CV0-003: CompTIA Cloud+

Question #: 101
Topic #: 1
An organization will be deploying a web application in a public cloud with two web servers, two database servers, and a load balancer that is accessible over a single public IP. Taking into account the gateway for this subnet and the potential to add two more web servers, which of the following will meet the minimum IP requirement?

A. 192.168.1.0/26
B. 192.168.1.0/27
C. 192.168.1.0/28
D. 192.168.1.0/29

Selected Answer: C

Question #: 102
Topic #: 1
All of a company’s servers are currently hosted in one cloud MSP. The company created a new cloud environment with a different MSP. A cloud engineer is now tasked with preparing for server migrations and establishing connectivity between clouds. Which of the following should the engineer perform FIRST?

A. Peer all the networks from each cloud environment.
B. Migrate the servers.
C. Create a VPN tunnel.
D. Configure network access control lists.

Selected Answer: C

Question #: 103
Topic #: 1
A web server has been deployed in a public IaaS provider and has been assigned the public IP address of 72.135.10.100. Users are now reporting that when they browse to the website, they receive a message indicating the service is unavailable. The cloud administrator logs into the server, runs a netstat command, and notices the following relevant output:

Which of the following actions should the cloud administrator take to resolve the issue?

A. Assign a new IP address of 192.168.100.10 to the web server.
B. Modify the firewall on 72.135.10.100 to allow only UDP.
C. Configure the WAF to filter requests from 17.3.130.3.
D. Update the gateway on the web server to use 72.135.10.1.

Selected Answer: C

Question #: 104
Topic #: 1
A cloud administrator has been using a custom VM deployment script. After three months of use, the script no longer joins the LDAP domain. The cloud administrator verifies the account has the correct permissions. Which of the following is the MOST likely cause of the failure?

A. Incorrect encryption ciphers
B. Broken trust relationship
C. Invalid certificates
D. Expired password

Selected Answer: D

Question #: 106
Topic #: 1
A cloud administrator is upgrading a cloud environment and needs to update the automation script to use a new feature from the cloud provider. After executing the script, the deployment fails. Which of the following is the MOST likely cause?

A. API incompatibility
B. Location changes
C. Account permissions
D. Network failure

Selected Answer: A

Question #: 107
Topic #: 1
A systems administrator has been asked to restore a VM from backup without changing the current VM’s operating state. Which of the following restoration methods would BEST fit this scenario?

A. Alternate location
B. Rolling
C. Storage live migration
D. In-place

Selected Answer: D

Question #: 108
Topic #: 1
Due to a policy change, a few of a customer’s application VMs have been migrated to synchronously replicated storage. The customer now reports that performance is lower. The systems administrator checks the resource usage and discovers CPU utilization is at 60% and available memory is at 30%. Which of the following is the MOST likely cause?

A. There is not enough vCPU assigned.
B. The application is not compatible with the new settings.
C. The new configuration is adding latency.
D. The memory of the VM is underallocated.

Selected Answer: C

Question #: 109
Topic #: 1
A systems administrator wants to ensure two VMs remain together on the same host. Which of the following must be set up to enable this functionality?

A. Affinity
B. Zones
C. Regions
D. A cluster

Selected Answer: A

Question #: 110
Topic #: 1
An organization is implementing a new requirement to facilitate users with faster downloads of corporate application content. At the same time, the organization is also expanding cloud regions. Which of the following would be suitable to optimize the network for this requirement?

A. Implement CDN for overall cloud application.
B. Implement auto-scaling of the compute resources.
C. Implement SR-IOV on the server instances.
D. Implement an application container solution.

Selected Answer: A

Question #: 111
Topic #: 1
After a few new web servers were deployed, the storage team began receiving incidents in their queue about the web servers. The storage administrator wants to verify the incident tickets that should have gone to the web server team. Which of the following is the MOST likely cause of the issue?

A. Incorrect assignment group in service management
B. Incorrect IP address configuration
C. Incorrect syslog configuration on the web servers
D. Incorrect SNMP settings

Selected Answer: A

Question #: 112
Topic #: 1
A systems administrator is deploying a solution that includes multiple network I/O-intensive VMs. The solution design requires that vNICs of the VMs provide low- latency, near-native performance of a physical NIC and data protection between the VMs. Which of the following would BEST satisfy these requirements?

