カテゴリー CV0-004

Q87. A cloud developer is creating a static website that customers will be accessing globally. Which of the following services will help reduce latency?

Q88. An organization needs to retain its data for compliance reasons but only when required. Which of the following would be the most cost-effective type of tiered storage?

Q89. A developer at a small startup company deployed some code for a new feature to its public repository. A few days later, a data breach occurred. A security team investigated the incident and found that the database was hacked. Which of the following is the most likely cause of this breach?

Q90. A company recently migrated to a public cloud provider. The company’s computer incident response team needs to configure native cloud services tor detailed logging. Which of the following should the team implement on each cloud service to support root cause analysis of past events? {Select two).

Q91. Which of the following are best practices when working with a source control system? (Select two).

Q92. Which of the following is a field of computer science that enables computers to identify and understand objects and people in images and videos?

Q93. An DevOps engineer is receiving reports that users can no longer access the company’s web application after hardening of a web server. The users are receiving the following error:
ERR_SSLJ/ERSION_OR_CIPHER_MISMATCH.
Which of the following actions should the engineer take to resolve the issue?

Q94. A network administrator is budding a site-to-site VPN tunnel from the company’s headquarters office 10 the company’s public cloud development network. The network administrator confirms the following:
The VPN tunnel is established on the headquarter office firewall.
While inside the office, developers report that they cannot connect to the development network resources.
While outside the office on a client VPN, developers report that they can connect to the development network resources.
The office and the client VPN have different IP subnet ranges.
The firewall flow logs show VPN traffic is reaching the development network from the office.
Which of the following is the next step the next network administrator should take to troubleshoot the VPN tunnel?

Q95. An organization’s internal security team mandated that public cloud resources must be accessible only by a corporate VPN and not by direct public internet access. Which of the following would achieve this objective?

Q96. A cloud engineer is reviewing a disaster recovery plan that includes the following requirements:
– System state, files, and configurations must be backed up on a weekly basis.
– The system state, file, and configuration backups must be tested
annually.
Which of the following backup methods should the engineer implement for the first week the plan is executed?

Q97. The QA team is testing a newly implemented clinical trial management (CTM) SaaS application that uses a business intelligence application for reporting. The UAT users were instructed to use HTTP and HTTPS.
Refer to the application dataflow:
1A – The end user accesses the application through a web browser to enter and view clinical data.
2A – The CTM application server reads/writes data to/from the database server.
1B – The end user accesses the application through a web browser to run reports on clinical data.
2B – The CTM application server makes a SOAP call on a non-privileged port to the BI application server.
3B – The BI application server gets the data from the database server and presents it to the CTM application server.
When UAT users try to access the application using https://ctm.app.com or http://ctm.app.com, they get a message stating: “Browser cannot display the webpage.” The QA team has raised a ticket to troubleshoot the issue.
インストラクション
You are a cloud engineer who is tasked with reviewing the firewall rules as well as virtual network settings.
You should ensure the firewall rules are allowing only the traffic based on the dataflow.
You have already verified the external DNS resolution and NAT are working.
Verify and appropriately configure the VLAN assignments and ACLs. Drag and drop the appropriate VLANs to each tier from the VLAN Tags table. Click on each Firewall to change ACLs as needed.
シミュレーションの初期状態に戻したい場合は、Reset Allボタンをクリックしてください。

Q98. Which of the following service options would provide the best availability for critical applications in the event of a disaster?

Q99. A newly configured VM fails to run application updates despite having internet access. The updates download automatically from a third-party network. Given the following output:

Which of the following troubleshooting steps would be best to take?

Q100. A company recently set up a CDN for its photography and image-sharing website. Which of the following is the most likely reason for the company’s action?

Q101. A company uses containers stored in Docker Hub to deploy workloads (or its laaS infrastructure.
The development team releases changes to the containers several times per hour. Which of the following should a cloud engineer do to prevent the proprietary code from being exposed to third parties?

Q102. A software engineer at a cybersecurity company wants to access the cloud environment. Per company policy, the cloud environment should not be directly accessible via the internet. Which of the following options best describes how the software engineer can access the cloud resources?

Q103. Which of the following best explains the concept of migrating from on premises to the cloud?

Q104. A systems administrator is provisioning VMs according to the following requirements:
* A VM instance needs to be present in at least two data centers.
. During replication, the application hosted on the VM tolerates a maximum latency of one second.
* When a VM is unavailable, failover must be immediate.
Which of the following replication methods will best meet these requirements?