CV0-004 CompTIA Cloud+ Exam Free Dumps

dumps2025-01-21T08:55:46+08:00

CV0-004 exam is one for CompTIA Cloud+ certification, which is designed to validate the skills and knowledge required for professionals who work with cloud computing environments. There are 90 Multiple choice and performance-based questions in real CompTIA Cloud+ CV0-004 exam, and you have 90 minutes to answer all the questions. The required passing score is 750 (on a scale of 100-900). The available language is English. We provide the latest CompTIA Cloud+ CV0-004 exam dumps, which are valuable for you to study all the related topics. Free CompTIA Cloud+ CV0-004 exam dumps are available below.

Page 1 of 7

1. An engineer made a change to an application and needs to select a deployment strategy that meets the following requirements:

• Is simple and fast

• Can be performed on two Identical platforms

Which of the following strategies should the engineer use?

Blue-green

Canary

Rolling

in-place

2. The change control board received a request to approve a configuration change 10 deploy in the cloud production environment.

Which of the following should have already been competed?

Penetration test

End-to-end security testing

Cost benefit analysis

User acceptance testing

3. A customer is migrating applications to the cloud and wants to grant authorization based on the classification levels of each system.

Which of the following should the customer implement to ensure authorisation to systems is granted when the user and system classification properties match? (Select two).

Resource tagging

Discretionary access control

Multifactor authentication

Role-based access control

Token-based authentication

Bastion host

4. A system surpasses 75% to 80% of resource consumption.

Which of the following scaling approaches is the most appropriate?

Trending

Manual

Load

Scheduled

5. A network administrator is budding a site-to-site VPN tunnel from the company's headquarters office 10 the company's public cloud development network. The network administrator confirms the following:

The VPN tunnel is established on the headquarter office firewall.

While inside the office, developers report that they cannot connect to the development network resources.

While outside the office on a client VPN, developers report that they can connect to the development network resources.

The office and the client VPN have different IP subnet ranges.

The firewall flow logs show VPN traffic is reaching the development network from the office.

Which of the following is the next step the next network administrator should take to troubleshoot the VPN tunnel?

Review the development network routing table.

Change the ciphers on the site-to-site VP

Restart the site-to-site VPN tunnel.

Check the ACLS on the development workloads

6. A company's man web application is no longer accessible via the internet. The cloud administrator investigates and discovers the application is accessible locally and only via an IP access.

Which of the following was misconfigured?

DHCP

NAT

DNS

7. A cloud engineer is provisioning a new application that requires access to the organization's public cloud resources.

Which of the following is the best way for the cloud engineer to authenticate the application?

Access key

API

MFA token

Username and Password

8. A security engineer Identifies a vulnerability m a containerized application. The vulnerability can be exploited by a privileged process to read tie content of the host's memory.

The security engineer reviews the following Dockerfile to determine a solution to mitigate similar exploits:

Which of the following is the best solution to prevent similar exploits by privileged processes?

Adding the USER myappuserinstruction

Patching the host running the Docker daemon

Changing FROM alpiner3.17 to FROM alpine:latest

Running the container with the ready-only filesystem configuration

9. A cross-site request forgery vulnerability exploited a web application that was hosted in a public laaS network. A security engineer determined that deploying a WAF in blocking mode at a CDN would prevent the application from being exploited again. However, a week after implementing the WAF, the application was exploited again.

Which of the following should the security engineer do to make the WAF control effective?

Configure the DDoS protection on the CD

Install endpoint protection software on the VMs

Add an ACL to the VM subnet.

Deploy an IDS on the laaS network.

10. A cloud engineer wants containers to run the latest version of a container base image to reduce the number of vulnerabilities. The applications in use requite Python 3.10 and ate not compatible with any other version. The containers' images are created every time a new version is released from the source image.

Given the container Dockerfile below:

Which of the following actions will achieve the objectives with the least effort?

Perform docker pull before executing docker run.

Execute docker update using a local cron to get the latest container version.

Change the image to use python:latest on the image build process.

Update the Dockerfile to pin the source image version.

Page 2 of 7

11. An engineer wants lo scale several cloud workloads on demand.

Which of the following approaches is the most suitable?

Load

Scheduled

Manual

Trending

12. A software engineer is integrating an application lo The cloud that is web socket based.

Which of the following applications is the engineer most likely deploying?

