Question 1

A private cloud administrator needs to configure replication on the storage level for a required RPO of 15 minutes and RTO of one hour. Which of the following replication types would be the BEST to use?
A) Cold storage
B) Regional
C) Asynchronous
D) Multiregional

Accepted Answer

Asynchronous replication is suitable for scenarios where the RPO is not zero, such as 15 minutes, because it allows for data to be replicated with a slight delay, which is acceptable for the given RPO and RTO requirements.

Question 2

After running monthly capacity reports on private cloud hosts, an engineer decides the CPU overcommitment ratio on the cluster is affecting performance on the VMs. If the engineer is trying to minimize costs, which of the following actions is the engineer MOST likely to take?
A) Increase the socket count on cloud hosts.
B) Turn on ballooning on the VMs.
C) Decrease the core count on the VMs.
D) Deploy more VMs to each host.

Accepted Answer

Decreasing the core count on the VMs will reduce the CPU overcommitment ratio and improve performance.

Question 3

A cloud engineer is deploying a new application to a multicloud platform. After running the script, the engineer sees the VMs were not created on one of the cloud providers. The engineer confirms the proper credentials are being used for all cloud providers and there is available capacity. Which of the following is the MOST likely cause of the deployment failure?
A) The cloud provider was not available.
B) The application does not have an adequate number of licenses.
C) The additional cloud provider is in a separate time zone.
D) The script created to be deployed does not match the cloud provider API.

Accepted Answer

The answer of A cloud engineer is deploying a new...

Question 4

The on-premises database server is experiencing high memory and CPU utilization over the course of a month. The current on-premises infrastructure is at capacity with no ability to scale up. The Chief Technology Officer (CTO) has asked the CSA to provide a solution without any capital expenditure. Which of the following is the BEST solution to resolve the issue?
A) Increase CPU on the database server.
B) Allocate more RAM to the database server.
C) Increase storage on the database server.
D) Migrate the database to DBaaS.
E) Migrate the database to a new server.

Accepted Answer

Migrating the database to Database as a Service (DBaaS) allows for scalability without capital expenditure, as it typically involves operational expenses instead.

Question 5

Ann, an internal user, has been accessing an internal SaaS solution on a different subnet for the last several months. When Ann tries to connect to the application today, she receives an error stating the resource cannot be found. When checking with her teammates, she discovers some users can access the resource and others cannot. Which of the following tools would be the BEST option to determine where the issue is located?
A) ipconfig or ifconfig ipconfig or ifconfig
B) ping
C) netstat
D) tracert or traceroute tracert traceroute

Accepted Answer

The answer of Ann, an internal user, has been accessing...

Question 6

An organization just went through a substantial audit, and the top findings were orphaned and inactive privileged accounts. Given the scenario, which of the following would be the BEST method for addressing these findings?
A) SSO with federation integration
B) ACLs and permissions verification
C) Multifactor authentication
D) Time-bound, just-in-time account provisioning

Accepted Answer

The answer of An organization just went through a substantial...

Question 7

A company moved its on-premises applications to several SaaS providers. As a result, the security team is concerned about accounts being compromised. Which of the following should the security team implement to reduce this risk?
A) Multifactor authentication
B) Single sign-on
C) Federation
D) Role-based access control
E) Virtual private network

Accepted Answer

The answer of A company moved its on-premises applications to...

Question 8

Given the IaaS cloud service model, at which of the following layers of the platform does microsegmentation BEST apply?
A) Compute
B) Storage
C) Network
D) Management

Accepted Answer

Microsegmentation is a security technique that applies at the network layer, allowing for the creation of secure zones in data centers and cloud environments to isolate workloads from one another.

Question 9

A company is seeking a new backup solution for its virtualized file servers that fits the following characteristics: The files stored on the servers are extremely large. Existing files receive multiple small changes per day. New files are only created once per month. All backups are being sent to a cloud repository. Which of the following would BEST minimize backup size?
A) Local snapshots
B) Real-time backups
C) File-based replication
D) Change block tracking

Accepted Answer

Change block tracking is efficient for minimizing backup size as it only backs up the changed portions of files, rather than the entire file, which is ideal for large files with frequent small changes.

