[Apr 27, 2022] CV0-003 Exam Dumps PDF Updated Dump from Exam4PDF Guaranteed Success [Q61-Q80]

Share

[Apr 27, 2022] CV0-003 Exam Dumps PDF Updated Dump from Exam4PDF Guaranteed Success

Pass Your CompTIA Exam with CV0-003 Exam Dumps


CompTIA CV0-003 Exam Syllabus Topics:

TopicDetails

Cloud Architecture and Design - 13%

Compare and contrast the different types of cloud models.- Deployment models
  • Public
  • Private
  • Hybrid
  • Community
  • Cloud within a cloud
  • Multicloud
  • Multitenancy

- Service models

  • Infrastructure as a Service (IaaS)
  • Platform as a Service (PaaS)
  • Software as a Service (SaaS)

- Advanced cloud services

  • Internet of Things (IoT)
  • Serverless
  • Machine learning/Artificial intelligence (AI)

- Shared responsibility model

Explain the factors that contribute to capacity planning.- Requirements
  • Hardware
  • Software
  • Budgetary
  • Business need analysis

- Standard templates

  • Per-user
  • Socket-based
  • Volume-based
  • Core-based
  • Subscription

- Licensing
- User density
- System load
- Trend analysis

  • Baselines
  • Patterns
  • Anomalies

- Performance capacity planning

Explain the importance of high availability and scaling in cloud environments.- Hypervisors
  • Affinity
  • Anti-affinity

- Oversubscription

  • Compute
  • Network
  • Storage

- Regions and zones
- Applications
- Containers
- Clusters
- High availability of network functions

  • Switches
  • Routers
  • Load balancers
  • Firewalls

- Avoid single points of failure
- Scalability

  • Auto-scaling
  • Horizontal scaling
  • Vertical scaling
  • Cloud bursting
Given a scenario, analyze the solution design in support of the business requirements.- Requirement analysis
  • Software
  • Hardware
  • Integration
  • Budgetary
  • Compliance
  • Service-level agreement (SLA)
  • User and business needs
  • Security
  • Network requirements
    1. Sizing
    2. Subnetting
    3. Routing

- Environments

  • Development
  • Quality assurance (QA)
  • Staging
  • Blue-green
  • Production
  • Disaster recovery (DR)

- Testing techniques

  • Vulnerability testing
  • Penetration testing
  • Performance testing
  • Regression testing
  • Functional testing
  • Usability testing

Security - 20%

Given a scenario, configure identity and access management.- Identification and authorization
  • Privileged access management
  • Logical access management
  • Account life-cycle management
    1. Provision and deprovision accounts
  • Access controls
    1. Role-based
    2. Discretionary
    3. Non-discretionary
    4. Mandatory

- Directory services

  • Lightweight directory access protocol (LDAP)

- Federation
- Certificate management
- Multifactor authentication (MFA)
- Single sign-on (SSO)

  • Security assertion markup language (SAML)

- Public key infrastructure (PKI)
- Secret management
- Key management

Given a scenario, secure a network in a cloud environment.- Network segmentation
  • Virtual LAN (VLAN)/Virtual extensible LAN (VXLAN)/Generic network virtualization encapsulation (GENEVE)
  • Micro-segmentation
  • Tiering

- Protocols

  • Domain name service (DNS)
    1. DNS over HTTPS (DoH)/DNS over TLS (DoT)
    2. DNS security (DNSSEC)
  • Network time protocol (NTP)
    1. Network time security (NTS)
  • Encryption
    1. IPSec
    2. Transport layer security (TLS)
    3. Hypertext transfer protocol secure (HTTPS)
  • Tunneling
    1. Secure Shell (SSH)
    2. Layer 2 tunneling protocol (L2TP)/Point-to-point tunneling protocol (PPTP)
    3. Generic routing encapsulation (GRE)

- Network services

  • Firewalls
    1. Stateful
    2. Stateless
  • Web application firewall (WAF)
  • Application delivery controller (ADC)
  • Intrusion protection system (IPS)/Intrusion detection system (IDS)
  • Data loss prevention (DLP)
  • Network access control (NAC)
  • Packet brokers