Image-sharing

Data visualization

Chat

File transfer

13. A manager wants information about which users signed in to a certain VM during the past month.

Which of the following can the cloud administrator use to obtain this information?

Retention

Alerting

Aggregation

Collection

14. A cloud engineer is reviewing the following Dockerfile to deploy a Python web application:

Which of the following changes should the engineer make lo the file to improve container security?

Add the instruction "JSER nonroot.

Change the version from latest to 3.11.

Remove the EHTRYPOIKT instruction.

Ensure myapp/main.pyls owned by root.

15. A company has decided to adopt a microservices architecture for its applications that are deployed to the cloud.

Which of the following is a major advantage of this type of architecture?

Increased security

Simplified communication

Reduced server cost

Rapid feature deployment

16. A company wants to optimize cloud resources and lower the overhead caused by managing multiple operating systems.

Which of the following compute resources would be best to help to achieve this goal?

Containers

Remote desktops

Bare-metal servers

17. A developer is deploying a new version of a containerized application.

The DevOps team wants:

• No disruption

• No performance degradation * Cost-effective deployment

• Minimal deployment time

Which of the following is the best deployment strategy given the requirements?

Canary

In-place

Blue-green

Rolling

18. An DevOps engineer is receiving reports that users can no longer access the company's web application after hardening of a web server. The users are receiving the following error: ERR_SSLJ/ERSION_OR_CIPHER_MISMATCH.

Which of the following actions should the engineer take to resolve the issue?

Restart the web server.

Configure TLS 1.2 or newer.

Update the web server.

Review logs on the WAF

19. A healthcare organization must follow strict compliance requirements to ensure that Pll is not leaked. The cloud administrator needs to ensure the cloud email system can support this requirement.

Which of the following should the organization enable?

IPS

OLP

ACL

WAF

20. A cloud engineer wants to implement a monitoring solution to detect cryptojacking and other cryptomining malware on cloud instances.

Which of the following metrics would most likely be used to identify the activity?

Disk I/O

Network packets

Average memory utilization

Percent of CPU utilization

Page 3 of 7

21. A developer is testing code that will be used to deploy a web farm in a public cloud.

The main code block is a function to create a load balancer and a loop to create 1.000 web servers, as shown below:

The developer runs the code against the company's cloud account and observes that the load balancer is successfully created, but only 100 web servers have been created.

Which of the following should the developer do to fix this issue?

Request an increase of Instance quota.

Run the code multiple times until all servers are created.

Check the my_web_server () function to ensure it is using the right credentials.

Place the my_load_balancer () function after the loop.

22. A cloud networking engineer is troubleshooting the corporate office's network configuration. Employees in the IT and operations departments are unable to resolve IP addresses on all devices, and the IT department cannot establish a connection to other departments' subnets.

The engineer identifies the following configuration currently in place to support the office network:

Each employee needs to connect to the network with a maximum of three hosts. Each subnet must be segregated, but the IT department must have the ability to communicate with all subnets.

Which of the following meet the IP addressing and routing requirements? (Select two).

Modifying the subnet mask to 255 255 254.0 for IT and operations departments

Configuring static routing to allow access from each subnet to 10.1.40.1

Modifying the BYOD policy to reduce the volume of devices that are allowed to connect to the corporate network

Configuring static routing to allow access from 10.1.30.1 to each subnet

Combining the subnets and increasing the allocation of IP addresses available to support three hosts for each employee

Modifying the subnet mask to 255.255.255.128 for the IT and operations departments

23. A cloud developer is creating a static website that customers will be accessing globally.

Which of the following services will help reduce latency?

VPC

Application load balancer

CDN

API gateway

24. An administrator needs to adhere to the following requirements when moving a customer's data to the cloud:

• The new service must be geographically dispersed.

• The customer should have local access to data

• Legacy applications should be accessible.

Which of the following cloud deployment models is most suitable?

On-premises

Private

Hybrid

Public

25. A technician receives an email from a vendor who is requesting payment of an invoice for human resources services. The email contains a request for bank account numbers.

Which of the following types of attacks does this behavior most likely indicate?

