CompTIA Final Assessment

An engineer manages a new cloud deployment. Network devices in the cloud infrastructure are configured by using a software-defined (SDN) network approach. What plane controls packet management tasks or filters network traffic within and between segments?

Data

Users at an organization complain that access to a new cloud service is very slow. The organization manages the service infrastructure through a contract with a CSP. As there are no on-premises servers or services, which cloud-based service areas do the engineers investigate? (Select all that apply.)

Data Location. Virtual Infrastructure.

A new virtual private cloud utilizes several virtual local area networks (VLANs). What should an administrator know in order to manage a VLAN? (Select all that apply.)

Data frames are tagged with VLAN information. Functionality is at layer 2 in the OSI model. Functionality is at the data link layer in the OSI model.

A developer creates a cloud application with an infrastructure as code (IaC) approach. Engineers opt to use an automation tool to match the desired state to the device that will host the application. Which specific IaC method do the engineers utilize?

Declarative

A developer experiences a dependency compatibility issue while working on several Java based web applications. Each application has differing dependency requirements and will not run alongside each other on a development workstation. There is a need to have all applications running at the same time. How does the developer efficiently solve this problem?

Deploy a container for each application

A user mentions that a cloud-based data entry portal is not accessible. Engineers identify the problem as a client-side issue. What step should the engineers take next to troubleshoot the issue?

Determine the scope

A cloud service roadmap may vary; however, a general roadmap will include which primary phases? (Select all that apply.)

Development. Deprecation.

Engineers discover that a VPC has a set of misconfigured virtual routers. As a result, traffic is not passing between different network segments. Engineers establish and test a theory on the cause. What troubleshooting step is taken next?

Establish a plan of action

A systems administrator evaluates the performance of cloud-based servers. In doing so, a monitoring baseline is set. What does the administrator accomplish?

Estimating the performance or stability of a given service or system

During a cloud storage service rollout, engineers opt to use a storage system that utilizes the common internet file system (CIFS). Which storage type do engineers deploy?

File

Engineers configure encryption on two cloud servers. As data integrity is a priority concern, what do the engineers hope to achieve by using file hashes?

File change monitoring

In following best practice, what does an engineer document throughout a service's lifecycle as it relates to troubleshooting? (Select all that apply.)

Findings. Actions. Outcomes.

An engineer configures cloud storage access for a variety of data purposes. Which access type is appropriate for frequently used project files?

Hot

A web application firewall requires configuration to protect a group of cloud services. Which parameters would protect the services if access is required only from a particular source location? (Select all that apply.)

IP. Country.

Which security solution plays an active role in preventing threats from impacting a system?

IPS

An organization that uses a hybrid cloud deployment experiences issues with Active Directory synchronization between cloud-based and on-premise servers. What might the issue be if engineers determine that they cannot ping devices beyond the local physical gateway?

ISP outage

An organization considers a move from on-premise infrastructure to one in the cloud. Engineers at the organization are concerned with how to implement routers and switches. Which cloud subscription model would the engineers have to manage the routers and switches?

IaaS

Engineers discover that a cloud service occasionally experiences a severe latency with domain name system (DNS) queries. All network tests indicate that throughput is more than sufficient to remote DNS servers. How do the engineers improve the issue without modifying the physical or logical infrastructure?

Implement DNS Caching

Engineers implement a redundant array of independent disks (RAID) in all physical cloud servers after experiencing a disaster recovery issue. When considering the troubleshooting methodology, which step do the engineers follow during this implementation?

Implement Preventive Measures

An IT support technician discovers that a Windows-based cloud instance requires a new driver to resolve an issue. Installing the driver pertains to which step in the troubleshooting process?

Implement the Solution

An administrator configures the syslog logging service on cloud-based servers to forward logs to a central location. The forwarding is currently not working correctly. Where can the administrator find the logs?

In the /var/log directory

A virtualized cloud system requires the authentication of the hardware that it runs on and utilizes a virtual trusted platform module (vTPM). Where does the vTPM reside?

In the hypervisor

Users mention that some private cloud services are accessible while others are not. An engineer determines that the access control lists (ACLs) need to be modified. What does the engineer find the default ACL to be for a service?

Inbound denied, outbound allowed

Cloud engineers microsegment a network to secure sections from each other based on workload. When considering the granularity of the segments, which aspect is critical?

Independent governance

A new virtual private cloud includes several servers that respond to public HTTPS requests. An engineer configures the servers to utilize load balancing to respond to requests more efficiently. How does load balancing work when the least busy server is configured to receive the next work cycle?

It uses a dynamic algorithm

Key stakeholders gather for a post-incident meeting after experiencing a service disruption in a crucial cloud application. Communication between the support team and management did not go well during the incident. Which topics do the stakeholders focus on during this meeting? (Select all that apply.)