- Log and event monitoring
- Network flows
- Hardening and configuration changes

  • Disabling unnecessary ports and services
  • Disabling weak protocols and ciphers
  • Firmware upgrades
  • Control ingress and egress traffic
    1. Allow list (previously known as whitelisting) or blocklist (previously known as blacklisting)
    2. Proxy servers
  • Distributed denial of service (DDoS) protection
Given a scenario, apply the appropriate OS and application security controls.- Policies
  • Password complexity
  • Account lockout
  • Application approved list (previously known as whitelisting)
  • Software feature
  • User/group

- User permissions
- Antivirus/anti-malware/endpoint detection and response (EDR)
- Host-based IDS (HIDS)/Host-based IPS (HIPS)
- Hardened baselines

  • Single function

- File integrity
- Log and event monitoring
- Configuration management
- Builds

  • Stable
  • Long-term support (LTS)
  • Beta
  • Canary

- Operating system (OS) upgrades
- Encryption

  • Application programming interface (API) endpoint
  • Application
  • OS
  • Storage
  • Filesystem

- Mandatory access control
- Software firewall

Given a scenario, apply data security and compliance controls in cloud environments.- Encryption
- Integrity
  • Hashing algorithms
  • Digital signatures
  • File integrity monitoring (FIM)

- Classification
- Segmentation
- Access control
- Impact of laws and regulations

  • Legal hold

- Records management

  • Versioning
  • Retention
  • Destruction
  • Write once read many

- Data loss prevention (DLP)
- Cloud access security broker (CASB)

Given a scenario, implement measures to meet security requirements.- Tools
  • Vulnerability scanners
  • Port scanners

- Vulnerability assessment

  • Default and common credential scans
  • Credentialed scans
  • Network-based scans
  • Agent-based scans
  • Service availabilities

- Security patches

  • Hot fixes
  • Scheduled updates
  • Virtual patches
  • Signature updates
  • Rollups

- Risk register
- Prioritization of patch application
- Deactivate default accounts
- Impacts of security tools on systems and services
- Effects of cloud service models on security implementation

Explain the importance of incident response procedures.- Preparation
  • Documentation
  • Call trees
  • Training
  • Tabletops
  • Documented incident types/categories
  • Roles and responsibilities

- Incident response procedures

  • Identification
    1. Scope
  • Investigation
  • Containment, eradication, and recovery
    1. Isolation
    2. Evidence acquisition
    3. Chain of custody
    4. Root cause analysis
  • Post-incident and lessons learned

Deployment - 23%

Given a scenario, integrate components into a cloud solution.- Subscription services
  • File subscriptions
  • Communications
    1. Email
    2. Voice over IP (VoIP)
    3. Messaging
  • Collaboration
  • Virtual desktop infrastructure (VDI)
  • Directory and identity services
  • Cloud resources
    1. IaaS
    2. PaaS
    3. SaaS

- Provisioning resources

  • Compute
  • Storage
  • Network

- Application

  • Serverless

- Deploying virtual machines (VMs) and custom images
- Templates

  • OS templates
  • Solution templates

- Identity management
- Containers

  • Configure variables
  • Configure secrets
  • Persistent storage

- Auto-scaling
- Post-deployment validation

Given a scenario, provision storage in cloud environments.- Types
  • Block
    1. Storage area network (SAN)
    - Zoning
  • File
    1. Network attached storage (NAS)
  • Object
    1. Tenants
    2. Buckets

- Tiers

  • Flash
  • Hybrid
  • Spinning disks
  • Long-term

- Input/output operations per second (IOPS) and read/write
- Protocols

  • Network file system (NFS)
  • Common Internet file system (CIFS)
  • Internet small computer system interface (iSCSI)
  • Fibre Channel (FC)
  • Non-volatile memory express over fabrics (NVMe-oF)

- Redundant array of inexpensive disks (RAID)

  • 0
  • 1
  • 5
  • 6
  • 10

- Storage system features

  • Compression
  • Deduplication
  • Thin provisioning
  • Thick provisioning
  • Replication

- User quotas
- Hyperconverged
- Software-defined storage (SDS)

