CV0-004 Exam Questions
384 real CV0-004 exam questions with expert-verified answers and explanations. Page 5 of 8.
- Question #203Operations
A cloud administrator wants to have a central repository for all the logs in the company's private cloud. Which of the following should be implemented to BEST meet this requirement...
Centralized loggingSyslogLog managementMonitoring - Question #204Security
An administrator is securing a private cloud environment and wants to ensure only approved systems can connect to switches. Which of the following would be MOST useful to accomplis...
Network Access ControlEndpoint SecurityNetwork SecurityPrivate Cloud Security - Question #205Deployment
An organization is currently deploying a private cloud model. All devices should receive the time from the local environment with the least administrative effort. Which of the foll...
NTPTime synchronizationNetwork portsPrivate cloud deployment - Question #206Security
A cloud security analyst needs to ensure the web servers in the public subnet allow only secure communications and must remediate any possible issue. The stateful configuration for...
Network SecurityFirewall RulesSecure CommunicationsCloud Networking - Question #207Cloud architecture
Which of the following definitions of serverless computing BEST explains how it is different from using VMs?
Serverless computingVirtual machinesCloud servicesScalability - Question #208Security
A system administrator has provisioned a new web server. Which of the following, in combination, form the best practice to secure the server's OS? (Choose three.)
OS hardeningRemote access securityTLS/SSLWeb server security - Question #209Cloud architecture
A technician needs to deploy two virtual machines in preparation for the configuration of a financial application next week. Which of the following cloud deployment models should t...
Cloud Service ModelsIaaSVirtual Machines - Question #210DevOps fundamentals
A system administrator supports an application in the cloud, which includes a restful API that receives an encrypted message that is passed to a calculator system. The administrato...
Functional testingAPI testingAutomation toolsCloud applications - Question #211Deployment
A cloud solutions architect needs to determine the best strategy to deploy an application environment in production, given the following requirements: - No downtime - Instant switc...
Deployment strategiesBlue-green deploymentNo downtimeTraffic control - Question #212Deployment
An engineer made a change to an application and needs to select a deployment strategy that meets the following requirements: - Is simple and fast - Can be performed on two Identica...
Deployment strategiesBlue-green deploymentApplication deploymentCloud deployment - Question #213Deployment
The change control board received a request to approve a configuration change 10 deploy in the cloud production environment. Which of the following should have already been compete...
Change managementDeployment processUser acceptance testingSDLC - Question #214Security
A customer is migrating applications to the cloud and wants to grant authorization based on the classification levels of each system. Which of the following should the customer imp...
AuthorizationRole-Based Access ControlResource TaggingCloud Security - Question #215Operations
A system surpasses 75% to 80% of resource consumption. Which of the following scaling approaches is the most appropriate?
Cloud scalingAuto-scalingResource utilizationPerformance monitoring - Question #216Troubleshooting
A network administrator is building a site-to-site VPN tunnel from the company's headquarters office to the company's public cloud development network. The network administrator co...
Site-to-site VPNNetwork troubleshootingRouting tablesCloud connectivity - Question #217Troubleshooting
A company's man web application is no longer accessible via the internet. The cloud administrator investigates and discovers the application is accessible locally and only via an I...
DNSNetworkingWeb ApplicationTroubleshooting - Question #218Security
A cloud engineer is provisioning a new application that requires access to the organization's public cloud resources. Which of the following is the best way for the cloud engineer...
Application AuthenticationCloud SecurityAccess ManagementAPI Access - Question #219Security
A security engineer Identifies a vulnerability m a containerized application. The vulnerability can be exploited by a privileged process to read tie content of the host's memory. T...
Container SecurityDockerfile SecurityLeast PrivilegeVulnerability Mitigation - Question #220Security
A cross-site request forgery vulnerability exploited a web application that was hosted in a public laaS network. A security engineer determined that deploying a WAF in blocking mod...
WAFACLApplication SecurityCloud Security - Question #221Deployment
A cloud engineer wants containers to run the latest version of a container base image to reduce the number of vulnerabilities. The applications in use requite Python 3.10 and ate n...
Container ImagesDockerImage VersioningVulnerability Management - Question #222Cloud architecture
A systems administrator is provisioning VMs according to the following requirements: - A VM instance needs to be present in at least two data centers. - During replication, the app...
VM ReplicationHigh AvailabilityDisaster RecoveryCloud Latency - Question #223Security
A company's content management system (CMS) service runs on an laaS cluster on a public cloud. The CMS service is frequently targeted by a malicious threat actor using DDoS. Which...
DDoSNetwork monitoringCloud securityLog analysis - Question #224Cloud architecture
A cloud engineer needs to integrate a new payment processor with an existing e-commerce website. Which of the following technologies is the best fit for this integration?
API integrationWeb servicesPayment processingHTTPS - Question #225Security
A company that has several branches worldwide needs to facilitate full access to a specific cloud resource to a branch in Spain. Other branches will have only read access. Which of...
Network Security GroupAccess ControlCloud SecurityLocation-based Access - Question #226Cloud architecture
Which of the following network types allows the addition of new features through the use of network function virtualization?
Software-Defined Networking (SDN)Network Function Virtualization (NFV)Cloud NetworkingNetwork Architecture - Question #227Deployment
Which of the following migration types is best to use when migrating a highly available application, which is normally hosted on a local VM cluster, for usage with an external user...
