A systems administrator is concerned about having two virtual database servers on the same host. Which of the following should be configured?

A. Regions

B. Anti-affinity

C. Oversubscription

D. Container

An organization is conducting a performance test of a public application. The following actions have already been completed:
• The baseline performance has been established
• A load test has passed.
• A benchmark report has been generated
Which of the following needs to be done to conclude the performance test?

A. Verify the application works well under an unexpected volume of requests.

B. Assess the application against vulnerabilities and/or misconfiguration exploitation.

C. Test how well the application can resist a DDoS attack.

D. Conduct a test with the end users and collect feedback.

An organization requires the following to be achieved between the finance and marketing departments:
✑ Allow HTTPS/HTTP.
✑ Disable FTP and SMB traffic.
Which of the following is the MOST suitable method to meet the requirements?

A. Implement an ADC solution to load balance the VLAN traffic.

B. Configure an ACL between the VLANs.

C. Implement 802.1X in these VLANs.

D. Configure on-demand routing between the VLANs.

An organization is developing a new solution for hosting an external website. The systems administrator needs the ability to manage the OS. Which of the following methods would be MOST suitable to achieve this objective?

A. Deploy web servers into an IaaS provider.

B. Implement a cloud-based VDI solution.

C. Provision web servers in a container environment.

D. Use PaaS components in the cloud to implement the product.

Due to a policy change, a few of a customer's application VMs have been migrated to synchronously replicated storage. The customer now reports that performance is lower. The systems administrator checks the resource usage and discovers CPU utilization is at 60% and available memory is at 30%. Which of the following is the MOST likely cause?

A. There is not enough vCPU assigned.

B. The application is not compatible with the new settings.

C. The new configuration is adding latency.

D. The memory of the VM is underallocated.

A systems administrator strictly followed a CSP’s documentation to federate identity for the company’s users; however, even when using the correct credentials, the users receive an error message indicating their tokens are expired. Which of the following is MOST likely the cause of the error?

A. The date on the company’s identity server is configured incorrectly.

B. The CSP’s documentation is incorrect.

C. There is a connection issue between the company and the CSP’s networks.

D. MFA was enforced on the CSP.

A systems administrator is securing a new email system for a large corporation. The administrator wants to ensure private corporate information is not emailed to external users. Which of the following would be MOST useful to accomplish this task?

A. DLP

B. EDR

C. DNSSEC

D. SPF

An administrator has been informed that some requests are taking a longer time to respond than other requests of the same type. The cloud consumer is using multiple network service providers and is performing link load balancing for bandwidth aggregation. Which of the following commands will help the administrator understand the possible latency issues?

A. ping

B. ipconfig

C. traceroute

D. netstat

A systems administrator is informed that a database server containing PHI and PII is unencrypted. The environment does not support VM encryption, nor does it have a key management system. The server needs to be able to be rebooted for patching without manual intervention. Which of the following will BEST resolve this issue?

A. Ensure all database queries are encrypted.

B. Create an IPSec tunnel between the database server and its clients.

C. Enable protocol encryption between the storage and the hypervisor.

D. Enable volume encryption on the storage.

E. Enable OS encryption.

A company needs to rehost its ERP system to complete a datacenter migration to the public cloud. The company has already migrated other systems and configured VPN connections. Which of the following MOST likely needs to be analyzed before rehosting the ERP?

A. Software

B. Licensing

C. Right-sizing

D. The network

A systems administrator is planning to migrate to a cloud solution with volume-based licensing. Which of the following is most important when considering licensing costs?

A. The number of cores

B. The number of threads

C. The number of machines

D. The number of sockets

A cloud engineer is responsible for managing two cloud environments from different MSPs. The security department would like to inspect all traffic from the two cloud environments. Which of the following network topology solutions should the cloud engineer implement to reduce long-term maintenance?

A. Chain

B. Star

C. Mesh

D. Hub and spoke

A startup online gaming company is designing the optimal graphical user experience for multiplayer scenarios. However, online players have reported latency issues. Which of the following should the company configure as a remediation?

A. Additional GPU memory

B. Faster clock speed

C. Additional CPU cores

D. Dynamic allocations

A cloud architect is receiving complaints from VDI users overseas about slowness even though the remote office has Gigabit internet. Which of the following will most likely solve the issue?

