CompTIA Cloud+ Certification CV0-003 Demo Questions

Jonnie Karnath2023-07-21T06:33:57+00:00

The CompTIA Cloud+ Certification CV0-003 exam is designed for IT professionals who want to validate their skills in cloud computing and become certified Cloud+ professionals. This exam covers various topics such as cloud architecture, design, security, deployment, and troubleshooting. Certspot CompTIA Cloud+ Certification CV0-003 demo questions are designed to help you assess your knowledge and identify areas that need improvement. The questions are similar to those you will encounter in the actual exam and are accompanied by detailed explanations and references to help you understand the concepts better. Practice with Certspot CompTIA Cloud+ Certification CV0-003 demo questions to increase your chances of passing the CompTIA Cloud+ Certification CV0-003 exam and becoming a certified Cloud+ professional.

Page 1 of 8

1. A cloud administrator is reviewing the annual contracts for all hosted solutions. Upon review of the contract for the hosted mail solution, the administrator notes the monthly subscription rate has increased every year. The provider has been in place for ten years, and there is a large amount of data being hosted.

Which of the following is a barrier to switching providers?

Service-level agreement

Vendor lock-in

Memorandum of understanding

Encrypted data

2. After announcing a big sales promotion, an e-commerce company starts to experience a slow response on its platform that is hosted in a public cloud.

When checking the resources involved, the systems administrator sees the following consumption:

Considering all VMs were built from the same templates, which of the following actions should the administrator perform FIRST to speed up the response of the e-commerce platform?

Spin up a new web server

Spin up a new application server

Add more memory to the web server

Spin up a new database server

3. A VDI administrator has received reports from the drafting department that rendering is slower than normal.

Which of the following should the administrator check FIRST to optimize the performance of the VDI infrastructure?

GPU

CPU

Storage

Memory

4. A systems administrator swapped a failed hard drive on a server with a RAID 5 array. During the RAID resynchronization, a second hard drive failed.

Which of the following actions will make the server fully operational?

Restart the RAID resynchronization process

Perform a P2V migration of the server

Swap the failed hard drive with a fresh one

Restore the server from backup

5. Which of the following cloud deployment models allows a company to have full control over its IT infrastructure?

Private

Cloud within a cloud

Hybrid

Public

6. A cloud administrator has built a new private cloud environment and needs to monitor all computer, storage, and network components of the environment.

Which of the following protocols would be MOST useful for this task?

SMTP

SCP

SNMP

SFTP

7. A systems administrator is working in a globally distributed cloud environment. After a file server VM was moved to another region, all users began reporting slowness when saving files.

Which of the following is the FIRST thing the administrator should check while troubleshooting?

Network latency

Network connectivity

Network switch

Network peering

8. A systems administrator is configuring updates on a system.

Which of the following update branches should the administrator choose to ensure the system receives updates that are maintained for at least four years?

LTS

Canary

Beta

Stable

9. A system administrator is migrating a bare-metal server to the cloud.

Which of the following types of migration should the systems administrator perform to accomplish this task?

V2V

V2P

P2P

P2V

10. A systems administrator needs to configure SSO authentication in a hybrid cloud environment.

Which of the following is the BEST technique to use?

Access controls

Federation

Multifactor authentication

Certificate authentication

Page 2 of 8

11. A cloud administrator is building a new VM for machine-learning training. The developer requesting the VM has stated that the machine will need a full GPU dedicated to it.

Which of the following configuration options would BEST meet this requirement?

Virtual GPU

External GPU

Passthrough GPU

Shared GPU

12. A systems administrator is provisioning VMs in a cloud environment and has been told to select an OS build with the furthest end-of-life date.

Which of the following OS builds would be BEST for the systems administrator to use?

Open-source

LTS

Canary

Beta

Stable

13. An organization has multiple VLANs configured to segregate the network traffic.

Following is the breakdown of the network segmentation:

✑ Production traffic (10.10.0.0/24)

✑ Network backup (10.20.0.0/25)

✑ Virtual IP network (10.20.0.128/25)

The following configuration exists on the server:

The backup administrator observes that the weekly backup is failing for this server.

Which of the following commands should the administrator run to identify the issue?

ROUTE PRINT

NETSTAT -A

IPCONFIG /ALL

NET SM

14. A vendor is installing a new retail store management application for a customer. The application license ensures software costs are low when the application is not being used, but costs go up when use is higher.

Which of the following licensing models is MOST likely being used?

