CompTIA CV0-003 問題集

質問 1：
An enterprise recently upgraded the memory of its on-premises VMs from 8GB to 16GB. However, users are not experiencing any performance benefit. Which of the following is the MOST likely reason?
A. Insufficient memory on the hypervisor
B. Operating system memory limit
C. Memory mismatch error
D. Dynamic memory allocation
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Which of the following strategies will mitigate the risk of a zero-day vulnerability MOST efficiently?
A. Keeping all resources up to date
B. Using only open-source technologies
C. Having a detailed incident response plan
D. Creating a standby environment with a different cloud provider
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 3：
A support engineer wants to prevent users from running malware on several IaaS compute instances. Which of the following will BEST achieve this objective?
A. Encrypt all applications that users should not access.
B. Implement an application whitelisting policy.
C. Disable file sharing on the instance.
D. Set the execute filesystem permissions on the desired applications only.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 4：
A systems administrator is deploying a new storage array for backups. The array provides 1PB of raw disk space and uses 14TB nearline SAS drives. The solution must tolerate at least two failed drives in a single RAID set.
Which of the following RAID levels satisfies this requirement?
A. RAID 0
B. RAID 10
C. RAID 6
D. RAID 1
E. RAID 5
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 5：
A systems administrator is building a new virtualization cluster. The cluster consists of five virtual hosts, which each have flash and spinning disks. This storage is shared among all the virtual hosts, where a virtual machine running on one host may store data on another host.
This is an example of:
A. hyperconverged storage
B. a network file system
C. a storage area network
D. thick-provisioned disks
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 6：
A systems administrator is planning to deploy a database cluster in a virtualization environment. The administrator needs to ensure the database nodes do not exist on the same physical host. Which of the following would best meet this requirement?
A. Anti-affinity
B. A firewall
C. Oversubscription
D. A separate cluster
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 7：
A systems administrator is configuring a storage system for maximum performance and redundancy. Which of the following storage technologies should the administrator use to achieve this?
A. RAID 50
B. RAID 10
C. RAID 6
D. RAID 5
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 8：
A company has decided to scale its e-commerce application from its corporate datacenter to a commercial cloud provider to meet an anticipated increase in demand during an upcoming holiday.
The majority of the application load takes place on the application server under normal conditions. For this reason, the company decides to deploy additional application servers into a commercial cloud provider using the on-premises orchestration engine that installs and configures common software and network configurations.
The remote computing environment is connected to the on-premises datacenter via a site-to-site IPSec tunnel.
The external DNS provider has been configured to use weighted round-robin routing to load balance connections from the Internet.
During testing, the company discovers that only 20% of connections completed successfully.
INSTRUCTIONS
Review the network architecture and supporting documents and fulfill these requirements:
Part 1:
Analyze the configuration of the following components: DNS, Firewall 1, Firewall 2, Router 1, Router 2, VPN and Orchestrator Server.
Identify the problematic device(s).
Part 2:
Identify the correct options to provide adequate configuration for hybrid cloud architecture.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
Part 1:
Cloud Hybrid Network Diagram






Part 2:
Only select a maximum of TWO options from the multiple choice question

正解：
See explanation below.
Explanation:
Part 1: Router 2
The problematic device is Router 2, which has an incorrect configuration for the IPSec tunnel. The IPSec tunnel is a secure connection between the on-premises datacenter and the cloud provider, which allows the traffic to flow between the two networks. The IPSec tunnel requires both endpoints to have matching parameters, such as the IP addresses, the pre-shared key (PSK), the encryption and authentication algorithms, and the security associations (SAs) .
According to the network diagram and the configuration files, Router 2 has a different PSK and a different address space than Router 1. Router 2 has a PSK of "1234567890", while Router 1 has a PSK of
"0987654321". Router 2 has an address space of 10.0.0.0/8, while Router 1 has an address space of
192.168.0.0/16. These mismatches prevent the IPSec tunnel from establishing and encrypting the traffic between the two networks.
The other devices do not have any obvious errors in their configuration. The DNS provider has two CNAME records that point to the application servers in the cloud provider, with different weights to balance the load.
The firewall rules allow the traffic from and to the application servers on port 80 and port 443, as well as the traffic from and to the VPN server on port 500 and port 4500. The orchestration server has a script that installs and configures the application servers in the cloud provider, using the DHCP server to assign IP addresses.
Part 2:
The correct options to provide adequate configuration for hybrid cloud architecture are:
* Update the PSK in Router 2.
* Change the address space on Router 2.
These options will fix the IPSec tunnel configuration and allow the traffic to flow between the on-premises datacenter and the cloud provider. The PSK should match the one on Router 1, which is "0987654321". The address space should also match the one on Router 1, which is 192.168.0.0/16.
B. Update the PSK (Pre-shared key in Router2)
E. Change the Address Space on Router2

質問 9：
A company is comparing an application environment to be hosted on site versus a SaaS model of the same application. Which of the following SaaS-based licensing models should the administrator consider?
A. Per user
B. Per instance
C. Per socket
D. Per core
正解：A
解説: (Topexam メンバーにのみ表示されます)