A. Increasing bandwidth

B. Enabling compression

C. Lowering latency

D. Adding redundancy

A company uses multiple SaaS-based cloud applications. All the applications require authentication upon access. An administrator has been asked to address this issue and enhance security. Which of the following technologies would be the BEST solution?

A. Single sign-on

B. Certificate authentication

C. Federation

D. Multifactor authentication

A systems administrator disabled TLS 1.0 and 1.1, as well as RC4, 3DES, and AES-128 ciphers for TLS 1.2, on a web server. A client now reports being unable to access the web server, but the administrator verifies that the server is online, the web service is running, and other users can reach the server as well. Which of the following should the administrator recommend the user to do FIRST?

A. Disable antivirus/anti-malware software.

B. Turn off the software firewall.

C. Establish a VPN tunnel between the computer and the web server.

D. Update the web browser to the latest version.

HOTSPOT
-
The QA team is testing a newly implemented clinical trial management (CTM) SaaS application that uses a business intelligence application for reporting. The UAT users were instructed to use HTTP and HTTPS.
Refer to the application dataflow:
1A – The end user accesses the application through a web browser to enter and view clinical data.
2A – The CTM application sever reads/writes data to/from the database server.
1B – The end user accesses the application through a web browser to run reports on clinical data.
2B – The CTM application server makes a SOAP call on port 9400 to the BI application server.
3B – The BI application server gets the data from the database server and presents it to the CTM application server.
When UAT users try to access the application using https://ctm.app.com or http://ctm.app.com, they get a message stating: “Browser cannot display the webpage.” The QA team has raised a ticket to troubleshoot the issue.
INSTRUCTIONS
-
You are a cloud engineer who is tasked with reviewing the firewall rules as well as virtual network settings.
You should ensure the firewall rules are allowing only the traffic based on the dataflow.
You have already verified the external DNS resolution and NAT are working.
Verify and appropriately configure the VLAN assignments and ACLs. Drag and drop the appropriate VLANs to each tier from the VLAN Tags table. Click on each Firewall to change ACLs as needed.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
 

Which of the following actions should a systems administrator perform during the containment phase of a security incident in the cloud?

A. Deploy a new instance using a known-good base image.

B. Configure a firewall rule to block the traffic on the affected instance.

C. Perform a forensic analysis of the affected instance.

D. Conduct a tabletop exercise involving developers and systems administrators.

A cloud administrator has finished setting up an application that will use RDP to connect. During testing, users experience a connection timeout error. Which of the following will MOST likely solve the issue?

A. Checking user passwords

B. Configuring QoS rules

C. Enforcing TLS authentication

D. Opening TCP port 3389

A cloud administrator has been using a custom VM deployment script. After three months of use, the script no longer joins the LDAP domain. The cloud administrator verifies the account has the correct permissions. Which of the following is the MOST likely cause of the failure?

A. Incorrect encryption ciphers

B. Broken trust relationship

C. Invalid certificates

D. Expired password

An organization’s two-node, hybrid container cluster is experiencing failures during horizontal scaling to the cloud cluster instance. The on-premises IP range is 192.168.0.0/16, and the cloud environment is 10.168.0.0/16. Overlapping or stretched VLANs are not permitted, and a node is deployed in each location. The cloud monitoring agent reports a healthy status for the second instance, but when pining the clusters from on premises, the following output is received:
 
Which of the following is the most likely reason for the scaling failure?

A. Incorrect DNS entry

B. Offline cluster node

C. Incorrect proxy entry

D. Incorrect cluster IP

E. Incorrect IP route

A cloud architect is designing the VPCs for a new hybrid cloud deployment. The business requires the following:
✑ High availability
✑ Horizontal auto-scaling
✑ 60 nodes peak capacity per region
✑ Five reserved network IP addresses per subnet
✑ /24 range
Which of the following would BEST meet the above requirements?

A. Create two /25 subnets in different regions.

B. Create three /25 subnets in different regions.

C. Create two /26 subnets in different regions.

D. Create three /26 subnets in different regions.

E. Create two /27 subnets in different regions.

F. Create three /27 subnets in different regions.

A company that performs passive vulnerability scanning at its transit VPC has detected a vulnerability related to outdated web-server software on one of its public subnets. Which of the following can the company use to verify if this is a true positive with the least effort and cost? (Choose two.)

