EMT Practice Test

1. Question Content...

---

Question1: An organization allows clients to retrieve information on earthquake events. This is a description of which of the following classifications?

Question2: Which of the following would a company implement to provide authentication to multiple websites that are delivered through PaaS?

Question3: A hospital is leveraging a third-party-hosted, SaaS-based EMRS for all its regional locations. The EMRS will consolidate all existent stand-alone regional systems. All regional systems managers are concerned about the new system availability. Which of the following should the new EMRS architect do to address the manager's concerns?

Question4: A cloud engineer is responsible for managing two cloud environments from different MSPs. The security department would like to inspect all traffic from the two cloud environments.
Which of the following network topology solutions should the cloud engineer implement to reduce long- term maintenance?

Question5: A company security policy mandates education and training for new employees. The policy must outline acceptable use policies for SaaS applications. Given these requirements, which of the following security controls is BEST suited?

Question6: Which of the following is a networking topology concept used when placing publicly accessible hosts on a network?

Question7: With increased traffic to a website, several outages have occurred due to a log files filling the root drive of the web servers. An administrator is considering several possible solutions to prevent future outages.
Which of the following techniques is MOST likely to impact server performance if implemented?

Question8: A company is testing a new software product that is intended for auto discovery of assets within a cloud environment. The testing department wants to ensure that initial testing does not allow the product to leave the boundary of the test environment. Which of the following should the network administrator implement in the department test environment?

Question9: An organization wants to be informed of any security exploits open in the cloud virtual environment that is being hosted in the organization's boundary. Which of the following will need to be performed?

Question10: A cloud administrator has deployed a new web application to a private cloud. The application platform consists of two web servers that communicate to a redundant database back end. The traffic to the web servers is directed by a load balancer appliance. The administrator connects to the website on each of the webservers individually and confirms they are able to log in.
Which of the following aspects of the application has the administrator tested successfully?

Question11: A storage technician must implement a RAID configuration on a new database server. The database is required to process a large number of parallel read and writes; therefore, the storage administrator must select the appropriate array to maximize both read and write throughput.
There is no concern for storage fault tolerance, since the database server will be joined to an existing cluster. Which of the following should the storage administrator implement?

Question12: An organization is hosting a cloud-based web server infrastructure that provides web-hosting solutions. Sudden continuous bursts of traffic have caused the web servers to saturate CPU and network utilizations.
Which of the following should be implemented to prevent such disruptive traffic from reaching the web servers?

Question13: Company A has acquired Company B and is in the process of integrating their cloud resources.
Company B needs access to Company A's cloud resources while retaining its IAM solution.
Which of the following should be implemented?

Question14: Which of the following will be the BEST option for an administrator to bring VMs online at a warm site after a natural disaster has occurred at the primary site?

Question15: A law firm wants to limit log retention to the minimum required by law and regulation. Which of the following is the engineer most likely to do FIRST?

Question16: A cloud administrator updates the syslog forwarder configuration on a local server in production to use a different port. The development team is no longer receiving the audit logs from that server. However, the security team can retrieve and search the logs for the same server. Which of the following is MOST likely the issue?

Question17: Which of the following would allow separation between the Internet and the internal network of a company?

Question18: Which of the following is a negative business impact of cloud computing?

Question19: An administrator is tasked with the virtualization of all database management applications. Which of the following should the administrator do FIRST to ensure that database performance will be optimal?

Question20: A host with 30 VMs has 64GB of RAM, four quad-core CPUs, four 1-gigabit NICs and is connected to a NAS that provides NFS volumes. The hosted VMs are reporting slow performance. From the information given, which of the following is the MOST likely cause of the slow performance?

Question21: A Chief Information Security Officer (CISO) is evaluating the company's security management program. The CISO needs to locate all the assets with identified deviations and mitigation measures. Which of the following would help the CISO with these requirements?

Question22: Internal users are reporting high latency when connecting to external servers in the cloud. Which of the following should a network administrator optimize?

Question23: Cloud developers are experiencing a delay caused by the static code review before each deployment. The security operator and developer must address the issue without cutting corners with security testing. Which of the following would BEST address the delay issue?

Question24: Which of the following BEST describes the process of restoring service to a primary datacenter in a controlled manner, following a disaster?

Question25: Which of the following may be used to increase data confidentiality when encryption is not an option?

Question26: An administrator is responsible for managing a private cloud that has servers that require a significant amount of RAM, but does not have the resources to dedicate to the guests. Which of the following features should the administrator configure on the hypervisor?

Question27: A cloud provider is evaluating an insider threat. A resource from the company operations team has access to the servers' virtual disks. This poses a risk that someone could copy and move the virtual server image and have access to the data. Which of the following solutions would help mitigate this problem?

Question28: A new startup company is growing and wants to deploy a human resources management system on a private cloud that is only accessible to the human resources department. Which of the following is the BEST method of access control?

Question29: Which of the following can be used to assign priority to specific network traffic?

Question30: An administrator is implementing a private cloud that will be used as a test environment. To limit the number of guests per subnet to a maximum of 14, the administrator implemented a /20 network. Which of the following should the administrator use to assign the networks?

Question31: An administrator has built a web farm to serve a geographically disperse community. Session state persistence has been enabled. Which of the following could be implemented to optimize LAN transmit speeds?

