本日更新の2023年11月試験エンジンとPDF CV0-003テスト無料！
究極のガイド準備CV0-003正確なPDF解答
質問 # 153
Which of the following strategies will mitigate the risk of a zero-day vulnerability MOST efficiently?
- A. Creating a standby environment with a different cloud provider
- B. Keeping all resources up to date
- C. Having a detailed incident response plan
- D. Using only open-source technologies
正解：C
解説：
Explanation
An incident response plan is a document or procedure that defines the roles, responsibilities, and actions to be taken in the event of a security incident or breach. Having a detailed incident response plan can help mitigate the risk of a zero-day vulnerability most efficiently, as it can provide a clear and consistent framework for identifying, containing, analyzing, and resolving any potential threats or exploits related to the unknown or unpatched vulnerability. Having a detailed incident response plan can also help minimize the impact and damage of a security incident or breach, as it can enable timely and effective recovery and restoration processes. References: CompTIA Cloud+ Certification Exam Objectives, page 14, section 2.7
質問 # 154
An administrator has been informed that some requests are taking a longer time to respond than other requests of the same type. The cloud consumer is using multiple network service providers and is performing link load balancing for bandwidth aggregation. Which of the following commands will help the administrator understand the possible latency issues?
- A. ping
- B. netstat
- C. traceroute
- D. ipconfig
正解：A
解説：
Ping is the command that will help the administrator understand the possible latency issues between different network service providers and link load balancing for bandwidth aggregation. Ping is a network utility that sends packets of data to a specific IP address or hostname and measures the time it takes for them to be sent back (round-trip time). Ping can help to test connectivity, availability, and latency of network devices or systems. Ping can help to understand latency issues by comparing the round-trip times between different network service providers and link load balancing devices, and identifying any delays or variations in response times.
質問 # 155
A small software development company wants to provide four of their developers with the ability to create four or five VMs each. The company also wants to be able to share all of the VM images and snapshots on a NAS. Which of the following would meet these objectives at the lowest cost?
- A. Type I hypervisor
- B. Workstation level hypervisor
- C. Bare metal hypervisor
- D. Enterprise level hypervisor
正解：D
質問 # 156
An organization is hosting a cloud-based web server infrastructure that provides web-hosting solutions. Sudden continuous bursts of traffic have caused the web servers to saturate CPU and network utilizations.
Which of the following should be implemented to prevent such disruptive traffic from reaching the web servers?
- A. A solution to achieve microsegmentation
- B. Solutions to perform NAC and DLP
- C. QoS on the network
- D. DDoS protection
正解：D
解説：
https://blog.paessler.com/the-top-5-causes-of-sudden-network-spikes
質問 # 157
A systems administrator is deploying a solution that includes multiple network I/O-intensive VMs. The solution design requires that vNICs of the VMs provide low-latency, near-native performance of a physical NIC and data protection between the VMs. Which of the following would BEST satisfy these requirements?
- A. SR-IOV
- B. GENEVE
- C. SDN
- D. VLAN
正解：A
解説：
Explanation
SR-IOV (Single Root Input/Output Virtualization) is what would best satisfy the requirements of low-latency, near-native performance of a physical NIC and data protection between VMs for multiple network I/O-intensive VMs. SR-IOV is a technology that allows a physical NIC to be partitioned into multiple virtual NICs that can be assigned to different VMs. SR-IOV can provide the following benefits:
Low-latency: SR-IOV can reduce latency by bypassing the hypervisor and allowing direct communication between the VMs and the physical NIC, without any overhead or interference.
Near-native performance: SR-IOV can provide near-native performance by allowing the VMs to use the full capacity and functionality of the physical NIC, without any emulation or translation.
Data protection: SR-IOV can provide data protection by isolating and securing the network traffic between the VMs and the physical NIC, without any exposure or leakage.
質問 # 158
A cloud administrator is responsible for managing a cloud-based content management solution. According to the security policy, any data that is hosted in the cloud must be protected against data exfiltration. Which of the following solutions should the administrator implement?
- A. WAF
- B. HIDS
- C. DLP
- D. FIM
正解：C
解説：
DLP (Data Loss Prevention) is what the administrator should implement to protect data against data exfiltration in a cloud-based content management solution. Data exfiltration is a process of transferring or stealing data from a system or network without authorization or permission. Data exfiltration can cause data breaches, leaks, or losses that may affect confidentiality, integrity, or availability of data. DLP is a tool or service that monitors and controls data movement and usage within a system or network. DLP can help to prevent data exfiltration by detecting and blocking any unauthorized or suspicious data transfers or activities, as well as enforcing policies and rules for data classification, encryption, access, etc.
質問 # 159
A systems administrator is provisioning VMs in a cloud environment and has been told to select an OS build with the furthest end-of-life date.
