Exam Questions and CORRECT Answers
A cloud engineer wants to implement a monitoring solution to detect cryptojacking and other
cryptomining malware on cloud instances. Which of the following metrics would most likely be
used to identify the activity?
A. Disk 1/0
B. Network packets
C. Average memory utilization
D. Percent of CPU utilization - CORRECT ANSWER - D. Percent of CPU utilization
A developer is testing code that will be used to deploy a web farm in a public cloud. The main
code block is a function to create a load balancer and a loop to create 1.000 web servers, as
shown below:
my_load_ balancer () for x in range (1000) :
my_ web_server ()
The developer runs the code against the company's cloud account and observes that the load
balancer is successfully created, but only 100 web servers have been created. Which of the
following should the developer do to fix this issue?
A. Request an increase of Instance quota.
B. Run the code multiple times until all servers are created.
C. Check the my_web
_server () function to ensure it is using the right credentials.
D. Place the my_load_balancer () function after the loop. - CORRECT ANSWER - A.
Request an increase of Instance quota.
A cloud networking engineer is troubleshooting the corporate office's network configuration.
Employees in the IT and operations departments arg unable to resolve IP addresses on all
devices, and the IT department cannot establish a connection to other departments' subnets. The
engineer identifies the following configuration currently in place to support the office network:
Each employee needs to connect to the network with a maximum of three hosts. Each subnet
must be segregated, but the IT department must have the ability to communicate with all subnets.
,Which of the following meet the IP addressing and routing requirements? (Choose two.)
A. Modifying the subnet mask to 255.255.254.0 for IT and operations departments
B. Configuring static routing to allow access from each subnet to 10.1.40.1
C. Modifying the BYOD policy to reduce the volume of devices that are allowed to connect to
the corporate network
D. Configuri - CORRECT ANSWER - D. Configuring static routing to allow access from
10.1.30.1 to each subnet
F. Modifying the subnet mask to 255.255.255.128 for the IT and operations departments
A cloud developer is creating a static website that customers will be accessing globally. Which
of the following services will help reduce latency?
A. VPC
B. Application load balancer
C. CDN
D. AP gateway - CORRECT ANSWER - C. CDN
An administrator needs to adhere to the following requirements when moving a customer's data
to the cloud:
- The new service must be geographically dispersed.
- The customer should have local access to data
- Legacy applications should be accessible.
Which of the following cloud deployment models is most suitable?
A. On-premises
B. Private
C. Hybrid
D. Public - CORRECT ANSWER - C. Hybrid
A technician receives an email from a vendor who is requesting payment of an invoice for
human resources services. The email contains a request for bank account numbers. Which of the
following types of attacks does this behavior most likely indicate?
,A. Malware
B. Cryptojacking
C. Ransomware
D. Phishing - CORRECT ANSWER - D. Phishing
Which of the following best explains the concept of migrating from on premises to the cloud?
A. The configuration of a dedicated pipeline to transfer content to a remote location
B. The creation of virtual instances in an external provider to transfer operations of selected
servers into a new. remotely managed environment
C. The physical transportation, installation, and configuration of company IT equipment in a
cloud services provider's facility
D. The extension of company IT infrastructure to a managed service provider - CORRECT
ANSWER - B. The creation of virtual instances in an external provider to transfer operations
of selected servers into a new. remotely managed environment
Which of the following service options would provide the best availability for critical
applications in the event of a disaster?
A. Edge computing
B. Cloud bursting
C. Availability zones
D. Multicloud tenancy - CORRECT ANSWER - C. Availability zones
A newly configured VM fails to run application updates despite having internet access. The
updates download automatically from a third-party network. Given the following output:
$dig +short apac.updateserver.net
38.102.218.7
$dig +short na.updateserver.net
request timeout
Which of the following troubleshooting steps would be best to take?
, A. Checking DNS configurations
B. Reconfiguring routing protocols
C. Testing the IP address configuration
D. Running a trace to the router - CORRECT ANSWER - A. Checking DNS configurations
A company migrated its CRM system to a SaaS solution. The security team is updating the RAG
matrix for the newly migrated CRM. Given the following table:
Table
Customer more info here
CSP more info here
Which of the following responsibility assignments best aligns with the shared responsibility
model for the new CRM?
A. Data-center security
B. CRM software security
C. CRM server patching
D. CRM development life cycle - CORRECT ANSWER - A. Data-center security
A social networking company operates globally. Some users from Brazil and Argentina are
reporting the following error: website address was not found. Which of the following is the most
likely cause of this outage?
A. Client DNS misconfigutation
B. Regional DNS provider outage
C. DNS server misconfiguration
D. DNS propagation issues - CORRECT ANSWER - B. Regional DNS provider outage
A cloud engineer is designing a cloud-native, three-tier application. The engineer must adhere to
the following security best practices:
- Minimal services should run on all layers of the stack.