EMT Practice Test

1. Question Content...

---

Question1: A cloud administrator is setting up a new coworker for API access to a public cloud environment.
The administrator creates a new user and gives the coworker access to a collection of automation scripts. When the coworker attempts to use a deployment script, a 403 error is returned. Which of the following is the MOST likely cause of the error?

Question2: A company needs to rehost its ERP system to complete a datacenter migration to the public cloud. The company has already migrated other systems and configured VPN connections.
Which of the following MOST likely needs to be analyzed before rehosting the ERP?

Question3: Which of the following types of disaster recovery sites will have the highest MTTR if needed for operations during an outage?

Question4: A cloud architect is tasked with isolating traffic between subnets in an IaaS platform. The networks should be able to statefully communicate with each other. Given this scenario, which of the following should the architect implement?

Question5: A company is doing a cloud-to-cloud migration to lower costs. A systems administrator has to plan the migration accordingly.
Which of the following considerations is MOST important for a successful, future-proof, and low- cost migration?

Question6: A systems administrator is examining a managed hosting agreement and wants to determine how much data would be lost if a server had to be restored from backups. To which of the following metrics should the administrator refer?

Question7: An administrator is installing a new application on a server. Which of the following should be performed after a new application is installed on a new server?

Question8: A cloud administrator needs to coordinate and automate the management of a company's secrets and keys for all its cloud services with minimal effort and low cost. Which of the following is the BEST option to achieve the goal?

Question9: Which of the following is a negative business impact of cloud computing?

Question10: Every night a datacenter takes snapshots of each VM and backs them up to a tape which is shipped off to a disaster recovery site once a week. Which of the following can mitigate a security breach if the tapes were to fall out of the shipping vehicle during transport?

Question11: A tenant has provisioned a new database server. It needs to add the database files in the exclusion list for security scanning, as it allows down the performance and locks the database file.
Which of the following solutions must have this exclusion?

Question12: A DevOps administrator is building a new application slack in a private cloud. This application will store sensitive information and be accessible from the internet. Which of the following would be MOST useful in maintaining confidentiality?

Question13: An administrator is implementing a new SaaS application. The administrator has been directed to enhance the user authentication experience.
Which of the following technologies BEST meets this requirement?

Question14: A technician needs to configure a virtual NIC on a Class A IP address network. Which of the following is the default subnet mask for this network?

Question15: An organization requires the following to be achieved between the finance and marketing departments:
- Allow HTTPS/HTTP.
- Disable FTP and SMB traffic.
Which of the following is the MOST suitable method to meet the requirements?

Question16: Following is a sample result from a recently completed load test.

Based on the information provided, which of the following would be the BEST recommendation?

Question17: Ann, a technician, is using a saved workflow to deploy virtual servers. The script worked yesterday but is now returning an authentication error. Ann confirms that she can manually log in with her own account and create a virtual server. Which of the following is MOST likely causing the error?

Question18: An administrator is attempting to troubleshoot an issue between a web server in the DMZ and an internal workstation by reviewing packet captures. Upon inspection, the payloads of the packets are unreadable. Which of the following could be the cause of this issue?

Question19: Internal users are reporting high latency when connecting to external servers in the cloud. Which of the following should a network administrator optimize?

Question20: Ann, a cloud administrator, is reporting on how the organization has adhered to its marketing of
99.99999% system availability SLA.
Given this scenario, which of the following should Ann include in her report?

Question21: A system administrator needs to spread data storage allocation across multiple physical drives and ensure that these are mapped properly to communicate with the virtual server farm. The administrator also needs the ability to quickly create or remove these mappings so data storage is not assigned without being used. Which of the following storage techniques would fit these requirements?

Question22: Which of the following is BEST suited to achieve storage path redundancy?

Question23: A cloud administrator is building a new VM for machine-learning training. The developer requesting the VM has stated that the machine will need a full GPU dedicated to it.
Which of the following configuration options would BEST meet this requirement?

Question24: A hosting company provides 10 VM web servers for a financial institution. The financial institution recently introduced a new web application and now their web traffic has significantly increased.
Which of the following could the administrator implement to assist in reducing the load on the web servers?

Question25: A systems administrator is using a configuration management tool to perform maintenance tasks in a system. The tool is leveraging the target system's API to perform these maintenance tasks After a number of features and security updates are applied to the target system, the configuration management tool no longer works as expected. Which of the following is the MOST likely cause of the issue?

Question26: Which of the following is an authentication protocol that uses a ticket-based system for access control?

Question27: The CSA needs to install a patch on 58 virtual server instances during the Friday evening maintenance window. Which of the following is the MOST efficient way to get the patches installed?

Question28: A systems administrator recently upgraded the processors in a web application host. Upon the next login, the administrator sees a new alert regarding the license being out of compliance.
Which of the following licensing models is the application MOST likely using?

Question29: A cloud administrator sets up performance monitoring, which raises alerts. The monitoring runs periodically and checks for the suggested parameters. However, alerts are not being raised in a timely fashion.
Which of the following is the MOST appropriate action to resolve the issue?

Question30: A systems administrator is reviewing two CPU models for a cloud deployment. Both CPUs have the same number of cores/threads and run at the same clock speed.
Which of the following will BEST identify the CPU with more computational power?

Question31: Which of the following actions should a systems administrator perform during the containment phase of a security incident in the cloud?

Question32: A systems administrator is diagnosing performance issues on a web application. The web application sends thousands of extremely complex SQL queries to a database server, which has trouble retrieving the information in time. The administrator checks the database server and notes the following resource utilization:
CPU: 64%
RAM: 97%
Network throughput: 384,100Kbps.
Disk throughput: 382,700Kbps
The administrator also looks at the storage for the database server and notices it is consistently near its OPS limit. Which of the following will BEST resolve these performance issues?

Question33: Worldwide users from an organization are experiencing intermittent access to a global cloud application. The cloud provider availability dashboard shows all resource availability has been
100% in the last two weeks. No network outages have been reported. Which of the following should the organization's administrator do BEFORE calling the cloud provider?

Question34: While reviewing the auto-scaling events for a web application, a cloud engineer identified that the application upsized and downsized multiple times within the last hour.
Which of the following should the cloud engineer do NEXT?

Question35: A systems administrator has finished installing monthly updates to servers in a cloud environment. The administrator notices certain portions of the playbooks are no longer functioning. Executing the playbook commands manually on a server does not work as well.
There are no other reports of issues. Which of the following is the MOST likely cause of this issue?

Question36: An administrator is tasked with encrypting all Personally Identifiable Information (PII) within a cloud- based database. Which of the following types of encryption will ensure that ONLY this type of information is encrypted while the rest of the database remains unencrypted?

Question37: A technician receives a call from Joe, a user, who is unable to log into any of the company's SaaS application. The applications are provided by multiple vendors. Joe reports his credentials were working previously, and he is able to log into the locally hosted applications with the same credentials.
Which of the following is the MOST likely cause of Joe's issues?

Question38: A systems administrator is trying to establish an RDP session from a desktop to a server in the cloud. However, the connection appears to be refused even through the VM is responding to ICMP echo requests. Which of the following should the administrator check FIRST?

Question39: A disaster situation has occurred, and the entire team needs to be informed about the situation.
Which of the following documents will help the administrator find the details of the relevant team members for escalation?

Question40: A company is considering consolidating a number of physical machines into a virtual infrastructure that will be located at its main office. The company has the following requirements:
- High-performance VMs
- More secure
- Has system independence
Which of the following is the BEST platform for the company to use?

Question41: A systems administrator deployed a new application release to the green stack of a blue-green infrastructure model and made the green stack primary. Immediately afterward, users began reporting application issues. The systems administrator must take action to bring the service online as quickly as possible. Which of the following is the FASTEST way to restore the service?

Question42: A cloud administrator notices one of the servers is using the wrong set of NTP servers. The administrator needs to avoid the same issue in the future but needs to minimize administration resources. Which of the following tools should a cloud administrator deploy to meet this requirement?

