1

Question 1

A new browser version has been deployed to all users at a company. After the deployment, users report that they can no longer access the company's secure time-card system, which is hosted by a SaaS provider. A technician investigates and discovers a security error is received upon opening the site. If the browser is rolled back to the older version, the site is accessible again. Which of the following is the MOST likely cause of the security error users are seeing?

Accepted Answer

Obsolete security technologies implemented on the SaaS servers

Answer

SSL certificate expiration on the SaaS load balancers

Answer

Federation issues between the SaaS provider and the company

Answer

Unencrypted communications between the users and the application

Question 2

A company is seeking a new backup solution for its virtualized file servers that fits the following characteristics:
The files stored on the servers are extremely large.
Existing files receive multiple small changes per day.
New files are only created once per month.
All backups are being sent to a cloud repository.
Which of the following would BEST minimize backup size?

Accepted Answer

Differential backups

Answer

Local snapshots

Answer

File-based replication

Answer

Change block tracking

Question 3

A company has deployed a four-node cluster in a COLO environment with server configurations listed below. The company wants to ensure there is 50% overhead for failover and redundancy. There are currently eight VMs running within the cluster with four vCPUs x32GB each. The company wants to better utilize its resources within the cluster without compromising failover and redundancy.

Given the information above, which of the following should a cloud administrator do to BEST accommodate failover and redundancy requirements?

Given the information above, which of the following should a cloud administrator do to BEST accommodate failover and redundancy requirements?

Accepted Answer

Ensure dynamic resource allocation is being utilized.

Answer

Ensure hyperthreading is being utilized with physical server CPUs.

Answer

Overcommit memory, and the systems will allocate resources as required.

Answer

Set hard limits for VM resources and turn on hyperthreading.

Question 4

A courier company has virtualized its packing software application. The CSA needs to confirm the deployment is utilizing the correct amount of CPU per virtual instance. After confirming the deployment requirements, the CSA should log into the cloud services portal to ensure that:

Accepted Answer

the deployment is utilizing the recommended amount of CPUs per VM.

Answer

the VMs with the most CPU cores available have been selected.

Answer

smaller VMs are being selected to reduce the total deployment cost.

Answer

the alarms on CPU utilization have been enabled.

Question 5

Due to a competitor's unlimited data plan, a service provider is struggling and wants to transform its business services to be more hosting oriented. A cloud architect is tasked to review current cloud resource capacity and provide recommendations and a plan for better resource utilization. Given the following report:

Which of the following is the BEST option for the architect to suggest?

Which of the following is the BEST option for the architect to suggest?

Accepted Answer

Downsize by migrating all media services to one server and decommission two servers.

Answer

Downsize by decommissioning servers 2 and 3 and reallocate media servers to hosts.

Answer

Downsize by migrating all media services to one server, add one host server, and decommission one server.

Answer

Upsize the hosting services by turning server 1 into a host server.

Question 6

A cloud administrator is receiving alerts that the disk on several systems is 90% full. Upon reviewing the systems, the administrator determines that the log directory is using 50% of the disk. The company has a 14-day retention policy for all logs. Which of the following is the BEST solution to implement to minimize future alerts?

Accepted Answer

Orchestrate a job to rotate the logs and upload to external storage.

Answer

Delete any log files in the directory that are larger than 20MB.

Answer

Archive the existing logs in the directory and upload to external storage.

Answer

Add additional storage space to the log directory for the servers.

Question 7

A company purchased a SaaS CRM application. The signed SLA meets year-round performance requirements. Three months after deployment, customers start reporting a slow application response time. System availability, connectivity, and proper functionality still meet the SLA. Which of the following is MOST likely the reason for the poor response time?

Accepted Answer

The application version is causing compatibility issues.

Answer

Incorrect business requirements are invalidating the testing results.

Answer

Bandwidth restrictions are causing poor performance.

Answer

Inadequate documentation is affecting the user interface.

Question 8

A cloud architect created a new delivery controller for a large VM farm to scale up according to organizational needs. The old and new delivery controllers now form a cluster. However, the new delivery controller returns an error when entering the license code. Which of the following is the MOST likely cause?

