Exam 8: CompTIA Cloud+

Question 1

A systems administrator recently deployed a VDI solution in a cloud environment; however, users are now experiencing poor rendering performance when trying to display 3-D content on their virtual desktops, especially at peak times. Which of the following actions will MOST likely solve this issue?

A) Update the quest graphics drivers from the official repository
B) Add more vGPU licenses to the host
C) Instruct users to access virtual workstations only on the VLAN
D) Select vGPU profiles with higher video RAM

Answer 1

Select vGPU profiles with higher video RAM

Question 2

An organization requires the following to be achieved between the finance and marketing departments: Allow HTTPS/HTTP. Disable FTP and SMB traffic. Which of the following is the MOST suitable method to meet the requirements?

A) Implement an ADC solution to load balance the VLAN traffic
B) Configure an ACL between the VLANs
C) Implement 802.1X in these VLANs
D) Configure on-demand routing between the VLANs

Answer 2

Configure an ACL between the VLANs

Question 3

A developer is no longer able to access a public cloud API deployment, which was working ten minutes prior. Which of the following is MOST likely the cause?

A) API provider rate limiting
B) Invalid API token
C) Depleted network bandwidth
D) Invalid API request

Answer 3

Invalid API token

Question 4

A company has decided to get multiple compliance and security certifications for its public cloud environment. However, the company has few staff members to handle the extra workload, and it has limited knowledge of the current infrastructure. Which of the following will help the company meet the compliance requirements as quickly as possible?

A) DLP
B) CASB
C) FIM
D) NAC

Question 5

A company has a cloud infrastructure service, and the cloud architect needs to set up a DR site. Which of the following should be configured in between the cloud environment and the DR site?

A) Failback
B) Playbook
C) Zoning
D) Replication

Question 6

A company wants to implement business continuity, and the cloud solution architect needs to design the correct solution. Which of the following will provide the data to measure business continuity? (Choose two.)

A) A service-level agreement
B) Automation scripts
C) Playbooks
D) A network diagram
E) A backup and restore
F) A recovery time objective

Question 7

A company is utilizing a private cloud solution that is hosted within its datacenter. The company wants to launch a new business application, which requires the resources below: The current private cloud has 30 vCPUs and 512GB RAM available. The company is looking for a quick solution to launch this application, with expected maximum sessions to be close to 24,000 at launch and an average of approximately 5,000 sessions. Which of the following solutions would help the company accommodate the new workload in the SHORTEST amount of time and with the maximum financial benefits?

A) Configure auto-scaling within the private cloud
B) Set up cloud bursting for the additional resources
C) Migrate all workloads to a public cloud provider
D) Add more capacity to the private cloud

Question 8

After analyzing a web server's logs, a systems administrator sees that users are connecting to the company's application through HTTP instead of HTTPS. The administrator then configures a redirect from HTTP to HTTPS on the web server, and the application responds with a connection time-out message. Which of the following should the administrator verify NEXT?

A) The TLS certificate
B) The firewall rules
C) The concurrent connection limit
D) The folder permissions

Question 9

A systems administrator needs to configure a set of policies to protect the data to comply with mandatory regulations. Which of the following should the administrator implement to ensure DLP efficiently prevents the exposure of sensitive data in a cloud environment?

A) Integrity
B) Versioning
C) Classification
D) Segmentation

Question 10

An OS administrator is reporting slow storage throughput on a few VMs in a private IaaS cloud. Performance graphs on the host show no increase in CPU or memory. However, performance graphs on the storage show a decrease of throughput in both IOPS and MBps but not much increase in latency. There is no increase in workload, and latency is stable on the NFS storage arrays that are used by those VMs. Which of the following should be verified NEXT?

A) Application
B) SAN
C) VM GPU settings
D) Network

Question 11

Which of the following will mitigate the risk of users who have access to an instance modifying the system configurations?

A) Implement whole-disk encryption
B) Deploy the latest OS patches
C) Deploy an anti-malware solution
D) Implement mandatory access control

Question 12

The human resources department was charged for a cloud service that belongs to another department. All other cloud costs seem to be correct. Which of the following is the MOST likely cause for this error?

A) Misconfigured templates
B) Misconfigured chargeback
C) Incorrect security groups
D) Misconfigured tags

Question 13

Which of the following cloud deployment models allows a company to have full control over its IT infrastructure?

