EMT Practice Test

1. Question Content...

---

Question1: A manufacturing company's current security policy mandates PII is not stored in the SaaS solution. Which of the following configuration controls should be used to block sensitive information from being stored in the SaaS solution?

Question2: An administrator is attempting to troubleshoot an issue between a web server in the DMZ and an internal workstation by reviewing packet captures. Upon inspection, the payloads of the packets are unreadable. Which of the following could be the cause of this issue?

Question3: Every night a datacenter takes snapshots of each VM and backs them up to a tape which is shipped off to a disaster recovery site once a week. Which of the following can mitigate a security breach if the tapes were to fall out of the shipping vehicle during transport?

Question4: A new private cloud platform is being deployed by an engineer. SLA requirements state that any clusters should have a baseline redundancy sufficient to handle the failure of at least two hosts. The engineer records the following metrics after the deployment:

Which of the following metrics is MOST likely to represent a violation of SLA?

Question5: A physical server with SSD drives that hosts an IO-intensive database has been migrated into a private cloud to ensure further growth possibilities and accommodate quarterly load spikes (up to 10,000 IOPs).
The requirement is to have log partition latency below 5ms and data partition latency below 10ms, irrespective of the load spikes.
A cloud administrator has conducted extensive tests after the migration.
Which of the following test results would ensure the migration is successful?

Question6: An organization is converting a physical SQL server into a virtual server.
The SQL database has been in use for several years and contains critical data for the organization.
Which of the following conversion methods would be MOST appropriate?

Question7: A hospital is leveraging a third-party-hosted, SaaS-based EMRS for all its regional locations. The EMRS will consolidate all existent stand-alone regional systems. All regional systems managers are concerned about the new system availability. Which of the following should the new EMRS architect do to address the manager's concerns?

Question8: A cloud engineer notices on a dashboard that the host is close to reaching maximum capacity for the CPU and memory in the cloud environment, which could cause performance issues. The cloud environment has 100 servers, with 25% of the servers consuming their compute only during peak business hours, 25% consuming half of the allocated resources, and the remaining 50% using the compute during off hours. Which of the following should the engineer perform to optimize the efficiency of the compute usage in the cloud?

Question9: Company A has just implemented a SaaS-based cloud storage solution. The SaaS solution provides services for both commercial and personal use. The IT department has been tasked to migrate all the on-premises file shares to the SaaS solution with the username being the corporate email address. The IT department is currently using am IAM solution to provision the accounts in the SaaS solution. Upon execution of the account creation process, the IT department is receiving multiple "unable to create account" alerts. Which of the following is the MOST likely cause?

Question10: Which of the following would be considered use cases for Object-Based Storage? (Select two.)

Question11: Which of the following are types of storage media? (Select two.)

Question12: The legal department requires eDiscovery of hosted file shares. To set up access, which of the following is the BEST method to ensure the eDiscovery analyst only has the ability to search but not change configuration or settings?

Question13: A company has an SLA of 15ms for storage latency.

Given the above metrics, which of the following is the MOST appropriate change to the environment?

Question14: A software development company is building cloud-ready applications and needs to determine the best approach for releasing software. Which of the following approaches should be used?

Question15: A CASB provides the application proxy and web application firewall to a large retailer. All access to the retailer cloud application must originate from the CASB-designated IP addresses. The CASB has known geolocations with known IP addresses. Suddenly, all customers are not able to access the retailer cloud applications. Which of the following is MOST likely the reason for the issue?

Question16: A cloud administrator is provisioning five VMs, each with a minimum of 8GB of RAM and a varying load throughout the day. The hypervisor has only 32GB of RAM. Which of the following features should the administrator use?

Question17: An administrator has been asked by the Chief Information Officer (CIO) to provide storage that will have the ability to accommodate at least FC and SATA in the same enterprise array with software that will be policy driven based on performance. Which of the following enterprise storage features should be recommended?

Question18: An administrator needs to test the latency between two servers. Which of the following commands should be used?

Question19: Which of the following is a zone, within a network, that is MOST likely to be accessed by both internal and external hosts?

Question20: A company has a virtual database server running in the cloud that the company would like to start hosting in-house on a newly purchased blade server. Which of the following virtualization tools would BEST be used to accomplish this?