Question43: A cloud administrator is managing two private cloud environments. In cloud A, the disaster recovery solution has an SLA for RPO of five minutes and RTO of one hour. In cloud B, the disaster recovery solution has an SLA for RPO of one hour and RTO of 24 hours. A new customer's application requires that, in case of a disaster, no more than 15 minutes of data can be lost, and it should be fully recovered within one day. Which of the following would be the BEST approach to this application?

Question44: If a firewall only allows TCP/UPD traffic from ports under 25 and above 162, which of the following would be used for alerting purposes?

Question45: When working with hypervisors configured in a highly available configuration that provides fail- over capabilities to virtualized servers and applications, which of the following requirements is commonly overlooked?

Question46: A VDI administrator has received reports from the drafting department that rendering is slower than normal. Which of the following should the administrator check FIRST to optimize the performance of the VDI infrastructure?

Question47: Which of the following would be appropriate when considering inbound access security for a web- based SaaS solution?

Question48: A local bank has all of its infrastructure in the cloud. An update was applied to the main database server at 5:00 a.m. on Monday morning, and the database was then corrupted and unusable. It had to be restored from backup. The last backup was taken the night before at 10:00 p.m. The database was then restored successfully, but seven hours' worth of data was lost, which is deemed unacceptable. Which of the following needs to be updated in the DR plan?

Question49: When the cache receives write data from the hosts, which of the following does the controller send back to the host?

Question50: An administrator needs to remotely change the computer name of a host server. The server does not have a GUI. Which of the following should the administrator use?

Question51: A systems administrator is about to deploy a new VM to a cloud environment. Which of the following will the administrator MOST likely use to select an address for the VM?

Question52: Which of the following will use ICMP to successively check hops between the source and destination?

Question53: Asynchronous data replication for a SaaS application occurs between Regions A and B.
Users in Region A are reporting that the most current data for an insurance claims application is not available to them until after 11:30 a.m. The cloud administrator for this SaaS provider checks the network utilization and finds that only about 10% of the network bandwidth is being used.
Which of the following describes how the cloud administrator could BEST resolve this issue?

Question54: An OS administrator is reporting slow storage throughput on a few VMs in a private IaaS cloud.
Performance graphs on the host show no increase in CPU or memory. However, performance graphs on the storage show a decrease of throughput in both IOPS and MBps but not much increase in latency. There is no increase in workload, and latency is stable on the NFS storage arrays that are used by those VMs.
Which of the following should be verified NEXT?

Question55: A cloud administrator recently noticed that a number of files stored at a SaaS provider's file- sharing service were deleted. As part of the root cause analysis, the administrator noticed the parent folder permissions were modified last week. The administrator then used a test user account and determined the permissions on the files allowed everyone to have write access.
Which of the following is the best step for the administrator to take NEXT?

Question56: A public cloud provider recently updated one of its services to provide a new type of application load balancer. The cloud administrator is tasked with building out a proof-of-concept using this new service type. The administrator sets out to update the scripts and notices the cloud provider does not list the load balancer as an available option type for deploying this service. Which of the following is the MOST likely reason?

Question57: Due to a competitor's unlimited data plan, a service provider is struggling and wants to transform its business services to be more hosting oriented. A cloud architect is tasked to review current cloud resource capacity and provide recommendations and a plan for better resource utilization.
Given the following report:

Which of the following is the BEST option for the architect to suggest?

Question58: A cloud administrator is integrating account logins with Facebook, LinkedIn, and Twitter for marketing and to increase market presence using social media platforms. Given this scenario, which of the following components are needed to match these requirements? (Select TWO).

Question59: An IaaS provider has numerous devices and services that are commissioned and decommissioned automatically on an ongoing basis. The cloud administrator needs to implement a solution that will help reduce administrative overhead.
Which of the following will accomplish this task?

Question60: Cloud administrator uses a script to automatically restart all the servers running in the public cloud provider environment, which hosts e-commerce applications.
The administrator decides to implement the same script for a similar environment that hosts the finance applications.
After verifying the script is deployed to the public cloud environment for finance, the administrator schedules a job to run at 9:00 a.m. After 9:00 a.m., the administrator receives a report from the e- commerce team that the application is experiencing outages.
Which of the following should the administrator do to resolve the issue?

Question61: A virtual machine snapshot is:

Question62: A systems administrator is setting up a backup solution to follow the 3-2-1 policy. Currently, the solution is set to back up from the servers to an on-site storage server. Which of the following should the administrator configure to comply with the 3-2-1 policy?

Question63: A cloud infrastructure function that can grow and shrink to meet peak demand requirements quickly is known as:

Question64: An e-commerce business recently experienced a two-hour outage from its hosted web service provider. According to the SLA, the business needs to determine how much data can be restored.
On which of the following service-level components should the business focus?

Question65: A cloud administrator is managing an organization's infrastructure in a public cloud. All servers are currently located in a single virtual network with a single firewall that all traffic must pass through. Per security requirements, production, QA, and development servers should not be able to communicate directly with each other. Which of the following should an administrator perform to comply with the security requirement?

Question66: A technician is configuring a new web application to be highly available. The technician has configured multiple web servers in different availability zones at a public cloud provider. The application requires users to be directed to the same server each time they visit. Which of the following network components is MOST likely to accomplish this?

Question67: A customer is building a web cluster in which all nodes must access a shared pool of images.
Which of the following storage types would be BEST for this workload?

Question68: Which of the following storage technologies is IP-based?

Question69: A server hosting file shares is an example of which of the following types of storage?

Question70: A company provides IaaS services. Which of the following disk provisioning models for creating standard template should the company use to provision virtual instances?

Question71: A development team released a new version of an application and wants to deploy it to the cloud environment with a faster rollback and minimal downtime. Which of the following should the cloud administrator do to achieve this goal?

Question72: An administrator is building a VM for a department in the company. The requirements for the department include:
1. Run multiple mission critical applications.
2. Generate and interpret large quantities of test data.
The administrator will start with the standard company VM template. Which of the following should the administrator configure for this new department template to meet department requirements? (Select two.)

Question73: Several SaaS providers support identity federation for authentication. Which of the following would BEST assist in enabling federation?

Question74: An administrator is testing a new web server from outside of the corporate firewall. The administrator performs a test from a single PC and the web server responds accordingly. The administrator then provisions several virtual machines on a network behind NAT and uses them to perform the same operation on the web server at the same time, but thereafter soon discovers that none of the machines can reach the web server. Which of the following could be responsible?

Question75: Below is the output from a troubleshooting activity:
1. SaaS application is unavailable to a set of users at a single site.
2. WAN connectivity was considered to be the cause of the problem.
3. Upon testing, it seemed the WAN connectivity was up, but the default gateway was unreachable from the internal users.
4. The faulty switch was replaced to bring up the connectivity.
5. The incident was documented.
Based on the methodology, which of the following steps was overlooked during the activity?

Question76: A systems administrator is helping to develop a disaster recovery solution. The solution must ensure all production capabilities are available within two hours. Which of the following will BEST meet this requirement?

Question77: A DevOps administrator is designing a new machine-learning platform. The application needs to be portable between public and private clouds and should be kept as small as possible. Which of the following approaches would BEST meet these requirements?

Question78: Recent feedback from an employee engagement survey stated that users are frustrated with multiple logins to different SaaS providers, and the cloud engineering teams is directed to address this issue and implement a solution. The security policy states that users must access the SaaS from approved IP addresses.
Which of the following is the BEST and most efficient solution to deploy?

Question79: Drag and Drop Question
Drag and drop each Disaster Recovery Solution need to the corresponding SLA requirement.
Options may be used once or not at all.

Question80: How does cloud computing influence service operations?

Question81: After initial stress testing showed that a platform performed well with the specification of a single
32 vCPU node, which of the following will provide the desired service with the LOWEST cost and downtime?

Question82: A company that utilizes an IaaS service provider has contracted with a vendor to perform a penetration test on its environment. The vendor is able to exploit the virtualization layer and obtain access to other instances within the cloud provider's environment that do not belong to the company.
Which of the following BEST describes this attack?

Question83: A network administrator needs to configure the MPLS network over the WAN to allow for synchronous datacenter replication. Which of the following benefits will this provide for the company's public cloud?