Question32: A company is interested in a DRP. The purpose of the plan is to recover business as soon as possible.
The MOST effective technique is:

Question33: An administrator needs to test that a service is responding to external requests. Which of the following tools can be used to accomplish this task?

Question34: An administrator is responsible for creating a new template that will be used to deploy servers in a virtual environment. Which of the following should be the LAST step in completing the template?

Question35: When a customer requests a VM to perform at higher levels the administrator should (Select two):

Question36: Due to a policy change, a few of a customer's application VMs have been migrated to synchronously replicated storage. The customer now reports that performance is lower. The systems administrator checks the resource usage and discovers CPU utilization is at 60% and available memory is at 30%.
Which of the following is the MOST likely cause?

Question37: An IaaS application has a two-hour RTO and a four-hour RPO. The application takes one hour to back up its data or restore from a local backup file. A systems administrator is tasked with configuring the backup policy.
Which of the following should the administrator configure to achieve the application requirements with the LEAST cost?

Question38: An administrator needs to test the latency between two servers.
Which of the following commands should be used?

Question39: An administrator is building a VM for a department in the company. The requirements for the department include:
1. Run multiple mission critical applications.
2. Generate and interpret large quantities of test data.
The administrator will start with the standard company VM template. Which of the following should the administrator configure for this new department template to meet department requirements? (Select two.)

Question40: Which of the following is used to connect a VM to a SAN?

Question41: In an IaaS model, to which of the following methodologies would the client apply a list of OS patches, assuming approval from CAB has been given?

Question42: A cloud administrator is reviewing a new application implementation document. The administrator needs to make sure all the known bugs and fixes are applied, and unwanted ports and services are disabled.
Which of the following techniques would BEST help the administrator assess these business requirements?

Question43: An administrator suspects malware has infected a server.
Which of the following should be used to check services communicating with external servers?

Question44: While reviewing the auto-scaling events for a web application, a cloud engineer identified that the application upsized and downsized multiple times within the last hour.
Which of the following should the cloud engineer do NEXT?

Question45: A large law firm is migrating all of its systems to the cloud to meet growing business needs. The firm wants to reduce IT staff while maintaining day-to-day operations, such as user provisioning, folder management, and permissions. Which of the following MUST the cloud provider and cloud customer implement to ensure user non-repudiation?

Question46: An organization is hosting a DNS domain with private and public IP ranges.
Which of the following should be implemented to achieve ease of management?

Question47: A new browser version has been deployed to all users at a company. After the deployment, users report that they can no longer access the company's secure time-card system, which is hosted by a SaaS provider. A technician investigates and discovers a security error is received upon opening the site. If the browser is rolled back to the older version, the site is accessible again.
Which of the following is the MOST likely cause of the security error users are seeing?

Question48: A company wants to leverage a SaaS provider for its back-office services, and security is paramount. Which of the following solutions should a cloud engineer deploy to BEST meet the security requirements?

Question49: Which of the following is a best practice used in relation to MTBF?

Question50: An administrator is unable to ping anything on the network, as the ping command immediately returns an error. Which of the following commands should the administrator use FIRST to troubleshoot this issue?

Question51: The storage team needs to upgrade the firmware on the test environment clustered storage array while minimizing downtime. Which of the following BEST describe what the storage team should consider prior to upgrading the firmware? (Select TWO)

Question52: Which of the following tools would an administrator use to test connectivity of a server in the cloud?

Question53: A multinational corporation is moving its worldwide cloud presence to a single region, which is called Region A. An administrator attempts to use a workflow, which was previously used to deploy VMs to Region E in the new Region A environment, and receives the following error:
Invalid character set. Which of the following is the MOST likely cause of the error?

Question54: Web hosting is a service that enables customers to deploy a website quickly. This is an example of:

Question55: Which of the following backup methods is MOST used by VM users?

Question56: A new service request asks for all members of the finance department to have access to the accounting department's file server VMs on the private cloud environment.
Which of the following is the MOST efficient way to fulfill this service request?

Question57: Users are reporting slow performance on a virtual server. An administrator notices that the virtual CPU is at 50%. Which of the following should the administrator check on the host?

Question58: A systems administrator is troubleshooting performance issues with a Windows VDI environment.
Users have reported that VDI performance has been slow since the images were upgraded from Windows 7 to Windows 10. This VDI environment is used to run simple tasks, such as Microsoft Office. The administrator investigates the virtual machines and finds the following settings:
- 4 vCPU
- 16GB RAM
- 10Gb networking
- 256MB frame buffer
Which of the following MOST likely needs to be upgraded?

Question59: Which of the following will use ICMP to successively check hops between the source and destination?

Question60: A company is implementing a launchpad within an existing application that will point to an existing SaaS provider. One of the requirements is the user should not have to log on multiple times. SSO is in place. When the launchpad is used, the user is redirected to SaaS providers as designed, but is asked for login credentials. Which of the following is the MOST likely cause of this issue?

Question61: Which of the following should an administrator establish before deploying a guest VM in a production environment?

Question62: Company A has a SaaS cloud that hosts their office suite software. Company B has an IaaS cloud that provides all their server hardware, including the server hosting their office suite software. Which of the following is a similarity between both company's clouds?

