QUESTION 81
Which of the following has a mandatory <Envelope> tag in the exchange of data between two systems?

A. JSON
B. SOAP
C. JWT
D. REST

Correct Answer: B

QUESTION 82
Which of the following technologies helps secure public-facing API endpoints?

A. DDoS protection
B. Vulnerability scanning
C. Data loss prevention
D. Intrusion detection systems

Correct Answer: A

QUESTION 83
A cloud security engineer discovers that service account information has been committed to the company’s code repository. Which of the following steps should the cloud security engineer take first? (Select two).

A. Change the cipher suite.
B. Enable multifactor authentication.
C. Set up a virtual private network.
D. Disable the account.
E. Run a port scan.
F. Rotate the credentials.

Correct Answer: DF

QUESTION 84
A cloud administrator must increase uptime for an application. Which of the following methods keeps costs to a minimum while increasing uptime?

A. Deploying on-premises services
B. Deploying a geo-redundant cluster
C. Deploying services to a cold DR site
D. Deploying services to availability zones

Correct Answer: D

QUESTION 85
An DevOps engineer is receiving reports that users can no longer access the company’s web application after hardening of a web server. The users are receiving the following error.
ERR_SSL_VERSION_OR_CIPHER_MISMATCH.

Which of the following actions should the engineer take to resolve the issue?

A. Restart the web server.
B. Configure TLS 1.2 or newer.
C. Update the web server.
D. Review logs on the WAF.

Correct Answer: B

QUESTION 86
Which of the following best describes a characteristic of a hot site?

A. Servers in the hot site are clustered with the main site.
B. Network traffic is balanced between the main site and hot site servers.
C. Offline server backups are replicated hourly from the main site.
D. All servers are replicated from the main site in an online status.

Correct Answer: D

QUESTION 87
A developer is deploying a new version of a containerized application. The DevOps team wants:
1. No disruption
2. No performance degradation
3. Cost-effective deployment
4. Minimal deployment time

Which of the following is the best deployment strategy given the requirements?

A. Canary
B. In-place
C. Blue-green
D. Rolling

Correct Answer: D

QUESTION 88
Which of the following best describes the use of WebSockets?

A. Providing asynchronous communication between only two clients
B. Providing offline communication between multiple clients
C. Establishing a one-time, secure communication channel between two clients
D. Providing real-time communication between multiple clients

Correct Answer: D

QUESTION 89
A cloud administrator is troubleshooting an issue for a client. The client has the following capabilities:
1. Can access servers on the VPC, including servers on other subnets
2. Can ping other resources on the network
3. Can ping its own gateway

However, the client cannot reach the internet. Which of the following is most likely the cause?

A. The gateway is missing a route.
B. The client has a duplicate IP address.
C. The DHCP server is not functioning properly.
D. The network has too much latency.

Correct Answer: A

QUESTION 90
A company has an on-site workload and wants to increase capacity using cloud resources to manage activity spikes on the web tier. The application and database tier cannot leave the company data centers due to contract restrictions. Which of the following deployment models is the most effective solution?

A. Private
B. Public
C. Hybrid
D. Community

Correct Answer: C

QUESTION 91
An e-commerce business operates its web applications using a microservices-based architecture. These application instances run on multiple VMs in the cloud and are interconnected through service discovery. As the business grows, prioritizing rapid scaling will be crucial. Which of the following best meets the business’s scaling needs?

A. Manually tuning the VM size to meet demand based on estimates and projections
B. Configuring vertical scaling to increase system resources on a set schedule
C. Automatically provisioning more application instances when CPU usage hits a set threshold
D. Setting up a new colocated data center to handle extra load based on specific criteria

Correct Answer: C

QUESTION 92
Which of the following best describes a characteristic of a hot site?

A. Servers in the hot site are clustered with the main site.
B. Network traffic is balanced between the main site and hot site servers.
C. Offline server backups are replicated hourly from the main site.
D. All servers are replicated from the main site in an online status.

Correct Answer: D

QUESTION 93
A cloud engineer must scan cloud resources for vulnerabilities. Which of the following is the first step the cloud engineer should take?

A. Remediate the vulnerabilities.
B. Assess the systems.
C. Define the scope.
D. Research the CVEs.

Correct Answer: C

QUESTION 94
A company is migrating various resource types to the cloud. The company needs to know the tracking cost per business unit. Which of the following enables consumption tracking with the most efficiency?

A. Assigning each business unit a different VPC
B. Creating a site where each business unit gets approval before deploying resources
C. Tagging all resources with the business unit information automatically
D. Instructing each business unit to deploy to a different cloud provider

Correct Answer: C

QUESTION 95
Which of the following is the most likely reason for migrating data from multiple public cloud providers to on premises?

A. To avoid vendor lock-in
B. To decrease capital expenditure
C. To comply with local laws regarding privacy
D. To decrease payroll costs for server administrators

Correct Answer: C

QUESTION 96
A certain user subset is seeing the error message 500 Internal Server Error on a newly launched distributed web application. The developers are unable to troubleshoot this issue because of limited visibility into the application’s operations. Which of the following should the developers do first to effectively troubleshoot the issue?

A. Modify the application code to display proper log files.
B. Generate graphs and dashboards that show the rate of error.
C. Implement incident response management.
D. Provision log aggregation software.

Correct Answer:

QUESTION 97
An organization moves a legacy application from the cloud to an on-premises data center without replatforming. After the move, users with an updated browser using https:// URLs are unable to connect to the application. However, users with an outdated browser can connect to the application with https:// URLs. Which of the following is the most likely reason the application works properly in the cloud but not in the data center?

A. Application bug
B. Single server outage
C. The DNS pointing to the load balancer
D. TLS negotiation failure

Correct Answer: D

QUESTION 98
A software engineer needs to transfer data over the internet using programmatic access while also being able to query the data. Which of the following will best help the engineer to complete this task?

A. SQL
B. Web sockets
C. RPC
D. GraphQL

Correct Answer: A

QUESTION 99
A DevOps engineer is performing maintenance on the mail servers for a company’s web application. Part of this maintenance includes checking core operating system updates. The servers are currently running version 3.2 of the operating system. The engineer has two update options—one to version 4.1 and the other to version 3.7.Both versions are fully supported by the operating system manufacturer. Which of the following best describes the action the engineer should take?

A. Upgrade to 3.7 in the development environment.
B. Upgrade to 4.1 on one production server at a time.
C. Read the release notes on version 4.1.
D. Schedule a maintenance window and upgrade to 3.7 in the production environment.

Correct Answer: C

QUESTION 100
Which of the following vulnerability management concepts is best defined as the process of discovering vulnerabilities?

A. Scanning
B. Assessment
C. Remediation
D. Identification

Correct Answer: D