Question84: Which of the following is a hardening technique that an administrator would perform when creating a standard VM template that would be used for deploying servers in a production environment?

Question85: Which of the following describes the theoretical maximum number of operations a disk can perform and is used to denote the disk performance of storage tiers?

Question86: Two VMs are in the same subnet 10.120.10.x/24, but the VMs cannot communicate with each other. Which of the following could be causing this problem?

Question87: A systems administrator needs to convert ten physical servers to virtual.
Which of the following would be the MOST efficient conversion method for the administrator to use?

Question88: An administrator is configuring a new server to run a hypervisor installation from a PXE boot.
Which of the following BEST describes the hypervisor being installed on this machine?

Question89: Which of the following is relevant to capacity planning in a SaaS environment?

Question90: In an IaaS platform, which of the following actions would a systems administrator take FIRST to identify the scope of an incident?

Question91: Elastic computing is important to businesses as it relates to which of the following cloud characteristics?

Question92: A systems administrator notices that a piece of networking equipment is about to reach its end of support.
Which of the following actions should the administrator recommend?

Question93: An organization purchased new servers with GPUs for render farms. The servers have limited CPU resources.
Which of the following GPU configurations will be the MOST optimal for virtualizing this environment?

Question94: Users are experiencing slow response times from an intranet website that is hosted on a cloud platform. There is a site-to-site VPN connection to the cloud provider over a link of 100Mbps.
Which of the following solutions will resolve the issue the FASTEST?

Question95: Which of the following describes the amount of data that can be sent across a link in a given time?

Question96: A Big Data analytics company wants to ensure its data is protected at rest.
Which of the following is the BEST hardware-based solution?

Question97: A cloud service administrator is consuming PaaS services and is performing baseline configuration tests. Which of the following is part of the PaaS consumer's responsibility with respect to the baseline confirmation tests?

Question98: A cloud administrator is responsible for managing a cloud-based content management solution.
According to the security policy, any data that is hosted in the cloud must be protected against data exfiltration. Which of the following solutions should the administrator implement?

Question99: A company has purchased two new servers to host several virtualized database servers. Each server has two 3GHz quad-core processors each, 64GB RAM each, 200GB DAS, and two
10GbE NICs each. Which of the following is the MOST likely bottleneck for these systems?

Question100: An administrator recently provisioned a file server in the cloud. Based on financial considerations, the administrator has a limited amount of disk space. Which of the following will help control the amount of space that is being used?

Question101: The InfoSec team has directed compliance database activity monitoring without agents on a hosted database server in the public IaaS. Which of the following configurations is needed to ensure this requirement is achieved?

Question102: A cloud administrator is reviewing the annual contracts for all hosted solutions. Upon review of the contract for the hosted mail solution, the administrator notes the monthly subscription rate has increased every year. The provider has been in place for ten years, and there is a large amount of data being hosted. Which of the following is a barrier to switching providers?

Question103: Which of the following cloud services would MOST likely be selected by a software development company that needs a cloud in which to develop software and does not have infrastructure requirements?

Question104: Fault tolerant design allows a host to overcome a single HBA failure through:

Question105: An IaaS application has a two-hour RTO and a four-hour RPO. The application takes one hour to back up its data or restore from a local backup file. A systems administrator is tasked with configuring the backup policy.
Which of the following should the administrator configure to achieve the application requirements with the LEAST cost?

Question106: An administrator is no longer receiving alerting messages from the web server platform that recently failed over to a new secondary datacenter due to a power failure. Which of the following is the cause of the problem?

Question107: A customer wants to remove a user's access to the SaaS CRM system. Which of the following methods should be executed FIRST?

Question108: Which of the following would be the BEST option for discussion of what individuals should do in an incident response or disaster recovery scenario?

Question109: Which of the following is the MOST secure way to mutually authenticate an external server to an internal server for a data exchange?

Question110: A cloud technology vendor has released an update to its product. A company providing cloud services need to quickly adopt the update to provide support to its customers.
Which of the following is the MOST efficient action to complete this task?

Question111: A cloud-based web proxy is blocking key sites that a business requires for operation. After validation, the sites are legitimate, and access is required for end users to complete their work.
Which of the following is the BEST solution to allow access to the sites?

Question112: A consultant is helping a gaming-as-a-service company set up a new cloud. The company recently bought several graphic card that need to be added to the servers. Which of the following should the consultant suggest as the MOST cost effective?

Question113: Which of the following is the BEST method to isolate iSCSI network traffic?

Question114: In an existing IaaS instance, it is required to deploy a single application that has different versions.
Which of the following should be recommended to meet this requirement?

Question115: A cloud administrator is assigned to establish a connection between the on-premises data center and the new CSP infrastructure. The connection between the two locations must be secure at all times and provide service for all users inside the organization. Low latency is also required to improve performance during data transfer operations. Which of the following would BEST meet these requirements?

Question116: A systems administrator is deploying a solution that requires a virtual network in a private cloud environment. The solution design requires the virtual network to transport multiple payload types.
Which of the following network virtualization options would BEST satisfy the requirement?

Question117: Which of the following describes a host server that is configured to bridge four guest servers?

Question118: An administrator needs to deploy a new release of an application in a way that allows a quick rollback to the previous version of the application. Which of the following is the BEST strategy to apply?

Question119: An educational institution would like to install hypervisors for a new cloud development class with very limited funding. Which of the following hypervisors is MOST likely to be selected by the institution?

Question120: A cloud solutions architect needs to determine the best strategy to deploy an application environment in production, given the following requirements:
No downtime
Instant switch to a new version using traffic control for all users
Which of the following deployment strategies would be the BEST solution?

Question121: A marketing team is using a SaaS-based service to send emails to large groups of potential customers. The internally managed CRM system is configured to generate a list of target customers automatically on a weekly basis, and then use that list to send emails to each customer as part of a marketing campaign. Last week, the first email campaign sent emails successfully to 3,000 potential customers. This week, the email campaign attempted to send out
50,000 emails, but only 10,000 were sent.
Which of the following is the MOST likely reason for not sending all the emails?

Question122: A cloud administrator is securing access to a VM using an IaaS cloud platform. The administrator must perform this task using an automated method, allow administrators to perform any method and expose any property of the VM, deny access for everyone else, and allow only read-only access to everyone else. Given this scenario, which of the following should the administrator use to BEST meet these requirements?

Question123: A storage array that is used exclusively for datastores is being decommissioned, and a new array has been installed. Now the private cloud administrator needs to migrate the data. Which of the following migration methods would be the BEST to use?

Question124: A global web-hosting company is concerned about the availability of its platform during an upcoming event. Web traffic is forecasted to increase substantially during the next week. The site contains mainly static content.
Which of the following solutions will assist with the increased workload?

Question125: Host A and B can both access LUNs one to ten in a single SAN LUN 11 has been created and Host A can access it but Host B cannot. Which of the following will likely be the cause of this issue?

Question126: A software solution must be deployed based on the most granular access level. Which of the following methods should be used to meet the requirements?

Question127: A mobile subscriber is experiencing random limited-service outages. Customers report being unable to make calls or browse. The service provider management console is not showing any alarms, errors, or critical logs, but does show a large number of connection request failures.
Which of the following could be the problem?

Question128: The system administrator created a file sharing service to the cloud for easier access for those working remotely. Which of the following tests should be performed to determine if services can be compromised?

Question129: SIMULATION
A company has decided to scale its e-commerce application from its corporate datacenter to a commercial cloud provider to meet an anticipated increase in demand during an upcoming holiday.
The majority of the application load takes place on the application server under normal conditions.
For this reason, the company decides to deploy additional application servers into a commercial cloud provider using the on-premises orchestration engine that installs and configures common software and network configurations.
The remote computing environment is connected to the on-premises datacenter via a site-to-site IPSec tunnel.
The external DNS provider has been configured to use weighted round-robin routing to load balance connections from the Internet.
During testing, the company discovers that only 20% of connections completed successfully.
INSTRUCTIONS
Review the network architecture and supporting documents and fulfill these requirements:
Part 1:
* Analyze the configuration of the following components: DNS, Firewall 1, Firewall 2, Router 1, Router 2, VPN and Orchestrator Server.
* Identify the problematic device(s).
Part 2:
* Identify the correct options to provide adequate configuration for hybrid cloud architecture.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
Part 1:
Cloud Hybrid Network Diagram








Part 2:
Only select a maximum of TWO options from the multiple choice question. (Choose two.)

