EMT Practice Test

1. Question Content...

---

Question1: A private cloud is using the iSCSI protocol for connection from storage to hypervisors. This connection is not encrypted currently, and the systems administrator is tasked with enabling on-the-fly encryption.
Which of the following technologies should the administrator use?

Question2: A recent advertisement campaign has increased traffic to an e-commerce application that is hosted within a public cloud environment. Customers are reporting that it takes too long to load their pages and submit orders. A cloud administrator looks at the metrics from the environment and sees high utilization of the CPU and memory resources. The cloud provider offers several preconfigured sizes for server template: x-small, small, medium, large, x-large, and 2x-large.

Given an expected increase in workload, which of the following is the BEST solution to improve application performance?

Question3: The CSA needs to install a patch on 58 virtual server instances during the Friday evening maintenance window. Which of the following is the MOST efficient way to get the patches installed?

Question4: A company changed its policy to have seven-year data retention in the public cloud. Which of the following would be the MOST cost-effective way to meet retention requirements?

Question5: All the virtual server instances within an organization's private cloud environment are having trouble logging into the Kerberos realm. Upon investigation, the CSA notices the time stamps are different on the server virtual instances. Which of the following should be the CSA's NEXT step to resolve this issue?

Question6: A security and risk team requires a weekly report to detect VM file system changes and validate the integrity of the OS. Which of the following is the BEST solution for this requirement?

Question7: Based on demand, an IaaS provider wants to deploy a security application for its customers.
Which of the following is the BEST technique for the IaaS provider to apply this to target systems?

Question8: A technician receives a report of system utilization:

Which of the following additional resources should the technician add FIRST given the trend data shown above?

Question9: Several suspicious emails are being reported from end users. Organizational email is hosted by a SaaS provider. Upon investigation, the URL in the email links to a phishing site where users are prompted to enter their domain credentials to reset their passwords. Which of the following should the cloud administrator do to protect potential account compromise?

Question10: The InfoSec team has directed compliance database activity monitoring without agents on a hosted database server in the public IaaS. Which of the following configurations is needed to ensure this requirement is achieved?

Question11: A CSA needs to bring a client's public cloud site online at another location in the same region after a disaster. The RPO is eight hours, and the RTO is four hours. Which of the following is the BEST way to accomplish this goal?

Question12: After deploying multiple copies of database servers, data scrambling is started on them to anonymize user data. A few minutes later, the systems administrator receives multiple complaints regarding the performance of other VMs. CPU and memory have been eliminated as possible bottlenecks. Which of the following should be verified NEXT as a possible bottleneck?

Question13: A hospital is deploying a web-based application in its private cloud to service multiple facilities in a region. This application is used by employees of the hospital, as well as the patients and their families. Which of the following security configurations is MOST likely to be deployed to secure the information from the application?

Question14: A company requires all system logs to be saved for a minimum 30 days. However, many employees are reporting storage near capacity alerts. A cloud administrator is trying to fix and prevent this issue from happening again.
Which of the following is the BEST option?

Question15: Users at a university are experiencing slow response and performance issues with private cloud services. The university was compromised, and a loss of bandwidth utilization was reported.
Without deploying new software, which of the following should be performed to determine the cause of the issues?

Question16: A company is using storage-as-a-service from an IaaS provider for application services. The company has a mandate to protect personal information being stored on the cloud. The service provided includes encryption for in-transit data and requires a security solution for data-at-rest.
Which of the following should be deployed to secure the personal information?

Question17: A cloud systems administrator manually archives security logs. Every time the administrator goes on vacation, users are unable to browse company websites.
Which of the following is the BEST way to resolve this issue?

Question18: A physical server with SSD drives that hosts an IO-intensive database has been migrated into a private cloud to ensure further growth possibilities and accommodate quarterly load spikes (up to 10,000 IOPs). The requirement is to have log partition latency below 5ms and data partition latency below 10ms, irrespective of the load spikes. A cloud administrator has conducted extensive tests after the migration. Which of the following test results would ensure the migration is successful?

Question19: A company has moved all on-premises workloads into a public cloud. After some time, the cloud engineer starts noticing time drifts on the VMs and suspects an NTP issue. Time drifts were not an issue when all the workloads were on-premises. Which of the following describes how the cloud engineer should resolve the issue?