Socket-based

Core-based

Subscription

Volume-based

15. A VDI administrator has received reports of poor application performance.

Which of the following should the administrator troubleshoot FIRST?

The network environment

Container resources

Client devices

Server resources

16. In an IaaS platform, which of the following actions would a systems administrator take FIRST to identify the scope of an incident?

Conduct a memory acquisition.

Snapshot all volumes attached to an instance.

Retrieve data from a backup.

Perform a traffic capture.

17. A disaster situation has occurred, and the entire team needs to be informed about the situation.

Which of the following documents will help the administrator find the details of the relevant team members for escalation?

Chain of custody

Root cause analysis

Playbook

Call tree

18. An administrator recently provisioned a file server in the cloud. Based on financial considerations, the administrator has a limited amount of disk space.

Which of the following will help control the amount of space that is being used?

Thick provisioning

Software-defined storage

User quotas

Network file system

19. To save on licensing costs, the on-premises, IaaS-hosted databases need to be migrated to a public DBaaS solution.

Which of the following would be the BEST technique?

Live migration

Physical-to-virtual

Storage-level mirroring

Database replication

20. Which of the following will mitigate the risk of users who have access to an instance modifying the system configurations?

Implement whole-disk encryption

Deploy the latest OS patches

Deploy an anti-malware solution

Implement mandatory access control

Page 3 of 8

21. A cloud administrator is setting up a DR site on a different zone of the same CSP. The application servers are replicated using the VM replication, and the database replication is set up using log shipping. Upon testing the DR site, the application servers are unable to access the database servers. The administrator has verified the systems are running and are accessible from the CSP portal.

Which of the following should the administrator do to fix this issue?

Change the database application IP

Create a database cluster between the primary site and the DR site

Update the connection string

Edit the DNS record at the DR site for the application servers

22. A company needs to access the cloud administration console using its corporate identity.

Which of the following actions would MOST likely meet the requirements?

Implement SSH key-based authentication.

Implement cloud authentication with local LDA

Implement multifactor authentication.

Implement client-based certificate authentication.

23. In an existing IaaS instance, it is required to deploy a single application that has different versions.

Which of the following should be recommended to meet this requirement?

Deploy using containers

Install a Type 2 hypervisor

Enable SR-IOV on the host

Create snapshots

24. A systems administrator is setting up a backup solution to follow the 3-2-1 policy. Currently, the solution is set to back up from the servers to an on-site storage server.

Which of the following should the administrator configure to comply with the 3-2-1 policy?

Weekly lull backups, with daily incremental backups

A second on-site storage server for backups

Storage snapshots

An off-site storage server for backups

25. Which of the following will provide a systems administrator with the MOST information about potential attacks on a cloud IaaS instance?

Network flows

FIM

Software firewall

HIDS

26. A systems administrator is trying to establish an RDP session from a desktop to a server in the cloud. However, the connection appears to be refused even through the VM is responding to ICMP echo requests.

Which of the following should the administrator check FIRST?

The firewall

The subnet

The gateway

The services

27. A systems administrator is analyzing a report of slow performance in a cloud application. This application is working behind a network load balancer with two VMs, and each VM has its own digital certificate configured. Currently, each VM is consuming 85% CPU on average. Due to cost restrictions, the administrator cannot scale vertically or horizontally in the environment.

Which of the following actions should the administrator take to decrease the CPU utilization? (Choose two.)

Configure the communication between the load balancer and the VMs to use a VP

Move the digital certificate to the load balancer.

Configure the communication between the load balancer and the VMs to use HTT

Reissue digital certificates on the VMs.

Configure the communication between the load balancer and the VMs to use HTTP

Keep the digital certificates on the VMs.

28. A system administrator has provisioned a new web server.

Which of the following, in combination, form the best practice to secure the server's OS? (Choose three.)

Install TLS certificates on the server.

Forward port 80 traffic to port 443.

Disable TLS 1.0/1.1 and SS

Disable password authentication.

Enable SSH key access only.

Provision the server in a separate VP

Disable the superuser/administrator account.

Restrict access on port 22 to the IP address of the administrator's workstation.

29. A cloud administrator is building a new VM for a network security appliance. The security appliance installer says the CPU clock speed does not meet the requirements.

Which of the following will MOST likely solve the issue?

Move the VM to a host with a faster CPU

Add more vCPUs to the VM

Enable CPU masking on the VM

Enable hyperthreading on the virtual host

30. A cloud administrator is setting up a new coworker for API access to a public cloud environment. The administrator creates a new user and gives the coworker access to a collection of automation scripts. When the coworker attempts to use a deployment script, a 403 error is returned.