MaIware

Cryptojacking

Ransomware

Phishing

26. Which of the following best explains the concept of migrating from on premises to the cloud?

The configuration of a dedicated pipeline to transfer content to a remote location

The creation of virtual instances in an external provider to transfer operations of selected servers into a new. remotely managed environment

The physical transportation, installation, and configuration of company IT equipment in a cloud services provider's facility

The extension of company IT infrastructure to a managed service provider

27. Which of the following service options would provide the best availability for critical applications in the event of a disaster?

Edge computing

Cloud bursting

Availability zones

Multicloud tenancy

28. A newly configured VM fails to run application updates despite having internet access. The updates download automatically from a third-party network.

Given the following output:

Which of the following troubleshooting steps would be best to take?

Checking DNS configurations

Reconfiguring routing protocols

Testing the IP address configuration

Running a trace to the router

29. A company migrated its CRM system to a SaaS solution. The security team is updating the RAG matrix for the newly migrated CRM.

Given the following table:

Which of the following responsibility assignments best aligns with the shared responsibility model for the new CRM?

Data-center security

CRM software security

CRM server patching

CRM development life cycle

30. A social networking company operates globally. Some users from Brazil and Argentina are reporting the following error: website address was not found.

Which of the following is the most likely cause of this outage?

Client DNS misconfigutation

Regional DNS provider outage

DNS server misconfiguration

DNS propagation issues

Page 4 of 7

31. A cloud engineer is designing a cloud-native, three-tier application.

The engineer must adhere to the following security best practices:

• Minimal services should run on all layers of the stack.

• The solution should be vendor agnostic.

• Virealization could be used over physical hardware.

Which of the following concepts should the engineer use to design the system to best meet these requirements?

Virtual machine

Micro services

Fan-out

Cloud-provided managed services

32. A high-usage cloud resource needs to be monitored in real time on specific events to guarantee its availability.

Which of the following actions should be used to meet this requirement?

Configure a ping command to identify when the cloud instance is out of service.

Create a dashboard with visualizations to filter the status of critical activities.

Collect all the daily activity from the cloud instance and create a dump file for analysis.

Schedule an hourly scan of the network to check for the availability of the resource.

33. A junior cloud administrator was recently promoted to cloud administrator and has been added to the cloud administrator group. The cloud administrator group is the only one that can access the engineering VM. The new administrator unsuccessfully attempts to access the engineering VM. However, the other administrators can access it without issue.

Which of the following is the best way to identify the root cause?

Rebooting the engineering VM

Reviewing the administrator's permissions to access the engineering VM

Allowing connections from 0.0.0.070 to the engineering VM

Performing a packet capture on the engineering VM

34. A cloud solutions architect is designing a VM-based solution that requires reducing the cost as much as possible.

Which of the following solutions will best satisfy this requirement?

Using ephemeral storage on replicated VMs

Creating Spot VMs in one availability zone

Spreading the VMs across different regions

Using provisioned IOPS storage

35. A critical security patch is required on a network load balancer in a public cloud. The organization has a major sales conference next week, and the Chief Executive Officer does not want any interruptions during the demonstration of an application behind the load balancer.

Which of the following approaches should the cloud security engineer take?

Ask the management team to delay the conference.

Apply the security patch after the event.

Ask the upper management team to approve an emergency patch window.

Apply the security patch immediately before the conference.

36. A cloud engineer has provisioned a VM for a high-frequency trading application. After the VM is put into production, users report high latency in trades.

The engineer checks the last six hours of VM metrics and sees the following:

• CPU utilization is between 30% to 60%.

• Networkln is between 50Kbps and 70Kbps.

• NetworkOut is between 3.000Kpbs and 5.000Kbps.

• DiskReadOps is at 30.

• DiskWriteOps is at 70

• Memory utilization is between 50% and 70%.

Which of the following steps should the engineer take next to solve the latency issue?

Move to a network-optimized instance type as the network throughput is not enough.

Modify the disk IOPS to a higher value as the disk IO is being bottlenecked at 100 IOP

Increase the memory of the instance as the high-frequency trading application requires more RA

Increase the instance size to allocate more vCPUs as the CPU utilization is very high.

37. A cloud engineer was deploying the company's payment processing application, but it failed with the following error log:

ERFOR: root: Transaction failed http 429 response, please try again

Which of the following are the most likely causes for this error? (Select two).

