CompTIA CV0-002 問題集

質問 1：
A cloud administrator for a state government agency is tasked with giving access to the voter registration application to a government agency in another state. Only authorized officials from each state should access the application. These agencies have a common environment where applications have been deployed in the past. Which of the following should the cloud administrator do to give access to the application?
A. Deploy the application to the state's private cloud and give authentication credentials to the other state's authorized officials.
B. Deploy part of the application into a public cloud and establish secure connections to a private cloud environment.
C. Deploy the application to a community cloud that is shared with multiple state government agencies only.
D. Deploy the application to a public cloud and implement ACLs and security access policies to limit access.
正解：D

質問 2：
A cloud provider is evaluating an insider threat. A resource from the company operations team has access to the servers' virtual disks. This poses a risk that someone could copy and move the virtual server image and have access to the dat a. Which of the following solutions would help mitigate this problem?
A. Tokenization
B. Hashing
C. Encryption
D. Virtual firewall
正解：A

質問 3：
An administrator has virtualized four database servers in a private cloud. The DBA is concerned that a failure of one host will take down all four servers.
Which of the following should the administrator do FIRST to alleviate the DBA's concerns?
A. Migrate two servers to a public cloud.
B. Define affinity rules for each host.
C. Establish anti-affinity rules for each virtualized server.
D. Install a load balancer in front of the database server.
正解：C

質問 4：
A mobile subscriber is experiencing random limited-service outages. Customers report being unable to make calls or browse. The service provider management console is not showing any alarms, errors, or critical logs, but does show a large number of connection request failures.
Which of the following could be the problem?
A. IP address limitations
B. SSO failure
C. Misconfigured federation
D. Unavailable directory service
正解：C

質問 5：
During peak times, users are unable to access their online wealth management applications in a timely fashion. The online banking application resides in a community cloud environment. Which of the following explains how the cloud systems administrator should start to resolve this issue?
A. Access the cloud services portal and ensure the ACLs are set correctly for the user community.
B. Access the cloud services portal and ensure all users are accessing it through the same web service.
C. Access the cloud services portal and ensure there is adequate disk space available.
D. Access the cloud services portal and ensure memory ballooning is enabled.
正解：D

質問 6：
A company has a private cloud NAC solution in place to prevent unauthorized/non-company assets from connecting to the internal network. A cloud systems administrator cannot add a new physical server to the existing functioning cluster.
Which of the following is the MOST likely cause of this issue?
A. The DNS and DHCP servers are down.
B. Server MAC addresses are not being updated.
C. The new physical server has a faulty NIC.
D. Server objects were deleted.
正解：D

質問 7：
Team members should be able to review their organization's resource utilization and adjust workloads to ensure they stay within budget. The organization has three different teams and associated cloud environments:
development, staging, and production.
Which of the following access control models would be BEST in this scenario?
A. Mandatory
B. Rule-based
C. Discretionary
D. Role-based
正解：D