Which of the following is the MOST likely cause of the error?

Connectivity to the public cloud is down.

User permissions are not correct.

The script has a configuration error.

Oversubscription limits have been exceeded.

Page 4 of 8

31. An organization is required to set a custom registry key on the guest operating system.

Which of the following should the organization implement to facilitate this requirement?

A configuration management solution

A log and event monitoring solution

A file integrity check solution

An operating system ACL

32. A systems administrator needs to configure a set of policies to protect the data to comply with mandatory regulations.

Which of the following should the administrator implement to ensure DLP efficiently prevents the exposure of sensitive data in a cloud environment?

Integrity

Versioning

Classification

Segmentation

33. A systems administrator deployed a new application release to the green stack of a blue-green infrastructure model and made the green stack primary. Immediately afterward, users began reporting application issues. The systems administrator must take action to bring the service online as quickly as possible.

Which of the following is the FASTEST way to restore the service?

Reboot all the servers in the green stack

Failback to the blue stack

Restore from backups

Troubleshoot and resolve the application issues

34. A systems administrator has been asked to restore a VM from backup without changing the current VM's operating state.

Which of the following restoration methods would BEST fit this scenario?

Alternate location

Rolling

Storage live migration

In-place

35. A systems administrator is deploying a new storage array for backups. The array provides 1PB of raw disk space and uses 14TB nearline SAS drives. The solution must tolerate at least two failed drives in a single RAID set.

Which of the following RAID levels satisfies this requirement?

RAID 0

RAID 1

RAID 5

RAID 6

RAID 10

36. A SAN that holds VM files is running out of storage space.

Which of the following will BEST increase the amount of effective storage on the SAN?

Enable encryption

Increase IOPS

Convert the SAN from RAID 50 to RAID 60

Configure deduplication

37. Lateral-moving malware has infected the server infrastructure.

Which of the following network changes would MOST effectively prevent lateral movement in the future?

Implement DNSSEC in all DNS servers

Segment the physical network using a VLAN

Implement microsegmentation on the network

Implement 802.1X in the network infrastructure

38. A cloud administrator is reviewing the authentication and authorization mechanism implemented within the cloud environment. Upon review, the administrator discovers the sales group is part of the finance group, and the sales team members can access the financial application. Single sign-on is also implemented, which makes access much easier.

Which of the following access control rules should be changed?

Discretionary-based

Attribute-based

Mandatory-based

Role-based

39. An organization recently deployed a private cloud on a cluster of systems that delivers compute, network, and storage resources in a single hardware, managed by an intelligent software.

Which of the following BEST describes this type of deployment?

High-performance computing

Hyperconverged infrastructure

Stand-alone computing

Dynamic allocations

40. A company recently experienced a power outage that lasted 30 minutes. During this time, a whole rack of servers was inaccessible, even though the servers did not lose power.

Which of the following should be investigated FIRST?

Server power

Rack power

Switch power

SAN power

Page 5 of 8

41. A cloud provider wants to make sure consumers are utilizing its IaaS platform but prevent them from installing a hypervisor on the server.

Which of the following will help the cloud provider secure the environment and limit consumers’ activity?

Patch management

Hardening

Scaling

Log and event monitoring

42. A systems administrator is reviewing two CPU models for a cloud deployment. Both CPUs have the same number of cores/threads and run at the same clock speed.

Which of the following will BEST identify the CPU with more computational power?

Simultaneous multithreading

Bus speed

L3 cache

Instructions per cycle

43. A production engineer is configuring a new application, which is running in containers, that requires access to a database.

Which of the following methods will allow the application to authenticate to the database in the MOST secure way?

Store the credentials in a variable on every worker node

Store the credentials on a shared volume using whole-disk encryption

Store the credentials in a configuration file using SHA-256 inside the container image

Store the credentials using the orchestrator secret manager

44. A cloud administrator has finished setting up an application that will use RDP to connect. During testing, users experience a connection timeout error.

Which of the following will MOST likely solve the issue?

Checking user passwords

Configuring QoS rules

Enforcing TLS authentication

Opening TCP port 3389

45. A company is utilizing a private cloud solution that is hosted within its datacenter.

The company wants to launch a new business application, which requires the resources below:

The current private cloud has 30 vCPUs and 512GB RAM available. The company is looking for a quick solution to launch this application, with expected maximum sessions to be close to 24,000 at launch and an average of approximately 5,000 sessions.