Question20: A cloud administrator reports a problem with the maximum number of users reached in one of the pools. There are ten VMs in the pool, each with a software capacity to handle ten users. Based on the dashboard metrics, 15% of the incoming new service requests are failing. Which of the following is the BEST approach to resolve the issue?

Question21: A technician is configuring a new web application to be highly available. The technician has configured multiple web servers in different availability zones at a public cloud provider. The application requires users to be directed to the same server each time they visit. Which of the following network components is MOST likely to accomplish this?

Question22: A Type 1 hypervisor has the following specifications:
RAM 128GB
CPU 4 socket quad-core Storage 16TB
Each VM must have 8GB RAM, 1 vCPU, and 512GB storage. Which of the following is the MAXIMUM number of VMs that can be hosted on this hypervisor?

Question23: A company is looking for a hardware feature with the least amount of downtime in terms of firmware upgrades. Which of the following features BEST meet this requirement?

Question24: After deploying multiple copies of database servers, data scrambling is started on them to anonymize user data. A few minutes later, the systems administrator receives multiple complaints regarding the performance of other VMs. CPU and memory have been eliminated as possible bottlenecks. Which of the following should be verified NEXT as a possible bottleneck?

Question25: Given the metric below:

Using iSCSI storage reports across three datacenters, which of the following recorded metrics indicates an anomaly in the performance?

Question26: A critical new security update has been released to fix an identified zero-day vulnerability with the SSH server process. Due to its severity, all development and staging servers must have this update applied immediately. Which of the following is the FASTEST way for the administrator to apply the patch and ensure all systems are configured consistently?

Question27: A business is planning to migrate from a private cloud to a public cloud. To document business continuity, which of the following should be done FIRST?

Question28: A company purchased a SaaS CRM application. The signed SLA meets year-round performance requirements. Three months after deployment, customers start reporting a slow application response time. System availability, connectivity, and proper functionality still meet the SLA. Which of the following is MOST likely the reason for the poor response time?

Question29: A cloud administrator is load balancing six VMs on an IaaS cloud service. The organization has an SLA stating the application should be available 99.999% of the time. At present, the six VMs are handling the load from one region and three availability zones. System baselines have confirmed there must be at least six VMs to handle this load.
Given this scenario, which of the following should the administrator recommend to BEST meet these requirements?

Question30: A cloud administrator has finished building a virtual server template in a public cloud environment. The administrator is now cloning six servers from that template. Each server is configured with one private IP address and one public IP address. After starting the server instances, the cloud administrator notices that two of the servers do not have a public IP address. Which of the following is the MOST likely cause?

Question31: A system's application servers need to be patched. The requirements for maintenance work are as follows:
System downtime is not allowed.
The application server in use must be in the sane patch status. System performance must be maintained during patching work.
Testing after patching must be done before the application server is in use. If any trouble occurs, recover the previous version in ten minutes.
Which of the following methodologies should be selected?

Question32: A cloud architect is deploying a VM in a public IaaS cloud. The software that will be installed on the VM is not compatible with any of the OS versions in the system images offered by the IaaS vendor.
Which of the following is the BEST way to deploy a VM with the required OS?

Question33: A private cloud customer is considering using the public cloud to accommodate the peak utilization workload. Which of the following would be considered the ideal scaling solution?

Question34: A non-critical vulnerability has been identified by a Linux vendor, who has released a patch and recommends that it be applied immediately.
Which of the following is the BEST plan for the cloud administrator to install the patch?

Question35: A cloud administrator wants to apply patches in an isolated copy of the production virtual server to assess the impact. Which of the following activities would BEST achieve this objective?

Question36: An administrator is implementing a new SaaS application. The administrator has been directed to enhance the user authentication experience.
Which of the following technologies BEST meets this requirement?

Question37: A cloud engineer notices on a dashboard that the host is close to reaching maximum capacity for the CPU and memory in the cloud environment, which could cause performance issues. The cloud environment has 100 servers, with 25% of the servers consuming their compute only during peak business hours, 25% consuming half of the allocated resources, and the remaining 50% using the compute during off hours. Which of the following should the engineer perform to optimize the efficiency of the compute usage in the cloud?

Question38: A cloud provider is increasingly discovering hard-to-find issues within the growing infrastructure. The provider has all the basic necessary tools implemented to collect and store data regarding the environment. To allow the cloud provider to focus on relevant events, which of the following is the MOST appropriate technique to build intelligence?