A. SR-IOV
B. GENEVE
C. SDN
D. VLAN

Selected Answer: A

Question #: 113
Topic #: 1
A global web-hosting company is concerned about the availability of its platform during an upcoming event. Web traffic is forecasted to increase substantially during the next week. The site contains mainly static content. Which of the following solutions will assist with the increased workload?

A. DoH
B. WAF
C. IPS
D. CDN

Selected Answer: C

Question #: 114
Topic #: 1
A company wants to implement business continuity, and the cloud solution architect needs to design the correct solution. Which of the following will provide the data to measure business continuity? (Choose two.)

A. A service-level agreement
B. Automation scripts
C. Playbooks
D. A network diagram
E. A backup and restore
F. A recovery time objective

Selected Answer: AF

Question #: 115
Topic #: 1
A systems administrator is about to deploy a new VM to a cloud environment. Which of the following will the administrator MOST likely use to select an address for the VM?

A. CDN
B. DNS
C. NTP
D. IPAM

Selected Answer: D

Question #: 116
Topic #: 1
Which of the following is relevant to capacity planning in a SaaS environment?

A. Licensing
B. A hypervisor
C. Clustering
D. Scalability

Selected Answer: A

Question #: 117
Topic #: 1
An organization is hosting a DNS domain with private and public IP ranges. Which of the following should be implemented to achieve ease of management?

A. Network peering
B. A CDN solution
C. A SDN solution
D. An IPAM solution

Selected Answer: D

Question #: 118
Topic #: 1
A systems administrator is performing upgrades to all the hypervisors in the environment. Which of the following components of the hypervisors should be upgraded? (Choose two.)

A. The fabric interconnects
B. The virtual appliances
C. The firmware
D. The virtual machines
E. The baselines
F. The operating system

Selected Answer: CF

Question #: 119
Topic #: 1
A SAN that holds VM files is running out of storage space. Which of the following will BEST increase the amount of effective storage on the SAN?

A. Enable encryption.
B. Increase IOPS.
C. Convert the SAN from RAID 50 to RAID 60.
D. Configure deduplication.

Selected Answer: D

Question #: 120
Topic #: 1
Which of the following actions should a systems administrator perform during the containment phase of a security incident in the cloud?

A. Deploy a new instance using a known-good base image.
B. Configure a firewall rule to block the traffic on the affected instance.
C. Perform a forensic analysis of the affected instance.
D. Conduct a tabletop exercise involving developers and systems administrators.

Selected Answer: B

Question #: 121
Topic #: 1
A systems administrator has migrated a web application to the cloud with a synchronous uplink speed of 100Mbps. After the migration, the administrator receives reports of slow connectivity to the web application. The administrator logs into the firewall and notices the WAN port is transmitting at a constant 12.5MBps. Which of the following BEST explains the reason for the issue?

A. Misconfigured subnetting
B. Insufficient compute
C. Firewall issues
D. Not enough upload bandwidth

Selected Answer: D

Question #: 122
Topic #: 1
A user reports a poor-quality remote VDI session. Which of the following should the help desk technician do FIRST to troubleshoot the issue?

A. Check the FAQ section of the vendor’s documentation.
B. Ask the user if the client device or access location has changed.
C. Reboot the user’s virtual desktop.
D. Request permission to log in to the device remotely.

Selected Answer: B

Question #: 123
Topic #: 1
A systems administrator is examining a managed hosting agreement and wants to determine how much data would be lost if a server had to be restored from backups. To which of the following metrics should the administrator refer?

A. RTO
B. MTBF
C. RPO
D. MTTR

Selected Answer: C

Question #: 124
Topic #: 1
A systems administrator for an e-commerce company will be migrating the company’s main website to a cloud provider. The principal requirement is that the website must be highly available. Which of the following will BEST address this requirement?