Which of the following solutions would help the company accommodate the new workload in the SHORTEST amount of time and with the maximum financial benefits?

Configure auto-scaling within the private cloud

Set up cloud bursting for the additional resources

Migrate all workloads to a public cloud provider

Add more capacity to the private cloud

46. A systems administrator is configuring a storage array.

Which of the following should the administrator configure to set up mirroring on this array?

RAID 0

RAID 1

RAID 5

RAID 6

47. A cloud administrator is planning to migrate a globally accessed application to the cloud.

Which of the following should the cloud administrator implement to BEST reduce latency for all users?

Regions

Auto-scaling

Clustering

Cloud bursting

48. A systems administrator is deploying a GPU-accelerated VDI solution. Upon requests from several users, the administrator installs an older version of the OS on their virtual workstations. The majority of the VMs run the latest LTS version of the OS.

Which of the following types of drivers will MOST likely ensure compatibility will all virtual workstations?

Alternative community drivers

Legacy drivers

The latest drivers from the vendor’s website

The drivers from the OS repository

49. A systems administrator is working on the backup schedule for a critical business application that is running in a private cloud.

Which of the following would help the administrator schedule the frequency of the backup job?

RPO

MTTR

SLA

RTO

50. A cloud administrator would like to deploy a cloud solution to its provider using automation techniques.

Which of the following must be used? (Choose two.)

Auto-scaling

Tagging

Playbook

Templates

Containers

Serverless

Page 6 of 8

51. A company that utilizes an IaaS service provider has contracted with a vendor to perform a penetration test on its environment. The vendor is able to exploit the virtualization layer and obtain access to other instances within the cloud provider’s environment that do not belong to the company.

Which of the following BEST describes this attack?

VM escape

Directory traversal

Buffer overflow

Heap spraying

52. An organization requires the following to be achieved between the finance and marketing departments:

Allow HTTPS/HTTP.

Disable FTP and SMB traffic.

Which of the following is the MOST suitable method to meet the requirements?

Implement an ADC solution to load balance the VLAN traffic

Configure an ACL between the VLANs

Implement 802.1X in these VLANs

Configure on-demand routing between the VLANs

53. A cloud solutions architect needs to determine the best strategy to deploy an application environment in production, given the following requirements:

No downtime

Instant switch to a new version using traffic control for all users

Which of the following deployment strategies would be the BEST solution?

Hot site

Blue-green

Canary

Rolling

54. A systems administrator is deploying a new cloud application and needs to provision cloud services with minimal effort. The administrator wants to reduce the tasks required for maintenance, such as OS patching, VM and volume provisioning, and autoscaling configurations.

Which of the following would be the BEST option to deploy the new application?

A VM cluster

Containers

OS templates

Serverless

55. A cloud engineer is responsible for managing a public cloud environment. There is currently one virtual network that is used to host the servers in the cloud environment. The environment is rapidly growing, and the network does not have any more available IP addresses.

Which of the following should the engineer do to accommodate additional servers in this environment?

Create a VPC and peer the networks.

Implement dynamic routing.

Enable DHCP on the networks.

Obtain a new IPAM subscription.

56. Which of the following strategies will mitigate the risk of a zero-day vulnerability MOST efficiently?

Using only open-source technologies

Keeping all resources up to date

Creating a standby environment with a different cloud provider

Having a detailed incident response plan

57. A systems administrator is informed that a database server containing PHI and PII is unencrypted. The environment does not support VM encryption, nor does it have a key management system. The server needs to be able to be rebooted for patching without manual intervention.

Which of the following will BEST resolve this issue?

Ensure all database queries are encrypted

Create an IPSec tunnel between the database server and its clients

Enable protocol encryption between the storage and the hypervisor

Enable volume encryption on the storage

Enable OS encryption

58. A systems administrator has finished installing monthly updates to servers in a cloud environment. The administrator notices certain portions of the playbooks are no longer functioning. Executing the playbook commands manually on a server does not work as well. There are no other reports of issues.

Which of the following is the MOST likely cause of this issue?

Change management failure

Service overload

Patching failure

Job validation issues

Deprecated features

59. A media company has made the decision to migrate a physical, internal file server to the cloud and use a web- based interface to access and manage the files. The users must be able to use their current corporate logins.

Which of the following is the MOST efficient way to achieve this goal?