Accepted Answer

A firewall is blocking the port on the license server.

Answer

The existing license is for a lower version.

Answer

The existing license is not supported for clusters.

Answer

The existing license has expired.

Question 9

A multinational corporation needs to migrate servers, which are supporting a national defense project, to a new datacenter. The data in question is approximately 20GB in size. The engineer on the project is considering datacenters in several countries as possible destinations. All sites in consideration are on a high-speed MPLS network (10Gb+ connections).
Which of the following environmental constraints is MOST likely to rule out a possible site as an option?

Accepted Answer

Legal restrictions

Answer

Downtime impact

Answer

Peak time frames

Answer

Bandwidth

Question 10

A cloud administrator is provisioning five VMs, each with a minimum of 8GB of RAM and a varying load throughout the day. The hypervisor has only 32GB of RAM. Which of the following features should the administrator use?

Accepted Answer

Process scheduling

Answer

Memory overcommitment

Answer

Thin-provisioned model

Answer

Hyperthreading

Question 11

Several SaaS providers support identity federation for authentication. Which of the following would BEST assist in enabling federation?

Accepted Answer

SAML

Answer

NTLM

Answer

MFA

Answer

PKI

Question 12

A company is interested in a DRP. The purpose of the plan is to recover business as soon as possible. The MOST effective technique is:

Accepted Answer

active/active.

Answer

archiving

Answer

network clustering.

Answer

site mirroring.

Question 13

A new SaaS timecard application that is being tested will be used by all employees at a large corporation. The following process was used to test the application:
1. Three users from each site used the application for three weeks.
2. The new application was used side by side with the existing application.
3. The outputs of the old and new applications were compared side by side.
Which of the following requirements did the testing plan confirm? (Select two.)

Accepted Answer

Performance

Accepted Answer

Data integrity

Answer

High availability

Answer

Connectivity

Answer

Sizing

Answer

Security

Question 14

A cloud engineer is using a hosted service for aggregating the logs for all the servers in a public cloud environment. Each server is configured via syslog to send its logs to a central location. A new version of the application was recently deployed, and the SaaS server now stops processing logs at noon each day. In reviewing the system logs, the engineer notices the size of the logs has increased by 50% each day. Which of the following is the MOST likely reason the logs are not being published after noon?

Accepted Answer

The logging directory does not have sufficient storage space.

Answer

The syslog service is not running on the servers.

Answer

The data limit has been exceeded at the SaaS provider.

Answer

There is a cloud service provider outage.

Question 15

A cloud administrator notices one of the servers is using the wrong set of NTP servers. The administrator needs to avoid the same issue in the future but needs to minimize administration resources. Which of the following tools should a cloud administrator deploy to meet this requirement?

Accepted Answer

Deployment tools

Answer

Patching tools

Answer

Monitoring tools

Answer

Configuration tools

Question 16

The legal department requires eDiscovery of hosted file shares. To set up access, which of the following is the BEST method to ensure the eDiscovery analyst only has the ability to search but not change configuration or settings?

Accepted Answer

RBAC

Answer

PKI

Answer

SSO

Answer

MFA

Question 17

When designing a new private cloud platform, a cloud engineer wants to make sure the new hypervisor can be configured as fast as possible by cloning the OS from the other hypervisor. The engineer does not want to use local drives for the hypervisors. Which of the following storage types would BEST suit the engineer's needs?

Accepted Answer

SAN

Answer

CAS

Answer

NAS

Answer

DAS

Question 18

A cloud engineer deployed an email server in a public cloud. Users can access the email server, but the emails they send cannot reach their destinations. Which of the following should the cloud engineer do FIRST?

Accepted Answer

Confirm the email server configuration and reinstall the email server software.

Answer

Validate the security certificate for the email domain.

Answer

Confirm email encryption service

Answer

Consult the cloud vendors anti-spam policy.

Question 19

A file server is being migrated from physical hardware into a private cloud. Baselining of the server shows the disks average 90% full at all times. The contents of the file server consist mostly of compressed audio files. Multiple copies of the same files are often saved in different locations on the same disk. Which of the following storage technologies is MOST likely to help minimize storage utilization when moving this server to the private cloud?