Given a scenario, deploy cloud networking solutions.- Services
  • Dynamic host configuration protocol (DHCP)
  • NTP
  • DNS
  • Content delivery network (CDN)
  • IP address management (IPAM)

- Virtual private networks (VPNs)

  • Site-to-site
  • Point-to-point
  • Point-to-site
  • IPSec
  • Multiprotocol label switching (MPLS)

- Virtual routing

  • Dynamic and static routing
  • Virtual network interface controller (vNIC)
  • Subnetting

- Network appliances

  • Load balancers
  • Firewalls

- Virtual private cloud (VPC)

  • Hub and spoke
  • Peering

- VLAN/VXLAN/GENEVE
- Single root input/output virtualization (SR-IOV)
- Software-defined network (SDN)

Given a scenario, configure the appropriate compute sizing for a deployment.- Virtualization
  • Hypervisors
    1. Type 1
    2. Type 2
  • Simultaneous multi-threading (SMT)
  • Dynamic allocations
  • Oversubscription

- Central processing unit (CPU)/virtual CPU (vCPU)
- Graphics processing unit (GPU)

  • Virtual
    1. Shared
  • Pass-through

- Clock speed/Instructions per cycle (IPC)
- Hyperconverged
- Memory

  • Dynamic allocation
  • Ballooning
Given a scenario, perform cloud migrations.- Physical to virtual (P2V)
- Virtual to virtual (V2V)
- Cloud-to-cloud migrations
  • Vendor lock-in
  • PaaS or SaaS migrations
    1. Access control lists (ACLs)
    2. Firewalls

- Storage migrations

  • Block
  • File
  • Object

- Database migrations

  • Cross-service migrations
  • Relational
  • Non-relational

Operations and Support - 22%

Given a scenario, configure logging, monitoring, and alerting to maintain operational status.- Logging
  • Collectors
    1. Simple network management protocol (SNMP)
    2. Syslog
  • Analysis
  • Severity categorization
  • Audits
  • Types
    1. Access/authentication
    2. System
    3. Application
  • Automation
  • Trending

- Monitoring

  • Baselines
  • Thresholds
  • Tagging
  • Log scrubbing
  • Performance monitoring
    1. Application
    2. Infrastructure components
  • Resource utilization
  • Availability
    1. SLA-defined uptime requirements
  • Verification of continuous monitoring activities
  • Service management tool integration

- Alerting

  • Common messaging methods
  • Enable/disable alerts
    1. Maintenance mode
  • Appropriate responses
  • Policies for categorizing and communicating alerts
Given a scenario, maintain efficient operation of a cloud environment.- Confirm completion of backups
- Life-cycle management
  • Roadmaps
  • Old/current/new versions
  • Upgrading and migrating systems
  • Deprecations or end of life

- Change management
- Asset management

  • Configuration management database (CMDB)

- Patching

  • Features or enhancements
  • Fixes for broken or critical infrastructure or applications
  • Scope of cloud elements to be patched
    1. Hypervisors
    2. VMs
    3. Virtual appliances
    4. Networking components
    5. Applications
    6. Storage components
    7. Firmware
    8. Software
    9. OS
  • Policies
    1. n-1
  • Rollbacks

- Impacts of process improvements on systems
- Upgrade methods

  • Rolling upgrades
  • Blue-green
  • Canary
  • Active-passive
  • Development/QA/production/DR

- Dashboard and reporting

  • Tagging
  • Costs
    1. Chargebacks
    2. Showbacks
  • Elasticity usage
  • Connectivity
  • Latency
  • Capacity
  • Incidents
  • Health
  • Overall utilization
  • Availability
Given a scenario, optimize cloud environments.- Right-sizing
  • Auto-scaling
  • Horizontal scaling
  • Vertical scaling
  • Cloud bursting

- Compute

  • CPUs
  • GPUs
  • Memory
  • Containers

- Storage

  • Tiers
    1. Adaptive optimization
  • IOPS
  • Capacity
  • Deduplication
  • Compression

- Network

  • Bandwidth
  • Network interface controllers (NICs)
  • Latency
  • SDN
  • Edge computing
    1. CDN

- Placement

  • Geographical
  • Cluster placement
  • Redundancy
  • Colocation

- Device drivers and firmware

  • Generic
  • Vendor
  • Open source

 

NEW QUESTION 61
An IaaS application has a two-hour RTO and a four-hour RPO. The application takes one hour to back up its data or restore from a local backup file. A systems administrator is tasked with configuring the backup policy.
Which of the following should the administrator configure to achieve the application requirements with the LEAST cost?