Question130: A college has implemented a private cloud for students and faculty. The college is required by their accrediting body to ensure that the cloud meets certain confidentiality and privacy requirements. Which of the following represents the LEAST intrusive testing method for the college to use, while ensuring separation of duties during the testing?

Question131: A vendor is installing a new retail store management application for a customer. The application license ensures software costs are low when the application is not being used, but costs go up when use is higher.
Which of the following licensing models is MOST likely being used?

Question132: A systems administrator would like to reduce the network delay between two servers.
Which of the following will reduce the network delay without taxing other system resources?

Question133: Which of the following is used to provide both data integrity and confidentiality using an asymmetric key exchange?

Question134: Company A has acquired Company B and is in the process of integrating their cloud resources.
Company B needs access to Company A's cloud resources while retaining its 1AM solution.
Which of the following should be implemented?

Question135: Which of the following can be used to physically restrict employees from accessing a datacenter?

Question136: A system has the ability to automatically provision additional virtual servers in response to a load increase. This is an example of which of the following cloud features?

Question137: A systems administrator is informed that a database server containing PHI and PII is unencrypted. The environment does not support VM encryption, nor does it have a key management system. The server needs to be able to be rebooted for patching without manual intervention.
Which of the following will BEST resolve this issue?

Question138: A system's application servers need to be patched. The requirements for maintenance work are as follows:
System downtime is not allowed.
The application server in use must be in the sane patch status. System performance must be maintained during patching work. Testing after patching must be done before the application server is in use. If any trouble occurs, recover the previous version in ten minutes. Which of the following methodologies should be selected?

Question139: A cloud administrator has finished setting up an application that will use RDP to connect. During testing, users experience a connection timeout error.
Which of the following will MOST likely solve the issue?

Question140: A company is concerned about the security of its data repository that contains customer PII. A systems administrator is asked to deploy a security control that will prevent the exfiltration of such data. Which of the following should the systems administrator implement?

Question141: A branch office has finished work on a new project and needs to send the data back to the main office where the project will be stored and accessible for the rest of the company. The company administrator has determined current bandwidth between the branch and main office is insufficient to handle the data files without interfering with email and web services for the branch office. Which of the following solutions should the administrator implement to pass data between the two offices without interfering with other online traffic?

Question142: Which of the following is improved by choosing cloud computing versus traditional IT infrastructure outsourcing?

Question143: A cloud administrator reports a problem with the maximum number of users reached in one of the pools. There are ten VMs in the pool, each with a software capacity to handle ten users. Based on the dashboard metrics, 15% of the incoming new service requests are failing. Which of the following is the BEST approach to resolve the issue?

Question144: A critical new security update has been released to fix an identified zero-day vulnerability with the SSH server process.
Due to its severity, all development and staging servers must have this update applied immediately.
Which of the following is the FASTEST way for the administrator to apply the patch and ensure all systems are configured consistently?

Question145: Which of the following cloud services is fully managed?

Question146: A company is implementing a SaaS solution with a large user base. SaaS solution licensing is user based, and user management is critical to keep the cost in check. Which of the following is the MOST efficient way to meet this requirement?

Question147: The storage team needs to upgrade the firmware on the test environment clustered storage array while minimizing downtime. Which of the following BEST describe what the storage team should consider prior to upgrading the firmware? (Select TWO)

Question148: Users of a public website that is hosted on a cloud platform are receiving a message indicating the connection is not secure when landing on the website. The administrator has found that only a single protocol is opened to the service and accessed through the URL
https://www.comptiasite.com. Which of the following would MOST likely resolve the issue?

Question149: A cloud administrator is upgrading a cloud environment and needs to update the automation script to use a new feature from the cloud provider. After executing the script, the deployment fails. Which of the following is the MOST likely cause?

Question150: A systems administrator is provisioning VMs in a cloud environment and has been told to select an OS build with the furthest end-of-life date.
Which of the following OS builds would be BEST for the systems administrator to use?

Question151: A business is planning to migrate from a private cloud to a public cloud. To document business continuity, which of the following should be done FIRST?

Question152: Which of the following strategies will mitigate the risk of a zero-day vulnerability MOST efficiently?

Question153: A systems administrator needs to implement a service to protect a web application from external attacks. The administrator must have session-based granular control of all HTTP traffic. Which of the following should the administrator configure?

Question154: Which of the following definitions of serverless computing BEST explains how it is different from using VMs?

Question155: A private cloud customer is considering using the public cloud to accommodate the peak utilization workload. Which of the following would be considered the ideal scaling solution?

Question156: An administrator needs to verify what ports are listening on an operating system. Which of the following tools can be used to accomplish this task?

Question157: A company has decided to get multiple compliance and security certifications for its public cloud environment. However, the company has few staff members to handle the extra workload, and it has limited knowledge of the current infrastructure.
Which of the following will help the company meet the compliance requirements as quickly as possible?

Question158: A systems administrator is deploying a VM and would like to minimize storage utilization by ensuring the VM uses only the storage if needs. Which of the following will BEST achieve this goal?

Question159: An organization is replacing its internal human resources system with a SaaS-based application.
The solution is multi-tenant, and the organization wants to ensure ubiquitous access while preventing password replay attacks. Which of the following would BEST help to mitigate the risk?

Question160: After deploying multiple copies of database servers, data scrambling is started on them to anonymize user data. A few minutes later, the systems administrator receives multiple complaints regarding the performance of other VMs. CPU and memory have been eliminated as possible bottlenecks. Which of the following should be verified NEXT as a possible bottleneck?

Question161: The amount of time between when the source sends information and the target receives it is known as:

Question162: A company wants to move its environment from on premises to the cloud without vendor lock-in.
Which of the following would BEST meet this requirement?

Question163: To save on licensing costs, the on-premises, IaaS-hosted databases need to be migrated to a public DBaaS solution. Which of the following would be the BEST technique?

Question164: Which of the following network topologies should an administrator use to segment traffic?

Question165: A company requires all system logs to be saved for a minimum 30 days. However, many employees are reporting storage near capacity alerts. A cloud administrator is trying to fix and prevent this issue from happening again.
Which of the following is the BEST option?

Question166: A company recently subscribed to a SaaS collaboration service for its business users. The company also has an on-premises collaboration solution and would like users to have a seamless experience regardless of the collaboration solution being used. Which of the following should the administrator implement?

Question167: A user reports a poor-quality remote VDI session. Which of the following should the help desk technician do FIRST to troubleshoot the issue?

Question168: A systems administrator needs to configure a set of policies to protect the data to comply with mandatory regulations.
Which of the following should the administrator implement to ensure DLP efficiently prevents the exposure of sensitive data in a cloud environment?

Question169: An organization is looking to implement an online web-based mail system to allow employees to access email while not on the network. The organization wants to have complete control over the servers and the dat

Question170: A physical server with SSD drives that hosts an IO-intensive database has been migrated into a private cloud to ensure further growth possibilities and accommodate quarterly load spikes (up to 10,000 IOPs).
The requirement is to have log partition latency below 5ms and data partition latency below 10ms, irrespective of the load spikes.
A cloud administrator has conducted extensive tests after the migration.
Which of the following test results would ensure the migration is successful?

Question171: When considering a public cloud implementation in a hospital, which of the following would the Chief Information Officer (CIO) have to check with respect to storing patient information?

Question172: A systems administrator has uninstalled all but the minimum required services on a VM. This is an example of:

Question173: At 2:00 a.m each day, the database team runs a batch job to import the sales data for the day, index it, and generate sales reports for the next day. The team has informed the cloud administrator that sales data is expected to increase in the next month and will take longer to complete. The current environment uses several batch servers that process chunks of data individually.
Which of the following is the BEST approach for the cloud administrator to take to handle the increased load?