Accepted Answer

Deduplication

Answer

Compression

Answer

Thin provisioning

Answer

Tokenization

Question 20

A cloud administrator is looking at business requirements that specify the data available at the disaster recovery site must not be more than 24 hours old. Which of the following metrics correctly relates to these requirements?

Accepted Answer

RPO

Answer

RTO

Answer

MTBF

Answer

MTTR

Question 21

A cloud implementation engineer successfully created a new VM. However, the engineer notices the new VM is not accessible from another network. A ping test works from another VM on the same subnet. Which of the following is the MOST likely problem?

Accepted Answer

Incorrect subnet

Answer

Incorrect host IP address

Answer

Incorrect VLAN

Answer

Incorrect gateway

Question 22

A customer wants a cloud systems administrator to adjust the backup schedule after month-end to ensure the data can be restored as fast as possible while minimizing the time needed to perform the backup. Which of the following backup types should be scheduled?

Accepted Answer

Synthetic full

Answer

Incremental

Answer

Differential

Answer

Full

Question 23

. cloud administrator uses a script to automatically restart all the servers running in the public cloud provider environment, which hosts e-commerce applications. The administrator decides to implement the same script for a similar environment that hosts the finance applications. After verifying the script is deployed to the public cloud environment for finance, the administrator schedules a job to run at 9:00 a.m. After 9:00 a.m., the administrator receives a report from the e-commerce team that the application is experiencing outages. Which of the following should the administrator do to resolve the issue?

Accepted Answer

Validate the access credentials for the cloud provider are correct.

Answer

Update the version of the CLI tool for the public cloud provider.

Answer

Copy the script up to a bastion host in the environment and run it from there.

Answer

Debug the script and modify it to remove the flawed logic.

Question 24

A critical new security update has been released to fix an identified zero-day vulnerability with the SSH server process. Due to its severity, all development and staging servers must have this update applied immediately. Which of the following is the FASTEST way for the administrator to apply the patch and ensure all systems are configured consistently?

Accepted Answer

Update the set of configuration management scripts to include the latest patch. Execute these scripts against a master inventory of servers.

Answer

Shut down all servers and use the server provisioning tools to deploy new ones that have the latest patch applied

Answer

Create a master inventory list of servers that must be patched. Log in to each server and deploy the patch, making sure to check off each server on the list.

Answer

Use the existing tooling to clone the existing servers. Update each clone with the latest patch and shut down the original system.

Question 25

A company wants to take advantage of cloud benefits while retaining control of and maintaining compliance with all its security policy obligations. Based on the non-functional requirements, which of the following should the company use?

Accepted Answer

IaaS, as the cloud provider has a minimal level of security responsibility

Answer

Hybrid cloud, as use is restricted to trusted customers

Answer

PaaS, as the cloud customer has the most security responsibility

Answer

SaaS, as the cloud provider has less security responsibility

Question 26

An administrator is deploying a new application platform with the following resource utilization:

Company policy requires that no resource utilization surpasses 80%. Which of the following resources will need to be upgraded prior to deployment?

Accepted Answer

Disk

Answer

IOPS

Answer

CPU

Answer

Network

Answer

RAM

Question 27

Several suspicious emails are being reported from end users. Organizational email is hosted by a SaaS provider. Upon investigation, the URL in the email links to a phishing site where users are prompted to enter their domain credentials to reset their passwords. Which of the following should the cloud administrator do to protect potential account compromise?

Accepted Answer

Change the encryption key for the entire organization and lock out all users from using email until the issue is remediated.

Answer

Forward the email to the systems team distribution list and provide the compromised user list.

Answer

Click on the URL link to verify the website and enter false domain credentials.

Answer

Notify users who received the email to reset their passwords regardless of whether they click on the URL.

Question 28

Which of the following is the BEST way to ensure accounts in a cloud environment are disabled as soon as they no longer need to be active?

Accepted Answer

Have the user contact the cloud systems administrator to disable the account when it is no longer needed.