Deploy a VM in a cloud, attach storage, and copy the files across

Use a SaaS service with a directory service federation

Deploy a fileshare in a public cloud and copy the files across

Copy the files to the object storage location in a public cloud

60. A software development manager is looking for a solution that will allow a team of developers to work in isolated environments that can be spun up and torn down quickly.

Which of the following is the MOST appropriate solution?

Containers

File subscriptions

Ballooning

Software-defined storage

Page 7 of 8

61. An engineer is responsible for configuring a new firewall solution that will be deployed in a new public cloud environment. All traffic must pass through the firewall. The SLA for the firewall is 99.999%.

Which of the following should be deployed?

Two load balancers behind a single firewall

Firewalls in a blue-green configuration

Two firewalls in a HA configuration

A web application firewall

62. A systems administrator disabled TLS 1.0 and 1.1, as well as RC4, 3DES, and AES-128 ciphers for TLS 1.2, on a web server. A client now reports being unable to access the web server, but the administrator verifies that the server is online, the web service is running, and other users can reach the server as well.

Which of the following should the administrator recommend the user do FIRST?

Disable antivirus/anti-malware software

Turn off the software firewall

Establish a VPN tunnel between the computer and the web server

Update the web browser to the latest version

63. After a few new web servers were deployed, the storage team began receiving incidents in their queue about the web servers. The storage administrator wants to verify the incident tickets that should have gone to the web server team.

Which of the following is the MOST likely cause of the issue?

Incorrect assignment group in service management

Incorrect IP address configuration

Incorrect syslog configuration on the web servers

Incorrect SNMP settings

64. A cloud security analyst is implementing a vulnerability scan of the web server in the DMZ, which is running in an IaaS compute instance.

The default inbound firewall settings are as follows:

Which of the following will provide the analyst with the MOST accurate report?

An agent-based scan

A network vulnerability scan

A default and common credentialed scan

A network credentialed vulnerability scan

65. A development team recently completed testing changes to a company's web-based CMS in the sandbox environment. The cloud administrator deployed these CMS application changes to the staging environment as part of the next phase in the release life cycle. The deployment was successful, but after deploying the CMS application, the web page displays an error message stating the application is unavailable. After reviewing the application logs, the administrator sees an error message that the CMS is unable to connect to the database.

Which of the following is the BEST action for the cloud administrator to perform to resolve the issue?

Modify the deployment script to delete and recreate the database whenever the CMS application is deployed.

Modify the ACL to allow the staging environment to access the database in the sandbox environment.

Modify the CMS application deployment to use the previous version and redeploy the application.

Modify the configuration settings of the CMS application to connect to the database in the current environment.

66. While investigating network traffic, a cloud administrator discovers the monthly billing has increased substantially. Upon further review, it appears the servers have been compromised, and sensitive files have been exfiltrated.

Which of the following can be implemented to maintain data confidentiality?

Hardening

IAM

Encryption

IPsec

67. A systems administrator is examining a managed hosting agreement and wants to determine how much data would be lost if a server had to be restored from backups.

To which of the following metrics should the administrator refer?

RTO

MTBF

RPO

MTTR

68. An organization is implementing a new requirement to facilitate users with faster downloads of corporate application content. At the same time, the organization is also expanding cloud regions.

Which of the following would be suitable to optimize the network for this requirement?

Implement CDN for overall cloud application

Implement auto-scaling of the compute resources

Implement SR-IOV on the server instances

Implement an application container solution

69. A cloud administrator configured a local cloud-resource pool lo offer 64GB of memory, 64 cores, and 640GB of storage. Thirty-two machines with identical resource allocations are started. but one machine is unable to handle requests.

Which of the following is the MOST likely cause?

Insufficient guest bandwidth

Overwhelmed vCPU

A storage error on the guest

Incorrect VLAN assignment

Inadequate memory allocation

70. An organization has the following requirements that need to be met when implementing cloud services:

✑ SSO to cloud infrastructure

✑ On-premises directory service

✑ RBAC for IT staff

Which of the following cloud models would meet these requirements?

Public

Community

Hybrid

Multitenant

Page 8 of 8

71. A cloud administrator has created a new asynchronous workflow lo deploy VMs to the cloud in bulk. When the workflow is tested for a single VM, it completes successfully. However, if the workflow is used to create 50 VMs at once, the job fails.

Which of the following is the MOST likely cause of the issue? (Choose two.)

Incorrect permissions

Insufficient storage

Billing issues with the cloud provider

No connectivity to the public cloud

Expired API token

Disabled autoscaling

Facebook Twitter LinkedIn Google + Email