Question174: Once a year, a company's private cloud experiences increased activity. The company has a disaster recovery site that is hosted in a public cloud. To avoid investment in additional hardware, which of the following actions would BEST address this issue?

Question175: A technician needs to deploy two virtual machines in preparation for the configuration of a financial application next week. Which of the following cloud deployment models should the technician use?

Question176: An organization's web server farm, which is hosted in the cloud with DNS load balancing, is experiencing a spike in network traffic. This has caused an outage of the organization's web server infrastructure.
Which of the following should be implemented to prevent this in the future as a mitigation method?

Question177: Several suspicious emails are being reported from end users. Organizational email is hosted by a SaaS provider. Upon investigation, the URL in the email links to a phishing site where users are prompted to enter their domain credentials to reset their passwords. Which of the following should the cloud administrator do to protect potential account compromise?

Question178: A cloud administrator is given a requirement to maintain a copy of all system logs for seven years. All servers are deployed in a public cloud provider's environment.
Which of the following is the MOST cost-efficient solution for retaining these logs?

Question179: Due to a policy change, a few of a customer's application VMs have been migrated to synchronously replicated storage. The customer now reports that performance is lower. The systems administrator checks the resource usage and discovers CPU utilization is at 60% and available memory is at 30%.
Which of the following is the MOST likely cause?

Question180: A technician logs into a virtual machine and makes several changes, including IP address configuration and printer driver installation. Which of the following should the technician have performed BEFORE making these changes?

Question181: A company wants to set up a new department using private cloud resources. The new department needs access to sales and financial data, but it should be prohibited from accessing human resources data. Which of the following is the BEST option to configure on the virtual (software-defined) network to meet these requirements?

Question182: A pharmaceutical company is migrating its systems and infrastructure to the cloud. Due to security restrictions and regulatory policies, the company Chief Executive Officer (CEO) is concerned about moving this information to the cloud.
Based on the CEO's concern, which of the following should the company do First?

Question183: A company has a private cloud NAC solution in place to prevent unauthorized/non-company assets from connecting to the internal network. A cloud systems administrator cannot add a new physical server to the existing functioning cluster.
Which of the following is the MOST likely cause of this issue?

Question184: A cloud administrator has to migrate from an on-premises to a public cloud. The administrator has
20 physical servers and 600 virtual instances to migrate within a month.
Which of the following should the administrator analyze?

Question185: An organization is running a database application on a SATA disk, and a customer is experiencing slow performance most of the time.
Which of the following should be implemented to improve application performance?

Question186: A cloud administrator has deployed a new web application to a private cloud. The application platform consists of two web servers that communicate to a redundant database back end. The traffic to the web servers is directed by a load balancer appliance. The administrator connects to the website on each of the webservers individually and confirms they are able to log in.
Which of the following aspects of the application has the administrator tested successfully?

Question187: An administrator for a non-profit organization has been tasked with creating a flexible cloud solution. Which of the following would allow the programmer to customize this implementation?

Question188: An administrator has been promoted to architect when trying to access one of the servers, the architect receives the error: "Authentication failure: Account is not allowed". Which of the following explains why access was denied?

Question189: A multinational corporation is moving its worldwide cloud presence to a single region, which is called Region A.
An administrator attempts to use a workflow, which was previously used to deploy VMs to Region E in the new Region A environment, and receives the following error:
Invalid character set. Which of the following is the MOST likely cause of the error?

Question190: A company has decided to replace hypervisors to reduce licensing costs. An administrator has been tasked with migrating VMs to the new hypervisor. Which of the following migration types will be used?

Question191: A cloud architect is deploying a VM in a public IaaS cloud. The software that will be installed on the VM is not compatible with any of the OS versions in the system images offered by the IaaS vendor.
Which of the following is the BEST way to deploy a VM with the required OS?

Question192: A company is seeking a new backup solution for its virtualized file servers that fits the following characteristics:
The files stored on the servers are extremely large. Existing files receive multiple small changes per day.
New files are only created once per month.
All backups are being sent to a cloud repository.
Which of the following would BEST minimize backup size?

Question193: A cloud architect created a new delivery controller for a large VM farm to scale up according to organizational needs. The old and new delivery controllers now form a cluster. However, the new delivery controller returns an error when entering the license code. Which of the following is the MOST likely cause?

Question194: A company changed its policy to have seven-year data retention in the public cloud. Which of the following would be the MOST cost-effective way to meet retention requirements?

Question195: A customer wants to schedule a backup job that compares and saves changes from the last full backup. Which of the following backup types should be used?

Question196: Which of the following should be implemented to ensure email continuity is not disrupted if one of multiple datacenters experiences an outage?

Question197: An update is being deployed to a web application, and a systems administrator notices the cloud SQL database has stopped running. The VM is responding to pings, and there were not any configuration changes scheduled for the VM. Which of the following should the administrator check NEXT?

Question198: A company has implemented a dual-region (Region 1 and Region 2) cloud strategy from its current CSP. Both regions have the same data in them. Region 2 is experiencing an outage.
Which of the following is the BEST way to provide service to users in Region 2 during the outage while allowing access to the data?

Question199: A company has changed their web hosting policy and now requires SSL certificates on all web servers. Users are reporting that they can no longer access an internal website. Which of the following commands should the administrator run to determine if port 443 1s listening? (Select two.)

Question200: A systems administrator is troubleshooting performance issues with a Windows VDI environment.
Users have reported that VDI performance is very slow at the start of the work day, but the performance is fine during the rest of the day.
Which of the following is the MOST likely cause of the issue?

Question201: A company recently decided to move some of its servers to a public cloud. The engineer has been invited to attend requirement sessions for moving servers to the cloud. The engineer is tasked with ensuring the servers that are being moved to the cloud are still in compliance, as they were on-premises.
Which of the following should the engineer request during the requirement sessions?

Question202: A company is subcontracting part of a large project to another company. Management wants to ensure that there is a secure way for employees from both companies to share data without exposing internal information to employees at the other company.
Which of the following cloud models BEST serves this purpose?

Question203: A systems administrator disabled TLS 1.0 and 1.1, as well as RC4, 3DES, and AES-128 ciphers for TLS 1.2, on a web server. A client now reports being unable to access the web server, but the administrator verifies that the server is online, the web service is running, and other users can reach the server as well.
Which of the following should the administrator recommend the user do FIRST?

Question204: Which of the following is used in Object-Based Storage to reference the servers that provide services to store, retrieve, and manage data in the Object-Based Storage system?

Question205: A cloud engineer is responsible for managing two cloud environments from different MSPs. The security department would like to inspect all traffic from the two cloud environments.
Which of the following network topology solutions should the cloud engineer implement to reduce long- term maintenance?

Question206: An administrator receives a ticket indicating the accounting application is not working. Which of the following should the administrator check FIRST?

Question207: A cloud architect is reviewing the design for a new cloud-based ERP solution. The solution consists of eight servers with a single network interface. The allocated IP range is 172.16.0.0/28.
One of the requirements of the solution is that it must be able to handle the potential addition of
16 new servers to the environment. Because of the complexity of the firewall and related ACL requirements, these new servers will need to be in the same network range. Which of the following changes would allow for the potential server addition?

Question208: It is taking an unusually long time for a financial division to run monthly reports on its SaaS- based, multitenant application. The cloud provider has grown exponentially, and more financial industry clients have moved their processing to the SaaS provider.
Which of the following is the MOST probable cause of the issue?

Question209: A company wants to be sure their cloud infrastructure is secure but fully available. To ensure this, the company wants to observe and be alerted in the event of a security breach, but chose a response for each alert. Which of the following solutions would meet these requirements?

Question210: An organization is hosting its dedicated email infrastructure with unlimited mailbox creation capability. The management team would like to migrate to a SaaS-based solution. Which of the following must be considered before the migration?

Question211: A systems administrator in a large enterprise needs to alter the configuration of one of the finance department's database servers.
Which of the following should the administrator perform FIRST?