Question63: A consultant is helping a gaming-as-a-service company set up a new cloud. The company recently bought several graphic cards that need to be added to the servers.
Which of the following should the consultant suggest as the MOST cost effective?

Question64: An administrator defines a backup as follows:
- One weekly full backup
- Daily incremental backup
Which of the following BEST describes where the administrator would define this?

Question65: A systems administrator is troubleshooting performance issues with a Windows VDI environment.
Users have reported that VDI performance is very slow at the start of the work day, but the performance is fine during the rest of the day.
Which of the following is the MOST likely cause of the issue?

Question66: A company wants to ensure their website, which allows customers to purchase products, is in a cluster at another geographical location. Which of the following solutions does this represent?

Question67: A cloud administrator is load balancing six VMs on an IaaS cloud service. The organization has an SLA stating the application should be available 99.999% of the time. At present, the six VMs are handling the load from one region and three availability zones. System baselines have confirmed there must be at least six VMs to handle this load.
Given this scenario, which of the following should the administrator recommend to BEST meet these requirements?

Question68: A company purchased a SaaS CRM application. The signed SLA meets year-round performance requirements. Three months after deployment, customers start reporting a slow application response time. System availability, connectivity, and proper functionality still meet the SL

Question69: An administrator is asked to securely upload a configuration file to a web server in a cloud. Which of the following protocols should be used in this scenario?

Question70: A company has a cloud infrastructure service, and the cloud architect needs to set up a DR site.
Which of the following should be configured in between the cloud environment and the DR site?

Question71: A company is migrating to the cloud and needs to implement a security policy. Which of the following should the company implement?

Question72: A technician has just logged into a newly provisioned host. The image used was provided by the cloud provider and is unmodified. Which of the following are steps that should be taken to harden it against potential attacks? (Select TWO)

Question73: A customer wants a cloud systems administrator to adjust the backup schedule after month-end to ensure the data can be restored as fast as possible while minimizing the time needed to perform the backup. Which of the following backup types should be scheduled?

Question74: The helpdesk starts receiving calls from a number of users that are suddenly having issues accessing one of the project management shared drives. When Joe, an administrator, logs onto the guest hosting the drive via the console he is able to get to the information. Which of the following failures could have caused this issue?

Question75: A cloud administrator wants to apply patches in an isolated copy of the production virtual server to assess the impact. Which of the following activities would BEST achieve this objective?

Question76: An administrator needs to monitor server applications in the company's data center. Which of the following tools would the administrator need to accomplish this objective?

Question77: A technician receives a report of system utilization:

Which of the following additional resources should the technician add FIRST given the trend data shown above?

Question78: The CASB report indicates several unsanctioned SaaS applications are being used in an organization.
Which of the following is the MOST likely cause?

Question79: A small clinic is moving its health and accounting systems to a SaaS solution. The clinic holds patient- and business-sensitive information. Which of the following is the company expected to do to protect its data?

Question80: Human resources users report their payroll system is running slow. An administrator monitors performance and notices the VM that runs the payroll system is showing very high memory utilization. Additional virtual memory is allocated to the VM, but now other business units are reporting slow performance as well. The administrator notices high swap file activity on the host.
Which of the following should the administrator perform?

Question81: A cloud architect is reviewing the design for a new cloud-based ERP solution. The solution consists of eight servers with a single network interface. The allocated IP range is 172.16.0.0/28.
One of the requirements of the solution is that it must be able to handle the potential addition of
16 new servers to the environment. Because of the complexity of the firewall and related ACL requirements, these new servers will need to be in the same network range. Which of the following changes would allow for the potential server addition?

Question82: Which of the following server types would be an ideal candidate for virtualization? (Select two.)

Question83: A company hosts its server in a public IaaS cloud. The company's management decides to migrate the servers to a different geographical region that is closer to the user base. A cloud administrator creates a new environment in that geographical region. Which of the following is the BEST way to migrate the VM from the original geographic region to the new region?

Question84: A cloud administrator is provisioning five VMs, each with a minimum of 8GB of RAM and a varying load throughout the day. The hypervisor has only 32GB of RAM. Which of the following features should the administrator use?

Question85: An application server, which uses a SaaS fax provider, is determined to cost too much money. An upgrade to the application allows for use of a physical fax card so the company only has to pay for a phone line. This is a production application; therefore, downtime must be minimized.
Which of the following types of migration is MOST efficient in facilitating this application upgrade?

Question86: An administrator reports the company is running out of disk space on the SAN. The network administrator is installing a new SAN. Which of the following should the administrator implement to alleviate this problem on the new SAN?

Question87: A systems administrator needs to configure a set of policies to protect the data to comply with mandatory regulations.
Which of the following should the administrator implement to ensure DLP efficiently prevents the exposure of sensitive data in a cloud environment?

Question88: A SAN that holds VM files is running out of storage space.
Which of the following will BEST increase the amount of effective storage on the SAN?

Question89: A mobile subscriber is experiencing random limited-service outages. Customers report being unable to make calls or browse. The service provider management console is not showing any alarms, errors, or critical logs, but does show a large number of connection request failures.
Which of the following could be the problem?