Question21: A company has deployed a four-node cluster in a COLO environment with server configurations listed below.
The company wants to ensure there is 50% overhead for failover and redundancy. There are currently eight VMs running within the cluster with four vCPUs x32GB each. The company wants to better utilize its resources within the cluster without compromising failover and redundancy.

Given the information above, which of the following should a cloud administrator do to BEST accommodate failover and redundancy requirements?

Question22: Joe, a systems administrator, deployed a computer and storage for a system and took it to the application team.
The next day, the application team claimed the database was slow. The deployment request, result, and current utilization data are shown below.

Which of the following descriptions of the situation is correct?

Question23: A cloud administrator updates the syslog forwarder configuration on a local server in production to use a different port. The development team is no longer receiving the audit logs from that server. However, the security team can retrieve and search the logs for the same server. Which of the following is MOST likely the issue?

Question24: Ann, a technician, is using a saved workflow to deploy virtual servers. The script worked yesterday but is now returning an authentication error. Ann confirms that she can manually log in with her own account and create a virtual server. Which of the following is MOST likely causing the error?

Question25: A system administrator needs to spread data storage allocation across multiple physical drives and ensure that these are mapped properly to communicate with the virtual server farm. The administrator also needs the ability to quickly create or remove these mappings so data storage is not assigned without being used. Which of the following storage techniques would fit these requirements?

Question26: Which of the following contributes to increased read access performance on a fibre channel SAN?

Question27: Which of the following ensures that there is enough space for vendors to install their programs and run the software they will be managing for various SaaS products?

Question28: Which of the following network topologies should an administrator use to segment traffic?

Question29: An administrator has virtualized a physical server. The application team reports satisfactory performance. The physical machine has been reimaged with a newer operating system. The following day, the application team remembers that the physical server had a dual purpose and uses a proprietary telephony card that connects to the PBX switch. The administrator needs to restore the server to its previous state. Which of the following should the administrator perform?

Question30: Which of the following is the BEST method to isolate iSCSI network traffic?

Question31: Which of the following is used to connect a VM to a SAN?

Question32: Which of the following should an administrator establish before deploying a guest VM in a production environment?

Question33: A cloud deployment engineer is modifying versions of the existing template image to instantiate new VMs.
The engineer accomplishes this through the cloud self-service portal. After the version is changed and a new VM is successfully started, it does not have any connectivity, and all ping tests to other VMs fail. Which of the following would be the BEST approach to solve the problem?

Question34: A company has decided to scale its e-commerce application from its corporate datacenter to a commercial cloud provider to meet an anticipated increase in demand during an upcoming holiday. The majority of the application load takes place on the application server under normal conditions. For this reason, the company decides to deploy additional application servers into a commercial cloud provider using the on-premises orchestration engine that installs and configures common software and network configurations. The remote computing environment is connected to the on-premises datacenter via a site-to-site IPSec tunnel. The external DNS provider has been configured to use weighted round-robin routing to load balance connections from the Internet.
During testing, the company discovers that only 20% of connections completed successfully.
Review the network architecture and supporting documents and fulfill these requirements:
Part1:
1. Analyze the configuration of the following components: DNS, Firewall1, Firewall2, Router1, Rouler2, VPN and Orchestrator Server.
2. Identify the problematic device(s).
Instructions:
If at any time you would like to bring back the initial state of the simulation, please select the Reset button.
When you have completed the simulation, please select the Done button to submit. Once the simulation is submitted, please select the Next button to continue.
Simulation

Question35: Which of the following are types of storage media? (Select two.)

Question36: A security administrator wants to automate the implementation of network-based ACLs for services deployed within the company VPC. The security administrator is mostly concerned with intra-VPN separation to prevent unauthorized communication between cloud deployed services within the VPC.
Which of the following should the security administrator implement?

Question37: A software solution must be deployed based on the most granular access level. Which of the following methods should be used to meet the requirements?

Question38: An administrator has configured a new VM with the correct IP, netmask, and default gateway. However, even with the vNIC showing a link and incoming and outgoing packets, the VM is unable to ping its default gateway. Which of the following is MOST likely the reason the VM network connection is not functioning properly?

Question39: A Type 1 hypervisor has the following specifications:
RAM128GB
CPU4 socket quad-core
Storage16TB
Each VM must have 8GB RAM, 1 vCPU, and 512GB storage. Which of the following is the MAXIMUM number of VMs that can be hosted on this hypervisor?