A) Private
B) Cloud within a cloud
C) Hybrid
D) Public

Question 14

A systems administrator notices that a piece of networking equipment is about to reach its end of support. Which of the following actions should the administrator recommend?

A) Update the firmware
B) Migrate the equipment to the cloud
C) Update the OS
D) Replace the equipment

Question 15

A systems administrator disabled TLS 1.0 and 1.1, as well as RC4, 3DES, and AES-128 ciphers for TLS 1.2, on a web server. A client now reports being unable to access the web server, but the administrator verifies that the server is online, the web service is running, and other users can reach the server as well. Which of the following should the administrator recommend the user do FIRST?

A) Disable antivirus/anti-malware software
B) Turn off the software firewall
C) Establish a VPN tunnel between the computer and the web server
D) Update the web browser to the latest version

Question 16

A company has developed a cloud-ready application. Before deployment, an administrator needs to select a deployment technology that provides a high level of portability and is lightweight in terms of footprint and resource requirements. Which of the following solutions will be BEST to help the administrator achieve the requirements?

A) Containers
B) Infrastructure as code
C) Desktop virtualization
D) Virtual machines

Question 17

An organization has two businesses that are developing different software products. They are using a single cloud provider with multiple IaaS instances. The organization identifies that the tracking of costs for each business are inaccurate. Which of the following is the BEST method for resolving this issue?

A) Perform segregation of the VLAN and capture egress and ingress values of each network interface
B) Tag each server with a dedicated cost and sum them based on the businesses
C) Split the total monthly invoice equally between the businesses
D) Create a dedicated subscription for the businesses to manage the costs

Question 18

An organization purchased new servers with GPUs for render farms. The servers have limited CPU resources. Which of the following GPU configurations will be the MOST optimal for virtualizing this environment?

A) Dedicated
B) Shared
C) Passthrough
D) vGPU

Question 19

An organization is running a database application on a SATA disk, and a customer is experiencing slow performance most of the time. Which of the following should be implemented to improve application performance?

A) Increase disk capacity
B) Increase the memory and network bandwidth
C) Upgrade the application
D) Upgrade the environment and use SSD drives

Question 20

An organization is hosting a cloud-based web server infrastructure that provides web-hosting solutions. Sudden continuous bursts of traffic have caused the web servers to saturate CPU and network utilizations. Which of the following should be implemented to prevent such disruptive traffic from reaching the web servers?

A) Solutions to perform NAC and DLP
B) DDoS protection
C) QoS on the network
D) A solution to achieve microsegmentation

Question 21

A cloud architect is designing the VPCs for a new hybrid cloud deployment. The business requires the following: High availability Horizontal auto-scaling 60 nodes peak capacity per region Five reserved network IP addresses per subnet /24 range Which of the following would BEST meet the above requirements?

A) Create two /25 subnets in different regions
B) Create three /25 subnets in different regions
C) Create two /26 subnets in different regions
D) Create three /26 subnets in different regions
E) Create two /27 subnets in different regions
F) Create three /27 subnets in different regions

Question 22

A systems administrator is deploying a new storage array for backups. The array provides 1PB of raw disk space and uses 14TB nearline SAS drives. The solution must tolerate at least two failed drives in a single RAID set. Which of the following RAID levels satisfies this requirement?

A) RAID 0
B) RAID 1
C) RAID 5
D) RAID 6
E) RAID 10

Question 23

A media company has made the decision to migrate a physical, internal file server to the cloud and use a web-based interface to access and manage the files. The users must be able to use their current corporate logins. Which of the following is the MOST efficient way to achieve this goal?

A) Deploy a VM in a cloud, attach storage, and copy the files across
B) Use a SaaS service with a directory service federation
C) Deploy a fileshare in a public cloud and copy the files across
D) Copy the files to the object storage location in a public cloud

Question 24

A cloud administrator has built a new private cloud environment and needs to monitor all computer, storage, and network components of the environment. Which of the following protocols would be MOST useful for this task?

A) SMTP
B) SCP
C) SNMP
D) SFTP

Question 25

A cloud administrator needs to implement a mechanism to monitor the expense of the company's cloud resources. Which of the following is the BEST option to execute this task with minimal effort?

