A company is using an IaC deployment model to a public cloud IaaS. The automation runs partially and then fails to build a VM in the IaaS environment. Upon further assessment, the connectivity to the IaaS is confirmed. Which of the following are the MOST likely causes of the failure? (Choose two.)

A. Insufficient account balance

B. Network settings

C. Resource tagging

D. API request limits

E. Administrator access

F. Inadequate storage

A cloud solutions architect has an environment that must only be accessed during work hours. Which of the following processes should be automated to best reduce cost?

A. Scaling of the environment after work hours

B. Implementing access control after work hours

C. Shutting down the environment after work hours

D. Blocking external access to the environment after work hours

A systems administrator is working on the backup schedule for a critical business application that is running in a private cloud. Which of the following would help the administrator schedule the frequency of the backup job?

A. RPO

B. MTTR

C. SLA

D. RTO

A cloud administrator is reviewing the annual contracts for all hosted solutions. Upon review of the contract for the hosted mail solution, the administrator notes the monthly subscription rate has increased every year. The provider has been in place for ten years, and there is a large amount of data being hosted. Which of the following is a barrier to switching providers?

A. Service-level agreement

B. Vendor lock-in

C. Memorandum of understanding

D. Encrypted data

A technician needs to deploy two virtual machines in preparation for the configuration of a financial application next week. Which of the following cloud deployment models should the technician use?

A. XaaS

B. IaaS

C. PaaS

D. SaaS

A systems administrator is concerned about having two virtual database servers on the same host. Which of the following should be configured?

A. Regions

B. Anti-affinity

C. Oversubscription

D. Container

A company that utilizes an IaaS service provider has contracted with a vendor to perform a penetration test on its environment. The vendor is able to exploit the virtualization layer and obtain access to other instances within the cloud provider's environment that do not belong to the company. Which of the following BEST describes this attack?

A. VM escape

B. Directory traversal

C. Buffer overflow

D. Heap spraying

A systems administrator is planning to migrate to a cloud solution with volume-based licensing. Which of the following is most important when considering licensing costs?

A. The number of cores

B. The number of threads

C. The number of machines

D. The number of sockets

A cloud administrator is reviewing a new application implementation document. The administrator needs to make sure all the known bugs and fixes are applied, and unwanted ports and services are disabled. Which of the following techniques would BEST help the administrator assess these business requirements?

A. Performance testing

B. Usability testing

C. Vulnerability testing

D. Regression testing

An organization hosts an ERP database in on-premises infrastructure. A recommendation has been made to migrate the ERP solution to reduce operational overhead in the maintenance of the data center. Which of the following should be considered when migrating this on-premises database to DBaaS?

A. Database application version compatibilityDatabase IOPS values -Database storage utilization

B. Physical database server CPU cache valuePhysical database server DAS typePhysical database server network I/O

C. Database total user count -Database total number of tables -Database total number of storage procedures

D. Physical database server operating systemPhysical database server memory configurationPhysical database server CPU frequency

An IaaS application has a two-hour RTO and four-hour RPO. The application takes one hour to back up its data or restore from a local backup file. A systems administrator is tasked with configuring the backup policy. Which of the following should the administrator configure to achieve the application requirements with the LEAST cost?

A. Back up to long-term storage every night.

B. Back up to object storage every three hours.

C. Back up to long-term storage every four hours.

D. Back up to object storage every hour.

A company is using a hybrid cloud environment. The private cloud is hosting the business applications, and the cloud services are being used to replicate for availability purposes. The cloud services are also being used to accommodate the additional resource requirements to provide continued services. Which of the following scalability models is the company utilizing?

A. Vertical scaling

B. Autoscaling

C. Cloud bursting

D. Horizontal scaling

After initial stress testing showed that a platform performed well with the specification of a single 32 vCPU node, which of the following will provide the desired service with the LOWEST cost and downtime?

A. One 32 vCPU node with CDN caching

B. Two 8 vCPU nodes with load balancing

C. Three to six 8 vCPU nodes autoscaling group

D. Four 8 vCPU nodes with DNS round robin

An organization is developing a new solution for hosting an external website. The systems administrator needs the ability to manage the OS. Which of the following methods would be MOST suitable to achieve this objective?

A. Deploy web servers into an IaaS provider.

B. Implement a cloud-based VDI solution.

C. Provision web servers in a container environment.

D. Use PaaS components in the cloud to implement the product.

A user reports a poor-quality remote VDI session. Which of the following should the help desk technician do FIRST to troubleshoot the issue?