Question40: An administrator is tasked with the virtualization of all database management applications. Which of the following should the administrator do FIRST to ensure that database performance will be optimal?

Question41: A system administrator found that a user repeatedly violates acceptable use policies by consuming more disk space than the user is authorized to consume. Which of the following tools should the administrator use to enforce the acceptable use policy?

Question42: A cloud service administrator is consuming PaaS services and is performing baseline configuration tests.
Which of the following is part of the PaaS consumer's responsibility with respect to the baseline confirmation tests?

Question43: A company security policy mandates education and training for new employees. The policy must outline acceptable use policies for SaaS applications. Given these requirements, which of the following security controls is BEST suited?

Question44: A system's application servers need to be patched. The requirements for maintenance work are as follows:
Which of the following methodologies should be selected?

Question45: A new application with availability SLA requirements of 99.99% has been deployed in a cloud. For a test spanning a month, which of the following unavailability times would mean the test was successful? (Select TWO).

Question46: An e-commerce business recently experienced a two-hour outage from its hosted web service provider.
According to the SLA, the business needs to determine how much data can be restored. On which of the following service-level components should the business focus?

Question47: A company changed its policy to have seven-year data retention in the public cloud. Which of the following would be the MOST cost-effective way to meet retention requirements?

Question48: When working with hypervisors configured in a highly available configuration that provides fail-over capabilities to virtualized servers and applications, which of the following requirements is commonly overlooked?

Question49: An administrator has recently added a new host server to a private cloud environment. The host has two quad-core processors and 128GB of RAM. The server will have ten guest servers that require a minimum of 1 CPU and 8GB of RAM per server. Four of the servers will only be used during off hours. Which of the following should the administrator implement to ensure that the guest servers have the proper resources?

Question50: An administrator needs to securely troubleshoot an issue with a virtual host from a remote location. Which of the following allows for this by default?

Question51: An administrator is responsible for creating a new template that will be used to deploy servers in a virtual environment. Which of the following should be the LAST step in completing the template?

Question52: The system administrator created a file sharing service to the cloud for easier access for those working remotely. Which of the following tests should be performed to determine if services can be compromised?

Question53: Which of the following can be used to physically restrict employees from accessing a datacenter?

Question54: A cloud provider is evaluating an insider threat. A resource from the company operations team has access to the servers' virtual disks. This poses a risk that someone could copy and move the virtual server image and have access to the data. Which of the following solutions would help mitigate this problem?

Question55: A recent advertisement campaign has increased traffic to an e-commerce application that is hosted within a public cloud environment. Customers are reporting that it takes too long to load their pages and submit orders.
A cloud administrator looks at the metrics from the environment and sees high utilization of the CPU and memory resources. The cloud provider offers several preconfigured sizes for server template: x-small, small, medium, large, x-large, and 2x-large.

Given an expected increase in workload, which of the following is the BEST solution to improve application performance?

Question56: Which of the following is a hardening technique that an administrator would perform when creating a standard VM template that would be used for deploying servers in a production environment?

Question57: Which of the following elements should be tested when deploying cloud based services? (Select two.)

Question58: Which of the following generally has better performance when accessing larger databases?

Question59: Joe, an administrator, has cloned a new virtualized application server. The new application server runs for several months and meets performance expectations. After building a second application server from the clone, Joe receives a few reports that the second server is too slow. Which of the following should Joe use FIRST to determine expected server performance?

Question60: Which of the following cloud service models would be recommended to a company for hardware capacity to host a production database application?

Question61: When the cache receives write data from the hosts, which of the following does the controller send back to the host?

Question62: A hosting company provides 10 VM web servers for a financial institution. The financial institution recently introduced a new web application and now their web traffic has significantly increased. Which of the following could the administrator implement to assist in reducing the load on the web servers?

Question63: After scheduled network maintenance, users report that an externally hosted web application is particularly slow to load. Small items on the page load such as text documents and markup, but larger multimedia files do not load. Which of the following is the MOST likely cause of the reported issues?

Question64: A company that provides a cloud-based storage solution for consumers needs to ensure that users' data is encrypted while it is stored on its premises. Which of the following should be used to accomplish this task?

Question65: A cloud provider is increasingly discovering hard-to-find issues within the growing infrastructure. The provider has all the basic necessary tools implemented to collect and store data regarding the environment. To allow the cloud provider to focus on relevant events, which of the following is the MOST appropriate technique to build intelligence?

