CompTIA CV0-002 問題集

質問 1：
A cloud administrator is managing a VPC within an IaaS service model and needs to install quarterly updates.
Which of the following cloud components should the administrator update? (Choose three.)
A. Operating system
B. Application
C. Storage switches
D. Load balancer
E. Hypervisor
F. Network switches
G. Antivirus
H. Storage array
正解：A,E,G

質問 2：
There has been a change in requirements for two countries where PCI virtual instances exist. As such three virtual instances need to be added in both countries' PCI environments, and two instances need to be removed.
Which of the following is the BEST way to ensure compliance is met in those two countries?
A. By the effective date of the new requirement, in each country implement the three new virtual instances.
After a month of testing remove the two out-of-compliance virtual instances.
B. By the effective date of the new requirement, in each country, remove the two out-of-compliance virtual instances.
C. By the effective date of the new requirement, in each country, remove the two out-of-compliance virtual instances and implement the three new virtual instances.
D. By the effective date of the new requirement, in each country, implement the three new virtual instances.
正解：B

質問 3：
A private cloud is using the iSCSI protocol for connection from storage to hypervisors. This connection is not encrypted currently, and the systems administrator is tasked with enabling on-the-fly encryption.
Which of the following technologies should the administrator use?
A. HTTPS
B. IPSec
C. LUN encryption
D. PKI
正解：D

質問 4：
While reviewing the auto-scaling events for a web application, a cloud engineer identified that the application upsized and downsized multiple times within the last hour.
Which of the following should the cloud engineer do NEXT?
A. Review the load balancer configuration settings.
B. Add more systems into the scaling group.
C. Review auto-scaling policies to detect a misconfiguration.
D. Monitor auto-scaling events for the next 24 hours.
正解：C

質問 5：
A non-critical vulnerability has been identified by a Linux vendor, who has released a patch and recommends that it be applied immediately.
Which of the following is the BEST plan for the cloud administrator to install the patch?
A. Schedule an emergency maintenance window and deploy the patch to servers in production.
B. Deploy the patch to the failover cluster and force a failover to the patched environment.
C. Deploy the patch to half of the servers in production and monitor for any issues.
D. Deploy the patch to the development and QA environments and request a functional test review.
正解：D

質問 6：
A cloud provider is evaluating an insider threat. A resource from the company operations team has access to the servers' virtual disks. This poses a risk that someone could copy and move the virtual server image and have access to the dat a. Which of the following solutions would help mitigate this problem?
A. Tokenization
B. Hashing
C. Encryption
D. Virtual firewall
正解：A

質問 7：
Several state and local law enforcement agencies have decided to share information about traffic violations within their state by using a new search application. The state has policies around limiting the exposure of PII, and each local agency must comply with these policies. Which of the following cloud architecture models would be the BEST approach?
A. Have each local agency publish its data to an account that has been set up in a public cloud provider and deploy the application there.
B. Deploy the application to a public cloud and establish connections for each local agencies' private cloud and use federation.
C. Deploy the application in each local agency's private cloud and create accounts for everyone to allow access to publish and search the data.
D. Deploy the application in the state's shared cloud environment and create federation between the local agencies.
正解：D