Lessons Learned. Standard Operating Procedures.

A team of administrators look for clever ways to automate cloud systems and services to streamline Windows-based cloud server maintenance activities. What options do the administrators consider for reliability and efficiency? (Select all that apply.)

Log file archiving. Shutdowns and restarts. Installations and upgrades.

A lifecycle roadmap tracks the phases of a system or service. Which phase in the lifecycle does an IT department expect to last the longest?

Maintenance.

A cloud-based application requires use of the SMB protocol for Windows clients. An administrator implements what alternative protocol to support non-Windows clients? (Select all that apply.)

NFS. CIFS.

Which goal of data encryption is concerned with the proof that data exists or was transmitted?

Non-repudiation

Systems administrators need to configure cloud storage to handle large amounts of audio and video data that will be accessed frequently. The solution should be scalable and provide highly detailed metadata. Which storage type will provide the required capabilities?

Object

A developer troubleshoots building a cloud-based application. The application build process has run smoothly in the past, but now automation attempts continue but return a deprecation message in the process. IT staff recently upgraded the configuration management software. What is the likely cause of the problem?

Older configuration files contain deprecated settings.

Engineers at an organization prepare for cloud migration. The initial services that will move are internal and proprietary in nature. What migration type and cloud type result from this move?

On premises-to-cloud, Private cloud

Security consultants plan on performing disaster recovery testing for an organization with a large cloud presence. Plans are being considered, and recommendations are being made. Which test type is in progress?

Paper Test

Several cloud-based virtual machines (VM) routinely experience a severe loss of performance. Engineers discovered that the issue occurs when one VM renders 3D models. What graphics configuration should the VMs use?

Pass-through

An entertainment company deploys a virtual server farm for a cloud-based gaming event. Which configuration do engineers use to ensure the highest visual experience possible?

Pass-through graphics processing unit

An organization mandates that a multifactor authentication solution is in place to access a cloud-based database. Which solution uses what you know and what you have authentication methods?

Password, Hardware token

The results of a recent audit mandate that an organization hardens cloud-based server operating systems. Which steps do systems administrators take? (Select all that apply.)

Perform system updates. Control remote access. Disable unused services.

An organization deploys an application in a cloud-based infrastructure. The application has a one-time fee that is good for the life of the current version. Which license model does the organization purchase?

Perpetual

An organization looks to provide a cloud portal to an unaffiliated audience through a 3rd party service. Which cloud model does the organization deploy?

Public

An engineer monitors a system for excessive system load as it relates to processes. Which metric does the engineer record when considering the number of logical processors in the system?

Queue length

While deploying an online eCommerce server, an organization states that in the event of a system crash, 8-10 hours of data loss is all that it can tolerate. When documenting a disaster recovery plan, engineers use this information for which metric?

RPO

Which update type does an engineer use to apply numerous patches to a system at one time?

Rollup

A security administrator would like to implement a single sign-on (SSO) for a series of cloud linked databases from different vendors. Which potential solution does the administrator investigate?

SAML

An automation tool uses scripts to configure and deploy new cloud services. In the past, credentials to apply configurations were contained in the scripts. Engineers now see this approach as a security flaw and decide to use key-based authentication. Which solution do the engineers integrate into the process?

SSH remote

Support technicians establish a plan of action to resolve a cloud server issue. What should the technicians consider in this plan? (Select all that apply.)

Service interruptions. Data Loss.

An organization prepares to release a cloud-based service to the public. During which phase do engineers perform quality assurance testing?

Staging

An engineer manages a new cloud deployment. Network routers in the virtual private cloud (VPC) are configured differently depending on the router's role in the network. Which configuration type has manual route entries?

Static

One organization acquires another organization. In combining cloud infrastructures from each, a directive to rename servers to a standard format is issued. After doing so, many servers are no longer reachable by host name. What configuration should support engineers check?

Static resource records

Two cloud-based servers replicate customer data. Engineers are unhappy with the current configuration as it may lead to data loss in the event of a single server failure. To avoid such loss, what replication type do engineers plan on using?

Synchronous

An orchestration workflow combines five automated steps to deploy a cloud-based conferencing server. What does an administrator ensure when using the workflow?

That testing is performed between each automation step

Several cloud-based virtual servers power a public facing website. Thin storage provisioning of the servers is set to a maximum of 200 GB. What is the cost if 150 GB of space is in use?

The cost only applies to the storage space in use.

Engineers decide to use IPsec encapsulation to encrypt a portion of network communications between two cloud servers. As network bandwidth is a concern, how do engineers configure the encryption? (Select all that apply.)

The engineers use transport mode. The engineers use data encryption rules.

An organization configures several virtual server instances in the cloud. Status reports indicate that the host system continuously utilizes a memory ballooning feature. What does this feature indicate to the engineers that monitor the systems?