Question90: An SQL injection vulnerability was reported on a web application, and the cloud platform team needs to mitigate the vulnerability while it is corrected by the development team.
Which of the following controls will BEST mitigate the risk of exploitation?

Question91: A public cloud provider recently updated one of its services to provide a new type of application load balancer. The cloud administrator is tasked with building out a proof-of-concept using this new service type. The administrator sets out to update the scripts and notices the cloud provider does not list the load balancer as an available option type for deploying this service. Which of the following is the MOST likely reason?

Question92: Which of the following should be considered for capacity planning?

Question93: A virtual machine snapshot is:

Question94: An organization is required to set a custom registry key on the guest operating system.
Which of the following should the organization implement to facilitate this requirement?

Question95: Joe, a customer, wants to implement backup of his replicated VMs so production performance is not affected at the primary site.
Which of the following backup methods would be the MOST appropriate?

Question96: An administrator is performing a migration of a physical cluster that uses boot from SAN into private cloud. The systems administrator needs to minimize the downtime required.
Which of the following migrations is the BEST option for the systems administrator to use?

Question97: A company has just completed a security audit and received initial results from the auditor. The results show that the ethical hacker was able to gain access to the company servers by exploiting non-hardened VMs and hosts as guests and administrators. Which of the following should be implemented to harden the environment? (Select two.)

Question98: SIMULATION
The QA team is testing a newly implemented clinical trial management (CTM) SaaS application that uses a business intelligence application for reporting. The UAT users were instructed to use HTTP and HTTPS.
Refer to the application dataflow:
1A - The end user accesses the application through a web browser to enter and view clinical data.
2A - The CTM application server reads/writes data to/from the database server.
1B - The end user accesses the application through a web browser to run reports on clinical data.
2B - The CTM application server makes a SOAP call on a non-privileged port to the BI application server.
3B - The BI application server gets the data from the database server and presents it to the CTM application server.
When UAT users try to access the application using https://ctm.app.com or http://ctm.app.com, they get a message stating: "Browser cannot display the webpage." The QA team has raised a ticket to troubleshoot the issue.
INSTRUCTIONS
You are a cloud engineer who is tasked with reviewing the firewall rules as well as virtual network settings.
You should ensure the firewall rules are allowing only the traffic based on the dataflow.
You have already verified the external DNS resolution and NAT are working.
Verify and appropriately configure the VLAN assignments and ACLs. Drag and drop the appropriate VLANs to each tier from the VLAN Tags table. Click on each Firewall to change ACLs as needed.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

Question99: A storage appliance has lost all network access. Which of the following network access methods could a storage engineer use to investigate and correct the issue?

Question100: A new vulnerability has been announced which affects several critical VM guests, but no patch is available. Which of the following can the administrator perform to mitigate this risk prior to a patch being released?

Question101: Which of the following typically provides a FASTER access speed in a network storage implementation?

Question102: An organization purchased new servers with GPUs for render farms. The servers have limited CPU resources.
Which of the following GPU configurations will be the MOST optimal for virtualizing this environment?

Question103: A company is experiencing network access errors within one department that operates in a secure environment. The network administrator needs to investigate the configurations of the switches servicing that department to determine the cause of the network access errors. Which of the following tools should be used to directly access the switches in that department?

Question104: A cloud administrator is securing access to a VM using an IaaS cloud platform. The administrator must perform this task using an automated method, allow administrators to perform any method and expose any property of the VM, deny access for everyone else, and allow only read-only access to everyone else. Given this scenario, which of the following should the administrator use to BEST meet these requirements?

Question105: A cloud administrator is given a requirement to maintain a copy of all system logs for seven years. All servers are deployed in a public cloud provider's environment.
Which of the following is the MOST cost-efficient solution for retaining these logs?

Question106: A hosting company provides 10 VM web servers for a financial institution. The financial institution recently introduced a new web application and now their web traffic has significantly increased.
Which of the following could the administrator implement to assist in reducing the load on the web servers?

Question107: Which of the following should an administrator implement to help reduce confidentiality risk for data at rest that is located in a public cloud?

Question108: A company has decided to get multiple compliance and security certifications for its public cloud environment. However, the company has few staff members to handle the extra workload, and it has limited knowledge of the current infrastructure.
Which of the following will help the company meet the compliance requirements as quickly as possible?

Question109: A systems administrator is provisioning VMs in a cloud environment and has been told to select an OS build with the furthest end-of-life date.
Which of the following OS builds would be BEST for the systems administrator to use?

Question110: A company is required to ensure all access to its cloud instance for all users to utilize two-factor authentication. The QA team confirms all functional requirements successfully test. After deployment, all business users report the two-factor authentication is not enforced while accessing the instance. Which of the following would be the MOST likely reason the QA team did not catch the issue?

Question111: A systems administrator is about to deploy a new VM to a cloud environment. Which of the following will the administrator MOST likely use to select an address for the VM?

Question112: The following three hosts are being put into a virtualization cluster for a new project initiative:

As more VMs are deployed to the cluster, which of the following virtualization technologies is MOST likely to report an error with this configuration?

Question113: A user has submitted a ticket to request additional VMs due to long wait times for online ordering.
Given the snapshot of the resources in the table below:

Which of the following is the BEST option for the administrator to resolve the ticket?

