For compliance purposes, a cloud developer at an insurance company needs to save all customer policies for more than ten years. Which of the following options is the most cost-
efficient tier to save the data in the cloud?
Correct : A
For compliance purposes, saving customer policies for more than ten years most cost-efficiently can be achieved by using the Archive storage tier. Archive or archival storage is designed for data that needs to be retained over the long term but accessed infrequently. It is generally the most cost-effective storage tier for this type of data. Reference: CompTIA Cloud+ Study Guide (Exam CV0-004) by Todd Montgomery and Stephen Olson
Start a Discussions
An IT manager needs to deploy a cloud solution that meets the following requirements:
. Users must use two authentication methods to access resources.
* Each user must have 10GB of storage space by default.
Which of the following combinations should the manager use to provision these requirements?
Correct : C
The combination that should be used to provision the requirements of two authentication methods and 10GB of storage space by default for each user is Multi-Factor Authentication (MFA) and storage quotas. MFA provides an additional layer of security beyond just a username and password, and storage quotas can be used to allocate a specific amount of storage space for each user. Reference: CompTIA Cloud+ Study Guide (Exam CV0-004) by Todd Montgomery and Stephen Olson
Start a Discussions
A systems administrator is configuring backups on a VM and needs the process to run as quickly as possible, reducing the bandwidth on the network during all times from Monday through Saturday. In the event of data corruption, the management team expects the mean time to recovery to be as low as possible. Which of the following backup methods can the administrator use to accomplish these goals?
Correct : B
To achieve a quick backup process and reduce bandwidth use, the administrator should perform a Full backup on Sunday and incremental backups on all other days of the week. This method ensures that only the changes made since the last full backup are copied, reducing the amount of data that needs to be transferred each time, and thus the time and bandwidth required. Reference: CompTIA Cloud+ Study Guide (Exam CV0-004) by Todd Montgomery and Stephen Olson
Start a Discussions
A cloud administrator recently created three servers in the cloud. The goal was to create ACLs so the servers could not communicate with each other. The servers were configured
with the following IP addresses:
After implementing the ACLs, the administrator confirmed that some servers are still able to reach the other servers. Which of the following should the administrator change to
prevent the servers from being on the same network?
Correct : B
To prevent the servers from being on the same network and communicating with each other, the administrator should change the IP address of Server 1 to 172.16.12.2. This IP address is outside the subnet defined by the subnet mask 255.255.255.240, which would place Server 1 on a different subnet, preventing direct communication without routing. Reference: CompTIA Cloud+ Study Guide (Exam CV0-004) by Todd Montgomery and Stephen Olson
Start a Discussions
A company hosts various containerized applications for business uses. A client reports that one of its routine business applications fails to load the web-based login prompt hosted in the company cloud.
INSTRUCTIONS
Click on each device and resource. Review the configurations, logs, and characteristics of each node in the architecture to diagnose the issue. Then, make the necessary changes to the WAF configuration to remediate the issue.
Web app 1
Web app 2
Web app 3
Web app 4
Client app
Correct : A
The issue is with Web app 1 (Finance application).
From the WAF logs, we can see that requests to https://webapp1.comptia.org/FIN/login.html are being blocked (Rule ID 1006). The rule is configured to block access to the finance application's login page. This corresponds to the reported issue of the web-based login prompt not loading.
To remediate the issue, the WAF configuration for Rule ID 1006 should be changed from 'Block' to 'Allow'. This will enable the web-based login prompt to load for the client.
Additionally, the client app configuration indicates that the client laptop (IP 192.168.10.142) is trying to access the service, and the WAF logs show that requests from this IP are being blocked due to the current rule set. Changing the action for Rule ID 1006 will also ensure that legitimate attempts to access the login page from this IP are not blocked.
Steps for remediation:
Go to the WAF configuration.
Find Rule ID 1006 for the Finance application 1.
Change the action from 'Block' to 'Allow'.
Save the changes.
Web application firewall (WAF) configurations typically include rules that define which traffic should be allowed or blocked. Blocking legitimate traffic to login pages can prevent users from accessing the application, which seems to be the case here.
Client application configurations and WAF logs provide valuable insights into the source of the traffic and the rules that are affecting it. It's important to ensure that the rules align with the intended access policies for the application.
Start a Discussions