QUESTION 121
A cloud engineer uses laC to deploy new infrastructure in the cloud. After a successful deployment in the development environment, the engineer pushes the code to production. A few days later, the engineer receives an alert about unexpected modifications in the assets. Which of the following should the engineer implement to avoid this issue in the future?
A. Code testing
B. laC template versioning
C. Configuration as code
D. Drift detection
Correct Answer: D
QUESTION 122
Which of the following best describes the list of known security vulnerabilities?
A. Common Weaknesses and Enumerations
B. Data Security Standards
C. Zero Trust
D. Common Vulnerabilities and Exposures
Correct Answer: A
QUESTION 123
Which of the following is the most common characteristic of SSDs?
A. SSDs are less expensive than spinning disks.
B. SSDs have small storage capacities.
C. SSDs can be used for high-IOP applications.
D. SSDs are used mostly in cold storage.
Correct Answer: C
QUESTION 124
A database administrator performs a full backup periodically and keeps several versions in a cloud instance with increasing storage costs. Which of the following should the administrator consider doing to manage backup retention?
A. Classify backup files based on the sensitivity of data.
B. Set up a time frame for the deletion of old backup files.
C. Identify the need for granular and/or bulk recovery.
D. Determine whether a differential backup will satisfy the operational needs.
Correct Answer: B
QUESTION 125
Which of the following is the most appropriate service to publish an application that requires very low latency connections?
A. Content delivery network
B. Network load balancer
C. Application gateway
D. Application load balancer
Correct Answer: B
QUESTION 126
At the beginning of every month, new marketing materials are uploaded to the cloud server for sales employees to use. At the same time, other users report that their access is sluggish,and the system is almost unusable. Which of the following scaling approaches should be applied to remedy this issue?
A. Scheduled
B. Load
C. Event
D. Managed
Correct Answer: B
QUESTION 127
An administrator at a company, which has 100 VM users, learns that a vulnerability in an antivirus program may sporadically report a false positive. The vendor has released a major upgrade that includes the fix to the vulnerability, along with major front-end changes. Which of the following steps should the administrator take next?
A. Restart every computer immediately and install the update.
B. Uninstall the current version and install the update at the end of the day.
C. Advise users to ignore any antivirus message and install the patch at the end of the day.
D. Test the new update before rolling it out to every computer.
Correct Answer: D
QUESTION 128
A cloud engineer deploys two virtual machines and migrates a local web application and database, respectively. After the engineer updates the DNS records, the web application does not respond. Which of the following should the cloud engineer do to troubleshoot the issue?
A. Increase the size and throughput of the virtual machines to allow more concurrent sessions.
B. Verify whether the operating systems in the virtual machines are compatible with the web application and database.
C. Check to ensure the new web application server configuration file points to the correct database location.
D. Repeat the migration to discard any inconsistencies during the data transfer.
Correct Answer: C
QUESTION 129
Which of the following should be added to a SAN to decrease the amount of time it takes a server to back up in a private cloud?
A. Fibre Channel
B. Kubernetes
C. Clustering
D. UDP
Correct Answer: A
QUESTION 130
An administrator must plan a backup execution method. Which of the following backup methods should the administrator implement to quickly perform a restore?
A. Tape
B. Differential
C. On-site
D. Encrypted
Correct Answer: B
QUESTION 131
A cloud administrator shortens the amount of time a backup runs. An executive in the company requires a guarantee that the backups can be restored with no data loss. Which of the following backup features should the administrator test for?
A. Encryption
B. Retention
C. Schedule
D. Integrity
Correct Answer: D
QUESTION 132
A cloud engineer needs to choose a storage technology that fulfills the following requirements:
1. 99.99% durability
2. Resilient to instance failures
3. Resilient to instance deletions
Which of the following types of storage is the best option?
A. Ephemeral
B. Cache
C. Persistent
D. Local
Correct Answer: C
QUESTION 133
A cloud engineer is selecting a model for a data center that will host a workload. The database must reside within the data center on the company’s SAN solution. However, the workload will be hosted by a third-party vendor. Which of the following models should the cloud engineer select to meet these requirements?
A. Community
B. Hybrid
C. Public
D. Private
Correct Answer: B
QUESTION 134
Unknown attackers targeted a bank’s website using HTTP flooding and infiltration via a SQL injection. Which of the following should the cloud engineer implement as a protection mechanism?
A. DLP
B. IPS
C. Security group
D. WAF
Correct Answer: D
QUESTION 135
Which of the following files should be used to install software with a package manager?
A. package.json
B. package.zip
C. package.deb
D. package.tar
Correct Answer: C
QUESTION 136
Which of the following is a benefit of using containerization in DevOps environments?
A. Containerization improves security control by sharing resources among containers.
B. Containerization provides the use of a proprietary technology that improves integrity.
C. Containerization facilitates performance monitoring over VMs.
D. Containerization allows the creation of applications with interconnected components.
Correct Answer: D
QUESTION 137
An organization is concerned that its IT help desk is receiving too many calls about password resets for various internal and external applications. The organization implements a SSO solution. Which of the following technologies should the cloud architect at the organization recommend implementing?
A. SAML
B. LDAP
C. Kerberos
D. MFA
Correct Answer: A
QUESTION 138
Which of the following is the most restrictive data classification label?
A. Proprietary
B. Private
C. Sensitive
D. Confidential
Correct Answer: D
QUESTION 139
A systems administrator is provisioning VMs according to the following requirements:
1. A VM instance needs to be present in at least two data centers.
2. During replication, the application hosted on the VM tolerates a maximum latency of one second.
3. When a VM is unavailable, failover must be immediate.
Which of the following replication methods best meets these requirements?
A. Snapshot
B. Transactional
C. Live
D. Point-in-time
Correct Answer: C
QUESTION 140
A systems engineer is migrating a batch of 25 VMs from an on-premises compute cluster to a public cloud using the public cloud’s migration agent. The migration job shows data copies at a rate of 250Mbps. After five servers migrated, the remaining data copied at a rate of 25Mbps. Which of the following is the most likely cause of the issue?
A. The local VM host hardware utilization
B. The ISP throttling rate
C. The IOPS on the SAN backing the on-premises cluster
D. The compute utilization of the VMs being migrated
Correct Answer: C