Question 1

A company has defined a multicloud model. Which of the following is the MOST important aspect to consider when defining the company's needs?
A) Change management
B) Data sovereignty
C) Data portability
D) Data classification

Accepted Answer

Data portability is the most important aspect to consider when defining a company's needs in a multicloud model. This is because data portability allows the company to move data between clouds easily and quickly, which is essential for ensuring business continuity and agility.

Question 2

Which of the following BEST describes decreasing the resources assigned to a system to avoid paying for unused capacity?
A) Orchestration
B) Auto-scaling
C) Right-sizing
D) Scalability

Accepted Answer

Right-sizing involves adjusting the resources assigned to a system to ensure they match the actual usage needs, thereby avoiding paying for unused capacity.

Question 3

A web application was deployed, and files are available globally to improve user experience. Which of the following technologies is being used?
A) SAN
B) CDN
C) VDI
D) API

Accepted Answer

CDN is a technology that is used to improve user experience by making files available globally.

Question 4

A cloud administrator configures a server to insert an entry into a log file whenever an administrator logs in to the server remotely. Which of the following BEST describes the type of policy being used?
A) Audit
B) Authorization
C) Hardening
D) Access

Accepted Answer

An audit policy is used to track and record activities on a system, such as logging administrator access, to ensure accountability and security.

Question 5

A document that outlines the scope of a project, specific deliverables, scheduling, and additional specific details from the client/buyer is called a:
A) statement of work.
B) standard operating procedure.
C) master service document.
D) service level agreement.

Accepted Answer

The answer of A document that outlines the scope of...

Question 6

When selecting a cloud provider, which of the following is MOST likely to be a financial consideration?
A) Proof of concept
B) Request for information
C) Licensing models
D) Request for proposal

Accepted Answer

Licensing models are a financial consideration as they determine the cost structure and pricing for using the cloud services.

Question 7

A new company directive requires all departments to ensure intellectual property is kept within a country's borders. Which of the following concepts BEST represents this requirement?
A) Data portability
B) Data security
C) Data locality
D) Data sovereignty

Accepted Answer

Data sovereignty refers to the concept that data is subject to the laws and governance structures within the nation it is collected. This aligns with the requirement to keep intellectual property within a country's borders.

Question 8

A report identified that several of a company's SaaS applications are against corporate policy. Which of the following is the MOST likely reason for this issue?
A) Shadow IT
B) Sensitive data
C) Encryption
D) Vendor lock-in

Accepted Answer

The answer of A report identified that several of a...

Question 9

The cloud consumer compliance team requires the IT department to patch and update cloud resources properly. Which of the following cloud service delivery models will BEST suit this need?
A) SaaS
B) DBaaS
C) DRaaS
D) IaaS

Accepted Answer

IaaS (Infrastructure as a Service) provides the most control over the underlying infrastructure, allowing the IT department to manage and apply patches and updates to cloud resources as needed.

Question 10

Transferring all of a customer's on-premises data and virtual machines to an appliance, and then shipping it to a cloud provider is a technique used in a:
A) phased migration approach.
B) replatforming migration approach.
C) rip and replace migration approach.
D) lift and shift migration approach.

Accepted Answer

The answer of Transferring all of a customer's on-premises data...

Question 11

A requirement states that an application must be restored within six hours. Which of the following should be included in the SLA to satisfy this requirement?
A) MTTR
B) RPO
C) ROI
D) RTO

Accepted Answer

RTO (Recovery Time Objective) specifies the maximum acceptable amount of time to restore a system or application after a disruption, aligning with the requirement to restore the application within six hours.

Question 12

A company purchased insurance due to the risks involved with a cloud migration project. Which of the following risk response strategies is this an example of?
A) Mitigation
B) Avoidance
C) Acceptance
D) Transference

Accepted Answer

Purchasing insurance is an example of risk transference, where the risk is shifted to a third party, in this case, the insurance company.

Question 13

A company wants to ensure its existing functionalities are not compromised by the addition of a new functionality. Which of the following is the BEST testing technique?
A) Regression
B) Stress
C) Load
D) Quality

Accepted Answer

Regression testing is the best technique to ensure that existing functionalities are not affected by new changes or additions.

Question 14

Which of the following BEST describes how a cloud provider helps a company with security risk responses?
A) Acceptance
B) Mitigation
C) Avoidance
D) Transference

Accepted Answer

Cloud providers help companies transfer some of their security risks by taking on the responsibility for certain security measures, such as infrastructure security and compliance, thus shifting some of the risk from the company to the provider.