Answer

When users leave the company, ensure an account disablement request is initiated and will be fulfilled in less than four hours

Answer

Have accounts checked by the cloud systems administrator once per day to ensure active accounts are still valid.

Answer

Reboot directory services servers once a day to ensure all account disablement requests are committed.

Question 29

A cloud administrator has deployed a new all-flash storage array with deduplication and compression enabled, and moved some of the VMs into it. The goal was to achieve 4:1 storage efficiency while maintaining sub-millisecond latency. Which of the following results would BEST suit the requirements?

Accepted Answer

Compression 1.8:1
Deduplication 2.7:1
Overall savings 4.2:1
Average latency 1.2ms

Answer

Compression 1:1
Deduplication 4:1
Overall savings 4:1
Average latency 1.0ms

Answer

Compression 1.5:1
Deduplication 1.8:1
Overall savings 2.2:1
Average latency 600us

Answer

Compression 1.3:1
Deduplication 3.1:1
Overall savings 4.3:1
Average latency 900us

Question 30

A newly established CSP allows for drive shipping to upload new data into the environment. Sensitive data on 40TB of storage needs to be transferred within one week. Which of the following is the MOST efficient and secure method for shipment of the data to the CSP with minimal downtime?

Accepted Answer

Move the data to encrypted drives and use the CSP-certified shipping provider.

Answer

Create a VPN between the sites and schedule data transfer during non-business hours

Answer

Copy the data to encrypted drives and use the CSP-certified shipping provider.

Answer

Compress and SFTP the data to the CSP.

Question 31

A manufacturing company's current security policy mandates PII is not stored in the SaaS solution. Which of the following configuration controls should be used to block sensitive information from being stored in the SaaS solution?

Accepted Answer

Implement a network ACL.

Answer

Implement file-level encryption.

Answer

Implement an IPS

Answer

Implement content filtering.

Question 32

A new application with availability SLA requirements of 99.99% has been deployed in a cloud. For a test spanning a month, which of the following unavailability times would mean the test was successful? (Select TWO).

Accepted Answer

1 minute

Accepted Answer

4 minutes

Answer

10 minutes

Answer

30 minutes

Answer

60 minutes

Question 33

A company's security policy requires full disk encryption on all clients with preboot enabled. The encryption server is hosted, and the requirement is to push an update to all endpoints.
Which of the following is the BEST method to test and apply the update with minimal disruption to end users?

Accepted Answer

Access the web UI portal of the encryption server, apply the update to the test group, validate, and then update all endpoints.

Answer

Access the API of the encryption server, develop a custom script, and then update all endpoints

Answer

Add the update to the standard desktop configuration image, apply the update to a test VM, and then reimage clients.

Answer

Access the web UI of the encryption server and disable preboot, apply the update, test, and then deploy the update to all endpoints.

Question 34

A technician receives a report of system utilization:

Which of the following additional resources should the technician add FIRST given the trend data shown above?

Accepted Answer

Disk

Answer

CPU

Answer

Bandwidth

Answer

RAM

Question 35

A cloud architect is tasked with isolating traffic between subnets in an IaaS platform. The networks should be able to statefully communicate with each other. Given this scenario, which of the following should the architect implement?

Accepted Answer

Configure security groups

Answer

Configure HIPS policies.

Answer

Configure IDS policies.

Answer

Configure a network ACL.

Question 36

A cloud administrator is provisioning several user accounts that have administrator rights to assets using JSON within an IaaS cloud platform. The administrator is required to configure "alternate settings using the API. Given this scenario, which of the following elements would allow the administrator to meet these requirements in the JSON file?

Accepted Answer

Statement

Answer

Effect

Answer

Resource

Answer

Condition

Question 37

Before doing a change on a VM, a systems administrator wants to ensure there is an easy and fast way to rollback if needed. The change and testing should take approximately two hours. Which of the following is the EASIEST way to meet this requirement?

Accepted Answer

Create a snapshot on the hypervisor

Answer

Make an on-demand, incremental backup to a VTL.

Answer

Make an on-demand, full backup to a secondary location.

Answer

Create a snapshot on a remote storage array.