A) Ask the cloud provider to send a daily expense report
B) Set custom notifications for exceeding budget thresholds
C) Use the API to collect expense information from cloud resources
D) Implement a financial tool to monitor cloud resource expenses

Question 26

A systems administrator is troubleshooting performance issues with a Windows VDI environment. Users have reported that VDI performance has been slow since the images were upgraded from Windows 7 to Windows 10. This VDI environment is used to run simple tasks, such as Microsoft Office. The administrator investigates the virtual machines and finds the following settings: 4 vCPU 16GB RAM 10Gb networking 256MB frame buffer Which of the following MOST likely needs to be upgraded?

A) vRAM
B) vCPU
C) vGPU
D) vNIC

Question 27

A cloud engineer is responsible for managing two cloud environments from different MSPs. The security department would like to inspect all traffic from the two cloud environments. Which of the following network topology solutions should the cloud engineer implement to reduce long-term maintenance?

A) Chain
B) Star
C) Mesh
D) Hub and spoke

Question 28

The security team for a large corporation is investigating a data breach. The team members are all trying to do the same tasks but are interfering with each other's work. Which of the following did the team MOST likely forget to implement?

A) Incident type categories
B) A calling tree
C) Change management
D) Roles and responsibilities

Question 29

Which of the following is relevant to capacity planning in a SaaS environment?

A) Licensing
B) A hypervisor
C) Clustering
D) Scalability

Question 30

A systems administrator needs to configure monitoring for a private cloud environment. The administrator has decided to use SNMP for this task. Which of the following ports should the administrator open on the monitoring server's firewall?

A) 53
B) 123
C) 139
D) 161

Question 31

In an existing IaaS instance, it is required to deploy a single application that has different versions. Which of the following should be recommended to meet this requirement?

A) Deploy using containers
B) Install a Type 2 hypervisor
C) Enable SR-IOV on the host
D) Create snapshots

Question 32

A systems administrator needs to configure an email client to ensure data integrity of the email messages. Which of the following provides the BEST mechanism to achieve this goal?

A) Cyclic redundancy check
B) SHA-1 hashes
C) SHA-256 hashes
D) Digital signature

Question 33

An organization is required to set a custom registry key on the guest operating system. Which of the following should the organization implement to facilitate this requirement?

A) A configuration management solution
B) A log and event monitoring solution
C) A file integrity check solution
D) An operating system ACL

Question 34

Which of the following strategies will mitigate the risk of a zero-day vulnerability MOST efficiently?

A) Using only open-source technologies
B) Keeping all resources up to date
C) Creating a standby environment with a different cloud provider
D) Having a detailed incident response plan

Question 35

A cloud administrator is setting up a DR site on a different zone of the same CSP. The application servers are replicated using the VM replication, and the database replication is set up using log shipping. Upon testing the DR site, the application servers are unable to access the database servers. The administrator has verified the systems are running and are accessible from the CSP portal. Which of the following should the administrator do to fix this issue?

A) Change the database application IP
B) Create a database cluster between the primary site and the DR site
C) Update the connection string
D) Edit the DNS record at the DR site for the application servers

Question 36

A SAN that holds VM files is running out of storage space. Which of the following will BEST increase the amount of effective storage on the SAN?

A) Enable encryption
B) Increase IOPS
C) Convert the SAN from RAID 50 to RAID 60
D) Configure deduplication

Question 37

A company developed a product using a cloud provider's PaaS platform and many of the platform-based components within the application environment. Which of the following would the company MOST likely be concerned about when utilizing a multicloud strategy or migrating to another cloud provider?

A) Licensing
B) Authentication providers
C) Service-level agreement
D) Vendor lock-in

Question 38

A systems administrator is deploying a GPU-accelerated VDI solution. Upon requests from several users, the administrator installs an older version of the OS on their virtual workstations. The majority of the VMs run the latest LTS version of the OS. Which of the following types of drivers will MOST likely ensure compatibility will all virtual workstations?

A) Alternative community drivers
B) Legacy drivers
C) The latest drivers from the vendor's website
D) The drivers from the OS repository

Question 39

A systems administrator is reviewing two CPU models for a cloud deployment. Both CPUs have the same number of cores/threads and run at the same clock speed. Which of the following will BEST identify the CPU with more computational power?

A) Simultaneous multithreading
B) Bus speed
C) L3 cache
D) Instructions per cycle

Question 40

A systems administrator needs to configure SSO authentication in a hybrid cloud environment. Which of the following is the BEST technique to use?

A) Access controls
B) Federation
C) Multifactor authentication
D) Certificate authentication

Question 41

Which of the following cloud services is fully managed?