Question 10

A cloud administrator for a customer's environment must ensure the availability of critical applications. The cloud provider hosting the infrastructure lost power, and the environment was down for four hours. Which of the following solutions is MOST suitable for ensuring availability of critical applications?
A) Install services at alternate sites.
B) Enable HA on the critical infrastructure.
C) Move services to a third-party environment.
D) Deploy additional services to edge sites.

Accepted Answer

Enabling High Availability (HA) on the critical infrastructure ensures that there are redundant systems in place to take over in case of a failure, thus maintaining the availability of critical applications.

Question 11

The risk and compliance team mandates that all PII should be sent via secure and encrypted channels via webmail. As the SaaS administrator, which of the following is the BEST method for implementing data governance?
A) Data custodian register
B) Information usage policy
C) Data classification matrix
D) Fileshare permissions

Accepted Answer

The answer of The risk and compliance team mandates that...

Question 12

A healthcare provider determines a Europe-based SaaS electronic medical record system will meet all functional requirements. The healthcare provider plans to sign a contract to use the system starting in the next calendar year. Which of the following should be reviewed prior to signing the contract?
A) Security auditing
B) Storage cost and types
C) Bandwidth utilization
D) Third-party integration

Accepted Answer

Security auditing should be reviewed to ensure that the SaaS provider complies with necessary security standards and regulations, especially considering the sensitive nature of medical records.

Question 13

An administrator needs to deploy a new release of an application in a way that allows a quick rollback to the previous version of the application. Which of the following is the BEST strategy to apply?
A) Deploy the application to a set of servers in small batches. If a rollback is necessary, restore the previous deployment from snapshots or backups.
B) Deploy the application to a subset of servers that expose the new application. Direct all traffic to these servers. If a rollback is necessary, redirect all traffic to the previous subset of servers.
C) Deploy the application to the servers in a backup datacenter or secondary cloud deployment. Shut down the servers in the primary datacenter, forcing all traffic to the failover location. If a rollback is necessary, restart the primary environment and shut down the secondary environment.
D) Deploy the application to all servers in the datacenter or cloud environment. If a rollback is necessary, undeploy the application and deploy the previous version.

Accepted Answer

The answer of An administrator needs to deploy a new...

Question 14

Which of the following provides the BEST approach for deploying multiple new firewalls into an IaaS cloud environment with minimal errors?
A) Manual deployment configuration
B) Cloud provider installation
C) Automated and orchestrated deployment
D) Firewall configuration clone

Accepted Answer

Automated and orchestrated deployment is the best approach as it reduces human error, ensures consistency, and allows for efficient scaling and management of multiple firewalls in a cloud environment.

Question 15

A customer wants to remove a user's access to the SaaS CRM system. Which of the following methods should be executed FIRST?
A) User account removal
B) User account lockout
C) User account password change
D) User account disablement

Accepted Answer

Disabling the user account is the first step to immediately prevent access while retaining the account for potential future use or auditing.

Question 16

A cloud administrator needs to give a new developer access to contents in a directory stored in a public cloud provider. Which of the following is the BEST way to do this?
A) Add the developer to the role that has access to the directory contents.
B) Create a folder for the developer in the public cloud and copy the content to this folder.
C) Copy the contents of the folder to the developer's local computer.
D) Temporarily give the administrator's credentials and reset the password.

Accepted Answer

Adding the developer to the role that has access to the directory contents is the best practice as it ensures proper access control and maintains security by using role-based access management.

Question 17

Since the hypervisors were upgraded to the latest version, each new deployment results in an error being displayed at the orchestrator. To troubleshoot the issue, which of the following should be done FIRST?
A) Verify the domain account is not locked
B) Upgrade the orchestrator to the latest version
C) Confirm the compatibility matrix
D) Upgrade the VMs to the latest version

Accepted Answer

Confirming the compatibility matrix should be done first to ensure that the new hypervisor version is compatible with the orchestrator and other components in the environment.