A. Check the FAQ section of the vendor’s documentation.

B. Ask the user if the client device or access location has changed.

C. Reboot the user’s virtual desktop.

D. Request permission to log in to the device remotely.

A DevOps administrator is automating an existing software development workflow. The administrator wants to ensure that prior to any new code going into production, tests confirm the new code does not negatively impact existing automation activities. Which of the following testing techniques would be BEST to use?

A. Usability testing

B. Regression testing

C. Vulnerability testing

D. Penetration testing

A company wants to move to a multicloud environment and utilize the technology that provides the most portability. Which of the following technology solutions would BEST meet the company's needs?

A. Bootstrap

B. Virtual machines

C. Clusters

D. Containers

A cloud administrator wants to have a central repository for all the logs in the company's private cloud. Which of the following should be implemented to BEST meet this requirement?

A. SNMP

B. Log scrubbing

C. CMDB

D. A syslog server

A cloud administrator is setting up a new coworker for API access to a public cloud environment. The administrator creates a new user and gives the coworker access to a collection of automation scripts. When the coworker attempts to use a deployment script, a 403 error is returned. Which of the following is the MOST likely cause of the error?

A. Connectivity to the public cloud is down.

B. User permissions are not correct.

C. The script has a configuration error.

D. Oversubscription limits have been exceeded.

A systems administrator adds servers to a round-robin, load-balanced pool, and then starts receiving reports of the website being intermittently unavailable. Which of the following is the MOST likely cause of the issue?

A. The network is being saturated.

B. The load balancer is being overwhelmed.

C. New web nodes are not operational.

D. The API version is incompatible.

E. There are time synchronization issues.

A company is currently running a website on site. However, because of a business requirement to reduce current RTO from 12 hours to one hour, and the RPO from one day to eight hours, the company is considering operating in a hybrid environment. The website uses mostly static files and a small relational database.
Which of the following should the cloud architect implement to achieve the objective at the LOWEST cost possible?

A. Implement a load-balanced environment in the cloud that is equivalent to the current on-premises setup and use DNS to shift the load from on premises to cloud.

B. Implement backups to cloud storage and infrastructure as code to provision the environment automatically when the on-premises site is down. Restore the data from the backups.

C. Implement a website replica in the cloud with auto-scaling using the smallest possible footprint. Use DNS to shift the load from on premises to the cloud.

D. Implement a CDN that caches all requests with a higher TTL and deploy the IaaS instances manually in case of disaster. Upload the backup on demand to the cloud to restore on the new instances.

An organization is using multiple SaaS-based business applications, and the systems administrator is unable to monitor and control the use of these subscriptions.
The administrator needs to implement a solution that will help the organization apply security policies and monitor each individual SaaS subscription. Which of the following should be deployed to achieve these requirements?

A. DLP

B. CASB

C. IPS

D. HIDS

A company has decided to scale its e-commerce application from its corporate datacenter to a commercial cloud provider to meet an anticipated increase in demand during an upcoming holiday.
The majority of the application load takes place on the application server under normal conditions. For this reason, the company decides to deploy additional application servers into a commercial cloud provider using the on-premises orchestration engine that installs and configures common software and network configurations.
The remote computing environment is connected to the on-premises datacenter via a site-to-site IPSec tunnel. The external DNS provider has been configured to use weighted round-robin routing to load balance connections from the Internet.
During testing, the company discovers that only 20% of connections completed successfully.
Instructions -
Review the network architecture and supporting documents and fulfill these requirements:
Part 1:
✑ Analyze the configuration of the following components: DNS, Firewall 1, Firewall 2, Router 1, Router 2, VPN and Orchestrator Server.
✑ Identify the problematic device(s).
Part 2:
✑ Identify the correct options to provide adequate configuration for hybrid cloud architecture.
If any time you would like to bring back the initial state of the simulation, please click the Reset All button.
Part 1 -
 
 
 
 
 
 
 
 
Part 2 -
Only select a maximum of TWO options from the multiple choice question. (Choose two.)

A. Update the PSK (Pre-shared key) in Router 2.

B. Update the A record on the DNS from 2.2.2.2 to 1.1.1.1.

C. Promote deny All to allow All in Firewall 1 and Firewall 2.

D. Change the Address Space on Router 2.

E. Change internal IP Address of Router 1.

F. Reverse the Weight property in the two CNAME records on the DNS.

G. Add the Application Server at on-premises to the Load Balancer.

A systems administrator needs to deploy a solution to automate new application releases that come from the development team. The administrator is responsible for provisioning resources at the infrastructure layer without modifying any configurations in the application code. Which of the following would BEST accomplish this task?

A. Implementing a CI/CD tool

B. Configuring infrastructure as code

C. Deploying an orchestration tool

D. Employing DevOps methodology

Which of the following cloud services is fully managed?