Question114: Fault tolerant design allows a host to overcome a single HBA failure through:

Question115: A SaaS provider wants to maintain maximum availability for its service.
Which of the following should be implemented to attain the maximum SLA?

Question116: A customer wants to schedule a backup job that compares and saves changes from the last full backup. Which of the following backup types should be used?

Question117: A systems administrator for an e-commerce company will be migrating the company's main website to a cloud provider. The principal requirement is that the website must be highly available. Which of the following will BEST address this requirement?

Question118: A technician just received the lessons learned from some recent data that was lost due to an on- premises file-server crash. The action point is to change the backup strategy to minimize manual intervention. Which of the following is the BEST approach for the technician to implement?

Question119: A number of VMs in a host are experiencing processor contention, showing down operations Which of the following host hardware upgrade paths would yield higher VM performance, for the same VMs in the given hypervisor host?

Question120: Which of the following are types of storage media? (Select two.)

Question121: Cloud bursting can alleviate which of the following attacks?

Question122: An automation performs the following on a monthly basis:
- Disable accounts that have not logged on in the last 60 days
- Remove firewall rules with zero hits in the last 30 days
- Remove DNS entries that have not been updated in the last 60 days
- Archive all logs that are more than 30 days old
Six weeks after this new automation is implemented, an internal client reports that quarterly replication failover testing has failed.
Which of the following is the MOST likely cause of the failed test?

Question123: A system's application servers need to be patched. The requirements for maintenance work are as follows:
System downtime is not allowed.
The application server in use must be in the sane patch status. System performance must be maintained during patching work. Testing after patching must be done before the application server is in use. If any trouble occurs, recover the previous version in ten minutes. Which of the following methodologies should be selected?

Question124: A systems administrator is securing a new email system for a large corporation. The administrator wants to ensure private corporate information is not emailed to external users. Which of the following would be MOST useful to accomplish this task?

Question125: A media company has made the decision to migrate a physical, internal file server to the cloud and use a web-based interface to access and manage the files. The users must be able to use their current corporate logins.
Which of the following is the MOST efficient way to achieve this goal?

Question126: A systems administrator is creating a playbook to run tasks against a server on a set schedule.
Which of the following authentication techniques should the systems administrator use within the playbook?

Question127: Several state and local law enforcement agencies have decided to share information about traffic violations within their state by using a new search application. The state has policies around limiting the exposure of PII, and each local agency must comply with these policies. Which of the following cloud architecture models would be the BEST approach?

Question128: A company has hired a technician to build a cloud infrastructure for a massively parallel application. Which of the following should the technician consider doing FIRST?

Question129: A systems administrator wants the VMs on the hypervisor to share CPU resources on the same core when feasible. Which of the following will BEST achieve this goal?

Question130: A systems administrator has migrated a web application to the cloud with a synchronous uplink speed of 100Mbps. After the migration, the administrator receives reports of slow connectivity to the web application. The administrator logs into the firewall and notices the WAN port is transmitting at a constant 12.5MBps. Which of the following BEST explains the reason for the issue?

Question131: An administrator needs to verify what ports are listening on an operating system. Which of the following tools can be used to accomplish this task?

Question132: When a firewall takes an incoming request for a specific IP address and redirects it to an internal host, which of the following is being used?

Question133: A company uses its own private cloud, which has few available resources. Mission-critical systems and other information systems are running on it. A new system will be deployed on the private cloud.
The following tests are included in the test plan:
* Load test (2h)
* Backup/restore test (6h)
* Functional test (8h)
* Failover test (1h)
The work schedule of the existing system is shown below.

To minimize the effect to the existing system, which of the following schedules is MOST suitable for the load test?

Question134: A company has an internal SLA for CPU and RAM oversubscription that should stay below 120%.
Storage utilization should stay below 90% with oversubscription below 160%. Given the following:

Which of the following should be done to meet the SLA?

Question135: A company recently experienced a power outage that lasted 30 minutes. During this time, a whole rack of servers was inaccessible, even though the servers did not lose power.
Which of the following should be investigated FIRST?

Question136: Which of the following is BEST suited to achieve storage path redundancy?

Question137: A company has moved all on-premises workloads into a public cloud. After some time, the cloud engineer starts noticing time drifts on the VMs and suspects an NTP issue. Time drifts were not an issue when all the workloads were on-premises. Which of the following describes how the cloud engineer should resolve the issue?

Question138: A production IaaS database server contains PCI data and is a critical business capability. The CAB approved a normal code change release for QA and PROD to occur 30 minutes apart and to last a maximum of one hour. The cloud DBA team is 45 minutes behind schedule, so they miss the start time on QA. As the cloud DBA, which of the following is the BEST course of action to apply the code change?

Question139: A technician logs into a virtual machine and makes several changes, including IP address configuration and printer driver installation. Which of the following should the technician have performed BEFORE making these changes?

Question140: A company has deployed a four-node cluster in a COLO environment with server configurations listed below. The company wants to ensure there is 50% overhead for failover and redundancy.
There are currently eight VMs running within the cluster with four vCPUs x32GB each. The company wants to better utilize its resources within the cluster without compromising failover and redundancy.

Given the information above, which of the following should a cloud administrator do to BEST accommodate failover and redundancy requirements?

Question141: Which of the following access control types would give a system administrator the ability to assign access according to least privilege?