Question212: A service engineer is trying to determine why one of the company's SaaS solution is no longer available. The internal systems are responding and other online applications using the same SaaS solution are responding as expected.
Which of the following is the MOST common cause of the availability issue?

Question213: An administrator is unable to ping anything on the network, as the ping command immediately returns an error. Which of the following commands should the administrator use FIRST to troubleshoot this issue?

Question214: The human resources department was charged for a cloud service that belongs to another department. All other cloud costs seem to be correct.
Which of the following is the MOST likely cause for this error?

Question215: Which of the following tools would an administrator use when determining the hop count between a source and a destination?

Question216: An administrator needs to securely troubleshoot an issue with a virtual host from a remote location.
Which of the following allows for this by default?

Question217: A systems administrator has migrated a web application to the cloud with a synchronous uplink speed of 100Mbps. After the migration, the administrator receives reports of slow connectivity to the web application. The administrator logs into the firewall and notices the WAN port is transmitting at a constant 12.5MBps. Which of the following BEST explains the reason for the issue?

Question218: A cloud engineer is using a hosted service for aggregating the logs for all the servers in a public cloud environment. Each server is configured via syslog to send its logs to a central location. A new version of the application was recently deployed, and the SaaS server now stops processing logs at noon each day. In reviewing the system logs, the engineer notices the size of the logs has increased by 50% each day. Which of the following is the MOST likely reason the logs are not being published after noon?

Question219: A cloud provider wants to automate the installation of standard applications and services as part of the PaaS environment. The provider generates scripts for installation and configuration, taking into account the values provided by the users as input. The scripts need to be run automatically as part of the provisioning process and reused later for other purposes.
Which of the following would help the provider do this?

Question220: Given the metric below:

Using iSCSI storage reports across three datacenters, which of the following recorded metrics indicates an anomaly in the performance?

Question221: There has been a change in requirements for two countries where PCI virtual instances exist. As such three virtual instances need to be added in both countries' PCI environments, and two instances need to be removed.
Which of the following is the BEST way to ensure compliance is met in those two countries?

Question222: A company's IT department currently spends several hours a day maintaining a hardware of the database server. The company migrates the server to the cloud. Which of the following job responsibilities of the IT department has been MOST impacted by this change?

Question223: A technician is trying to delete six decommissioned VMs. Four VMs were deleted without issue.
However, two of the VMs cannot be deleted due to an error. Which of the following would MOST likely enable the technician to delete the VMs?

Question224: Which of the following backup methods is MOST used by VM users?

Question225: Which of the following will mitigate the risk of users who have access to an instance modifying the system configurations?

Question226: An administrator is asked to securely upload a configuration file to a web server in a cloud. Which of the following protocols should be used in this scenario?

Question227: A software company recently moved all of its development testing to a public cloud environment.
The company primarily uses IaaS to deploy and test its code. The company needs the software developers to be more agile and efficient when testing application code. Which of the following backup types should the developers use to BEST ensure the speedy recovery of a system if it is damaged?

Question228: Company A recently acquired Company B.
A cloud administrator needs to give access to the accounting and time-reporting systems for Company B's employees.
Company A's employees use a single account to access both systems.
To give access to Company B's employees, the cloud administrator should:

Question229: A company has hired a technician to build a cloud infrastructure for a massively parallel application. Which of the following should the technician consider doing FIRST?

Question230: A systems administrator needs to configure monitoring for a private cloud environment. The administrator has decided to use SNMP for this task.
Which of the following ports should the administrator open on the monitoring server's firewall?

Question231: A network administrator is enabling SFTP. Which of the following ports should be open on the firewall?

Question232: Joe, the Chief Information Officer (CIO), wants to ensure he has minimal recovery time while keeping costs low. Which of the following will satisfy these requirements?

Question233: A technician receives a report of system utilization:

Which of the following additional resources should the technician add FIRST given the trend data shown above?

Question234: An organization is required to set a custom registry key on the guest operating system.
Which of the following should the organization implement to facilitate this requirement?

Question235: Which of the following server types would be an ideal candidate for virtualization? (Select two.)

Question236: Which of the following authentication types is being required when a user must swipe a key card and then enter a password before being allowed access to the server room?

Question237: Which of the following utilities would BEST help diagnose NAS mount points?

Question238: An administrator is performing a migration of a physical cluster that uses boot from SAN into private cloud. The systems administrator needs to minimize the downtime required.
Which of the following migrations is the BEST option for the systems administrator to use?

Question239: A company is required to ensure all access to its cloud instance for all users to utilize two-factor authentication. The QA team confirms all functional requirements successfully test. After deployment, all business users report the two-factor authentication is not enforced while accessing the instance. Which of the following would be the MOST likely reason the QA team did not catch the issue?

Question240: A new vulnerability has been announced which affects several critical VM guests, but no patch is available. Which of the following can the administrator perform to mitigate this risk prior to a patch being released?

Question241: A VM was successfully tested in a lab environment. As part of the deployment preparation, the image needs to be backed up for use in the multi-rollout accompanied by orchestration templates.
Which of the following should be used to create the image?

Question242: Email users report that it takes more than one minute to open emails, including those without attachments. There are three email instances in three different regions hosted by the same CSP.
Other applications hosted by the same CSP have no reported issues. Which of the following solutions BEST resolves the issue?

Question243: Metadata is described as which of the following?

Question244: One of the goals for a deployment is to have the smallest possible software footprint and still comply with corporate security. Which of the following is the BEST option?

Question245: Cloud bursting can alleviate which of the following attacks?

Question246: A systems administrator wants to have near-real-time information on the volume of data being exchanged between an application server and its clients on the Internet.
Which of the following should the systems administrator implement to achieve this objective?

Question247: A systems administrator is configuring RAID for a new server. This server will host files for users and replicate to an identical server. While redundancy is necessary, the most important need is to maximize storage.
Which of the following RAID types should the administrator choose?

Question248: Which of the following is commonly the MAIN concern in public cloud implementations?

Question249: Joe, an administrator, has cloned a new virtualized application server. The new application server runs for several months and meets performance expectations. After building a second application server from the clone, Joe receives a few reports that the second server is too slow. Which of the following should Joe use FIRST to determine expected server performance?

Question250: Which of the following is a zone, within a network, that is MOST likely to be accessed by both internal and external hosts?

Question251: Which of the following is a best practice used in relation to MTBF?

Question252: A cloud deployment engineer is modifying versions of the existing template image to instantiate new VMs. The engineer accomplishes this through the cloud self-service portal. After the version is changed and a new VM is successfully started, it does not have any connectivity, and all ping tests to other VMs fail. Which of the following would be the BEST approach to solve the problem?

Question253: Company A just acquired Company B and needs to migrate critical applications to Company A's private cloud infrastructure. Company B's applications are running on legacy servers and cannot be removed from the current datacenter where they reside. Which of the following migration strategies should the cloud administrator use?

Question254: A company wants to move to a multicloud environment and utilize the technology that provides the most portability. Which of the following technology solutions would BEST meet the company's needs?

Question255: Which of the following access control types would give a system administrator the ability to assign access according to least privilege?

Question256: A technician just received the lessons learned from some recent data that was lost due to an on- premises file-server crash. The action point is to change the backup strategy to minimize manual intervention. Which of the following is the BEST approach for the technician to implement?

Question257: A Chief Information Security Officer (CISO) is evaluating the company's security management program. The CISO needs to locate all the assets with identified deviations and mitigation measures. Which of the following would help the CISO with these requirements?

Question258: A small software development company wants to provide four of their developers with the ability to create four or five VMs each. The company also wants to be able to share all of the VM images and snapshots on a NAS. Which of the following would meet these objectives at the lowest cost?

Question259: An administrator is creating new severs in a public cloud. The workflow creates and application group with three VMs, one web server, one application server and one database server. The three VMs are all accessible via SSH, but the websites shows a 503-error referring to a database issue.
Which of the following is the MOST likely cause of the error?

Question260: A consultant is helping a gaming-as-a-service company set up a new cloud. The company recently bought several graphic cards that need to be added to the servers.
Which of the following should the consultant suggest as the MOST cost effective?