A. A network-based scan

B. An agent-based scan

C. A port scan

D. A red-team exercise

E. A credentialed scan

F. A blue-team exercise

G. Unknown environment penetration testing

A systems administrator wants to ensure a system can adjust its resources based on usage. Which of the following will best accomplish this goal?

A. Anti-affinity

B. Autoscaling

C. Right-sizing

D. Oversubscription

After accidentally uploading a password for an IAM user in plain text, which of the following should a cloud administrator do FIRST? (Choose two.)

A. Identify the resources that are accessible to the affected IAM user.

B. Remove the published plain-text password.

C. Notify users that a data breach has occurred.

D. Change the affected IAM user’s password.

E. Delete the affected IAM user.

A systems administrator is responsible for upgrading operating systems on VMs that are hosted in a cloud environment. The systems administrator wants to ensure the VMs receive updates for as long as possible. Which of the following should the systems administrator choose?

A. Stable

B. Nightly

C. LTS

D. Canary

E. EDR

A company is performing a DR drill and is looking to validate its documentation. Which of the following metrics will determine the service recovery duration?

A. MTTF

B. SLA

C. RTO

D. RPO

A financial industry services firm was the victim of an internal data breach, and the perpetrator was a member of the company's development team. During the investigation. one of the security administrators accidentally deleted the perpetrator’s user data. Even though the data is recoverable, which of the following has been violated?

A. Chain of custody

B. Evidence acquisition

C. Containment

D. Root cause analysis

A systems administrator received an email from a cloud provider stating that storage is 80% full on the volume that stores VDI desktops. Which of the following is the MOST efficient way to mitigate the situation?

A. Deduplication

B. Compression

C. Replication

D. Storage migration

A systems administrator notices that a piece of networking equipment is about to reach its end of support. Which of the following actions should the administrator recommend?

A. Update the firmware.

B. Migrate the equipment to the cloud.

C. Update the OS.

D. Replace the equipment.

A systems administrator has been notified of possible illegal activities taking place on the network and has been directed to ensure any relevant emails are preserved for court use. Which of the following is this MOST likely an example of?

A. Email archiving

B. Version control

C. Legal hold

D. File integrity monitoring

A company is doing a cloud-to-cloud migration to lower costs. A systems administrator has to plan the migration accordingly. Which of the following considerations is MOST important for a successful, future-proof, and low-cost migration?

A. Tier pricing

B. Licensing

C. Estimated consumption

D. Feature compatibility

A systems administrator is troubleshooting performance issues with a Windows VDI environment. Users have reported that VDI performance has been slow since the images were upgraded from Windows 7 to Windows 10. This VDI environment is used to run simple tasks, such as Microsoft Office. The administrator investigates the virtual machines and finds the following settings:
✑ 4 vCPU
✑ 16GB RAM
✑ 10Gb networking
✑ 256MB frame buffer
Which of the following MOST likely needs to be upgraded?

A. vRAM

B. vCPU

C. vGPU

D. vNIC

A systems administrator is troubleshooting issues with audio lag during phone conferences. When looking at the core switch, the administrator notices its buffers are consistently full, and packets are being dropped due to the large number being sent and received. There is no room in the budget for new hardware, but it is critical that the audio lag be fixed immediately. Which of the following will most likely resolve the issue?

A. Enable compression of audio traffic.

B. Configure QoS rules for VoIP traffic.

C. Verify that the gateway uplink is not saturated

D. Add an exception to IPS for voice traffic.

A large pharmaceutical company needs to ensure it is in compliance with the following requirements:
• An application must run on its own virtual machine.
• The hardware the application is hosted on does not change.
Which of the following will BEST ensure compliance?

A. Containers

B. A firewall

C. Affinity rules

D. Load balancers

A systems administrator is configuring a storage array. Which of the following should the administrator configure to set up mirroring on this array?

A. RAID 0

B. RAID 1

C. RAID 5

D. RAID 6

A company’s marketing department is running a rendering application on virtual desktops. Currently, the application runs slowly, and it takes a long time to refresh the screen. The virtualization administrator is tasked with resolving this issue. Which of the following is the BEST solution?