Question142: A cloud-based web proxy is blocking key sites that a business requires for operation. After validation, the sites are legitimate, and access is required for end users to complete their work.
Which of the following is the BEST solution to allow access to the sites?

Question143: A cloud administrator has deployed a new all-flash storage array with deduplication and compression enabled, and moved some of the VMs into it. The goal was to achieve 4:1 storage efficiency while maintaining sub-millisecond latency. Which of the following results would BEST suit the requirements?

Question144: Based on demand, an IaaS provider wants to deploy a security application for its customers.
Which of the following is the BEST technique for the IaaS provider to apply this to target systems?

Question145: A business is planning to migrate from a private cloud to a public cloud. To document business continuity, which of the following should be done FIRST?

Question146: An organization is converting a physical SQL server into a virtual server. The SQL database has been in use for several years and contains critical data for the organization. Which of the following conversion methods would be MOST appropriate?

Question147: Upon discovery several SaaS applications are being utilized by users, and the InfoSec team needs to update a configuration file on all client machines.
Which of the following file types is used to redirect users through a web proxy?

Question148: A database administrator is configuring an alternate site to replicate the data between the two sites. Which of the following is used to protect against eavesdropping across the network?

Question149: A systems administrator is deploying a GPU-accelerated VDI solution. Upon requests from several users, the administrator installs an older version of the OS on their virtual workstations.
The majority of the VMs run the latest LTS version of the OS.
Which of the following types of drivers will MOST likely ensure compatibility will all virtual workstations?

Question150: A VDI administrator has received reports from the drafting department that rendering is slower than normal. Which of the following should the administrator check FIRST to optimize the performance of the VDI infrastructure?

Question151: A physical server with SSD drives that hosts an IO-intensive database has been migrated into a private cloud to ensure further growth possibilities and accommodate quarterly load spikes (up to
10,000 IOPs). The requirement is to have log partition latency below 5ms and data partition latency below 10ms, irrespective of the load spikes. A cloud administrator has conducted extensive tests after the migration. Which of the following test results would ensure the migration is successful?

Question152: Which of the following is relevant to capacity planning in a SaaS environment?

Question153: Which of the following technologies are related to Web services?

Question154: A cloud administrator needs to reduce the cost of cloud services by using the company's off-peak period. Which of the following would be the BEST way to achieve this with minimal effort?

Question155: After monthly patching, a large number of users who are logged onto the network report that application links from a company's intranet site, which previously opened directly into the website, are now prompting for logon information. Application administrators confirm that the websites in question are working properly. Which of the following is the MOST likely cause of the new behavior?

Question156: An upgrade to a web application, which supports 400 users at four sites, is being tested. The application runs on four servers behind a load balancer.
The following test plan is proposed:
- Have 50 users from site A connect to server 1
- Have 50 users from site B connect to server 2
- Have 50 users from site C connect to server 3
- Have 50 users from site D connect to server 4
Which of the following parameters is being properly tested by this plan?

Question157: A cloud deployment engineer is modifying versions of the existing template image to instantiate new VMs. The engineer accomplishes this through the cloud self-service portal. After the version is changed and a new VM is successfully started, it does not have any connectivity, and all ping tests to other VMs fail. Which of the following would be the BEST approach to solve the problem?

Question158: A systems administrator needs to configure monitoring for a private cloud environment. The administrator has decided to use SNMP for this task.
Which of the following ports should the administrator open on the monitoring server's firewall?

Question159: A systems administrator recently upgraded the processors in a web application host. Upon the next login, the administrator sees a new alert regarding the license being out of compliance.
Which of the following licensing models is the application MOST likely using?

Question160: Creating a new node in a distributed cluster to meet increasing demand is an example of which of the following concepts?

Question161: To enhance availability, a company has expanded its public cloud presence to multiple regions from a single CSP. The company wants to ensure resources in the public cloud are highly available to users at company headquarters.
Which of the following is the BEST solution to fulfill this requirement?

Question162: If a firewall only allows TCP/UPD traffic from ports under 25 and above 162, which of the following would be used for alerting purposes?

Question163: A manufacturing company's current security policy mandates PII is not stored in the SaaS solution. Which of the following configuration controls should be used to block sensitive information from being stored in the SaaS solution?

Question164: An administrator, who operates a public cloud, has been tasked with implementing a secondary datacenter for failover purposes. Immediate replication has too much of an impact on the WAN link during production hours. Which of the following is the BEST option?

Question165: A systems administrator is using VMs to deploy a new solution that contains a number of application VMs.
Which of the following would provide high availability to the application environment in case of hypervisor failure?

Question166: A company has developed a cloud-ready application. Before deployment, an administrator needs to select a deployment technology that provides a high level of portability and is lightweight in terms of footprint and resource requirements.
Which of the following solutions will be BEST to help the administrator achieve the requirements?

Question167: The human resources department was charged for a cloud service that belongs to another department. All other cloud costs seem to be correct.
Which of the following is the MOST likely cause for this error?

Question168: A systems administrator recently deployed a VDI solution in a cloud environment; however, users are now experiencing poor rendering performance when trying to display 3-D content on their virtual desktops, especially at peak times.
Which of the following actions will MOST likely solve this issue?