Cloud migrationMigration strategiesOn-premisesApplication deployment - Question #228Cloud architecture
A company's engineering department is conducting a month-long test on the scalability of an in- house-developed software that requires a cluster of 100 or more servers. Which of th...
Cloud Service ModelsIaaSScalability TestingInfrastructure Provisioning - Question #229Operations
An organization wants to ensure its data is protected in the event of a natural disaster. To support this effort, the company has rented a colocation space in another part of the c...
Disaster RecoveryBusiness ContinuityOff-site StorageData Protection - Question #230DevOps fundamentals
Which of the following do developers use to keep track of changes made during software development projects?
Version controlSource code managementDeveloper toolsChange tracking - Question #231Operations
A cloud administrator needs to collect process-level, memory-usage tracking for the virtual machines that are part of an autoscaling group. Which of the following is the best way t...
Cloud monitoringMonitoring agentsProcess-level metricsCloud-native services - Question #232Cloud architecture
An engineer wants lo scale several cloud workloads on demand. Which of the following approaches is the most suitable?
cloud scalingautoscalingload-based scaling - Question #233Deployment
A software engineer is integrating an application to the cloud that is web socket based. Which of the following applications is the engineer most likely deploying?
WebSocketsReal-time communicationCloud applicationsApplication integration - Question #234Operations
A manager wants information about which users signed in to a certain VM during the past month. Which of the following can the cloud administrator use to obtain this information?
LoggingMonitoringData CollectionCloud Operations - Question #235Security
A cloud engineer is reviewing the following Dockerfile to deploy a Python web application: Which of the following changes should the engineer make to the file to improve container...
Container SecurityDockerfile Best PracticesPrinciple of Least PrivilegeDocker USER Instruction - Question #236Deployment
A company has decided to adopt a microservices architecture for its applications that are deployed to the cloud. Which of the following is a major advantage of this type of archite...
Microservices architectureCloud application architectureRapid feature deploymentDeployment advantages - Question #237Cloud architecture
A company wants to optimize cloud resources and lower the overhead caused by managing multiple operating systems. Which of the following compute resources would be best to help to...
ContainerizationCloud ComputeResource OptimizationOperating System Overhead - Question #238Deployment
A developer is deploying a new version of a containerized application. The DevOps team wants: - No disruption - No performance degradation - Cost-effective deployment - Minimal dep...
Deployment strategiesBlue-green deploymentContainer deploymentDevOps practices - Question #239Troubleshooting
An DevOps engineer is receiving reports that users can no longer access the company's web application after hardening of a web server. The users are receiving the following error:...
SSL/TLSWeb Server HardeningError TroubleshootingNetwork Security - Question #240Security
A healthcare organization must follow strict compliance requirements to ensure that Pll is not leaked. The cloud administrator needs to ensure the cloud email system can support th...
DLPData protectionComplianceCloud email security - Question #247Operations
A company's VMs that are created using the noncritical application tag are automatically shut down at 5:00 p.m. using a cronjob. Which of the following actions would allow a cloud...
Cloud CLIResource TaggingInstance ManagementOperational Efficiency - Question #248Security
A cloud engineer is concerned about command-and-control (C2) communication out of a cloud network over HTTPS. Which of the following should the cloud engineer implement to most eff...
Cloud security monitoringNetwork flow logsThreat detectionC2 detection - Question #249Cloud architecture
Which of the transfer when comparing a multiregional to a single-region cloud platform design?
Cloud architectureMulti-region designNetwork transferRegional design - Question #250Deployment
A cloud administrator is working on the deployment of an e-commerce website. The administrator evaluates the scaling methods to be implemented when seasonal or flash sales are laun...
Cloud scalingScheduled scalingE-commerceAuto-scaling methods - Question #251Cloud architecture
A company has been using a CRM application that was developed in-house and is hosted on local servers. Due to internal changes, the company wants to migrate the application to the...
Cloud Service ModelsPaaSApplication MigrationManaged Services - Question #252Security
A cloud developer receives a security vulnerability scan report and needs to analyze and record the true positives. Which of the following vulnerability management steps is this an...
Vulnerability managementSecurity assessmentTrue positivesCloud security - Question #253Cloud architecture
Which of the following models will best reduce the cost of running short-term, non-critical workloads?
Cloud instance typesCost optimizationSpot InstancesWorkload characteristics - Question #254DevOps fundamentals
Which of the following types of releases best describes the update made to a code repository production release when it changes from version 1.0 to version 1.1?
Software versioningRelease typesDevOps practicesProduction releases - Question #255Security
A cloud service provider just launched a new serverless service that is compliant with all security regulations. A company deployed its code using the service, and the company's ap...
Shared Responsibility ModelCloud SecurityCredential ManagementCustomer Responsibility - Question #256Troubleshooting
An administrator configures three subnets to the corporate network. All servers should communicate with the main corporate network and access the internet. The administrator create...
NetworkingRouting TablesIP AddressingSubnetting - Question #257Deployment
A company has ten cloud engineers working on different manual cloud deployments. In the past, engineers have had difficulty keeping deployments consistent. Which of the following i...
Configuration as CodeDeployment AutomationInfrastructure as CodeConsistency - Question #258Troubleshooting
A developer is sending requests to a SaaS application. The developer becomes unable to send more requests after sending a number of them, but other developers can still send reques...
Rate limitingAPI managementSaaS applicationsTroubleshooting