A. IaaS

B. GPU in the cloud

C. IoT

D. Serverless compute

E. SaaS

Users of a public website that is hosted on a cloud platform are receiving a message indicating the connection is not secure when landing on the website. The administrator has found that only a single protocol is opened to the service and accessed through the URL https://www.comptiasite.com. Which of the following would MOST likely resolve the issue?

A. Renewing the expired certificate

B. Updating the web-server software

C. Changing the crypto settings on the web server

D. Upgrading the users’ browser to the latest version

A systems administrator is asked to implement a new three-host cluster. The cloud architect specifies this should be a testing environment, and the budget is limited. The estimated resource consumption for each application is as follows:
 

A. • Three public cloud hosts with four cores• 120GB of RAM• 100GB of storage• 1Gbps

B. • Three public cloud hosts with six cores• 80GB of RAM• 180GB of storage• 150Mbps

C. • Three public cloud hosts with six cores• 80GB of RAM• 1TB of storage• 200Mbps

D. • Four public cloud hosts with four cores• 140GB of RAM• 200GB of storage

A company wants to implement business continuity, and the cloud solution architect needs to design the correct solution. Which of the following will provide the data to measure business continuity? (Choose two.)

A. A service-level agreement

B. Automation scripts

C. Playbooks

D. A network diagram

E. A backup and restore

F. A recovery time objective

A systems administrator wants to be notified every time an application’s configuration files are updated. Which of the following should the administrator implement to achieve the objective?

A. ZFS

B. FIM

C. MAC

D. DLP

A systems administrator is troubleshooting performance issues with a Windows VDI environment. Users have reported that VDI performance has been slow since the images were upgraded from Windows 7 to Windows 10. This VDI environment is used to run simple tasks, such as Microsoft Office. The administrator investigates the virtual machines and finds the following settings:
✑ 4 vCPU
✑ 16GB RAM
✑ 10Gb networking
✑ 256MB frame buffer
Which of the following MOST likely needs to be upgraded?

A. vRAM

B. vCPU

C. vGPU

D. vNIC

Lateral-moving malware has infected the server infrastructure. Which of the following network changes would MOST effectively prevent lateral movement in the future?

A. Implement DNSSEC in all DNS servers.

B. Segment the physical network using a VLAN.

C. Implement microsegmentation on the network.

D. Implement 802.1X in the network infrastructure.

A systems administrator is troubleshooting an application that is configured to auto-scale with a minimum of two nodes and a maximum of four. The application will scale out if the CPU utilization of one of the nodes exceeds 80% for more than five minutes and will scale in if the CPU utilization of one of the nodes drops under
20% for more than ten minutes. There is a reverse proxy in front of the application. The systems administrator notices two of the nodes are often running over 80% for a long period of time, which is triggering the creation of the other two nodes; however, they are being created and terminated while the load in the first two remains over 50% all the time. Which of the following should the administrator configure to fix this issue?

A. Disable DNS caching in the reverse proxy.

B. Reduce the minimum node count to one.

C. Disable TLS tickets.

D. Reduce the scale-out rule to 50%.

E. Increase the scale-in rule to 50%.

A systems administrator wants the VMs on the hypervisor to share CPU resources on the same core when feasible. Which of the following will BEST achieve this goal?

A. Configure CPU passthrough.

B. Oversubscribe CPU resources.

C. Switch from a Type 1 to a Type 2 hypervisor.

D. Increase instructions per cycle.

E. Enable simultaneous multithreading.

A company has developed a cloud-ready application. Before deployment, an administrator needs to select a deployment technology that provides a high level of portability and is lightweight in terms of footprint and resource requirements. Which of the following solutions will be BEST to help the administrator achieve the requirements?

A. Containers

B. Infrastructure as a code

C. Desktop virtualization

D. Virtual machines

A systems administrator has migrated an internal application to a public cloud. The new web server is running under a TLS connection and has the same TLS certificate as the internal application that is deployed. However, the IT department reports that only internal users who are using new versions of the OSs are able to load the application home page. Which of the following is the MOST likely cause of the issue?

A. The local firewall from older OSs is not allowing outbound connections.

B. The local firewall from older OSs is not allowing inbound connections.

C. The cloud web server is using a self-signed certificate that is not supported by older browsers.

D. The cloud web server is using strong ciphers that are not supported by older browsers.

A cloud administrator is configuring several security appliances hosted in the private IaaS environment to forward the logs to a central log aggregation solution using syslog. Which of the following firewall rules should the administrator add to allow the web servers to connect to the central log collector?