A) IaaS
B) GPU in the cloud
C) IoT
D) Serverless compute
E) SaaS

Question 42

An organization has the following requirements that need to be met when implementing cloud services: SSO to cloud infrastructure On-premises directory service RBAC for IT staff Which of the following cloud models would meet these requirements?

A) Public
B) Community
C) Hybrid
D) Multitenant

Question 43

A systems administrator is troubleshooting performance issues with a Windows VDI environment. Users have reported that VDI performance is very slow at the start of the work day, but the performance is fine during the rest of the day. Which of the following is the MOST likely cause of the issue?

A) Disk I/O limits
B) Affinity rule
C) CPU oversubscription
D) RAM usage

Question 44

An IaaS application has a two-hour RTO and a four-hour RPO. The application takes one hour to back up its data or restore from a local backup file. A systems administrator is tasked with configuring the backup policy. Which of the following should the administrator configure to achieve the application requirements with the LEAST cost?

A) Back up to long-term storage every night
B) Back up to object storage every three hours
C) Back up to long-term storage every four hours
D) Back up to object storage every hour

Question 45

A cloud administrator is building a new VM for a network security appliance. The security appliance installer says the CPU clock speed does not meet the requirements. Which of the following will MOST likely solve the issue?

A) Move the VM to a host with a faster CPU
B) Add more vCPUs to the VM
C) Enable CPU masking on the VM
D) Enable hyperthreading on the virtual host

Question 46

A global web-hosting company is concerned about the availability of its platform during an upcoming event. Web traffic is forecasted to increase substantially during the next week. The site contains mainly static content. Which of the following solutions will assist with the increased workload?

A) DoH
B) WAF
C) IPS
D) CDN

Question 47

A systems administrator needs to convert ten physical servers to virtual. Which of the following would be the MOST efficient conversion method for the administrator to use?

A) Rebuild the servers from scratch
B) Use the vendor's conversion tool
C) Clone the hard drive
D) Restore from backup

Question 48

A vendor is installing a new retail store management application for a customer. The application license ensures software costs are low when the application is not being used, but costs go up when use is higher. Which of the following licensing models is MOST likely being used?

A) Socket-based
B) Core-based
C) Subscription
D) Volume-based

Question 49

A systems administrator recently upgraded the processors in a web application host. Upon the next login, the administrator sees a new alert regarding the license being out of compliance. Which of the following licensing models is the application MOST likely using?

A) Per device
B) Per user
C) Core-based
D) Volume-based

Question 50

A systems administrator is configuring a storage array. Which of the following should the administrator configure to set up mirroring on this array?

A) RAID 0
B) RAID 1
C) RAID 5
D) RAID 6

Question 51

A company has deployed a new cloud solution and is required to meet security compliance. Which of the following will MOST likely be executed in the cloud solution to meet security requirements?

A) Performance testing
B) Regression testing
C) Vulnerability testing
D) Usability testing

Question 52

A DevOps administrator is automating an existing software development workflow. The administrator wants to ensure that prior to any new code going into production, tests confirm the new code does not negatively impact existing automation activities. Which of the following testing techniques would be BEST to use?

A) Usability testing
B) Regression testing
C) Vulnerability testing
D) Penetration testing

Question 53

A company has an in-house-developed application. The administrator wants to utilize cloud services for additional peak usage workloads. The application has a very unique stack of dependencies. Which of the following cloud service subscription types would BEST meet these requirements?

A) PaaS
B) SaaS
C) DBaaS
D) IaaS

Question 54

A systems administrator has finished installing monthly updates to servers in a cloud environment. The administrator notices certain portions of the playbooks are no longer functioning. Executing the playbook commands manually on a server does not work as well. There are no other reports of issues. Which of the following is the MOST likely cause of this issue?

A) Change management failure
B) Service overload
C) Patching failure
D) Job validation issues
E) Deprecated features

Question 55

A cloud administrator checked out the deployment scripts used to deploy the sandbox environment to a public cloud provider. The administrator modified the script to add an application load balancer in front of the web-based front-end application. The administrator next used the script to recreate a new sandbox environment successfully, and the application was then using the new load balancer. The following week, a new update was required to add more front-end servers to the sandbox environment. A second administrator made the necessary changes and checked out the deployment scripts. The second administrator then ran the script, but the application load balancer was missing from the new deployment. Which of the following is the MOST likely reason for this issue?