Question 38

The CSA needs to install a patch on 58 virtual server instances during the Friday evening maintenance window. Which of the following is the MOST efficient way to get the patches installed?

Accepted Answer

Use the patch management tool to automate and orchestrate the patch installation.

Answer

Use a security vulnerability scanning tool to apply the patch automatically

Answer

Schedule the patch to install from a remote file server upon server reboot.

Answer

Connect the server instances to the Internet to download the patch automatically.

Question 39

A recent advertisement campaign has increased traffic to an e-commerce application that is hosted within a public cloud environment. Customers are reporting that it takes too long to load their pages and submit orders. A cloud administrator looks at the metrics from the environment and sees high utilization of the CPU and memory resources. The cloud provider offers several preconfigured sizes for server template: x-small, small, medium, large, x-large, and 2x-large.

Given an expected increase in workload, which of the following is the BEST solution to improve application performance?

Given an expected increase in workload, which of the following is the BEST solution to improve application performance?

Accepted Answer

Change the server template size for Inxpc003 to 2x-large

Answer

Provision additional Inxpc servers using the 2x-large template.

Answer

Add memory to Inxpc002, Inxpc003, and Inxpc003.

Answer

Change the role of Inxw001 from web to application.

Question 40

A company wants to leverage a SaaS provider for its back-office services, and security is paramount. Which of the following solutions should a cloud engineer deploy to BEST meet the security requirements?

Accepted Answer

CASB

Answer

Firewall

Answer

IPS/IDS

Answer

Proxy gateway

Question 41

A company upgraded a hosted vulnerability scanner to the latest version, and now tickets are not being created to assign critical vulnerabilities. After confirming the ticketing issue, all the scanning services are confirmed to be running on the VM. Which of the following is the MOST likely cause and best method to fix the issue?

Accepted Answer

There is an application compatibility issue. Roll back to the previous working backup.

Answer

There was an IP change to the VM. Make changes to the server properties.

Answer

The upgrade has a bug Reboot the server and attempt the upgrade again.

Answer

The vulnerability scanner is on a different subnet. Open the ports, and it will reconnect.

Question 42

A system's application servers need to be patched. The requirements for maintenance work are as follows:
System downtime is not allowed.
The application server in use must be in the sane patch status.
System performance must be maintained during patching work.
Testing after patching must be done before the application server is in use.
If any trouble occurs, recover the previous version in ten minutes.
Which of the following methodologies should be selected?

Accepted Answer

Three staging environments

Answer

Rolling update

Answer

Patching directly

Answer

Blue-green deployment

Question 43

A software development company is building cloud-ready applications and needs to determine the best approach for releasing software. Which of the following approaches should be used?

Accepted Answer

Develop, test, perform QA, and release to production

Answer

Perform QA, develop, test, and release to production

Answer

Test, perform QA, develop, and release to production

Answer

Develop, perform QA, test, and release to production

Question 44

A customer recently provisioned a new server on the IaaS. The IP address assigned from the pool resolves to another hostname. Some user traffic is being dumped or is causing slowness because of this issue. Which of the following maintenance activities does the provider need to perform to prevent this issue?

Accepted Answer

Run a script to remove stale DNS entries.

Answer

Use cloud provider tools to remove orphaned resources.

Answer

Initiate resource reclamation.

Answer

Update outdated security firewall configurations.

Question 45

A development team released a new version of an application and wants to deploy it to the cloud environment with a faster rollback and minimal downtime. Which of the following should the cloud administrator do to achieve this goal?

Accepted Answer

Use a rolling deployment to update all the servers in the PROD cloud environment with the new application. To switch to the previous version, repeat the process.

Answer

Deploy the application to the PROD cloud environment and the previous version to QA. To switch to the previous version, promote the QA environment to PROD.

Answer

Deploy the application to a subset of servers in the environment and route traffic to these servers. To switch to the previous version, change the route to the non-updated servers.

Answer

Deploy the application to a staging environment and force a failover to this environment. To restore the previous version, create a backup and restore from the previous nights backup.