Question261: Which of the following cloud delivery models has the LEAST probability of data leakage?

Question262: An organization suffered a critical failure of its primary datacenter and made the decision to switch to the DR site. After one week of using the DR site, the primary datacenter is now ready to resume operations.
Which of the following is the MOST efficient way to bring the block storage in the primary datacenter up to date with the DR site?

Question263: A systems administrator is securing a new email system for a large corporation. The administrator wants to ensure private corporate information is not emailed to external users. Which of the following would be MOST useful to accomplish this task?

Question264: A systems administrator is configuring network management but is concerned about confidentiality. Which of the following should the administrator configure to address this concern?

Question265: A cloud administrator needs to establish a secure connection between two different locations.
Which of the following is the BEST option to implement the secure connection?

Question266: A small clinic is moving its health and accounting systems to a SaaS solution. The clinic holds patient- and business-sensitive information. Which of the following is the company expected to do to protect its data?

Question267: Which of the following is included in a compliance audit?

Question268: A recent advertisement campaign has increased traffic to an e-commerce application that is hosted within a public cloud environment. Customers are reporting that it takes too long to load their pages and submit orders. A cloud administrator looks at the metrics from the environment and sees high utilization of the CPU and memory resources. The cloud provider offers several preconfigured sizes for server template: x-small, small, medium, large, x-large, and 2x-large.

Given an expected increase in workload, which of the following is the BEST solution to improve application performance?

Question269: Which of the following will provide a systems administrator with the MOST information about potential attacks on a cloud IaaS instance?

Question270: After a recent outage going unnoticed, an administrator has been tasked to configure monitoring for the Linux-based and Windows-based host operating systems in a hybrid cloud. Which of the following services should the administrator confirm are functional prior to employing centralized monitoring to both types of operating systems? (Select two.)

Question271: A media company has made the decision to migrate a physical, internal file server to the cloud and use a web-based interface to access and manage the files. The users must be able to use their current corporate logins. Which of the following is the MOST efficient way to achieve this goal?Deploy a VM in a cloud, attach storage, and copy the files across.

Question272: An organization wants to create a server VM that is segregated from the rest of the servers.
Which of the following should the server administrator configure?

Question273: A private cloud is using the iSCSI protocol for connection from storage to hypervisors. This connection is not encrypted currently, and the systems administrator is tasked with enabling on- the-fly encryption.
Which of the following technologies should the administrator use?

Question274: Which of the following is a denial of service attack that attempts to overwhelm a target with ICMP echo requests?

Question275: Which of the following describes a community string?

Question276: A large finance firm processes three times as many transactions in December of each year. The transactions are processed in a private cloud. Management wants to avoid adding permanent resources to accommodate the single month increase. Which of the following is the BEST way to meet the need?

Question277: A SaaS provider wants to maintain maximum availability for its service.
Which of the following should be implemented to attain the maximum SLA?

Question278: Which of the following affects how permissions are set on object storage?

Question279: Which of the following tools would an administrator use to test connectivity of a server in the cloud?

Question280: A systems administrator has received an email from the virtualized environment's alarms indicating the memory was reaching full utilization. When logging in, the administrator notices that one out of a five-host cluster has a utilization of 500GB out of 512GB of RAM. The baseline utilization has been 300GB for that host. Which of the following should the administrator check NEXT?

Question281: An administrator is provisioning a new VM that will host tape backup software. The VM will need to communicate with a tape library that is connected to the host via multimode fiber. Which of the following interfaces will need to be provisioned on the VM in order to communicate with the tape library?

Question282: Which of the following is the BEST way to ensure accounts in a cloud environment are disabled as soon as they no longer need to be active?

Question283: An enterprise recently upgraded the memory of its on-premises VMs from 8GB to 16GB.
However, users are not experiencing any performance benefit. Which of the following is the MOST likely reason?

Question284: Drag and Drop Question
A hosted file share was infected with CryptoLocker and now root cause analysis needs to be performed. Place the tasks in the correct order according to the troubleshooting methodology.

Question285: Users at a university are experiencing slow response and performance issues with private cloud services. The university was compromised, and a loss of bandwidth utilization was reported.
Without deploying new software, which of the following should be performed to determine the cause of the issues?

Question286: A cloud provider is evaluating an insider threat. A resource from the company operations team has access to the servers' virtual disks. This poses a risk that someone could copy and move the virtual server image and have access to the data. Which of the following solutions would help mitigate this problem?

Question287: A company has a cloud infrastructure service, and the cloud architect needs to set up a DR site.
Which of the following should be configured in between the cloud environment and the DR site?

Question288: An administrator needs to back up all the data from each VM daily while also saving space.
Which of the following backup types will BEST fit this scenario?

Question289: Which of the following statements accurately describes the relationship between metadata and data in an object-based storage environment?

Question290: When deploying a cloud-based solution, which of the following analysis types should be completed on the network?

Question291: An upgrade to a web application, which supports 400 users at four sites, is being tested. The application runs on four servers behind a load balancer.
The following test plan is proposed:
- Have 50 users from site A connect to server 1
- Have 50 users from site B connect to server 2
- Have 50 users from site C connect to server 3
- Have 50 users from site D connect to server 4
Which of the following parameters is being properly tested by this plan?

Question292: A cloud administrator updates the syslog forwarder configuration on a local server in production to use a different port. The development team is no longer receiving the audit logs from that server. However, the security team can retrieve and search the logs for the same server. Which of the following is MOST likely the issue?

Question293: A storage administrator must choose the best replication methodology for storage. The datacenters are on opposite sides of the country.
The RPO is 24 hours.
Replication and customer access use the same connections. Replication should not impact customer access during the day. Which of the following solutions would BEST meet these requirements?

Question294: A database administrator is configuring an alternate site to replicate the data between the two sites. Which of the following is used to protect against eavesdropping across the network?

Question295: An administrator has been asked to remotely configure a guest machine while on vacation. The administrator only has access to a hotel kiosk to make the necessary changes. Which of the following can be used to securely meet this request?

Question296: A new private cloud platform is being deployed by an engineer. SLA requirements state that any clusters should have a baseline redundancy sufficient to handle the failure of at least two hosts.
The engineer records the following metrics after the deployment:

Which of the following metrics is MOST likely to represent a violation of SLA?

Question297: A company is experiencing latency problems connecting to the cloud. Which of the following should an administrator check FIRST?

Question298: Which of the following is the BEST example of IaaS?

Question299: An administrator is performing an in-place upgrade on a quest VM operating system.
Which of the following can be performed as a quick method to roll back to an earlier state, if necessary?

Question300: Which of the following objectives defines a maximum period in which data might be lost due to a major outage or failure in a cloud environment?

Question301: Which of the following generally has better performance when accessing larger databases?

Question302: A VM was deleted by mistake today at 11:05 a.m. Below are the backups currently available for the VM:

Crash-consistent restore is acceptable. Which of the following backups should be chosen?

Question303: An administrator needs to test that a service is responding to external requests. Which of the following tools can be used to accomplish this task?

Question304: Tenants in a shared datacenter environment are concerned with the privacy of their data as it moves from the application to the database servers in clear text. Which of the following can the provider implement to isolate tenants' data?

Question305: Cloud developers are experiencing a delay caused by the static code review before each deployment. The security operator and developer must address the issue without cutting corners with security testing. Which of the following would BEST address the delay issue?

Question306: A systems administrator notices that two servers running similar workloads behave differently in the face of high activity and low memory conditions. While the first server performs slowly under these conditions, the second does not. In time, however, the first server continues to perform while the second crashes. Which of the following should the administrator investigate FIRST to solve the problem quickly?

Question307: A virtualization technician must securely connect to a physical Linux server. The technician's workstation runs in a terminal environment with no graphical interface. Which of the following is the BEST way for the technician to connect to the server?

Question308: A cloud administrator needs to reduce the cost of cloud services by using the company's off-peak period. Which of the following would be the BEST way to achieve this with minimal effort?

Question309: A Chief Information Officer (CIO) has summoned an administrator due to the datacenter power bill being significantly higher than normal. The administrator explains that a new array was installed for a 20TB CRM application. Which of the following solutions would provide a new performance benefit and also reduce power consumption?

