannot locate certain transactions from an inbound integration. During the investigation, the application owner finds the following error in the logs: Error: REST API - Deprecated call is no longer supported in this release. Which of the following is the best action for the application owner to take to resolve the issue?
The correct answer is A. Option A: Update the custom integration to use a supported function.
A developer is building a tool on the cloud that needs to allow other developers to programmatically read and write to the web application resources. Which of the following should the developer do to meet these requirements with the least complexity?
The correct answer is A. Option A: Build a REST API endpoint. This option is the most fully managed / serverless choice, so it meets the requirement for the least operational overhead.
Users report being unable to access an application that uses TLS 1.1. The users are able to access other applications on the internet. Which of the following is the most likely reason for this issue?
The correct answer is B. Option B: Changes were made to address vulnerabilities.
A customer is migrating applications to the cloud and wants to grant authorization using the classification levels of each system. Which of the following should the customer implement to ensure authorization to systems is granted when the user and system classification properties match? (Choose two.)
The correct answer is A, D. Option A: Resource tagging Option D: Attribute-based access control
A bank was recently hacked. The bank reviews the logs to see how the attack occurred. The security administrator suspects the logs were manipulated because no traces of the attack can be found in them. Which of the following should have been enabled before the attack occurred?
The correct answer is D. Option D: Versioning and immutability This option keeps traffic private / properly secured as required.
Which of the following is the best tool to deploy template-based, containerized workloads on premises and on the cloud?
The correct answer is B. Option B: Terraform
A healthcare provider contacts a MSP about moving an on-premises infrastructure to the cloud. Which of the following requirements are most important for the MSP to consider when migrating this customer? (Choose two.)
The correct answer is A, E. Option A: Security Option E: Compliance
A cloud engineer deploys two virtual machines and migrates a local web application and database, respectively. After the engineer updates the DNS records, the web application does not respond. Which of the following should the cloud engineer do to troubleshoot the issue?
The correct answer is C. Option C: Check to ensure the new web application server configuration file points to the correct database location.
A cloud engineer is provisioning a new application that requires access to the organization’s public cloud resources. Which of the following is the best way for the cloud engineer to authenticate the application?
The correct answer is A. Option A: API key
Which of the following protocols is often used in IoT to reduce the amount of data exchanged?
The correct answer is A. Option A: MQTT
Which of the following is the correct order of the steps to take when a system is suspected of being vulnerable?
The correct answer is A. Option A: Scanning scope, identification, assessment, and remediation
Showing questions 121–140 of 180 · Page 7 of 9