Exam 6: CompTIA CySA+ Certification Exam (CS0-002)

A company needs to meet the security requirements for PII. Which of the following cloud service models allows the company to have the MOST control to meet the security requirements?

A financial services company has a requirement to keep backups on premises for 30 days and off-site for up to seven years to a location that is within 100mi (161km) of the primary datacenter location. Recovery times for backups kept on-site have an RTO of one hour, while recovery times for backups kept off-site have an RTO of four hours. Which of the following solutions BEST solves this requirement?

A cloud application development team needs to consider the following requirements to the built in as part of the application's authentication process: - Customers should have the flexibility to use their own identity stores within the authentication process. - Customers should not be asked to provide the credentials repeatedly for different applications with different permission sets. Which of the following solutions would BEST help the team achieve the above business objectives? (Choose two.)

The development team of an e-commerce organization is migrating its code libraries to a public IaaS cloud provider, and the security policy states that source code must use multiple security controls to secure and restrict access. Which of the following combinations of controls would be BEST to meet the requirements?

A company is consuming a SaaS solution with a large user base and wants to minimize user management, but also ensure access is as secure as possible. Which of the following should the cloud administrator select to help meet these requirements? (Choose two.)

A hospital is leveraging a third-party-hosted, SaaS-based EMRS for all its regional locations. The EMRS will consolidate all existent stand-alone regional systems. All regional systems managers are concerned about the new system availability. Which of the following should the new EMRS architect do to address the manager's concerns?

A customer is building a web cluster in which all nodes must access a shared pool of images. Which of the following storage types would be BEST for this workload?

A company is seeking a new backup solution for its virtualized file servers that fits the following characteristics: The files stored on the servers are extremely large. Existing files receive multiple small changes per day. New files are only created once per month. All backups are being sent to a cloud repository. Which of the following would BEST minimize backup size?

A cloud administrator updates the syslog forwarder configuration on a local server in production to use a different port. The development team is no longer receiving the audit logs from that server. However, the security team can retrieve and search the logs for the same server. Which of the following is MOST likely the issue?

The sales department is preparing to launch a high-demand product for purchase through the company's online store. The senior engineer asks the junior engineer to review the sales cloud resources to plan for a surge in online traffic: Given the metrics in the table above, which of the following resources should be adjusted to plan for future growth?

The following three hosts are being put into a virtualization cluster for a new project initiative: As more VMs are deployed to the cluster, which of the following virtualization technologies is MOST likely to report an error with this configuration?

A cloud administrator sets up performance monitoring, which raises alerts. The monitoring runs periodically and checks for the suggested parameters. However, alerts are not being raised in a timely fashion. Which of the following is the MOST appropriate action to resolve the issue?

A manufacturing company's current security policy mandates PII is not stored in the SaaS solution. Which of the following configuration controls should be used to block sensitive information from being stored in the SaaS solution?

A company uses SaaS and IaaS solutions from multiple cloud providers. Users report that this requires them to manage and remember multiple user accounts and passwords. Which of the following solutions should be implemented to fix this issue?

A facilities management company uses a private cloud that bursts to a public cloud at times. The CSA is asked to check the amount of storage that is used when the organization is overutilizing on-premises resources. Which of the following should the CSA check?

A company is migrating a website to a CSP to improve availability and performance. After testing the application, the systems engineer realizes the website stores the session state in a database system. Which of the following is the BEST way to ensure a successful migration?

As part of a nightly testing process, new version of an application is deployed to the set of web servers in the development environment. Which of the following is the BEST way to ensure the test environment is consistent with the previous night's test?

A cloud administrator is receiving alerts that the disk on several systems is 90% full. Upon reviewing the systems, the administrator determines that the log directory is using 50% of the disk. The company has a 14-day retention policy for all logs. Which of the following is the BEST solution to implement to minimize future alerts?

A cloud engineer notices on a dashboard that the host is close to reaching maximum capacity for the CPU and memory in the cloud environment, which could cause performance issues. The cloud environment has 100 servers, with 25% of the servers consuming their compute only during peak business hours, 25% consuming half of the allocated resources, and the remaining 50% using the compute during off hours. Which of the following should the engineer perform to optimize the efficiency of the compute usage in the cloud?

During peak times, users are unable to access their online wealth management applications in a timely fashion. The online banking application resides in a community cloud environment. Which of the following explains how the cloud systems administrator should start to resolve this issue?