A. GPU passthrough

B. Increased memory

C. Converged infrastructure

D. An additional CPU core

A company needs to access the cloud administration console using its corporate identity. Which of the following actions would MOST likely meet the requirements?

A. Implement SSH key-based authentication.

B. Implement cloud authentication with local LDAP.

C. Implement multifactor authentication.

D. Implement client-based certificate authentication.

An administrator receives a ticket indicating the accounting application is not working. Which of the following should the administrator check FIRST?

A. DHCP

B. Service-level agreement

C. DNS

D. System logs

A non-critical file on a database server was deleted and needs to be recovered. A cloud administrator must use the least disruptive restoration process to retrieve the file, as the database server cannot be stopped during the business day. Which of the following restoration methods would BEST accomplish this goal?

A. Alternate location

B. Restore from image

C. Revert to snapshot

D. In-place restoration

A systems administrator needs to configure a set of policies to protect the data to comply with mandatory regulations. Which of the following should the administrator implement to ensure DLP efficiency prevents the exposure of sensitive data in a cloud environment?

A. Integrity

B. Versioning

C. Classification

D. Segmentation

A systems administrator is creating a VM and wants to ensure disk space is not allocated to the VM until it is needed. Which of the following techniques should the administrator use to ensure this?

A. Deduplication

B. Thin provisioning

C. Software-defined storage

D. iSCSI storage

A systems administrator is deploying a VM and would like to minimize storage utilization by ensuring the VM uses only the storage if needs. Which of the following will BEST achieve this goal?

A. Compression

B. Deduplication

C. RAID

D. Thin provisioning

A systems administrator is working on the backup schedule for a critical business application that is running in a private cloud. Which of the following would help the administrator schedule the frequency of the backup job?

A. RPO

B. MTTR

C. SLA

D. RTO

A cloud administrator recently noticed that a number of files stored at a SaaS provider’s file-sharing service were deleted. As part of the root cause analysis, the administrator noticed the parent folder permissions were modified last week. The administrator then used a test user account and determined the permissions on the files allowed everyone to have write access. Which of the following is the best step for the administrator to take NEXT?

A. Identify the changes to the file-sharing service and document.

B. Acquire a third-party DLP solution to implement and manage access.

C. Test the current access permissions to the file-sharing service.

D. Define and configure the proper permissions for the file-sharing service.

An application deployment team has observed delays in deployments and has asked the cloud administrator to evaluate the issue. Below is the result of a latency test that was conducted by the cloud administrator from offices located in the following regions:
•	Asia-Pacific (APAC)
•	Europe, the Middle East, and Africa (EMEA)
•	Americas
Tests were conducted from each location, and the results are shown below:
 
Which of the following locations needs to be investigated further?

A. Connectivity from APAC to APAC regionsConnectivity from APAC to EMEA and US – North

B. Connectivity from APAC to all regionsConnectivity from Americas to all regions

C. Connectivity from EMEA to all regionsConnectivity from APAC to APAC and EMEA regions

D. Connectivity from APAC to EMEA and Americas regionsConnectivity from EMEA to all regions

A systems administrator is deploying a new cloud application and needs to provision cloud services with minimal effort. The administrator wants to reduce the tasks required for maintenance, such as OS patching, VM and volume provisioning, and autoscaling configurations. Which of the following would be the BEST option to deploy the new application?

A. A VM cluster

B. Containers

C. OS templates

D. Serverless

A public cloud administrator needs to implement a mechanism to monitor the expense of the company’s cloud resources. Which of the following options will allow the administrator to execute this task fastest way and with minimal effort?

A. Set up daily expense reports with the cloud provider.

B. Enable custom notifications for exceeding budget thresholds.

C. Use the API to collect expense information from cloud resources.

D. Implement a financial tool to monitor cloud resource expenses.

A systems administrator swapped a failed hard drive on a server with a RAID 5 array. During the RAID resynchronization, a second hard drive failed. Which of the following actions will make the server fully operational?

A. Restart the RAID resynchronization process.

B. Perform a P2V migration of the server.

C. Swap the failed hard drive with a fresh one.

D. Restore the server from backup.

Which of the following enables CSPs to offer unlimited capacity to customers?

A. Adequate budget

B. Global data center distribution

C. Economies of scale

D. Agile project management