A. Vertical scaling
B. A server cluster
C. Redundant switches
D. A next-generation firewall

Selected Answer: B

Question #: 125
Topic #: 1
A development team recently completed testing changes to a company’s web-based CMS in the sandbox environment. The cloud administrator deployed these
CMS application changes to the staging environment as part of the next phase in the release life cycle. The deployment was successful, but after deploying the
CMS application, the web page displays an error message stating the application is unavailable. After reviewing the application logs, the administrator sees an error message that the CMS is unable to connect to the database. Which of the following is the BEST action for the cloud administrator to perform to resolve the issue?

A. Modify the deployment script to delete and recreate the database whenever the CMS application is deployed.
B. Modify the ACL to allow the staging environment to access the database in the sandbox environment.
C. Modify the CMS application deployment to use the previous version and redeploy the application.
D. Modify the configuration settings of the CMS application to connect to the database in the current environment.

Selected Answer: D

Question #: 126
Topic #: 1
A cloud administrator is responsible for managing a cloud-based content management solution. According to the security policy, any data that is hosted in the cloud must be protected against data exfiltration. Which of the following solutions should the administrator implement?

A. HIDS
B. FIM
C. DLP
D. WAF

Selected Answer: C

Question #: 127
Topic #: 1
Lateral-moving malware has infected the server infrastructure. Which of the following network changes would MOST effectively prevent lateral movement in the future?

A. Implement DNSSEC in all DNS servers.
B. Segment the physical network using a VLAN.
C. Implement microsegmentation on the network.
D. Implement 802.1X in the network infrastructure.

Selected Answer: C

Question #: 129
Topic #: 1
Which of the following should be considered for capacity planning?

A. Requirements, licensing, and trend analysis
B. Laws and regulations
C. Regions, clusters, and containers
D. Hypervisors and scalability

Selected Answer: A

Question #: 130
Topic #: 1
A cloud administrator is setting up a new coworker for API access to a public cloud environment. The administrator creates a new user and gives the coworker access to a collection of automation scripts. When the coworker attempts to use a deployment script, a 403 error is returned. Which of the following is the MOST likely cause of the error?

A. Connectivity to the public cloud is down.
B. User permissions are not correct.
C. The script has a configuration error.
D. Oversubscription limits have been exceeded.

Selected Answer: C

Question #: 131
Topic #: 1
A systems administrator is troubleshooting a performance issue with a virtual database server. The administrator has identified the issue as being disk related and believes the cause is a lack of IOPS on the existing spinning disk storage. Which of the following should the administrator do NEXT to resolve this issue?

A. Upgrade the virtual database server.
B. Move the virtual machine to flash storage and test again.
C. Check if other machines on the same storage are having issues.
D. Document the findings and place them in a shared knowledge base.

Selected Answer: C

Question #: 132
Topic #: 1
In an existing IaaS instance, it is required to deploy a single application that has different versions. Which of the following should be recommended to meet this requirement?

A. Deploy using containers.
B. Install a Type 2 hypervisor.
C. Enable SR-IOV on the host.
D. Create snapshots.

Selected Answer: A

Question #: 133
Topic #: 1
An organization is using multiple SaaS-based business applications, and the systems administrator is unable to monitor and control the use of these subscriptions.
The administrator needs to implement a solution that will help the organization apply security policies and monitor each individual SaaS subscription. Which of the following should be deployed to achieve these requirements?

A. DLP
B. CASB
C. IPS
D. HIDS

Selected Answer: B

Question #: 134
Topic #: 1
A cloud administrator needs to reduce the cost of cloud services by using the company’s off-peak period. Which of the following would be the BEST way to achieve this with minimal effort?

A. Create a separate subscription.
B. Create tags.
C. Create an auto-shutdown group.
D. Create an auto-scaling group.

Selected Answer: C

Question #: 136
Topic #: 1
A systems administrator is configuring a storage array. Which of the following should the administrator configure to set up mirroring on this array?

A. RAID 0
B. RAID 1
C. RAID 5
D. RAID 6

Selected Answer: B

Question #: 138
Topic #: 1
A systems administrator adds servers to a round-robin, load-balanced pool, and then starts receiving reports of the website being intermittently unavailable. Which of the following is the MOST likely cause of the issue?

A. The network is being saturated.
B. The load balancer is being overwhelmed.
C. New web nodes are not operational.
D. The API version is incompatible.
E. There are time synchronization issues.

