CV0-004 — questions

A software development team would like to test a new feature that was added to the company’s production website. The team would like to allow access to only a small number of users and then, in a controlled way, slowly increase the number of users who have access to the feature. Which of the following best describes the deployment strategy the software development team should use?

A cloud developer resigned from an organization and gave a two-week notice. Within the first week since the developer resigned, a security analyst identifies large volumes of file downloads to the developer’s laptop from the source code repository. Which of the following security controls would be the best way to mitigate the organization’s risk of data loss?

Which of the following facilitates the continuous deployment of cloud applications without performing a clean install on each iteration?

Which of the following container commands implements network port mapping?

An organization’s large e-commerce website requires high availability and cannot have degraded performance. Which of the following should a cloud administrator do to best meet the requirements?

A cloud engineer proposes a solution to migrate a finance application to the cloud. The environment can be shared to reduce costs. Which of the following models would best meet this requirement?

A company has solid, validated border protection including a next-generation firewall and IPS. However, compromises and breaches continue. Which of the following is the best way to improve the company’s security controls and reduce the number of incidents?

An administrator attempts to use a script to deploy a cloud-based virtual machine with five data disks. After running the script, the administrator sees the following message: ERROR: Response 403 storage API provisioning error Which of the following is the reason the deployment failed?

A cloud engineer tries to deploy five new cloud instances using code. An error occurs, and the instances are not created. The configuration fails to run. The engineer then receives the following error message: ERROR:Parse error on json line x in config Given the following snippet from the config.json file: { "instance_count": 5, "ssd_options" : ["100GB","200GB","300GB"], "instance_region": apac, "instance_code": 255, "start_instance" : true } Which of the following oversights created the error in the configuration file?

A company’s cybersecurity team receives the following alert that a production VM was deleted from the virtual network: 21 September 09:19:08 (GMT-5) Resource with ID: PROD-WEB001 was deleted by User: Logging Service - The console to manage virtual network resources uses directory authentication. Only users in a particular directory group can interactively access the virtual network management console. The logging service account is not part of this group and requires some local administration privileges to aggregate logs from various resources. The cybersecurity team discovers that the logging service account was previously given full directory administration privileges and they see the following entry: 21 September 09:10:55 (GMT-5) User with ID: Logging Service was added to the Group: VNet Console Administrators by actor: Logging Service. The cybersecurity team removes the compromised service account from the directory group. Which of the following should the cybersecurity team do next to prevent repeat instances of this issue?

A developer is sending requests to a SaaS application. The developer becomes unable to send anymore requests after sending a number of them, but other developers can still send requests. Which of the following is most likely causing the issue?

Which of the following has the most influence when determining the maximum data loss in the event of a disaster?

A cloud vendor notifies an administrator that the router version currently in use will no longer be made. Which of the following describes the stage the router has reached and what needs to be done?

Which of the following should be used on containers to process data and keep the output in files for later review?

Users report that in-house developed software has performance issues and behaves in unexpected ways following a recent update. The developers investigate and find buffer overflows and broken authentications. Which of the following best describes what caused this issue?

A public cloud environment customer wants to encrypt the data it puts in the cloud. However, the CSP prohibits customer encryption keys. Which of the following principles is the CSP violating?

Which of the following technologies can read the contents of a printed memo?

A cloud service provider just launched a new serverless service that is compliant with all security regulations. A company deployed its code using the service, and the company’s application was hacked due to leaked credentials. Which of the following is responsible?

A cloud engineer is concerned about command-and-control (C2) communication out of a cloud network over HTTPS. Which of the following should the cloud engineer implement to most efficiently identify the type of communication?

Two CVEs are discovered on servers in the company’s public cloud virtual network. The CVEs are listed as having an attack vector value of network and CVSS score of 9.0. Which of the following actions is the best way to mitigate the vulnerabilities?