Question 15

Which of the following techniques helps an organization determine benchmarks for application performance within a set of resources?
A) Auto-scaling
B) Load testing
C) Sandboxing
D) Regression testing

Accepted Answer

Load testing helps an organization determine benchmarks for application performance by simulating a large number of users or transactions to assess how the application performs under stress.

Question 16

A systems administrator is reviewing a disaster recovery option that requires little to no downtime in the event of a natural disaster. Which of the following BEST meets this requirement?
A) Configure availability zones.
B) Configure high availability.
C) Configure geo-redundancy.
D) Configure auto-scaling.

Accepted Answer

The answer of A systems administrator is reviewing a disaster...

Question 17

A company's current billing agreement is static. If the company were to migrate to an entirely IaaS-based setup, which of the following billing concepts would the company be adopting?
A) Enterprise agreement
B) Perpetual
C) Variable cost
D) Fixed cost

Accepted Answer

In an IaaS-based setup, billing is typically based on usage, which means costs can vary depending on the resources consumed, hence adopting a variable cost model.

Question 18

A company is migrating a legacy application to the cloud. Two C-level executives are currently engaged in the initial stages of the migration, and they are planning a rip-and-replace approach. Before initiating the project, the FIRST step should be to identify:
A) the required network performance.
B) the key stakeholders.
C) the desired CSP.
D) the required cloud services.
E) the required amount of storage.

Accepted Answer

The answer of A company is migrating a legacy application...

Question 19

A cloud risk assessment indicated possible outages in some regions. In response, the company enabled geo-redundancy for its cloud environment. Which of the following did the company adopt?
A) Risk mitigation
B) Risk acceptance
C) Risk transference
D) Risk avoidance

Accepted Answer

The answer of A cloud risk assessment indicated possible outages...

Question 20

A cloud administrator notices users call to report application performance degradation between 1:00 p.m. and 3:00 p.m. every day. Which of the following is the BEST option for the administrator to configure?
A) Locality
B) Block storage
C) Right-sizing
D) Auto-scaling

Accepted Answer

Auto-scaling is the best option as it automatically adjusts the resources allocated to an application based on the current demand, helping to handle increased load during peak times like 1:00 p.m. to 3:00 p.m. and improve performance.

Exam 4: CompTIA Advanced Security Practitioner (CASP+) CAS-004

A company has defined a multicloud model. Which of the following is the MOST important aspect to consider when defining the company's needs?

Which of the following BEST describes decreasing the resources assigned to a system to avoid paying for unused capacity?

A web application was deployed, and files are available globally to improve user experience. Which of the following technologies is being used?

A cloud administrator configures a server to insert an entry into a log file whenever an administrator logs in to the server remotely. Which of the following BEST describes the type of policy being used?

A document that outlines the scope of a project, specific deliverables, scheduling, and additional specific details from the client/buyer is called a:

When selecting a cloud provider, which of the following is MOST likely to be a financial consideration?

A new company directive requires all departments to ensure intellectual property is kept within a country's borders. Which of the following concepts BEST represents this requirement?

A report identified that several of a company's SaaS applications are against corporate policy. Which of the following is the MOST likely reason for this issue?

The cloud consumer compliance team requires the IT department to patch and update cloud resources properly. Which of the following cloud service delivery models will BEST suit this need?

Transferring all of a customer's on-premises data and virtual machines to an appliance, and then shipping it to a cloud provider is a technique used in a:

A requirement states that an application must be restored within six hours. Which of the following should be included in the SLA to satisfy this requirement?

A company purchased insurance due to the risks involved with a cloud migration project. Which of the following risk response strategies is this an example of?

A company wants to ensure its existing functionalities are not compromised by the addition of a new functionality. Which of the following is the BEST testing technique?

Which of the following BEST describes how a cloud provider helps a company with security risk responses?

Which of the following techniques helps an organization determine benchmarks for application performance within a set of resources?

A systems administrator is reviewing a disaster recovery option that requires little to no downtime in the event of a natural disaster. Which of the following BEST meets this requirement?

A company's current billing agreement is static. If the company were to migrate to an entirely IaaS-based setup, which of the following billing concepts would the company be adopting?

A company is migrating a legacy application to the cloud. Two C-level executives are currently engaged in the initial stages of the migration, and they are planning a rip-and-replace approach. Before initiating the project, the FIRST step should be to identify:

A cloud risk assessment indicated possible outages in some regions. In response, the company enabled geo-redundancy for its cloud environment. Which of the following did the company adopt?

A cloud administrator notices users call to report application performance degradation between 1:00 p.m. and 3:00 p.m. every day. Which of the following is the BEST option for the administrator to configure?