Question 1

A private cloud administrator needs to configure replication on the storage level for a required RPO of 15 minutes and RTO of one hour. Which of the following replication types would be the BEST to use?

Accepted Answer

Asynchronous replication is suitable for scenarios where the RPO is not zero, such as 15 minutes, because it allows for data to be replicated with a slight delay, which is acceptable for the given RPO and RTO requirements.

Question 2

After running monthly capacity reports on private cloud hosts, an engineer decides the CPU overcommitment ratio on the cluster is affecting performance on the VMs. If the engineer is trying to minimize costs, which of the following actions is the engineer MOST likely to take?

Accepted Answer

Decreasing the core count on the VMs will reduce the CPU overcommitment ratio and improve performance.

Question 3

A cloud engineer is deploying a new application to a multicloud platform. After running the script, the engineer sees the VMs were not created on one of the cloud providers. The engineer confirms the proper credentials are being used for all cloud providers and there is available capacity. Which of the following is the MOST likely cause of the deployment failure?

Accepted Answer

The answer of A cloud engineer is deploying a new...

Question 4

The on-premises database server is experiencing high memory and CPU utilization over the course of a month. The current on-premises infrastructure is at capacity with no ability to scale up. The Chief Technology Officer (CTO) has asked the CSA to provide a solution without any capital expenditure. Which of the following is the BEST solution to resolve the issue?

Accepted Answer

Migrating the database to Database as a Service (DBaaS) allows for scalability without capital expenditure, as it typically involves operational expenses instead.

Question 5

Ann, an internal user, has been accessing an internal SaaS solution on a different subnet for the last several months. When Ann tries to connect to the application today, she receives an error stating the resource cannot be found. When checking with her teammates, she discovers some users can access the resource and others cannot. Which of the following tools would be the BEST option to determine where the issue is located?

Accepted Answer

The answer of Ann, an internal user, has been accessing...

Question 6

An organization just went through a substantial audit, and the top findings were orphaned and inactive privileged accounts. Given the scenario, which of the following would be the BEST method for addressing these findings?

Accepted Answer

The answer of An organization just went through a substantial...

Question 7

A company moved its on-premises applications to several SaaS providers. As a result, the security team is concerned about accounts being compromised. Which of the following should the security team implement to reduce this risk?

Accepted Answer

The answer of A company moved its on-premises applications to...

Question 8

Given the IaaS cloud service model, at which of the following layers of the platform does microsegmentation BEST apply?

Accepted Answer

Microsegmentation is a security technique that applies at the network layer, allowing for the creation of secure zones in data centers and cloud environments to isolate workloads from one another.

Question 9

A company is seeking a new backup solution for its virtualized file servers that fits the following characteristics: The files stored on the servers are extremely large. Existing files receive multiple small changes per day. New files are only created once per month. All backups are being sent to a cloud repository. Which of the following would BEST minimize backup size?

Accepted Answer

Change block tracking is efficient for minimizing backup size as it only backs up the changed portions of files, rather than the entire file, which is ideal for large files with frequent small changes.

Question 10

A cloud administrator for a customer's environment must ensure the availability of critical applications. The cloud provider hosting the infrastructure lost power, and the environment was down for four hours. Which of the following solutions is MOST suitable for ensuring availability of critical applications?

Accepted Answer

Enabling High Availability (HA) on the critical infrastructure ensures that there are redundant systems in place to take over in case of a failure, thus maintaining the availability of critical applications.

Question 11

The risk and compliance team mandates that all PII should be sent via secure and encrypted channels via webmail. As the SaaS administrator, which of the following is the BEST method for implementing data governance?

Accepted Answer

The answer of The risk and compliance team mandates that...

Question 12

A healthcare provider determines a Europe-based SaaS electronic medical record system will meet all functional requirements. The healthcare provider plans to sign a contract to use the system starting in the next calendar year. Which of the following should be reviewed prior to signing the contract?

Accepted Answer

Security auditing should be reviewed to ensure that the SaaS provider complies with necessary security standards and regulations, especially considering the sensitive nature of medical records.

Question 13

An administrator needs to deploy a new release of an application in a way that allows a quick rollback to the previous version of the application. Which of the following is the BEST strategy to apply?

Accepted Answer

The answer of An administrator needs to deploy a new...

Question 14

Which of the following provides the BEST approach for deploying multiple new firewalls into an IaaS cloud environment with minimal errors?

Accepted Answer

Automated and orchestrated deployment is the best approach as it reduces human error, ensures consistency, and allows for efficient scaling and management of multiple firewalls in a cloud environment.

Question 15

A customer wants to remove a user's access to the SaaS CRM system. Which of the following methods should be executed FIRST?

Accepted Answer

Disabling the user account is the first step to immediately prevent access while retaining the account for potential future use or auditing.

Question 16

A cloud administrator needs to give a new developer access to contents in a directory stored in a public cloud provider. Which of the following is the BEST way to do this?

Accepted Answer

Adding the developer to the role that has access to the directory contents is the best practice as it ensures proper access control and maintains security by using role-based access management.

Question 17

Since the hypervisors were upgraded to the latest version, each new deployment results in an error being displayed at the orchestrator. To troubleshoot the issue, which of the following should be done FIRST?

Accepted Answer

Confirming the compatibility matrix should be done first to ensure that the new hypervisor version is compatible with the orchestrator and other components in the environment.

Question 18

A cloud engineer is required to ensure all servers in the cloud environment meet requirements for PCI compliance. One of the requirements is to make certain all administrator logins and commands are logged. Which of the following is the BEST approach to meet these requirements?

Accepted Answer

The answer of A cloud engineer is required to ensure...

Question 19

A company is required to ensure all access to its cloud instance for all users to utilize two-factor authentication. The QA team confirms all functional requirements successfully test. After deployment, all business users report the two-factor authentication is not enforced while accessing the instance. Which of the following would be the MOST likely reason the QA team did not catch the issue?

Accepted Answer

The QA team only tested functional requirements, which might not include testing the enforcement of two-factor authentication for all users, leading to the oversight.

Question 20

A firm responsible for ticket sales notices its local web servers are unable to handle the traffic, which often causes timeout errors and results in lost revenue. The firm wants to obtain additional cloud-based server resources only during peak times. Due to budget constraints, the firm wants to purchase only the exact amount required during peak times. Which of the following steps should be performed to BEST meet the budget requirement?

Accepted Answer

Cloud bursting allows the firm to use additional cloud-based resources only during peak times, ensuring they only pay for what they need, aligning with their budget constraints.

Exam 6: CompTIA CySA+ Certification Exam (CS0-002)