comptia cv0-002 online test

Question 1

A CSA needs to apply new OS security patches to the application cluster server farm in a public cloud provider. The CSA
wants to ensure the security patch and configuration are consistent for all members of the server farm. Which of the following
deployment practices is the BEST approach to do this?

• A. Update and validate the runbook procedures prior to the patch rollout.
• B. Leverage the infrastructure as code and replace each server farm member.
• C. Configure and patch each server individually and take an OS differential backup.
• D. Snapshot all existing server farm members before installing the patch.

Answer:

D

Question 2

A technician is configuring a new web application to be highly available. The technician has configured multiple web servers
in different availability zones at a public cloud provider. The application requires users to be directed to the same server each
time they visit. Which of the following network components is MOST likely to accomplish this?

• A. Network firewall
• B. Intrusion prevention system
• C. Global load balancer
• D. Virtual private network

Answer:

C

Question 3

A company recently decided to move some of its servers to a public cloud. The engineer has been invited to attend
requirement sessions for moving servers to the cloud. The engineer is tasked with ensuring the servers that are being moved
to the cloud are still in compliance, as they were on-premises.
Which of the following should the engineer request during the requirement sessions?

• A. Syslog server
• B. Administrator access to the cloud service
• C. Configuration management tool
• D. Orchestration tool

Answer:

C

Question 4

A cloud administrator for a customers environment must ensure the availability of critical applications. The cloud provider
hosting the infrastructure lost power, and the environment was down for four hours.
Which of the following solutions is MOST suitable for ensuring availability of critical applications?

• A. Install services at alternate sites.
• B. Enable HA on the critical infrastructure.
• C. Move services to a third-party environment.
• D. Deploy additional services to edge sites.

Answer:

B

Question 5

A company is seeking a new backup solution for its virtualized file servers that fits the following characteristics:
The files stored on the servers are extremely large.

Existing files receive multiple small changes per day.

New files are only created once per month.

All backups are being sent to a cloud repository.

Which of the following would BEST minimize backup size?

• A. Local snapshots
• B. Differential backups
• C. File-based replication
• D. Change block tracking

Answer:

D

Question 6

A cloud engineer is required to ensure all servers in the cloud environment meet requirements for PCI compliance. One of
the requirements is to make certain all administrator logins and commands are logged. Which of the following is the BEST
approach to meet these requirements?

• A. Enable configuration change tracking for all servers in the public cloud provider’s dashboard.
• B. Enable detailed monitoring for all servers in the public cloud provider’s dashboard.
• C. Define and enable audit tracking rules on each server in the public cloud environment.
• D. Modify the cloud provider’s role-based authorization policies to log user session activity.

Answer:

A

Question 7

A tenant has provisioned a new database server. It needs to add the database files in the exclusion list for security scanning,
as it allows down the performance and locks the database file. Which of the following solutions must have this exclusion?

• A. IPS
• B. IDS
• C. Antivirus
• D. Firewall

Answer:

C

Question 8

A cloud engineer recently applied the troubleshooting process for a major connectivity issue. Which of the following is the
FINAL step in the troubleshooting methodology?

• A. Document findings, actions, and outcomes.
• B. Establish a plan of action to resolve the problem and implement the solution.
• C. Confirm the root cause of the issue.
• D. Verify full system functionality and, if applicable, implement preventive measures.

Answer:

A

Question 9

An engineer is responsible for managing a private cloud environment at a software company. Company developers perform
all programming in the cloud environment. There are two departments working on a highly classified product that now
requires dedicated resources, which cannot be viewed or accessed by other departments in the cloud environment. Which of
the following should the engineer perform to ensure the requirements are met? (Choose three.)

• A. Create a baseline
• B. Assign an ACL
• C. Verify segmentation
• D. Use thin provisioned storage
• E. Automate patch deployments
• F. Create a tenant
• G. Deploy a PKI solution

Answer:

B C G

Question 10

An automation performs the following on a monthly basis:
- Disable accounts that have not logged on in the last 60 days
- Remove firewall rules with zero hits in the last 30 days
- Remove DNS entries that have not been updated in the last 60 days- Archive all logs that are more than 30 days old
Six weeks after this new automation is implemented, an internal client reports that quarterly replication failover testing has
failed.
Which of the following is the MOST likely cause of the failed test?

• A. Disabling accounts
• B. Removing firewall rules
• C. Removing DNS entries
• D. Archiving logs

Answer:

B

Explanation:
Reference https://cloud.google.com/vpc/docs/using-firewall-rules-logging