Question 1

While reviewing the auto-scaling events for a web application, a cloud engineer identified that the application upsized and downsized multiple times within the last hour. Which of the following should the cloud engineer do NEXT?
A) Add more systems into the scaling group.
B) Review the load balancer configuration settings.
C) Review auto-scaling policies to detect a misconfiguration.
D) Monitor auto-scaling events for the next 24 hours.

Accepted Answer

The cloud engineer should review the auto-scaling policies to detect any misconfiguration that might be causing the application to scale up and down frequently.

Question 2

A company has implemented a dual-region (Region 1 and Region 2) cloud strategy from its current CSP. Both regions have the same data in them. Region 2 is experiencing an outage. Which of the following is the BEST way to provide service to users in Region 2 during the outage while allowing access to the data?
A) Bring the backup instances online and provide Region 2 users access to their data.
B) Add more network bandwidth to Region 2.
C) Copy Region 1 data to a location in Region 3 and have users access their data.
D) Redirect users from Region 2 to Region 1.

Accepted Answer

Redirecting users from Region 2 to Region 1 is the best solution because both regions have the same data, and this approach ensures continuous access to the data without needing additional resources or data copying.

Question 3

A SaaS customer reports that no one can access the application portal. After some troubleshooting, the cloud administrator finds a problem and provides a remedy by restarting the cluster. After documenting the solution, the support case is closed. Multiple tenants lose access to their hosts the following day. Which of the following troubleshooting steps did the administrator miss?
A) Identify the problem.
B) Establish a theory.
C) Verify full system functionality.
D) Test the theory.
E) Establish a plan of action.

Accepted Answer

The administrator missed verifying full system functionality after implementing the solution, which could have prevented the issue from recurring.

Question 4

Ann, a cloud administrator, is reporting on how the organization has adhered to its marketing of 99.99999% system availability SLA. Given this scenario, which of the following should Ann include in her report?
A) System clock time
B) System idle percentage
C) System response time
D) System uptime

Accepted Answer

System uptime is a direct measure of system availability and is relevant to reporting adherence to a system availability SLA.

Question 5

A pharmaceutical company is migrating its systems and infrastructure to the cloud. Due to security restrictions and regulatory policies, the company Chief Executive Officer (CEO) is concerned about moving this information to the cloud. Based on the CEO's concern, which of the following should the company do First?
A) Review compliance requirements.
B) Apply defined audit/compliance requirements.
C) Review company security policies.
D) Update the security tools to systems and services.

Accepted Answer

The company should first review compliance requirements to ensure that any cloud migration aligns with regulatory and security standards, addressing the CEO's concerns.

Question 6

A mobile subscriber is experiencing random limited-service outages. Customers report being unable to make calls or browse. The service provider management console is not showing any alarms, errors, or critical logs, but does show a large number of connection request failures. Which of the following could be the problem?
A) Misconfigured federation
B) IP address limitations
C) SSO failure
D) Unavailable directory service

Accepted Answer

The answer of A mobile subscriber is experiencing random limited-service...

Question 7

Asynchronous data replication for a SaaS application occurs between Regions A and B. Users in Region A are reporting that the most current data for an insurance claims application is not available to them until after 11:30 a.m. The cloud administrator for this SaaS provider checks the network utilization and finds that only about 10% of the network bandwidth is being used. Which of the following describes how the cloud administrator could BEST resolve this issue?
A) Check the storage utilization logs in both regions.
B) Check the RAM utilization logs in both regions.
C) Check the CPU utilization logs in both regions.
D) Check the storage commit logs in both regions.

Accepted Answer

The storage commit logs will show when data is actually being written and committed to storage in both regions, which can help identify any delays in data replication.

Question 8

A company is subcontracting part of a large project to another company. Management wants to ensure that there is a secure way for employees from both companies to share data without exposing internal information to employees at the other company. Which of the following cloud models BEST serves this purpose?
A) Hybrid
B) Public
C) Private
D) Community

Accepted Answer

A community cloud model allows multiple organizations to share infrastructure and resources in a secure manner, suitable for collaboration while maintaining privacy.

Question 9

Given the metric below:  Using iSCSI storage reports across three datacenters, which of the following recorded metrics indicates an anomaly in the performance?
A) Disk latency
B) CPU utilization
C) WAN latency
D) RAM utilization

Accepted Answer

The answer of Given the metric below:  Using iSCSI...

Question 10

A cloud administrator has deployed a new web application to a private cloud. The application platform consists of two web servers that communicate to a redundant database back end. The traffic to the web servers is directed by a load balancer appliance. The administrator connects to the website on each of the webservers individually and confirms they are able to log in. Which of the following aspects of the application has the administrator tested successfully?
A) Connectivity
B) Failover
C) Data Integrity
D) Performance

Accepted Answer

The administrator has tested connectivity by confirming that they can log in to the website on each web server individually.

Question 11

A cloud application development team needs to consider the following requirements to the built in as part of the application's authentication process: - Customers should have the flexibility to use their own identity stores within the authentication process. - Customers should not be asked to provide the credentials repeatedly for different applications with different permission sets. Which of the following solutions would BEST help the team achieve the above business objectives? (Choose two.)
A) Certificates
B) Single sign-on
C) One-time passwords
D) Federation
E) Multifactor authentication
F) Hardware tokens

Accepted Answer

The answer of A cloud application development team needs to...

Question 12

A cloud-based web proxy is blocking key sites that a business requires for operation. After validation, the sites are legitimate, and access is required for end users to complete their work. Which of the following is the BEST solution to allow access to the sites?
A) Instruct users to bypass the cloud-based web proxy.
B) Whitelist the URLs.
C) Blacklist the URLs.
D) Create a security group for those users and enforce MFA.