  • A. Back up to object storage every three hours
  • B. Back up to long-term storage every night
  • C. Back up to long-term storage every four hours
  • D. Back up to object storage every hour

Answer: D

 

NEW QUESTION 62
A company needs to access the cloud administration console using its corporate identity. Which of the following actions would MOST likely meet the requirements?

  • A. Implement cloud authentication with local LDAP.
  • B. Implement SSH key-based authentication.
  • C. Implement multifactor authentication.
  • D. Implement client-based certificate authentication.

Answer: D

 

NEW QUESTION 63
A cloud administrator recently deployed an update to the network drivers of several servers. Following the update, one of the servers no longer responds to remote login requests. The cloud administrator investigates the issue and gathers the following information:
The cloud management console shows the VM is running and the CPU and memory utilization is at or near 0%.
The cloud management console does not show an IP address for that server.
A DNS lookup shows the hostname resolves to an IP address.
The server is a member of the same security group as the others.
The cloud administrator is able to log in remotely to the other servers without issue.
Which of the following is the MOST likely cause of the server being unavailable?

  • A. The update caused an increase in the output to the logs, and the server is too busy to respond.
  • B. The server was assigned a new IP address, and DNS entry for the server name was not updated.
  • C. The network driver updates did not apply successfully, and the interface is in a down state.
  • D. The ACL policy for the server was updated as part of the server reboot, preventing login access.

Answer: C

 

NEW QUESTION 64
A systems administrator is troubleshooting performance issues with a Windows VDI environment. Users have reported that VDI performance is very slow at the start of the work day, but the performance is fine during the rest of the day.
Which of the following is the MOST likely cause of the issue?

  • A. RAM usage
  • B. Disk I/O limits
  • C. Affinity rule
  • D. CPU oversubscription

Answer: D

 

NEW QUESTION 65
A vendor is installing a new retail store management application for a customer. The application license ensures software costs are low when the application is not being used, but costs go up when use is higher.
Which of the following licensing models is MOST likely being used?

  • A. Socket-based
  • B. Subscription
  • C. Volume-based
  • D. Core-based

Answer: C

 

NEW QUESTION 66
Which of the following cloud deployment models allows a company to have full control over its IT infrastructure?

  • A. Private
  • B. Cloud within a cloud
  • C. Hybrid
  • D. Public

Answer: A

Explanation:
Reference:
https://www.sciencedirect.com/topics/computer-science/private-cloud

 

NEW QUESTION 67
A software development manager is looking for a solution that will allow a team of developers to work in isolated environments that can be spun up and torn down quickly.
Which of the following is the MOST appropriate solution?

  • A. Ballooning
  • B. Containers
  • C. Software-defined storage
  • D. File subscriptions

Answer: B

 

NEW QUESTION 68
Which of the following strategies will mitigate the risk of a zero-day vulnerability MOST efficiently?

  • A. Having a detailed incident response plan
  • B. Keeping all resources up to date
  • C. Creating a standby environment with a different cloud provider
  • D. Using only open-source technologies

Answer: A

 

NEW QUESTION 69
After a hardware upgrade on a private cloud system, the systems administrator notices a considerable drop in network performance. Which of the following is MOST likely the cause?

  • A. The cluster placement
  • B. The CPU
  • C. The driver
  • D. The memory

Answer: A

 

NEW QUESTION 70
A systems administrator would like to reduce the network delay between two servers.
Which of the following will reduce the network delay without taxing other system resources?

  • A. Configure a VPN tunnel between the servers
  • B. Decrease the MTU size on both servers
  • C. Enable compression between the servers
  • D. Adjust the CPU resources on both servers

Answer: C

Explanation:
Reference:
https://cseweb.ucsd.edu/~calder/papers/HPDC-01-DynComp.pdf

 

NEW QUESTION 71
Company A has acquired Company B and is in the process of integrating their cloud resources. Company B needs access to Company A's cloud resources while retaining its IAM solution.
Which of the following should be implemented?