Question169: Which of the following is included in a compliance audit?

Question170: Which of the following must be implemented by a cloud provider to ensure that different entities can authenticate and share basic user accounting information?

Question171: Which of the following does the administrator use to consolidate all the VMs into a single IP while allowing access to the Internet?

Question172: Which of the following is the BEST way to ensure accounts in a cloud environment are disabled as soon as they no longer need to be active?

Question173: A cloud engineer deployed an email server in a public cloud. Users can access the email server, but the emails they send cannot reach their destinations. Which of the following should the cloud engineer do FIRST?

Question174: An organization requires the following to be achieved between the finance and marketing departments:
- Allow HTTPS/HTTP.
- Disable FTP and SMB traffic.
Which of the following is the MOST suitable method to meet the requirements?

Question175: Which of the following data replication methods provides the shortest RPO?

Question176: An administrator has recently moved all VoIP to a CaaS offering. In order to ensure that VoIP traffic remains separate from the rest of the data traffic, which of the following MUST be done?

Question177: The administrator of virtual infrastructure needs to provision block storage for a virtual machine on which a business critical application will be installed. Considering performance, which of the following describes how the administrator should attach the storage to the VM?

Question178: An administrator is installing a new application on a server. Which of the following should be performed after a new application is installed on a new server?

Question179: A company changed its policy to have seven-year data retention in the public cloud. Which of the following would be the MOST cost-effective way to meet retention requirements?

Question180: A support engineer wants to prevent users from running malware on several IaaS compute instances. Which of the following will BEST achieve this objective?

Question181: cloud administrator uses a script to automatically restart all the servers running in the public cloud provider environment, which hosts e-commerce applications. The administrator decides to implement the same script for a similar environment that hosts the finance applications. After verifying the script is deployed to the public cloud environment for finance, the administrator schedules a job to run at 9:00 a.m. After 9:00 a.m., the administrator receives a report from the e- commerce team that the application is experiencing outages. Which of the following should the administrator do to resolve the issue?

Question182: Google Apps is a set of online applications allowing users to create and share documents and spreadsheets. This is an example of:

Question183: Which of the following encryption types would be used to protect company information when stored on a cloud server being shared by multiple companies?

Question184: A security and risk team requires a weekly report to detect VM file system changes and validate the integrity of the OS. Which of the following is the BEST solution for this requirement?

Question185: A cloud implementation engineer successfully created a new VM. However, the engineer notices the new VM is not accessible from another network. A ping test works from another VM on the same subnet. Which of the following is the MOST likely problem?

Question186: Some users are experiencing high latency when accessing their virtual desktops or retrieving saved documents. The administrator notices that two virtual desktops in the department are reserved for database processing applications that run several times a day. These machines are assigned to different hosts in the resource pool to provide a level of redundancy. Which of the following is the BEST course of action to remedy the situation?

Question187: A company has deployed a new cloud solution and is required to meet security compliance.
Which of the following will MOST likely be executed in the cloud solution to meet security requirements?

Question188: Which of the following technologies allows for the secure exchange of encryption keys within an internal network?

Question189: A SaaS customer reports that no one can access the application portal. After some troubleshooting, the cloud administrator finds a problem and provides a remedy by restarting the cluster. After documenting the solution, the support case is closed. Multiple tenants lose access to their hosts the following day.
Which of the following troubleshooting steps did the administrator miss?

Question190: Which of the following storage technologies supports file-level access?

Question191: A company is in the process of evaluating cloud service providers, as it is planning to move all of its on- premises IT services to the cloud. Most of the applications are mission critical with four 9s and five 9s uptime. The area where the company is located is also prone to natural disasters.
One of the main requirements is that IT services need to survive local outages as well as regional outages. One of the company's main customers is a government entity. Which of the following is the BEST way for a cloud engineer to address these requirements?

Question192: An administrator for a non-profit organization has been tasked with creating a flexible cloud solution. Which of the following would allow the programmer to customize this implementation?

Question193: An organization is using multiple SaaS-based business applications, and the systems administrator is unable to monitor and control the use of these subscriptions. The administrator needs to implement a solution that will help the organization apply security policies and monitor each individual SaaS subscription. Which of the following should be deployed to achieve these requirements?

Question194: Which of the following is the BEST process to provide data access control to only the hosts authorized to access the LUN?

Question195: Joe, a systems administrator, deployed a computer and storage for a system and took it to the application team. The next day, the application team claimed the database was slow. The deployment request, result, and current utilization data are shown below.

Which of the following descriptions of the situation is correct?

Question196: A company has implemented a dual-region (Region 1 and Region 2) cloud strategy from its current CSP. Both regions have the same data in them. Region 2 is experiencing an outage.
Which of the following is the BEST way to provide service to users in Region 2 during the outage while allowing access to the data?

Question197: Which of the following tools would an administrator use when determining the hop count between a source and a destination?

Question198: Company A just acquired Company B and needs to migrate critical applications to Company A's private cloud infrastructure. Company B's applications are running on legacy servers and cannot be removed from the current datacenter where they reside. Which of the following migration strategies should the cloud administrator use?

Question199: A private cloud is using the iSCSI protocol for connection from storage to hypervisors. This connection is not encrypted currently, and the systems administrator is tasked with enabling on- the-fly encryption.
Which of the following technologies should the administrator use?