Question 46

A university is running a DNA decoding project that will take seven years if it runs on its current internal mainframe. The university negotiated a deal with a large cloud provider, which will donate its cloud resource to process the DNA decoding during the low peak time throughout the world. Which of the following is the MOST important resource the university should ask the cloud provider to donate?

Accepted Answer

A closer datacenter to the university

Answer

A large storage for the DNA decoding results

Answer

A larger pipe to transfer the results

Answer

Any available compute resource

Question 47

A business is demanding faster IT services turnaround from its IT groups. The current lead time between request and delivery is three weeks for a task that would take a competitor two days. An architect is asked to develop a solution to reduce the lead time of the request while ensuring adherence to the company policies. Which of the following is the BEST approach to achieve the stated objective?

Accepted Answer

Document the desired state, complete a root cause analysis, and execute the flow.

Answer

Revise the schedule, implement a waterfall methodology, and flatten the network.

Answer

Identify deficiencies, optimize change management, and automate the workflow.

Answer

Follow the company policies, execute the flow, and document results.

Question 48

A storage administrator must choose the best replication methodology for storage.
The datacenters are on opposite sides of the country.
The RPO is 24 hours.
Replication and customer access use the same connections.
Replication should not impact customer access during the day.
Which of the following solutions would BEST meet these requirements?

Accepted Answer

Asynchronous

Answer

Regional

Answer

Multiregional

Answer

Synchronous

Question 49

The InfoSec team has directed compliance database activity monitoring without agents on a hosted database server in the public IaaS. Which of the following configurations is needed to ensure this requirement is achieved?

Accepted Answer

Configure sniffing mode on database traffic.

Answer

Configure the agent configuration file to log to the syslog server.

Answer

Implement built-in database tracking functionality.

Answer

Implement database encryption and secure copy to the NAS.

Question 50

Ann. a user, has tried to connect to a VM hosted in a private cloud using her directory services credentials. After three attempts, she realizes the keyboard was set to German instead of English, and she was typing "z" instead of "y". After fixing this issue, Ann is still unable to log in; however, other users can access the VM. Which of the following is the MOST likely cause?

Accepted Answer

The account localization settings are incorrect.

Answer

The default language on Ann's computer is German.

Answer

The account was locked.

Answer

Directory services are offline

Answer

There is an account mismatch.

Question 51

A cloud administrator is integrating account logins with Facebook, LinkedIn, and Twitter for marketing and to increase market presence using social media platforms. Given this scenario, which of the following components are needed to match these requirements? (Select TWO).

Accepted Answer

SAML assertion

Accepted Answer

Session state

Answer

SOAP

Answer

Security token

Answer

Identity provider

Question 52

A company uses its own private cloud, which has few available resources. Mission-critical systems and other information systems are running on it. A new system will be deployed on the private cloud. The following tests are included in the test plan:
– Load test (2h)
– Backup/restore test (6h)
– Functional test (8h)
– Failover test (1h)
The work schedule of the existing system is shown below.

To minimize the effect to the existing system, which of the following schedules is MOST suitable for the load test?

Accepted Answer

18:00-20:00

Answer

02:00-04:00

Answer

09:00-12:00

Answer

22:00-00:00

Question 53

A cloud administrator is required to implement a solution to handle data-at-rest encryption requirements for a database. Which of the following would BEST satisfy the requirements?

Accepted Answer

Create a virtual encrypted disk, add it to the virtual server, and have the database write to it.

Answer

Install an SSL certificate and only allow secure connections to the server.

Answer

Enable two-factor authentication on connections to the database server and log activities.

Answer

Activate memory encryption on the virtual server and store the certificates remotely.

Question 54

A cloud administrator is tasked with ensuring redundancy and high availability of an IaaS cloud platform environment. The administrator is given the following requirements:
Two web servers must share the same configurations and service client connections evenly.
Two database servers must share data and configurations, with only one being used at a time.
Given the above, which of the following should the administrator propose to BEST meet these requirements? (Select TWO).

Accepted Answer

The web server should be configured with a round-robin DNS with a CNAME record.

Accepted Answer

The database server should be configured as an active-passive cluster.

Answer

The web server should be configured with a load balancer with a virtual IP address.

Answer

The database server should be configured as an active-active cluster.