Question66: Fault tolerant design allows a host to overcome a single HBA failure through:

Question67: A company has purchased two new servers to host several virtualized database servers. Each server has two
3GHz quad-core processors each, 64GB RAM each, 200GB DAS, and two 10GbE NICs each. Which of the following is the MOST likely bottleneck for these systems?

Question68: An administrator reports the company is running out of disk space on the SAN. The network administrator is installing a new SAN. Which of the following should the administrator implement to alleviate this problem on the new SAN?

Question69: A cloud infrastructure function that can grow and shrink to meet peak demand requirements quickly is known as:

Question70: Which of the following is the BEST way to ensure accounts in a cloud environment are disabled as soon as they no longer need to be active?

Question71: A cloud administrator is integrating account logins with Facebook, LinkedIn, and Twitter for marketing and to increase market presence using social media platforms. Given this scenario, which of the following components are needed to match these requirements? (Select TWO).

Question72: An administrator needs to test that a service is responding to external requests. Which of the following tools can be used to accomplish this task?

Question73: A cloud administrator has configured a connection between two virtual private cloud environments at a public cloud provider that are each in different accounts. The administrator has configured the accounts correctly so they can connect to each other's resources. Both cloud environments have policies that allow anyone from
0.0.0.0/0 on TCP port 22. The following table shows the network configuration information:

However, the administrator is unable to establish an SSH connection from a server in 10.250.40.100 to
10.250.48.214. Which of the following is the MOST likely issue?

Question74: A host with 30 VMs has 64GB of RAM, four quad-core CPUs, four 1-gigabit NICs and is connected to a NAS that provides NFS volumes. The hosted VMs are reporting slow performance. From the information given, which of the following is the MOST likely cause of the slow performance?

Question75: Which of the following virtual network components allows a virtual NIC to connect to local area resources?

Question76: A new contract requires software to be developed, tested, and implemented within a month. Which of the following levels of service would allow rapid provisioning and deployment?

Question77: Which of the following technologies enables port sharing on a single physical port?

Question78: An organization is looking to implement an online web-based mail system to allow employees to access email while not on the network. The organization wants to have complete control over the servers and the data.
Which of the following should the organization implement?

Question79: A small software development company wants to provide four of their developers with the ability to create four or five VMs each. The company also wants to be able to share all of the VM images and snapshots on a NAS. Which of the following would meet these objectives at the lowest cost?

Question80: A software company recently moved all of its development testing to a public cloud environment. The company primarily uses IaaS to deploy and test its code. The company needs the software developers to be more agile and efficient when testing application code. Which of the following backup types should the developers use to BEST ensure the speedy recovery of a system if it is damaged?

Question81: A server hosting file shares is an example of which of the following types of storage?

Question82: A company is migrating some of its consumer-facing services to a cloud provider. The company has been getting more customers since its competitors have gone bankrupt. Which of the following actions would BEST meet the company's increased resource needs?

Question83: An engineer is configuring the monitoring for a new application server. During the day, the CPU on the server is baselined at approximately 30% utilization. At midnight, a batch job is scheduled to run that will drive the CPU utilization up to 75% for approximately an hour. Any time the CPU utilization is at 40% or higher for longer than ten minutes, administrators will receive an alert. Which of the following is the BEST method to ensure administrators do not experience message fatigue due to false alerts?

Question84: Which of the following encryption types would be used to protect company information when stored on a cloud server being shared by multiple companies?

Question85: A cloud administrator for a state government agency is tasked with giving access to the voter registration application to a government agency in another state. Only authorized officials from each state should access the application. These agencies have a common environment where applications have been deployed in the past. Which of the following should the cloud administrator do to give access to the application?

Question86: A cloud administrator is adding several accounts for new development team interns. These interns will need access to some, but not all, of the resources and will only be working over the summer. Which of the following user provisioning techniques should be used?

Question87: An administrator needs to monitor server applications in the company's data center. Which of the following tools would the administrator need to accomplish this objective?

Question88: Which of the following describes connecting a physical Ethernet adapter to a virtual Ethernet adapter?

Question89: An administrator needs to build a VM for a legacy, single-threaded application. According to best practice, how many virtual CPUs should the administrator use?