Selected Answer: C

Question #: 139
Topic #: 1
A company has a cloud infrastructure service, and the cloud architect needs to set up a DR site. Which of the following should be configured in between the cloud environment and the DR site?

A. Fallback
B. Playbook
C. Zoning
D. Replication

Selected Answer: D

Question #: 140
Topic #: 1
A cloud administrator is building a new VM for a network security appliance. The security appliance installer says the CPU clock speed does not meet the requirements. Which of the following will MOST likely solve the issue?

A. Move the VM to a host with a faster CPU.
B. Add more vCPUs to the VM.
C. Enable CPU masking on the VM.
D. Enable hyperthreading on the virtual host.

Selected Answer: A

Question #: 141
Topic #: 1
A technician is working with an American company that is using cloud services to provide video-based training for its customers. Recently, due to a surge in demand, customers in Europe are experiencing latency. Which of the following services should the technician deploy to eliminate the latency issue?

A. Auto-scaling
B. Cloud bursting
C. A content delivery network
D. A new cloud provider

Selected Answer: C

Question #: 142
Topic #: 1
A systems administrator has received an email from the virtualized environment’s alarms indicating the memory was reaching full utilization. When logging in, the administrator notices that one out of a five-host cluster has a utilization of 500GB out of 512GB of RAM. The baseline utilization has been 300GB for that host.
Which of the following should the administrator check NEXT?

A. Storage array
B. Running applications
C. VM integrity
D. Allocated guest resources

Selected Answer: B

Question #: 143
Topic #: 1
Company A has acquired Company B and is in the process of integrating their cloud resources. Company B needs access to Company A’s cloud resources while retaining its 1AM solution. Which of the following should be implemented?

A. Multifactor authentication
B. Single sign-on
C. Identity federation
D. Directory service

Selected Answer: C

Question #: 144
Topic #: 1
A systems administrator wants to have near-real-time information on the volume of data being exchanged between an application server and its clients on the
Internet. Which of the following should the systems administrator implement to achieve this objective?

A. A stateful firewall
B. DLP
C. DNSSEC
D. Network flows

Selected Answer: C

Question #: 146
Topic #: 1
A company needs to migrate the storage system and batch jobs from the local storage system to a public cloud provider. Which of the following accounts will
MOST likely be created to run the batch processes?

A. User
B. LDAP
C. Role-based
D. Service

Selected Answer: A

Question #: 147
Topic #: 1
A cloud administrator has finished setting up an application that will use RDP to connect. During testing, users experience a connection timeout error. Which of the following will MOST likely solve the issue?

A. Checking user passwords
B. Configuring QoS rules
C. Enforcing TLS authentication
D. Opening TCP port 3389

Selected Answer: D

Question #: 148
Topic #: 1
A storage array that is used exclusively for datastores is being decommissioned, and a new array has been installed. Now the private cloud administrator needs to migrate the data. Which of the following migration methods would be the BEST to use?

A. Conduct a V2V migration.
B. Perform a storage live migration.
C. Rsync the data between arrays.
D. Use a storage vendor migration appliance.

Selected Answer: D

Question #: 149
Topic #: 1
A cloud administrator checked out the deployment scripts used to deploy the sandbox environment to a public cloud provider. The administrator modified the script to add an application load balancer in front of the web-based front-end application. The administrator next used the script to recreate a new sandbox environment successfully, and the application was then using the new load balancer.
The following week, a new update was required to add more front-end servers to the sandbox environment. A second administrator made the necessary changes and checked out the deployment scripts. The second administrator then ran the script, but the application load balancer was missing from the new deployment.
Which of the following is the MOST likely reason for this issue?

A. The license limit on the number of server deployments allowed per month was exceeded.
B. The deployment script changes made by the first administrator were not checked in and committed.
C. The new server images were incompatible with the application load-balancer configuration.
D. The application load balancer exceeded the maximum number of servers it could use.

Selected Answer: D

Question #: 150
Topic #: 1
A systems administrator is configuring updates on a system. Which of the following update branches should the administrator choose to ensure the system receives updates that are maintained for at least four years?

A. LTS
B. Canary
C. Beta
D. Stable

Selected Answer: A