  • A. Identity federation
  • B. Multifactor authentication
  • C. Single sign-on
  • D. Directory service

Answer: A

Explanation:
Reference:
https://medium.com/@dinika.15/identity-federation-a-brief-introduction-f2f823f8795a

 

NEW QUESTION 72
A cloud architect is designing the VPCs for a new hybrid cloud deployment. The business requires the following:
High availability
Horizontal auto-scaling
60 nodes peak capacity per region
Five reserved network IP addresses per subnet
/24 range
Which of the following would BEST meet the above requirements?

  • A. Create two /27 subnets in different regions
  • B. Create three /26 subnets in different regions
  • C. Create two /26 subnets in different regions
  • D. Create three /27 subnets in different regions
  • E. Create two /25 subnets in different regions
  • F. Create three /25 subnets in different regions

Answer: C

 

NEW QUESTION 73
A systems administrator notices that a piece of networking equipment is about to reach its end of support.
Which of the following actions should the administrator recommend?

  • A. Replace the equipment
  • B. Migrate the equipment to the cloud
  • C. Update the OS
  • D. Update the firmware

Answer: D

 

NEW QUESTION 74
Due to a policy change, a few of a customer's application VMs have been migrated to synchronously replicated storage. The customer now reports that performance is lower. The systems administrator checks the resource usage and discovers CPU utilization is at 60% and available memory is at 30%.
Which of the following is the MOST likely cause?

  • A. The memory of the VM is underallocated
  • B. The new configuration is adding latency
  • C. The application is not compatible with the new settings
  • D. There is not enough vCPU assigned

Answer: C

 

NEW QUESTION 75
An SQL injection vulnerability was reported on a web application, and the cloud platform team needs to mitigate the vulnerability while it is corrected by the development team.
Which of the following controls will BEST mitigate the risk of exploitation?

  • A. DLP
  • B. NAC
  • C. HIDS
  • D. WAF

Answer: C

 

NEW QUESTION 76
A cloud administrator would like to deploy a cloud solution to its provider using automation techniques. Which of the following must be used? (Choose two.)

  • A. Tagging
  • B. Playbook
  • C. Containers
  • D. Templates
  • E. Auto-scaling
  • F. Serverless

Answer: A,D

 

NEW QUESTION 77
A company wants to implement business continuity, and the cloud solution architect needs to design the correct solution.
Which of the following will provide the data to measure business continuity? (Choose two.)

  • A. A recovery time objective
  • B. Automation scripts
  • C. A network diagram
  • D. A service-level agreement
  • E. Playbooks
  • F. A backup and restore

Answer: A,D

 

NEW QUESTION 78
A cloud administrator is reviewing a new application implementation document. The administrator needs to make sure all the known bugs and fixes are applied, and unwanted ports and services are disabled.
Which of the following techniques would BEST help the administrator assess these business requirements?

  • A. Regression testing
  • B. Vulnerability testing
  • C. Usability testing
  • D. Performance testing

Answer: B

 

NEW QUESTION 79
A company has developed a cloud-ready application. Before deployment, an administrator needs to select a deployment technology that provides a high level of portability and is lightweight in terms of footprint and resource requirements.
Which of the following solutions will be BEST to help the administrator achieve the requirements?

  • A. Infrastructure as code
  • B. Virtual machines
  • C. Containers
  • D. Desktop virtualization

Answer: C

 

NEW QUESTION 80
......


CompTIA Cloud+ Exam Certification Details:

Duration90 mins
Passing Score750 / 900
Exam CodeCV0-003
Schedule ExamCompTIA Marketplace
Pearson VUE
Exam NameCompTIA Cloud+

 

New Real CV0-003 Exam Dumps Questions: https://www.exam4pdf.com/CV0-003-dumps-torrent.html

CV0-003 Exam Dumps - CompTIA Practice Test Questions: https://drive.google.com/open?id=1oWZ81Kci3Z-Iu-ey3GjN_QW0fFJU42oB