A company that has several branches worldwide needs to facilitate full access to a specific cloud resource to a branch in Spain. Other branches will have only read access. Which of the following is the best way to grant access to the branch in Spain?

Create a network security group with required permissions for users in Spain.

Set up MFA for the users working at the branch.

Create a network security group with required permissions for users in Spain.

Apply a rule on the WAF to allow only users in Spain access to the resource.

Implement an IPS/IDS to detect unauthorized users.

A cloud security analyst is concerned about security vulnerabilities in publicly available container images. Which of the following is the most appropriate action for the analyst to recommend?

Using images that have an application firewall

Servers in the hot site are clustered with the main site.

All servers are replicated from the main site in an online status.

Network traffic is balanced between the main site and hot site servers.

Offline server backups are replicated hourly from the main site.

All servers are replicated from the main site in an online status.

Which of the following best describes a characteristic of a hot site?

Which of the following describes the main difference between public and private container repositories?

Private container repository access requires authorization, while public repository access does not require authorization.

Private container repositories are hidden by default and containers must be directly referenced, while public container repositories allow browsing of container images.

Private container repositories must use proprietary licenses, while public container repositories must have open-source licenses.

Private container repositories are used to obfuscate the content of the Dockerfile, while public container repositories allow for Dockerfile inspection.

Two CVEs are discovered on servers in the company's public cloud virtual network. The CVEs are listed as having an attack vector value of network and CVSS score of 9.0. Which of the following actions would be the best way to mitigate the vulnerabilities?

Upgrading the operating systems to the latest beta

Encrypting the operating system disks

Disabling unnecessary open ports

Which of the following is a customer be responsible for in a provider-managed database service? (Select two).

Availability of hardware for scaling

Which of the following is a direct effect of cloud migration on an enterprise?

Utility costs will be reduced on premises.

The enterprise must reorganize the reporting structure.

Compatibility issues must be addressed on premises after migration.

Cloud solutions will require less resources than on-premises installations.

Utility costs will be reduced on premises.

An organization is hosting a seminar with eight individuals who need to connect to their own dedicated VM. The technician used the following VM configurations:IP address: DHCPNIC: 1GbpsNetwork: 10.1.10.0/29Several users are unable to access their VMs. Which of the following best describes the reason?

Not enough addresses are available.

Too much traffic is on the network.

DHCP is not working correctly on the VM.

A systems administrator needs to configure a script that will monitor whether an application is healthy and stop the VM if an unsuccessful code is returned. Which of the following scripts should the systems administrator use to achieve this goal?

RESPONSE_CODE } string APP_URL bool RESPONSE_CODE string VM health checker (APP_URL, VM) { if [ http_probe (APP_URL) == 200] { echo RESPONSE_CODE } else{ stop (VM) echo

else{ echo string APP_URL float RESPONSE_CODE string VM health_checker (APP_URL, VM) { if [ http_probe (APP_URL) == 200] { stop (RESPONSE_CODE) echo VM } stop (VM) RESPONSE CODE }

else{ echo string APP_URL int RESPONSE CODE string VM health checker (APP_URL, VM) { if [ http_probe (APP_URL) == 200] { echo RESPONSE_CODE } stop (VM) RESPONSE_CODE }

else{ echo string APP_URL int RESPONSE_CODE string VM health_checker (APP_URL, VM) { if [ http_probe (VM) == 200] { stop (VM) echo RESPONSE_CODE } RESPONSE CODE }

A company recently set up a CDN for its photography and image-sharing website. Which of the following is the most likely reason for the company's action?

To enhance security of static assets

A company just learned that the data in its object storage was accessed by an unauthorized party. Which of the following should the company have done to make the data unusable?

The company should have encrypted the data at rest.

The company should have switched from object storage to file storage.

The company should have hashed the data.

The company should have changed the file access permissions.

The company should have encrypted the data at rest.

CompTIA CV0-004 Practice Test 4 - Free Online Exam Questions 121-160

A company's content management system (CMS) service runs on an laaS cluster on a public cloud. The CMS service is frequently targeted by a malicious threat actor using DDoS.

Which of the following should a cloud engineer monitor to identify attacks?

Become a Premium Member for full access

Unlock Premium Member

CompTIA CV0-004 Practice Test 4

Question

CompTIA CV0-004 Practice Tests

Practice Tests