A. Allow UDP 161 outbound from the web servers to the log collector

B. Allow TCP 514 outbound from the web servers to the log collector

C. Allow UDP 161 inbound from the log collector to the web servers

D. Allow TCP 514 inbound from the log collector to the web servers

A company is performing a DR drill and is looking to validate its documentation. Which of the following metrics will determine the service recovery duration?

A. MTTF

B. SLA

C. RTO

D. RPO

Over the last couple of years, the growth of a company has required a more complex DNS and DHCP environment. Which of the following should a systems administration team implement as an appropriate solution to simplify management?

A. IPAM

B. DoH

C. VLAN

D. SDN

A systems administrator is trying to connect to a remote KVM host. The command line appears as follows:
 
After logging in to the remote server, the administrator verifies the daemon is running. Which of the following should the administrator try NEXT?

A. Opening port 22 on the firewall

B. Running the command with elevated privileges

C. Checking if the SSH password is correct

D. Ensuring the private key was properly imported

A cloud administrator has created a new asynchronous workflow lo deploy VMs to the cloud in bulk. When the workflow is tested for a single VM, it completes successfully. However, if the workflow is used to create 50 VMs at once, the job fails. Which of the following is the MOST likely cause of the issue? (Choose two.)

A. Incorrect permissions

B. Insufficient storage

C. Billing issues with the cloud provider

D. No connectivity to the public cloud

E. Expired API token

F. Disabled autoscaling

A systems administrator is responsible for upgrading operating systems on VMs that are hosted in a cloud environment. The systems administrator wants to ensure the VMs receive updates for as long as possible. Which of the following should the systems administrator choose?

A. Stable

B. Nightly

C. LTS

D. Canary

E. EDR

A systems administrator is configuring a storage array. Which of the following should the administrator configure to set up mirroring on this array?

A. RAID 0

B. RAID 1

C. RAID 5

D. RAID 6

A systems administrator notices that a piece of networking equipment is about to reach its end of support. Which of the following actions should the administrator recommend?

A. Update the firmware.

B. Migrate the equipment to the cloud.

C. Update the OS.

D. Replace the equipment.

A cloud administrator is performing automated deployment of cloud infrastructure for clients. The administrator notices discrepancies from the baseline in the configuration of infrastructure that was deployed to a new client. Which of the following is MOST likely the cause?

A. The deployment user account changed.

B. The deployment was done to a different resource group.

C. The deployment was done by a different cloud administrator.

D. The deployment template was modified.

A cloud engineer is responsible for managing two cloud environments from different MSPs. The security department would like to inspect all traffic from the two cloud environments. Which of the following network topology solutions should the cloud engineer implement to reduce long-term maintenance?

A. Chain

B. Star

C. Mesh

D. Hub and spoke

An organization is required to set a custom registry key on the guest operating system. Which of the following should the organization implement to facilitate this requirement?

A. A configuration management solution

B. A log and event monitoring solution

C. A file integrity check solution

D. An operating system ACL

A cloud engineer is responsible for managing a public cloud environment. There is currently one virtual network that is used to host the servers in the cloud environment. The environment is rapidly growing, and the network does not have any more available IP addresses. Which of the following should the engineer do to accommodate additional servers in this environment?

A. Create a VPC and peer the networks.

B. Implement dynamic routing.

C. Enable DHCP on the networks.

D. Obtain a new IPAM subscription.

A private IaaS administrator is receiving reports that all newly provisioned Linux VMs are running an earlier version of the OS than they should be. The administrator reviews the automation scripts to troubleshoot the issue and determines the scripts ran successfully. Which of the following is the MOST likely cause of the issue?

A. API version incompatibility

B. Misconfigured script account

C. Wrong template selection

D. Incorrect provisioning script indentation

An environment has a dual-stack infrastructure in an active-active configuration in two separate data centers. Which of the following best describes replication between the two sites?

A. Data is moved constantly from the hot site to the warm site.

B. Data is replicated every 15 minutes from one site to the other.

C. Data is moved from one site to the other once per day.

D. Data is synchronized in real time across the sites.

E. Data is moved twice a day from Site A to Site B, and then from Site B to Site A.

A web application has been configured to use auto-scaling for provisioning and deprovisioning more VMs according to the workload. The systems administrator deployed a new Cl/CD tool to automate new releases of the web application. During the night, a script was deployed and configured to be executed by the VMs during bootstrapping. Now, the auto-scaling configuration is creating a new VM every five minutes. Which of the following actions will MOST likely resolve the issue?

A. Reducing the maximum threshold in the auto-scaling configuration

B. Debugging the script and redeploying it

C. Changing the automation tool because it is incompatible

D. Modifying the script to shut down the VM after five minutes