Question90: A cloud administrator is securing access to a VM using an IaaS cloud platform. The administrator must perform this task using an automated method, allow administrators to perform any method and expose any property of the VM, deny access for everyone else, and allow only read-only access to everyone else. Given this scenario, which of the following should the administrator use to BEST meet these requirements?

Question91: An administrator is tasked with encrypting all Personally Identifiable Information (PII) within a cloud-based database. Which of the following types of encryption will ensure that ONLY this type of information is encrypted while the rest of the database remains unencrypted?

Question92: Which of the following is the BEST way to achieve network throughput on any host with existing NICs?

Question93: A company wants to be sure their cloud infrastructure is secure but fully available. To ensure this, the company wants to observe and be alerted in the event of a security breach, but chose a response for each alert.
Which of the following solutions would meet these requirements?

Question94: A multinational corporation needs to migrate servers, which are supporting a national defense project, to a new datacenter. The data in question is approximately 20GB in size. The engineer on the project is considering datacenters in several countries as possible destinations. All sites in consideration are on a high-speed MPLS network (10Gb+ connections). Which of the following environmental constraints is MOST likely to rule out a possible site as an option?

Question95: Which of the following will use ICMP to successively check hops between the source and destination?

Question96: When a firewall takes an incoming request for a specific IP address and redirects it to an internal host, which of the following is being used?

Question97: A technician receives a report of system utilization:

Which of the following additional resources should the technician add FIRST given the trend data shown above?

Question98: In a private cloud environment, which of the following is the BEST way to update 20 VMs with the same patch that has been regression tested and approved for rollout?

Question99: A consultant is helping a large company migrate its development environment to a public cloud provider. The developers are working on a VDI solution. The development tools that employees utilize require greater control of the OS environment. Which of the following cloud types should the consultant implement?

Question100: The requirements for a web application state that it must be architected for high availability. The web application consists of front-end web server and back-end database server components respectively. Which of the following describes a solution that meets this requirement, while minimizing costs?

Question101: Which of the following describes connecting a physical Ethernet adapter to a virtual Ethernet adapter?

Question102: A large finance firm processes three times as many transactions in December of each year. The transactions are processed in a private cloud. Management wants to avoid adding permanent resources to accommodate the single month increase. Which of the following is the BEST way to meet the need?

Question103: The helpdesk starts receiving calls from a number of users that are suddenly having issues accessing one of the project management shared drives. When Joe, an administrator, logs onto the guest hosting the drive via the console he is able to get to the information. Which of the following failures could have caused this issue?

Question104: A courier company has virtualized its packing software application. The CSA needs to confirm the deployment is utilizing the correct amount of CPU per virtual instance. After confirming the deployment requirements, the CSA should log into the cloud services portal to ensure that:

Question105: Implementing a process in a change management system takes place after:

Question106: A company has moved all on-premises workloads into a public cloud. After some time, the cloud engineer starts noticing time drifts on the VMs and suspects an NTP issue. Time drifts were not an issue when all the workloads were on-premises. Which of the following describes how the cloud engineer should resolve the issue?

Question107: An administrator needs to verify what ports are listening on an operating system. Which of the following tools can be used to accomplish this task?

Question108: A number of VMs in a host are experiencing processor contention, showing down operations Which of the following host hardware upgrade paths would yield higher VM performance, for the same VMs in the given hypervisor host?

Question109: After a recent outage going unnoticed, an administrator has been tasked to configure monitoring for the Linux-based and Windows-based host operating systems in a hybrid cloud. Which of the following services should the administrator confirm are functional prior to employing centralized monitoring to both types of operating systems? (Select two.)

Question110: A newly established CSP allows for drive shipping to upload new data into the environment. Sensitive data on
40TB of storage needs to be transferred within one week. Which of the following is the MOST efficient and secure method for shipment of the data to the CSP with minimal downtime?

Question111: A company that provides cloud-based storage services allows user authentication using third-party social network credentials. Which of the following should be implemented to accomplish this task?

Question112: Which of the following is often a difficult process when working with internationally-based cloud providers?

Question113: Which of the following would be appropriate when considering inbound access security for a web-based SaaS solution?

Question114: The administrator wants to have central storage for all of the files to be stored for each VM. Which of the following is used to connect a host to a SAN utilizing a fiber connection?

Question115: A hosted file share was infected with CryptoLocker and now root cause analysis needs to be performed. Place the tasks in the correct order according to the troubleshooting methodology.