Answer

The availability aspect of the request does not currently exist in the IaaS cloud platform

Answer

The redundancy aspect of the request does not currently exist in the IaaS cloud platform.

Question 55

In an IaaS model, to which of the following methodologies would the client apply a list of OS patches, assuming approval from CAB has been given?

Accepted Answer

Using a patch management system, identify the hypervisor type, select a group of hypervisors to be patched, and perform a rolling application of patches.

Answer

Using a patch management system, identify the guests that require patching, and select and apply the patches.

Answer

Using a patch management system, identify the applications needing the patch, select the required application in a patch management console, and apply the patches.

Answer

Using a patch management system, identify the services that require patching, and select and apply the patches.

Question 56

A cloud administrator has finished building a virtual server template in a public cloud environment. The administrator is now cloning six servers from that template. Each server is configured with one private IP address and one public IP address. After starting the server instances, the cloud administrator notices that two of the servers do not have a public IP address. Which of the following is the MOST likely cause?

Accepted Answer

The two servers do not have enough virtual network adapters attached.

Answer

The maximum number of public IP addresses has already been reached.

Answer

The two servers are not attached to the correct public subnet

Answer

There is no Internet gateway configured in the cloud environment.

Question 57

A public cloud provider recently updated one of its services to provide a new type of application load balancer. The cloud administrator is tasked with building out a proof-of-concept using this new service type. The administrator sets out to update the scripts and notices the cloud provider does not list the load balancer as an available option type for deploying this service. Which of the following is the MOST likely reason?

Accepted Answer

The administrator needs to update the version of the CLI tool.

Answer

The administrator can deploy the new load balancer via the cloud provider's web console.

Answer

The administrator needs to write a new script function to call this service.

Answer

The administrator is not using the correct cloud provider account.

Question 58

A cloud service provider wants to offer hardened virtual server images for provisioning purposes. This will enable users to use only the operating system services that are allowed by the provider. Which of the following tasks are MOST appropriate for the hardening process? (Select TWO).

Accepted Answer

Disable automatic updates.

Accepted Answer

Disable unneeded ports and services.

Answer

Disable the command prompt.

Answer

Disable the local administrator account.

Answer

Disable the remote desktop connection

Answer

Disable complex passwords.

Question 59

A customer wants to schedule a backup job that compares and saves changes from the last full backup. Which of the following backup types should be used?

Accepted Answer

Differential

Answer

Full

Answer

Clone

Answer

Incremental

Question 60

A company security policy mandates education and training for new employees. The policy must outline acceptable use policies for SaaS applications. Given these requirements, which of the following security controls is BEST suited?

Accepted Answer

Corrective

Answer

Preventive

Answer

Detective

Answer

Physical

Question 61

A private cloud customer is considering using the public cloud to accommodate the peak utilization workload. Which of the following would be considered the ideal scaling solution?

Accepted Answer

Cloud bursting

Answer

Load balancing

Answer

Horizontal scaling

Answer

Vertical scaling

Question 62

A cloud administrator reports a problem with the maximum number of users reached in one of the pools. There are ten VMs in the pool, each with a software capacity to handle ten users. Based on the dashboard metrics, 15% of the incoming new service requests are failing. Which of the following is the BEST approach to resolve the issue?

Accepted Answer

Check compute, storage, and networking utilization in the dashboard and increase capacity by adding more resources.

Answer

Check current licensed capacity and purchase additional licenses to add more users.

Answer

Check the DHCP scope and increase the number of available IP addresses by extending the pool.

Answer

Check the rate-of-load increase to determine if the cloud capacity boundary has been exceeded and enable bursting to the pubic cloud.

Question 63

In an IaaS environment, the security team issues a new signature file to prevent specific malware threats from infiltrating the company network. Which of the following describes where the security team should deploy the updated signatures?

Accepted Answer

HIPS

Answer

IDS

Answer

Spam filter

Answer

WAF

Answer

NIPS

Question 64

A small clinic is moving its health and accounting systems to a SaaS solution. The clinic holds patient- and business-sensitive information. Which of the following is the company expected to do to protect its data?