Question39: A private cloud customer is considering using the public cloud to accommodate the peak utilization workload. Which of the following would be considered the ideal scaling solution?

Question40: A cloud administrator sets up performance monitoring, which raises alerts. The monitoring runs periodically and checks for the suggested parameters. However, alerts are not being raised in a timely fashion.
Which of the following is the MOST appropriate action to resolve the issue?

Question41: A security administrator wants to automate the implementation of network-based ACLs for services deployed within the company VPC. The security administrator is mostly concerned with intra-VPN separation to prevent unauthorized communication between cloud deployed services within the VPC.
Which of the following should the security administrator implement?

Question42: A company needs to meet the security requirements for PII. Which of the following cloud service models allows the company to have the MOST control to meet the security requirements?

Question43: A systems administrator created several new VMs on a private cloud and wants to ensure the new baseline still meets corporate guidelines. The administrator finds the following new load numbers on the hosts:

If corporate policy requires N+1 host capacity, which of the following metrics is MOST likely to present a problem?

Question44: A company is seeking a new backup solution for its virtualized file servers that fits the following characteristics:
* The files stored on the servers are extremely large.
* Existing files receive multiple small changes per day.
* New files are only created once per month.
All backups are being sent to a cloud repository.
Which of the following would BEST minimize backup size?

Question45: An entertainment company with a very large movie library is moving all of its production systems to an IaaS cloud. The current lease is expiring in the next month, and the company made a last-minute decision not to renew the lease.
Which of the following would be the MOST effective way to move all the data to the new cloud provider?

Question46: A company has an internal SLA for CPU and RAM oversubscription that should stay below 120%. Storage utilization should stay below 90% with oversubscription below 160%. Given the following:

Which of the following should be done to meet the SLA?

Question47: A company is required to ensure all access to its cloud instance for all users to utilize two-factor authentication.
The QA team confirms all functional requirements successfully test. After deployment, all business users report the two-factor authentication is not enforced while accessing the instance. Which of the following would be the MOST likely reason the QA team did not catch the issue?

Question48: A storage administrator must choose the best replication methodology for storage.
The datacenters are on opposite sides of the country. The RPO is 24 hours.
Replication and customer access use the same connections. Replication should not impact customer access during the day.
Which of the following solutions would BEST meet these requirements?

Question49: A company has an SLA of 15ms for storage latency.

Given the above metrics, which of the following is the MOST appropriate change to the environment?

Question50: A consultant is helping a gaming-as-a-service company set up a new cloud. The company recently bought several graphic card that need to be added to the servers. Which of the following should the consultant suggest as the MOST cost effective?

Question51: A company is implementing a SaaS solution with a large user base. SaaS solution licensing is user based, and user management is critical to keep the cost in check. Which of the following is the MOST efficient way to meet this requirement?

Question52: A company is interested in a DRP. The purpose of the plan is to recover business as soon as possible. The MOST effective technique is:

Question53: A company has implemented a dual-region (Region 1 and Region 2) cloud strategy from its current CSP. Both regions have the same data in them. Region 2 is experiencing an outage.
Which of the following is the BEST way to provide service to users in Region 2 during the outage while allowing access to the data?

Question54: A company has hired a technician to build a cloud infrastructure for a massively parallel application. Which of the following should the technician consider doing FIRST?

Question55: A customer wants a cloud systems administrator to adjust the backup schedule after month-end to ensure the data can be restored as fast as possible while minimizing the time needed to perform the backup. Which of the following backup types should be scheduled?

Question56: A rural manufacturing company wants to move all IT services, including the industrial control systems, to the cloud.
Given this scenario, which of the following cloud services elements would be a challenge to the deployment?

Question57: An administrator needs to make a file-level backup of a VM before deploying monthly updates. The backup should capture all changes since the last backup but should NOT reset the archive bit on any files.
Which of the following backup types BEST meets these requirements?

Question58: A storage administrator must choose the best replication methodology for storage.
The datacenters are on opposite sides of the country. The RPO is 24 hours.
Replication and customer access use the same connections. Replication should not impact customer access during the day.
Which of the following solutions would BEST meet these requirements?