Accepted Answer

Whitelisting the URLs will allow access to the legitimate sites while maintaining the security provided by the cloud-based web proxy.

Question 13

A company is using storage-as-a-service from an IaaS provider for application services. The company has a mandate to protect personal information being stored on the cloud. The service provided includes encryption for in-transit data and requires a security solution for data-at-rest. Which of the following should be deployed to secure the personal information?
A) Implement data tokenization.
B) Implement hardware-based encryption.
C) Implement centralized key management.
D) Implement database-embedded encryption.

Accepted Answer

Centralized key management is crucial for managing encryption keys securely, ensuring that data-at-rest is encrypted and protected effectively.

Question 14

It is taking an unusually long time for a financial division to run monthly reports on its SaaS-based, multitenant application. The cloud provider has grown exponentially, and more financial industry clients have moved their processing to the SaaS provider. Which of the following is the MOST probable cause of the issue?
A) The SSL certificate used by the SaaS provider has expired and is no longer valid.
B) Some of the new tenants are not from the financial industry and are causing data integrity issues.
C) The CSP did not keep up with the growth and the appropriate supporting infrastructure.
D) The licensing limit has been exceeded on the SaaS-based, multitenant application server.

Accepted Answer

The answer of It is taking an unusually long time...

Question 15

Based on demand, an IaaS provider wants to deploy a security application for its customers. Which of the following is the BEST technique for the IaaS provider to apply this to target systems?
A) Vendor application
B) Scripting
C) Orchestration
D) Custom programming

Accepted Answer

Orchestration is the best technique as it automates the deployment, management, and coordination of complex systems and services, making it efficient for deploying security applications across multiple target systems in an IaaS environment.

Question 16

A cloud administrator needs to configure multiple web servers to participate actively in workload processing. Which of the following will BEST help the administrator achieve this goal?
A) Deploy availability group and enable autoscaling.
B) Deploy availability group and enable load balancing.
C) Deploy a reverse proxy in the DMZ.
D) Deploy an HA group and make each website public.

Accepted Answer

Deploying an availability group and enabling load balancing will distribute incoming traffic across multiple web servers, ensuring they all actively participate in workload processing.

Question 17

A consultant is helping a gaming-as-a-service company set up a new cloud. The company recently bought several graphic cards that need to be added to the servers. Which of the following should the consultant suggest as the MOST cost effective?
A) Private
B) Public
C) Community
D) SaaS

Accepted Answer

A private cloud would be the most cost-effective solution for integrating the newly purchased graphic cards into the company's servers, as it allows for full control and optimization of resources without the recurring costs associated with public cloud services.

Question 18

A cloud technology vendor has released an update to its product. A company providing cloud services need to quickly adopt the update to provide support to its customers. Which of the following is the MOST efficient action to complete this task?
A) Use a virtualization tool to apply patches to cloud resources.
B) Use an automatic system restart to update the cloud resources.
C) Use an orchestration tool to automate updates across cloud resources.
D) Use custom scripts to distribute the release to the cloud resources.

Accepted Answer

The answer of A cloud technology vendor has released an...

Question 19

Government agencies currently operate their own websites, each with its own directory services. There is a mandate to minimize IT administration. Which of the following should the cloud services architect choose to BEST meet this mandate?
A) Set up a direct VPN tunnel between the government sites.
B) Upgrade all stand-alone systems to use mobile technologies.
C) Upgrade the operating systems on all of the web servers.
D) Reengineer the identification and authorization process.

Accepted Answer

Reengineering the identification and authorization process can centralize and streamline directory services, reducing IT administration across multiple government websites.

Question 20

Upon discovery several SaaS applications are being utilized by users, and the InfoSec team needs to update a configuration file on all client machines. Which of the following file types is used to redirect users through a web proxy?
A) .dat
B) .tmp
C) .log
D) .pac

Accepted Answer

A .pac (Proxy Auto-Configuration) file is used to define how web browsers and other user agents can automatically choose the appropriate proxy server for fetching a given URL.

Exam 6: CompTIA CySA+ Certification Exam (CS0-002)

While reviewing the auto-scaling events for a web application, a cloud engineer identified that the application upsized and downsized multiple times within the last hour. Which of the following should the cloud engineer do NEXT?

Ann, a cloud administrator, is reporting on how the organization has adhered to its marketing of 99.99999% system availability SLA. Given this scenario, which of the following should Ann include in her report?

Given the metric below: Using iSCSI storage reports across three datacenters, which of the following recorded metrics indicates an anomaly in the performance?

A cloud-based web proxy is blocking key sites that a business requires for operation. After validation, the sites are legitimate, and access is required for end users to complete their work. Which of the following is the BEST solution to allow access to the sites?

Based on demand, an IaaS provider wants to deploy a security application for its customers. Which of the following is the BEST technique for the IaaS provider to apply this to target systems?

A cloud administrator needs to configure multiple web servers to participate actively in workload processing. Which of the following will BEST help the administrator achieve this goal?

A consultant is helping a gaming-as-a-service company set up a new cloud. The company recently bought several graphic cards that need to be added to the servers. Which of the following should the consultant suggest as the MOST cost effective?

A cloud technology vendor has released an update to its product. A company providing cloud services need to quickly adopt the update to provide support to its customers. Which of the following is the MOST efficient action to complete this task?

Government agencies currently operate their own websites, each with its own directory services. There is a mandate to minimize IT administration. Which of the following should the cloud services architect choose to BEST meet this mandate?

Upon discovery several SaaS applications are being utilized by users, and the InfoSec team needs to update a configuration file on all client machines. Which of the following file types is used to redirect users through a web proxy?