Question 18

A cloud engineer is required to ensure all servers in the cloud environment meet requirements for PCI compliance. One of the requirements is to make certain all administrator logins and commands are logged. Which of the following is the BEST approach to meet these requirements?
A) Enable configuration change tracking for all servers in the public cloud provider's dashboard.
B) Enable detailed monitoring for all servers in the public cloud provider's dashboard.
C) Define and enable audit tracking rules on each server in the public cloud environment.
D) Modify the cloud provider's role-based authorization policies to log user session activity.

Accepted Answer

The answer of A cloud engineer is required to ensure...

Question 19

A company is required to ensure all access to its cloud instance for all users to utilize two-factor authentication. The QA team confirms all functional requirements successfully test. After deployment, all business users report the two-factor authentication is not enforced while accessing the instance. Which of the following would be the MOST likely reason the QA team did not catch the issue?
A) The business users are using the wrong hardware token to log in.
B) The administrator configured to use two-factor authentication by default.
C) The QA team only tested functional requirements.
D) The business users are accessing the instance located in their country.

Accepted Answer

The QA team only tested functional requirements, which might not include testing the enforcement of two-factor authentication for all users, leading to the oversight.

Question 20

A firm responsible for ticket sales notices its local web servers are unable to handle the traffic, which often causes timeout errors and results in lost revenue. The firm wants to obtain additional cloud-based server resources only during peak times. Due to budget constraints, the firm wants to purchase only the exact amount required during peak times. Which of the following steps should be performed to BEST meet the budget requirement?
A) Collect all web server specifications and purchase double the amount of resources from the CSP.
B) Analyze web server performance trends to determine what is being used.
C) Implement cloud bursting through CSP for web servers.
D) Run a network analyzer to monitor web server traffic to determine peak traffic times.

Accepted Answer

Cloud bursting allows the firm to use additional cloud-based resources only during peak times, ensuring they only pay for what they need, aligning with their budget constraints.

Exam 6: CompTIA CySA+ Certification Exam (CS0-002)

A private cloud administrator needs to configure replication on the storage level for a required RPO of 15 minutes and RTO of one hour. Which of the following replication types would be the BEST to use?

After running monthly capacity reports on private cloud hosts, an engineer decides the CPU overcommitment ratio on the cluster is affecting performance on the VMs. If the engineer is trying to minimize costs, which of the following actions is the engineer MOST likely to take?

An organization just went through a substantial audit, and the top findings were orphaned and inactive privileged accounts. Given the scenario, which of the following would be the BEST method for addressing these findings?

A company moved its on-premises applications to several SaaS providers. As a result, the security team is concerned about accounts being compromised. Which of the following should the security team implement to reduce this risk?

Given the IaaS cloud service model, at which of the following layers of the platform does microsegmentation BEST apply?

The risk and compliance team mandates that all PII should be sent via secure and encrypted channels via webmail. As the SaaS administrator, which of the following is the BEST method for implementing data governance?

An administrator needs to deploy a new release of an application in a way that allows a quick rollback to the previous version of the application. Which of the following is the BEST strategy to apply?

Which of the following provides the BEST approach for deploying multiple new firewalls into an IaaS cloud environment with minimal errors?

A customer wants to remove a user's access to the SaaS CRM system. Which of the following methods should be executed FIRST?

A cloud administrator needs to give a new developer access to contents in a directory stored in a public cloud provider. Which of the following is the BEST way to do this?

Since the hypervisors were upgraded to the latest version, each new deployment results in an error being displayed at the orchestrator. To troubleshoot the issue, which of the following should be done FIRST?

A cloud engineer is required to ensure all servers in the cloud environment meet requirements for PCI compliance. One of the requirements is to make certain all administrator logins and commands are logged. Which of the following is the BEST approach to meet these requirements?