QUESTION 141
A user’s assigned cloud credentials are locked, and the user is unable to access the project’s application. The cloud administrator reviews the logs and notices several attempts to log in with the user’s account were made to a different application after working hours. Which of the following is the best approach for the administrator to troubleshoot this issue?
A. Create new credentials for the user and restrict access to the authorized application.
B. Track the source of the log-in attempts using the WAF.
C. Reset the user’s account and implement a stronger lock-out policy.
D. Install an IDs on the network to monitor suspicious activity.
Correct Answer: C
QUESTION 142
A company wants to avoid vendor lock-in situations. Which of the following options should the company consider before doing business with a vendor?(Select two).
A. Cost factor
B. Open-source technologies
C. Data portability
D. Regulatory compliance
E. Service availability
F. Storage options
Correct Answer: BC
QUESTION 143
A software development team would like to test a new feature that was added to the company’s production website. The team would like to allow access to only a small number of users and then, in a controlled way, slowly increase the number of users who have access to the feature. Which of the following best describes the deployment strategy the software development Iteam should use?
A. ln-place
B. Blue-green
C. Canary
D. Rolling
Correct Answer: C
QUESTION 144
A cloud administrator receives the following text message:
“Hello! Plz respond so we can send ur replacement laptop by clicking on this tickt response urgently. Thank you”
After the administrator clicks on the message, the administrator sees a blank screen with no graphics and a response code of 200. Which of the following should the administrator do to best prevent future instances of this potential attack?
A. Rotate the administrator credentials.
B. Disable text messaging.
C. Enforce a security policy regarding external links.
D. Deploy a WAF to the network.
Correct Answer: C
QUESTION 145
A cloud engineer proposes a solution to migrate a finance application to the cloud. The environment can be shared to reduce costs. Which of the following models would best meet this requirement?
A. Private
B. Community
C. Public
D. Hybrid
Correct Answer: C
QUESTION 146
An application that is running on containers writes files to the operating system after processing data. The produced output files are stored under /project-files owned by root. A cloud engineer needs to make sure no output files are owned by root. Which of the following actions should the engineer take to best achieve this objective?
A. Mount the volume in Docker using –user=myapp.
B. Add USER myapp to the Dockerfile and rebuild the container.
C. Run chown myapp:myapp /project-files with cron every minute.
D. Modify the container application to execute sudo -u myapp myapp.
Correct Answer: B
QUESTION 147
A cloud administrator is implementing backups for a virtual file server with a large number of daily changes to files. The backups have historically caused performance issues on the server. As a result, the company has asked for backups to be completed as quickly as possible. The administrator opts for an incremental backup technology. Which of the following statements best explains the administrator’s choice?
A. Differential backups cannot be used in conjunction with full backups.
B. Differential backups are generally slower than incremental backups.
C. Differential backups cannot be used for granular recovery.
D. Differential backups always consume more space than incremental backups.
Correct Answer: B
QUESTION 148
Which of the following strategies requires the development of new code before an application can be successfully migrated to a cloud provider?
A. Refactor
B. Rearchitect
C. Rehost
D. Replatform
Correct Answer: B
QUESTION 149
Which of the following best explains the concept of migrating from on premises to the cloud?
A. The configuration of a dedicated pipeline to transfer content to a remote location
B. The creation of virtual instances in an external provider to transfer operations of selected servers into a new, remotely managed environment
C. The physical transportation, installation, and configuration of company IT equipment in a cloud services provider’s facility
D. The extension of company IT infrastructure to a managed service provider
Correct Answer: B
QUESTION 150
A healthcare organization must follow strict compliance requirements to ensure that Pl is not leaked. The cloud administrator needs to ensure the cloud email system can support this requirement. Which of the following should the organization enable?
A. IPS
B. DLP
C. ACL
D. WAF
Correct Answer: B
QUESTION 151
An organization is hosting a seminar with eight individuals who need to connect to their own dedicated VM. The technician used the following VM configurations:
1. IP address: DHCP
2. NIC: 1Gbps
3. Network.10.1.10.0/29
Several users are unable to access their VMs. Which of the following best describes the reason?
A. Not enough addresses are available.
B. The routes are misconfigured.
C. Too much traffic is on the network.
D. DHCP is not working correctly on the VM.
Correct Answer: A
QUESTION 152
A cloud engineer is designing a cloud native, three-tier application. The engineer must adhere to the following security best practices:
1. Minimal services should run on all layers of the stack.
2. The solution should be vendor agnostic
3. Virtualization could be used over physical hardware.
Which of the following concepts should the engineer use to design the system to best meet these requirements?
A. Virtual machine
B. Microservices
C. Fan-out
D. Cloud-provided managed services
Correct Answer: B
QUESTION 153
A banking firm’s cloud server will be decommissioned after a successful proof of concept using mirrored data. Which of the following is the best action to take regarding the storage used on the decommissioned server?
A. Keep it temporarily.
B. Archive it.
C. Delete it.
D. Retain it permanently.
Correct Answer: B
QUESTION 154
Which of the following compute resources is the most optimal for running a single scripted task on a schedule?
A. Bare-metal server
B. Managed container
C. Virtual machine
D. Serverless function
Correct Answer: D
QUESTION 155
A systems administrator is provisioning VMs according to the following requirements:
1. A VM instance needs to be present in at least two data centers.
2. During replication, the application hosted on the VM tolerates a maximum latency of one second.
3. When a VM is unavailable, failover must be immediate.
Which of the following replication methods will best meet these requirements?
A. Snapshot
B. Transactional
C. Live
D. Point-in-time
Correct Answer: C
QUESTION 156
Which of the following can eliminate the risk of CI/CD pipelines leaking secrets on containers?
A. Peer-reviewed pull requests
B. Use of a VM instead of containers
C. Private image repositories
D. Canary tests
Correct Answer: C
QUESTION 157
Five thousand employees always access the company’s public cloud-hosted web application on a daily basis during the same time frame. Some users have been reporting performance issues while attempting to connect to the web application. Which of the following is the best configuration approach to resolve this issue?
A. Scale vertically based on a trend.
B. Scale horizontally based on a schedule.
C. Scale vertically based on a load.
D. Scale horizontally based on an event.
Correct Answer: B
QUESTION 158
A company is developing a new web application that requires a relational database management system with minimal operational overhead. Which of the following should the company choose?
A. A database installed on a virtual machine
B. A managed SQL database on the cloud
C. A database migration service
D. A hybrid database setup
Correct Answer: B
QUESTION 159
Which of the following container storage types loses data after a restart?
A. Object
B. Persistent volume
C. Ephemeral
D. Block
Correct Answer: C
QUESTION 160
Which of the following is a direct effect of cloud migration on an enterprise?
A. The enterprise must reorganize the reporting structure.
B. Compatibility issues must be addressed on premises after migration.
C. Cloud solutions will require less resources than on-premises installations.
D. Utility costs will be reduced on premises.
Correct Answer: C