Question310: A cloud administrator is building a new VM for a network security appliance. The security appliance installer says the CPU clock speed does not meet the requirements. Which of the following will MOST likely solve the issue?

Question311: A cloud engineer deployed an email server in a public cloud. Users can access the email server, but the emails they send cannot reach their destinations. Which of the following should the cloud engineer do FIRST?

Question312: A customer recently provisioned a new server on the IaaS. The IP address assigned from the pool resolves to another hostname. Some user traffic is being dumped or is causing slowness because of this issue. Which of the following maintenance activities does the provider need to perform to prevent this issue?

Question313: A company wants to leverage a SaaS provider for its back-office services, and security is paramount. Which of the following solutions should a cloud engineer deploy to BEST meet the security requirements?

Question314: When the protocol HTTP is transmitted over SSL, which of the following ports is used by default?

Question315: Which of the following is the BEST choice for a clustered host interconnect?

Question316: An SQL injection vulnerability was reported on a web application, and the cloud platform team needs to mitigate the vulnerability while it is corrected by the development team.
Which of the following controls will BEST mitigate the risk of exploitation?

Question317: A support engineer wants to prevent users from running malware on several IaaS compute instances. Which of the following will BEST achieve this objective?

Question318: An administrator who currently runs a small private cloud using a SAN has been asked to create a block storage system. Which of the following is the BEST way to logically organize the VMs utilizing this new storage architecture?

Question319: A company is migrating their physical servers to virtual. The administrator is tasked with migrating three servers:
One application server with a dual-core 3.2GHz processor that reaches 50% CPU utilization at peak time.
Two web servers, each with a dual-core 3.2GHz processor, both reaching 70% CPU utilization at peak time.
Currently, the administrator only has two hosts available, so resources will need to be set for the new VMs. Each host has two 2.4GHz quad-core processors. One host is already near maximum capacity, and the second host is at 30% CPU utilization.
Which of the following would be the BEST minimum CPU resources set on the second host for the new VMs?

Question320: A company has an SLA of 15ms for storage latency.

Given the above metrics, which of the following is the MOST appropriate change to the environment?

Question321: An administrator is securing a private cloud environment and wants to ensure only approved systems can connect to switches. Which of the following would be MOST useful to accomplish this task?

Question322: Which of the following should be considered for capacity planning?

Question323: A company has a virtual database server running in the cloud that the company would like to start hosting in-house on a newly purchased blade server. Which of the following virtualization tools would BEST be used to accomplish this?

Question324: A security and risk team requires a weekly report to detect VM file system changes and validate the integrity of the OS. Which of the following is the BEST solution for this requirement?

Question325: A company has just completed a security audit and received initial results from the auditor. The results show that the ethical hacker was able to gain access to the company servers by exploiting non-hardened VMs and hosts as guests and administrators. Which of the following should be implemented to harden the environment? (Select two.)

Question326: A company is migrating some of its consumer-facing services to a cloud provider. The company has been getting more customers since its competitors have gone bankrupt. Which of the following actions would BEST meet the company's increased resource needs?

Question327: After a few new web servers were deployed, the storage team began receiving incidents in their queue about the web servers. The storage administrator wants to verify the incident tickets that should have gone to the web server team. Which of the following is the MOST likely cause of the issue?

Question328: The helpdesk starts receiving calls from a number of users that are suddenly having issues accessing one of the project management shared drives. When Joe, an administrator, logs onto the guest hosting the drive via the console he is able to get to the information. Which of the following failures could have caused this issue?

Question329: An organization is hosting a DNS domain with private and public IP ranges.
Which of the following should be implemented to achieve ease of management?

Question330: A company has moved all on-premises workloads into a public cloud. After some time, the cloud engineer starts noticing time drifts on the VMs and suspects an NTP issue. Time drifts were not an issue when all the workloads were on-premises. Which of the following describes how the cloud engineer should resolve the issue?

Question331: An administrator is configuring a website in the cloud. Which of the following secure network protocols should the administrator configure?

Question332: Which of the following will be the BEST option for an administrator to bring VMs online at a warm site after a natural disaster has occurred at the primary site?

Question333: A company upgraded a hosted vulnerability scanner to the latest version, and now tickets are not being created to assign critical vulnerabilities. After confirming the ticketing issue, all the scanning services are confirmed to be running on the VM. Which of the following is the MOST likely cause and best method to fix the issue?

Question334: A new browser version has been deployed to all users at a company. After the deployment, users report that they can no longer access the company's secure time-card system, which is hosted by a SaaS provider. A technician investigates and discovers a security error is received upon opening the site. If the browser is rolled back to the older version, the site is accessible again.
Which of the following is the MOST likely cause of the security error users are seeing?

Question335: Before doing a change on a VM, a systems administrator wants to ensure there is an easy and fast way to rollback if needed. The change and testing should take approximately two hours.
Which of the following is the EASIEST way to meet this requirement?

Question336: Company A has just implemented a SaaS-based cloud storage solution. The SaaS solution provides services for both commercial and personal use. The IT department has been tasked to migrate all the on- premises file shares to the SaaS solution with the username being the corporate email address. The IT department is currently using am IAM solution to provision the accounts in the SaaS solution. Upon execution of the account creation process, the IT department is receiving multiple "unable to create account" alerts. Which of the following is the MOST likely cause?

Question337: Which of the following is a business reason for IT outsourcing and cloud computing?

Question338: How can cloud computing help reduce integrity risks?

Question339: A media company has made the decision to migrate a physical, internal file server to the cloud and use a web-based interface to access and manage the files. The users must be able to use their current corporate logins.
Which of the following is the MOST efficient way to achieve this goal?

Question340: A small business owner needs to establish a secure logon to the company database server to troubleshoot an issue while on vacation.
Which of the following will allow secure access to manage the server from a remote location?

Question341: A cloud engineer is responsible for managing a public cloud environment. There is currently one virtual network that is used to host the servers in the cloud environment. The environment is rapidly growing, and the network does not have any more available IP addresses. Which of the following should the engineer do to accommodate additional servers in this environment?

Question342: An engineer is responsible for configuring a new firewall solution that will be deployed in a new public cloud environment. All traffic must pass through the firewall. The SLA for the firewall is
99.999%. Which of the following should be deployed?

Question343: When a firewall takes an incoming request for a specific IP address and redirects it to an internal host, which of the following is being used?

Question344: Which of the following should an administrator establish before deploying a guest VM in a production environment?

Question345: A company is testing a new software product that is intended for auto discovery of assets within a cloud environment. The testing department wants to ensure that initial testing does not allow the product to leave the boundary of the test environment. Which of the following should the network administrator implement in the department test environment?

Question346: A newly established CSP allows for drive shipping to upload new data into the environment.
Sensitive data on 40TB of storage needs to be transferred within one week. Which of the following is the MOST efficient and secure method for shipment of the data to the CSP with minimal downtime?

Question347: Which of the following elements should be tested when deploying cloud based services? (Select two.)

Question348: A company uses its own private cloud, which has few available resources. Mission-critical systems and other information systems are running on it. A new system will be deployed on the private cloud.
The following tests are included in the test plan:
* Load test (2h)
* Backup/restore test (6h)
* Functional test (8h)
* Failover test (1h)
The work schedule of the existing system is shown below.

To minimize the effect to the existing system, which of the following schedules is MOST suitable for the load test?

Question349: A systems administrator needs to configure an email client to ensure data integrity of the email messages.
Which of the following provides the BEST mechanism to achieve this goal?

Question350: A user has submitted a ticket to request additional VMs due to long wait times for online ordering.
Given the snapshot of the resources in the table below:

Which of the following is the BEST option for the administrator to resolve the ticket?

Question351: An administrator needs to test the latency between two servers.
Which of the following commands should be used?

Question352: An administrator has been asked by the Chief Information Officer (CIO) to provide storage that will have the ability to accommodate at least FC and SATA in the same enterprise array with software that will be policy driven based on performance. Which of the following enterprise storage features should be recommended?