API throttling

API gateway outage

Web server outage

Oversubscription

Unauthorized access

Insufficient quota

38. An organization's web application experiences penodic bursts of traffic when a new video is launched. Users are reporting poor performance in the middle of the month.

Which of the following scaling approaches should the organization use to scale based on forecasted traffic?

Scheduled

Manual

Event

Load

39. A company uses containers stored in Docker Hub to deploy workloads (or its laaS infrastructure. The development team releases changes to the containers several times per hour.

Which of the following should a cloud engineer do to prevent the proprietary code from being exposed to third parties?

Use laC to deploy the laaS infrastructure.

Convert the containers to VMs.

Deploy the containers over SS

Use private repositories for the containers.

40. Which of the following is an auditing procedure that ensures service providers securely manage the data to protect the interests of the organization and the privacy of its clients?

CIS

ITIL

SOC2

ISO 27001

Page 5 of 7

41. A cloud engineer wants to replace the current on-premises. unstructured data storage with a solution in the cloud. The new solution needs to be cost-effective and highly scalable.

Which of the following types of storage would be best to use?

File

Block

Object

SAN

42. A security analyst reviews the daily logs and notices the following suspicious activity:

The analyst investigates the firewall logs and identities the following:

Which of the following steps should the security analyst take next to resolve this issue? (Select two).

Submit an IT support ticket and request Kali Linux be uninstalled from John Smith's computer

Block all inbound connections on port 4444 and block the IP address 201.101.25.121.

Contact John Smith and request the Ethernet cable attached to the desktop be unplugged

Check the running processes to confirm if a backdoor connection has been established.

Upgrade the Windows x64 operating system on John Smith's computer to the latest version.

Block all outbound connections from the IP address 10.150.71.151.

43. A security analyst confirms a zero-day vulnerability was exploited by hackers who gained access to confidential customer data and installed ransomware on the server.

Which of the following steps should the security analyst take? (Select two).

Contact the customers to inform them about the data breach.

Contact the hackers to negotiate payment lo unlock the server.

Send a global communication to inform all impacted users.

Inform the management and legal teams about the data breach

Delete confidential data used on other servers that might be compromised.

Modify the firewall rules to block the IP addresses and update the ports.

44. Which of the following types of storage provides the greatest performance advantage for a traditional relational database?

File

Object

Block

Ephemeral

45. Which of the following is used to detect signals and measure physical properties, such as the temperature of the human body?

Beacon

Transmission protocols

Sensors

Gateways

46. A company wants to combine solutions in a central and scalable environment to achieve the following goals:

• Control

• Visibility

• Automation

• Cost efficiency

Which of the following best describes what the company should implement?

Batch processing

Workload orchestration

Containerization

Application modernization

47. Which of the following requirements are core considerations when migrating a small business's on-premises applications to the cloud? (Select two).

Availability

Hybrid

Testing

Networking

Compute

Logs

48. The performance of an e-commerce website decreases dramatically during random periods. The IT team is evaluating available resources to mitigate the situation.

Which of the following is the best approach to effectively manage this scenario'?

Migrating to a dedicated host

Purchasing additional servers

Scheduling resource allocation

Configuring automatic elasticity

49. A company needs to deploy its own code directly in the cloud without provisioning additional infrastructure.

Which of the following is the best cloud service model for the company to use?

PaaS

SaaS

laaS

XaaS

50. An administrator is setting up a cloud backup solution that requires the following features:

• Cost effective

• Granular recovery

• Multilocation

Which of the following backup types best meets these requirements?

Off-site, full, incremental, and differential

Cloud site, full, and differential

On-site. full, and incremental

On-site. full, and differential

Page 6 of 7

51. A cloud engineer needs to deploy a new version of a web application to 100 servers. In the past, new

version deployments have caused outages.

Which of the following deployment types should the cloud engineer implement to prevent the outages from happening this time?

Rolling

Blue-green

Canary

Round-robin

52. An organization needs to retain its data for compliance reasons but only when required.

Which of the following would be the most cost-effective type of tiered storage?

Warm

Hot

CV0-004 CompTIA Cloud+ Exam Free Dumps

CV0-004 CompTIA Cloud+ Exam Free Dumps

Share this post

Leave a Reply Cancel reply

Related Posts