The host does not have enough memory

Top level engineers create a set of policies to address disaster recovery management techniques. There is a great deal of emphasis on the mean time to recovery (MTTR). How do engineers describe this metric?

The time necessary to return a service to its fully operational status

Top level engineers compile a document to address disaster recovery management techniques. Of interest to stakeholders is the recovery time objective (RTO). How do engineers describe this metric?

The time needed to maintain an organization's business continuity

A systems administrator implements a 3-2-1 backup rule. What does this storage scheme provide?

Three copies of data, two different media types, one copy offsite

An engineer resolves an issue where a single cloud resource was not available to end users. For what reason does the engineer then document a root cause analysis?

To evaluate why the problem occurred

A server in a virtual private cloud cannot access a storage service on the distant side of a router. Which command does an administrator use to find the network path the server uses to the service?

Tracert

A cloud service at an organization should only allow for logins based on a user's specific and authorized location. Which technologies do security engineers suggest using to comply with this requirement? (Select all that apply.)

VLAN. IP. GPS.

While practicing a patch management strategy, a systems administrator decides to follow a N -1 approach. What does the administrator document as a negative to this approach?

Vulnerability

A load balancer does not work as intended. All traffic should be evenly distributed amongst the servers. How should the engineer reconfigure load balancing?

With a static algorithm

An engineer configures a new virtual machine (VM) in the cloud. After a few days of use, the engineer notices that the server functions properly, but the time on the VM differs by a few minutes than the host. The host uses an authoritative time source and a policy synchronizes time with other servers on the network. How does the engineer remedy this issue?

With guest extensions

An administrator new to using Git tries to build a repository for a cloud application. Which command does the administrator use to place the code in the repository?

git push

An engineer documents information through its lifecycle, including creation, use, storage, and destruction. Which diagram type does the engineer create?

Data

When considering identity and access management (IAM), what is the goal of authorization?

Access

Multifactor access to a cloud management workstation fails for a systems administrator. The system administrator reports that the system accepted a password but will not accept a smart card. What does a security team determine the problem to be? (Select all that apply.)

An expired certificate. A revoked certificate.

An administrator new to automation and orchestration looks for help on the subject. If a colleague recommends using playbooks, which tool does the administrator use?

Ansible.

Which benefits does a type 1 hypervisor provide over a type 2 hypervisor? (Select all that apply.)

Better performance. Increased security.

A web application receives updates every six months. The production and staging environments alternate on the same schedule as the updates. What type of release model is in practice?

Blue-green

To control costs, an administrator needs to set storage quotas for file shares on a Windows cloud-based server. What options exist to set quotas? (Select all that apply.)

By user. By group. By partition.

A significant update for a cloud-based application is available. IT support decides to install the update on a small percentage of systems to monitor behavior before deploying the update to the entire environment. Consider the different upgrade methods and determine which one IT support implements.

Canary

A systems administrator plans a system upgrade to several cloud-based network devices. Which approach fulfills the administrator's decision to upgrade a few systems during a scheduled period in order to evaluate updates prior to a general roll out?

Canary

Engineers concern themselves with user density issues before moving to a cloud-based service. What approach can the engineers utilize to address any concerns? (Select all that apply.)

Capacity planning. Trend analysis.

How would engineers reconfigure memory for a server instance using AWS?

Change the instance type

A cloud-based server infrastructure for an organization is currently not available. Engineers determine that all of the virtual machines (VM) on a host and the host itself are shut down. What VM management approach helps to avoid such a situation? (Select all that apply.)

Clustering. Anti-Affinity.

A corporate counsel reviews established service level agreements for cloud services a company offers. What areas do these agreements cover? (Select all that apply.)

Compensation. Downtime.

An organization looks to reduce cloud-based storage costs. What hardware level features should the organization consider reducing storage usage and costs? (Select all that apply.)

Compression. Deduplication.

A cloud engineer configures virtualized services for a new cloud-based application rollout. Which resource area does the engineer focus attention on to determine general I/O functionality requirements?

Compute

An engineer recommends that an administrator should deploy cloud-based virtual machines (VMs) for the first time by using templates. What advantages does the engineer say the template settings provide for rapid deployment? (Select all that apply.)

Compute resources. Operating system. Storage resources.

A large firm looks to move its systems to the cloud. Security responsibility is of great concern. In a shared security model, which areas are a cloud service provider (CSP) responsibility? (Select all that apply.)

Compute. Storage.

A systems administrator evaluates various environments for a cloud-based microservice. The goal is to save costs while providing the resources the microservice needs. Which environment does the administrator utilize?

Container

Network devices in cloud infrastructure are configured by using a software-defined (SDN) network approach. An engineer uses which management plane to program multiple network devices?

Control

A cloud server requires a license for each virtual CPU that is in use. Which license type does the IT department purchase?

Core