Question59: A cloud administrator updates the syslog forwarder configuration on a local server in production to use a different port. The development team is no longer receiving the audit logs from that server. However, the security team can retrieve and search the logs for the same server. Which of the following is MOST likely the issue?

Question60: A company uses SaaS and IaaS solutions from multiple cloud providers. Users report that this requires them to manage and remember multiple user accounts and passwords. Which of the following solutions should be implemented to fix this issue?

Question61: Several state and local law enforcement agencies have decided to share information about traffic violations within their state by using a new search application. The state has policies around limiting the exposure of PII, and each local agency must comply with these policies. Which of the following cloud architecture models would be the BEST approach?

Question62: A company is implementing a launchpad within an existing application that will point to an existing SaaS provider. One of the requirements is the user should not have to log on multiple times. SSO is in place. When the launchpad is used, the user is redirected to SaaS providers as designed, but is asked for login credentials. Which of the following is the MOST likely cause of this issue?

Question63: A storage administrator must choose the best replication methodology for storage.
The datacenters are on opposite sides of the country. The RPO is 24 hours.
Replication and customer access use the same connections. Replication should not impact customer access during the day.
Which of the following solutions would BEST meet these requirements?

Question64: A software solution must be deployed based on the most granular access level. Which of the following methods should be used to meet the requirements?

Question65: A software development company is building cloud-ready applications and needs to determine the best approach for releasing software. Which of the following approaches should be used?

Question66: A cloud provider is evaluating an insider threat. A resource from the company operations team has access to the servers' virtual disks. This poses a risk that someone could copy and move the virtual server image and have access to the data. Which of the following solutions would help mitigate this problem?

Question67: After deploying multiple copies of database servers, data scrambling is started on them to anonymize user data. A few minutes later, the systems administrator receives multiple complaints regarding the performance of other VMs. CPU and memory have been eliminated as possible bottlenecks. Which of the following should be verified NEXT as a possible bottleneck?

Question68: A tenant has provisioned a new database server. It needs to add the database files in the exclusion list for security scanning, as it allows down the performance and locks the database file. Which of the following solutions must have this exclusion?

Question69: A customer wants to remove a user's access to the SaaS CRM system. Which of the following methods should be executed FIRST?

Question70: A private cloud customer is considering using the public cloud to accommodate the peak utilization workload. Which of the following would be considered the ideal scaling solution?

Question71: Upon discovery several SaaS applications are being utilized by users, and the InfoSec team needs to update a configuration file on all client machines.
Which of the following file types is used to redirect users through a web proxy?

Question72: The following three hosts are being put into a virtualization cluster for a new project initiative:

As more VMs are deployed to the cluster, which of the following virtualization technologies is MOST likely to report an error with this configuration?

Question73: A small clinic is moving its health and accounting systems to a SaaS solution. The clinic holds patient- and business-sensitive information. Which of the following is the company expected to do to protect its data?

Question74: A cloud-based web proxy is blocking key sites that a business requires for operation. After validation, the sites are legitimate, and access is required for end users to complete their work.
Which of the following is the BEST solution to allow access to the sites?

Question75: A company provides IaaS services. Which of the following disk provisioning models for creating standard template should the company use to provision virtual instances?

Question76: A VM was deleted by mistake today at 11:05 a.m. Below are the backups currently available for the VM:

Crash-consistent restore is acceptable. Which of the following backups should be chosen?

Question77: After deploying multiple copies of database servers, data scrambling is started on them to anonymize user data. A few minutes later, the systems administrator receives multiple complaints regarding the performance of other VMs. CPU and memory have been eliminated as possible bottlenecks. Which of the following should be verified NEXT as a possible bottleneck?

Question78: An administrator is using a script to create ten new VMs in a public cloud. The script runs and returns no errors. The administrator confirms that all ten VMs show up in the dashboard, but only the first eight reply to pings. Which of the following is the MOST likely cause of the issue?

Question79: A company recently decided to move some of its servers to a public cloud. The engineer has been invited to attend requirement sessions for moving servers to the cloud. The engineer is tasked with ensuring the servers that are being moved to the cloud are still in compliance, as they were on-premises. Which of the following should the engineer request during the requirement sessions?

Question80: A cloud architect is tasked with isolating traffic between subnets in an IaaS platform. The networks should be able to statefully communicate with each other. Given this scenario, which of the following should the architect implement?