Question200: Ann, a technician, is using a saved workflow to deploy virtual servers. The script worked yesterday but is now returning an authentication error. Ann confirms that she can manually log in with her own account and create a virtual server. Which of the following is MOST likely causing the error?

Question201: A cloud administrator is managing two private cloud environments. In cloud A, the disaster recovery solution has an SLA for RPO of five minutes and RTO of one hour. In cloud B, the disaster recovery solution has an SLA for RPO of one hour and RTO of 24 hours. A new customer's application requires that, in case of a disaster, no more than 15 minutes of data can be lost, and it should be fully recovered within one day. Which of the following would be the BEST approach to this application?

Question202: A file server is being migrated from physical hardware into a private cloud. Baselining of the server shows the disks average 90% full at all times. The contents of the file server consist mostly of compressed audio files. Multiple copies of the same files are often saved in different locations on the same disk. Which of the following storage technologies is MOST likely to help minimize storage utilization when moving this server to the private cloud?

Question203: Which of the following utilities would BEST help diagnose NAS mount points?

Question204: The security team for a large corporation is investigating a data breach. The team members are all trying to do the same tasks but are interfering with each other's work.
Which of the following did the team MOST likely forget to implement?

Question205: When designing a new private cloud platform, a cloud engineer wants to make sure the new hypervisor can be configured as fast as possible by cloning the OS from the other hypervisor. The engineer does not want to use local drives for the hypervisors. Which of the following storage types would BEST suit the engineer's needs?

Question206: Users at a university are experiencing slow response and performance issues with private cloud services. The university was compromised, and a loss of bandwidth utilization was reported.
Without deploying new software, which of the following should be performed to determine the cause of the issues?

Question207: Which of the following is the MOST mission critical for an IaaS provider?

Question208: A VM was successfully tested in a lab environment. As part of the deployment preparation, the image needs to be backed up for use in the multi-rollout accompanied by orchestration templates.
Which of the following should be used to create the image?

Question209: A company wants to set up a new department using private cloud resources. The new department needs access to sales and financial data, but it should be prohibited from accessing human resources data. Which of the following is the BEST option to configure on the virtual (software-defined) network to meet these requirements?

Question210: A systems administrator has migrated an internal application to a public cloud. The new web server is running under a TLS connection and has the same TLS certificate as the internal application that is deployed. However, the IT department reports that only internal users who are using new versions of the OSs are able to load the application home page.
Which of the following is the MOST likely cause of the issue?

Question211: An educational institution would like to install hypervisors for a new cloud development class with very limited funding. Which of the following hypervisors is MOST likely to be selected by the institution?

Question212: Lateral-moving malware has infected the server infrastructure. Which of the following network changes would MOST effectively prevent lateral movement in the future?

Question213: A cloud provider is increasingly discovering hard-to-find issues within the growing infrastructure.
The provider has all the basic necessary tools implemented to collect and store data regarding the environment. To allow the cloud provider to focus on relevant events, which of the following is the MOST appropriate technique to build intelligence?

Question214: A CASB provides the application proxy and web application firewall to a large retailer. All access to the retailer cloud application must originate from the CASB-designated IP addresses. The CASB has known geolocations with known IP addresses. Suddenly, all customers are not able to access the retailer cloud applications. Which of the following is MOST likely the reason for the issue?

Question215: A system administrator needs to spread data storage allocation across multiple physical drives and ensure that these are mapped properly to communicate with the virtual server farm. The administrator also needs the ability to quickly create or remove these mappings so data storage is not assigned without being used. Which of the following storage techniques would fit these requirements?

Question216: A recent advertisement campaign has increased traffic to an e-commerce application that is hosted within a public cloud environment. Customers are reporting that it takes too long to load their pages and submit orders. A cloud administrator looks at the metrics from the environment and sees high utilization of the CPU and memory resources. The cloud provider offers several preconfigured sizes for server template: x-small, small, medium, large, x-large, and 2x-large.

Given an expected increase in workload, which of the following is the BEST solution to improve application performance?

Question217: A company wants to be sure their cloud infrastructure is secure but fully available. To ensure this, the company wants to observe and be alerted in the event of a security breach, but chose a response for each alert. Which of the following solutions would meet these requirements?

Question218: Which of the following contributes to increased read access performance on a fibre channel SAN?

Question219: A technician has just installed a key-value store on a server and is unable to connect it to the application using port 8291. The technician logged on to the server and needs to determine if the port is listening. Which of the following tools should the technician use?

Question220: The IT department receives a client request to build multiple file server instances. Which of the following is the MOST efficient way for a cloud systems administrator to fulfill this request?

Question221: Which of the following is an authentication protocol that uses a ticket-based system for access control?

Question222: A newly established CSP allows for drive shipping to upload new data into the environment.
Sensitive data on 40TB of storage needs to be transferred within one week. Which of the following is the MOST efficient and secure method for shipment of the data to the CSP with minimal downtime?

Question223: An organization is running a database application on a SATA disk, and a customer is experiencing slow performance most of the time.
Which of the following should be implemented to improve application performance?

Question224: A Big Data analytics company wants to ensure its data is protected at rest.
Which of the following is the BEST hardware-based solution?