Which of the following are best practices when working with a source control system? (Select two).

Pushing code directly to production

Maintaining one branch for all features

A company is developing a new web application that requires a relational database management system with minimal operational overhead. Which of the following should the company choose?

A managed SQL database on the cloud

A database installed on a virtual machine

A managed SQL database on the cloud

A company uses containers stored in Docker Hub to deploy workloads (or its laaS infrastructure. The development team releases changes to the containers several times per hour. Which of the following should a cloud engineer do to prevent the proprietary code from being exposed to third parties?

Use private repositories for the containers.

Use laC to deploy the laaS infrastructure.

Deploy the containers over SSH.

Use private repositories for the containers.

A security analyst reviews the daily logs and notices the following suspicious activity: The analyst investigates the firewall logs and identities the following: Which of the following steps should the security analyst take next to resolve this issue? (Select two).

Block all inbound connections on port 4444 and block the IP address 201.101.25.121.

Check the running processes to confirm if a backdoor connection has been established.

Submit an IT support ticket and request Kali Linux be uninstalled from John Smith's computer

Block all inbound connections on port 4444 and block the IP address 201.101.25.121.

Contact John Smith and request the Ethernet cable attached to the desktop be unplugged

Check the running processes to confirm if a backdoor connection has been established.

Upgrade the Windows x64 operating system on John Smith's computer to the latest version.

Block all outbound connections from the IP address 10.150.71.151.

A security analyst confirms a zero-day vulnerability was exploited by hackers who gained access to confidential customer data and installed ransomware on the server Which of the following steps should the security analyst take? (Select two).

Contact the customers to inform them about the data breach.

Inform the management and legal teams about the data breach

Contact the customers to inform them about the data breach.

Contact the hackers to negotiate payment lo unlock the server.

Send a global communication to inform all impacted users.

Inform the management and legal teams about the data breach

Delete confidential data used on other servers that might be compromised.

Modify the firewall rules to block the IP addresses and update the ports.

The performance of an e-commerce website decreases dramatically during random periods. The IT team is evaluating available resources to mitigate the situation. Which of the following is the best approach to effectively manage this scenario'?

Configuring automatic elasticity

An administrator is setting up a cloud backup solution that requires the following features:* Cost effective* Granular recovery* MultilocationWhich of the following backup types best meets these requirements?

Off-site, full, incremental, and differential

Cloud site, full, and differential

On-site. full, and differential

A network administrator is budding a site-to-site VPN tunnel from the company's headquarters office 10 the company's public cloud development network. The network administrator confirms the following:The VPN tunnel is established on the headquarter office firewall.While inside the office, developers report that they cannot connect to the development network resources.While outside the office on a client VPN, developers report that they can connect to the development network resources.The office and the client VPN have different IP subnet ranges.The firewall flow logs show VPN traffic is reaching the development network from the office.Which of the following is the next step the next network administrator should take to troubleshoot the VPN tunnel?

Review the development network routing table.

Change the ciphers on the site-to-site VPN.

Restart the site-to-site VPN tunnel.

Check the ACLS on the development workloads

A security engineer Identifies a vulnerability m a containerized application. The vulnerability can be exploited by a privileged process to read tie content of the host's memory. The security engineer reviews the following Dockerfile to determine a solution to mitigate similar exploits: Which of the following is the best solution to prevent similar exploits by privileged processes?

Adding the USER myappuserinstruction

Patching the host running the Docker daemon

Changing FROM alpiner3.17 to FROM alpine:latest

Running the container with the ready-only filesystem configuration

A cross-site request forgery vulnerability exploited a web application that was hosted in a public laaS network. A security engineer determined that deploying a WAF in blocking mode at a CDN would prevent the application from being exploited again. However, a week after implementing the WAF, the application was exploited again. Which of the following should the security engineer do to make the WAF control effective?

Configure the DDoS protection on the CDN.

Install endpoint protection software on the VMs

Deploy an IDS on the laaS network.

A cloud engineer wants containers to run the latest version of a container base image to reduce the number of vulnerabilities. The applications in use requite Python 3.10 and ate not compatible with any other version. The containers' images are created every time a new version is released from the source image. Given the container Dockerfile below: Which of the following actions will achieve the objectives with the least effort?

Perform docker pull before executing docker run.

Execute docker update using a local cron to get the latest container version.

Change the image to use python:latest on the image build process.

Update the Dockerfile to pin the source image version.

A cloud engineer is reviewing the following Dockerfile to deploy a Python web application: Which of the following changes should the engineer make lo the file to improve container security?

Add the instruction 'JSER nonroot.

Change the version from latest to 3.11.

Remove the EHTRYPOIKT instruction.

Ensure myapp/main.pyls owned by root.

CompTIA CV0-004 Practice Test 1 - Free Online Exam Prep & Questions

Question 1 / 40

Given the following command:

Sdocker pull images.comptia.org/user1/myimage:latest

Which of the following correctly identifies images.comptia.org?

Image registry

Image creator

Image version

Image name

Comment (0)

CompTIA CV0-004 Practice Test 1

Question

CompTIA CV0-004 Practice Tests

Practice Tests