Which of the following OS builds would be BEST for the systems administrator to use?
- A. Canary
- B. Open-source
- C. LTS
- D. Beta
- E. Stable
正解：E
質問 # 160
A systems administrator needs to implement a service to protect a web application from external attacks. The administrator must have session-based granular control of all HTTP traffic. Which of the following should the administrator configure?
- A. DLP
- B. IDS
- C. WAF
- D. NAC
正解：C
解説：
Reference:
A web application firewall (WAF) is a type of firewall that monitors and filters HTTP traffic to and from a web application. It can detect and block malicious requests, such as SQL injection, cross-site scripting, or denial-of-service attacks. It can also provide session-based granular control of HTTP traffic, such as allowing or denying access based on user identity, location, or behavior. Reference: CompTIA Cloud+ Certification Exam Objectives, Domain 2.0 Security, Objective 2.2 Given a scenario, implement appropriate network security controls for a cloud environment.
質問 # 161
A customer recently provisioned a new server on the IaaS. The IP address assigned from the pool resolves to another hostname. Some user traffic is being dumped or is causing slowness because of this issue. Which of the following maintenance activities does the provider need to perform to prevent this issue?
- A. Run a script to remove stale DNS entries.
- B. Use cloud provider tools to remove orphaned resources.
- C. Initiate resource reclamation.
- D. Update outdated security firewall configurations.
正解：A
質問 # 162
An administrator has recently deployed a private cloud to be used as development environment by the engineering department. The host server has both SSD and SATA drivers. Which of the following should the administrator create to ensure the engineering department can only select SATA storage when using the self-service portal?
- A. VM template
- B. SAN
- C. Storage tiering
- D. VHD
正解：C
質問 # 163
A web server has been deployed in a public IaaS provider and has been assigned the public IP address of 72.135.10.100. Users are now reporting that when they browse to the website, they receive a message indicating the service is unavailable. The cloud administrator logs into the server, runs a netstat command, and notices the following relevant output:
Which of the following actions should the cloud administrator take to resolve the issue?
- A. Configure the WAF to filter requests from 17.3.130.3
- B. Assign a new IP address of 192.168.100.10 to the web server
- C. Modify the firewall on 72.135.10.100 to allow only UDP
- D. Update the gateway on the web server to use 72.135.10.1
正解：D
質問 # 164
A company is performing a P2V conversion of all developer machines to a VDI. Which of the following should the administrator configure to ensure disk throughput is not saturated by one machine or another?
- A. Disk I/O monitoring on the VMs
- B. Disk I/O throttling on the VMs
- C. Each VM to use a virtual SCSI adapter
- D. DCB on the FC fabric
正解：B
質問 # 165
The helpdesk starts receiving calls from a number of users that are suddenly having issues accessing one of the project management shared drives. When Joe, an administrator, logs onto the guest hosting the drive via the console he is able to get to the information. Which of the following failures could have caused this issue?
- A. Memory failure
- B. Disk failure
- C. NIC failure
- D. CPU failure
正解：C
質問 # 166
A company is utilizing a private cloud solution that is hosted within its datacenter. The company wants to launch a new business application, which requires the resources below:
The current private cloud has 30 vCPUs and 512GB RAM available. The company is looking for a quick solution to launch this application, with expected maximum sessions to be close to 24,000 at launch and an average of approximately 5,000 sessions.
Which of the following solutions would help the company accommodate the new workload in the SHORTEST amount of time and with the maximum financial benefits?
- A. Set up cloud bursting for the additional resources
- B. Add more capacity to the private cloud
- C. Migrate all workloads to a public cloud provider
- D. Configure auto-scaling within the private cloud
正解：A
解説：
Explanation
Cloud Bursting can be used for both compute and storage. This question is about compute capability.
"Compute Bursting" unleashes the high-performance compute capabilities of the cloud for processing locally created datasets. (reference: https://www.ctera.com/it-initiatives/cloud-bursting/)
https://azure.microsoft.com/en-us/overview/what-is-cloud-bursting/
質問 # 167
A system administrator needs to spread data storage allocation across multiple physical drives and ensure that these are mapped properly to communicate with the virtual server farm. The administrator also needs the ability to quickly create or remove these mappings so data storage is not assigned without being used. Which of the following storage techniques would fit these requirements?
- A. Multipathing
- B. Physical LUN
- C. Subnet masking
- D. Virtual LUN
正解：A
質問 # 168
......
合格させるCompTIAはFast2test試験問題集：https://jp.fast2test.com/CV0-003-premium-file.html
完全版最新のCV0-003問題集で100%カバー率問題と解答があなたをリアル試験で合格させる：https://drive.google.com/open?id=1WwNmJ4qYBYtLnlyx8GQDoOAP-0SiiaZJ