EMT Practice Test

1. Question Content...

---

Question1: Which of the following application migration strategies will best suit a customer who wants to move a simple web application from an on-premises server to the cloud?

Question2: A cloud administrator deploys new VMs in a cluster and discovers they are getting IP addresses in the range of
169.254.0.0/16. Which of the following is the most likely cause?

Question3: An on-premises data center is located in an earthquake-prone location. The workload consists of real-time, online transaction processing. Which ot the following data protection strategies should be used to back up on-premises data to the cloud while also being cost effective?

Question4: A software engineer needs to transfer data over the internet using programmatic access while also being able to query the data. Which of the following will best help the engineer to complete this task?

Question5: A developer is testing code that will be used to deploy a web farm in a public cloud. The main code block is a function to create a load balancer and a loop to create 1.000 web servers, as shown below:

The developer runs the code against the company's cloud account and observes that the load balancer is successfully created, but only 100 web servers have been created. Which of the following should the developer do to fix this issue?

Question6: An organization's web application experiences penodic bursts of traffic when a new video is launched. Users are reporting poor performance in the middle of the month. Which of the following scaling approaches should the organization use to scale based on forecasted traffic?

Question7: Which of the following is an auditing procedure that ensures service providers securely manage the data to protect the interests of the organization and the privacy of its clients?

Question8: A customer's facility is located in an area where natural disasters happen frequently. The customer requires the following:
* Data resiliency due to exposure to frequent natural disasters
* Data localization because of privacy regulations in the country
* High availability
Which of the following cloud resources should be provisioned to meet these requirements?

Question9: A company migrated its CRM system to a SaaS solution. The security team is updating the RAG matrix for the newly migrated CRM. Given the following table:

Which of the following responsibility assignments best aligns with the shared responsibility model for the new CRM?

Question10: Which of the following is a difference between a SAN and a NAS?

Question11: A cloud engineer wants to replace the current on-premises. unstructured data storage with a solution in the cloud. The new solution needs to be cost-effective and highly scalable. Which of the following types of storage would be best to use?

Question12: Which of the following is the best type of database for storing different types of unstructured data that may change frequently?

Question13: A cloud administrator is building a company-standard VM image, which will be based on a public image.
Which of the following should the administrator implement to secure the image?

Question14: A company uses containers stored in Docker Hub to deploy workloads (or its laaS infrastructure. The development team releases changes to the containers several times per hour. Which of the following should a cloud engineer do to prevent the proprietary code from being exposed to third parties?

Question15: A company needs to deploy its own code directly in the cloud without provisioning additional infrastructure.
Which of the following is the best cloud service model for the company to use?

Question16: A cloud engineer is reviewing the following Dockerfile to deploy a Python web application:

Which of the following changes should the engineer make lo the file to improve container security?

Question17: A cloud engineer is designing a cloud-native, three-tier application. The engineer must adhere to the following security best practices:
* Minimal services should run on all layers of the stack.
* The solution should be vendor agnostic.
* Virealization could be used over physical hardware.
Which of the following concepts should the engineer use to design the system to best meet these requirements?

Question18: A network administrator is budding a site-to-site VPN tunnel from the company's headquarters office 10 the company's public cloud development network. The network administrator confirms the following:
The VPN tunnel is established on the headquarter office firewall.
While inside the office, developers report that they cannot connect to the development network resources.
While outside the office on a client VPN, developers report that they can connect to the development network resources.
The office and the client VPN have different IP subnet ranges.
The firewall flow logs show VPN traffic is reaching the development network from the office.
Which of the following is the next step the next network administrator should take to troubleshoot the VPN tunnel?

Question19: A company has one cloud-based web server that is prone to downtime during maintenance. Which ot the following should the cloud engineer add to ensure high availability?

Question20: A cloud engineer wants to implement a monitoring solution to detect cryptojacking and other cryptomining malware on cloud instances. Which of the following metrics would most likely be used to identify the activity?

Question21: A software engineer at a cybersecurity company wants to access the cloud environment. Per company policy, the cloud environment should not be directly accessible via the internet. Which of the following options best describes how the software engineer can access the cloud resources?

Question22: A company hosts various containerized applications for business uses. A client reports that one of its routine business applications fails to load the web-based login prompt hosted in the company cloud.
Click on each device and resource. Review the configurations, logs, and characteristics of each node in the architecture to diagnose the issue. Then, make the necessary changes to the WAF configuration to remediate the issue.

Question23: A technician receives an email from a vendor who is requesting payment of an invoice for human resources services. The email contains a request for bank account numbers. Which of the following types of attacks does this behavior most likely indicate?

Question24: Which of the following can reduce the risk of CI/CD pipelines leaking secrets?