A) The license limit on the number of server deployments allowed per month was exceeded
B) The deployment script changes made by the first administrator were not checked in and committed
C) The new server images were incompatible with the application load-balancer configuration
D) The application load balancer exceeded the maximum number of servers it could use

Question 56

Users are experiencing slow response times from an intranet website that is hosted on a cloud platform. There is a site-to-site VPN connection to the cloud provider over a link of 100Mbps. Which of the following solutions will resolve the issue the FASTEST?

A) Change the connection to point-to-site VPN
B) Order a direct link to the provider
C) Enable quality of service
D) Upgrade the link to 200Mbps

Question 57

A company is doing a cloud-to-cloud migration to lower costs. A systems administrator has to plan the migration accordingly. Which of the following considerations is MOST important for a successful, future-proof, and low-cost migration?

A) Tier pricing
B) Licensing
C) Estimated consumption
D) Feature compatibility

Question 58

A software development manager is looking for a solution that will allow a team of developers to work in isolated environments that can be spun up and torn down quickly. Which of the following is the MOST appropriate solution?

A) Containers
B) File subscriptions
C) Ballooning
D) Software-defined storage

Question 59

A cloud administrator recently noticed that a number of files stored at a SaaS provider's file-sharing service were deleted. As part of the root cause analysis, the administrator noticed the parent folder permissions were modified last week. The administrator then used a test user account and determined the permissions on the files allowed everyone to have write access. Which of the following is the best step for the administrator to take NEXT?

A) Identify the changes to the file-sharing service and document
B) Acquire a third-party DLP solution to implement and manage access
C) Test the current access permissions to the file-sharing service
D) Define and configure the proper permissions for the file-sharing service

Question 60

A company needs to rehost its ERP system to complete a datacenter migration to the public cloud. The company has already migrated other systems and configured VPN connections. Which of the following MOST likely needs to be analyzed before rehosting the ERP?

A) Software
B) Licensing
C) Right-sizing
D) The network

Question 61

A cloud architect wants to minimize the risk of having systems administrators in an IaaS compute instance perform application code changes. The development group should be the only group allowed to modify files in the directory. Which of the following will accomplish the desired objective?

A) Remove the file write permissions for the application service account.
B) Restrict the file write permissions to the development group only.
C) Add access to the fileshare for the systems administrator's group.
D) Deny access to all development user accounts

Question 62

A systems administrator wants the VMs on the hypervisor to share CPU resources on the same core when feasible. Which of the following will BEST achieve this goal?

A) Configure CPU passthrough
B) Oversubscribe CPU resources
C) Switch from a Type 1 to a Type 2 hypervisor
D) Increase instructions per cycle
E) Enable simultaneous multithreading

Question 63

After accidentally uploading a password for an IAM user in plain text, which of the following should a cloud administrator do FIRST?

A) Identify the resources that are accessible to the affected IAM user
B) Remove the published plain-text password
C) Notify users that a data breach has occurred
D) Change the affected IAM user's password
E) Delete the affected IAM user

Question 64

A web server has been deployed in a public IaaS provider and has been assigned the public IP address of 72.135.10.100. Users are now reporting that when they browse to the website, they receive a message indicating the service is unavailable. The cloud administrator logs into the server, runs a netstat command, and notices the following relevant output: Which of the following actions should the cloud administrator take to resolve the issue?

A) Assign a new IP address of 192.168.100.10 to the web server
B) Modify the firewall on 72.135.10.100 to allow only UDP
C) Configure the WAF to filter requests from 17.3.130.3
D) Update the gateway on the web server to use 72.135.10.1

Question 65

An organization is hosting a DNS domain with private and public IP ranges. Which of the following should be implemented to achieve ease of management?

A) Network peering
B) A CDN solution
C) A SDN solution
D) An IPAM solution

Question 66

Company A has acquired Company B and is in the process of integrating their cloud resources. Company B needs access to Company A's cloud resources while retaining its IAM solution. Which of the following should be implemented?

A) Multifactor authentication
B) Single sign-on
C) Identity federation
D) Directory service

Question 67

A systems administrator is troubleshooting network throughput issues following a deployment. The network is currently being overwhelmed by the amount of traffic between the database and the web servers in the environment. Which of the following should the administrator do to resolve this issue?

A) Set up affinity rules to keep web and database servers on the same hypervisor
B) Enable jumbo frames on the gateway
C) Move the web and database servers onto the same VXLAN
D) Move the servers onto thick-provisioned storage