Question25: A DevOps engineer is performing maintenance on the mail servers for a company's web application. Part of this maintenance includes checking core operating system updates. The servers are currently running version
3.2 of the operating system. The engineer has two update options-one to version 4.1 and the other to version
3.7. Both versions are fully supported by the operating system manufacturer. Which of the following best describes the action the engineer should take?

Question26: Which of the following is a field of computer science that enables computers to identify and understand objects and people in images and videos?

Question27: A cross-site request forgery vulnerability exploited a web application that was hosted in a public laaS network.
A security engineer determined that deploying a WAF in blocking mode at a CDN would prevent the application from being exploited again. However, a week after implementing the WAF, the application was exploited again. Which of the following should the security engineer do to make the WAF control effective?

Question28: An administrator used a script that worked in the past to create and tag five virtual machines. All of the virtual machines have been created: however, the administrator sees the following results: { tags: [ ] } Which of the following is the most likely reason for this result?

Question29: Five thousand employees always access the company's public cloud-hosted web application on a daily basis during the same time frame. Some users have been reporting performance issues while attempting to connect to the web application Which of the following is the best configuration approach to resolve this issue?

Question30: The QA team is testing a newly implemented clinical trial management (CTM) SaaS application that uses a business intelligence application for reporting. The UAT users were instructed to use HTTP and HTTPS.
Refer to the application dataflow:
1A - The end user accesses the application through a web browser to enter and view clinical data.
2A - The CTM application server reads/writes data to/from the database server.
1B - The end user accesses the application through a web browser to run reports on clinical data.
2B - The CTM application server makes a SOAP call on a non-privileged port to the BI application server.
3B - The BI application server gets the data from the database server and presents it to the CTM application server.
When
UAT users try to access the application using https://ctm.app.com or http://ctm.app.com, they get a message stating: "Browser cannot display the webpage." The QA team has raised a ticket to troubleshoot the issue.
INSTRUCTIONS
You are a cloud engineer who is tasked with reviewing the firewall rules as well as virtual network settings.
You should ensure the firewall rules are allowing only the traffic based on the dataflow.
You have already verified the external DNS resolution and NAT are working.
Verify and appropriately configure the VLAN assignments and ACLs. Drag and drop the appropriate VLANs to each tier from the VLAN Tags table. Click on each Firewall to change ACLs as needed.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

Question31: An administrator is setting up a cloud backup solution that requires the following features:
* Cost effective
* Granular recovery
* Multilocation
Which of the following backup types best meets these requirements?

Question32: A cloud engineer needs to deploy a new version of a web application to 100 servers. In the past, new version deployments have caused outages. Which of the following deployment types should the cloud engineer implement to prevent the outages from happening this time?

Question33: Given the following command:
Sdocker pull images.comptia.org/user1/myimage:latest
Which of the following correctly identifies images.comptia.org?

Question34: Which of the following service options would provide the best availability for critical applications in the event of a disaster?

Question35: A cloud administrator shortens the amount of time a backup runs. An executive in the company requires a guarantee that the backups can be restored with no data loss. Which of the following backup features should the administrator lest for?

Question36: An organization needs to retain its data for compliance reasons but only when required. Which of the following would be the most cost-effective type of tiered storage?

Question37: A company has decided to scale its e-commerce application from its corporate datacenter to a commercial cloud provider to meet an anticipated increase in demand during an upcoming holiday.
The majority of the application load takes place on the application server under normal conditions. For this reason, the company decides to deploy additional application servers into a commercial cloud provider using the on-premises orchestration engine that installs and configures common software and network configurations.
The remote computing environment is connected to the on-premises datacenter via a site-to-site IPSec tunnel.
The external DNS provider has been configured to use weighted round-robin routing to load balance connections from the Internet.
During testing, the company discovers that only 20% of connections completed successfully.
INSTRUCTIONS
Review the network architecture and supporting documents and fulfill these requirements:
Part 1:
Analyze the configuration of the following components: DNS, Firewall 1, Firewall 2, Router 1, Router 2, VPN and Orchestrator Server.
Identify the problematic device(s).
Part 2:
Identify the correct options to provide adequate configuration for hybrid cloud architecture.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
Part 1:
Cloud Hybrid Network Diagram








Part 2:
Only select a maximum of TWO options from the multiple choice question

Question38: A cloud engineer is troubleshooting an application that consumes multiple third-party REST APIs. The application is randomly expenenang high latency. Which of the following would best help determine the source of the latency?

Question39: An administrator is creating a cron job that shuts down the virtual machines at night to save on costs. Which of the following is the best way to achieve this task?

Question40: Which of the following communication methods between on-premises and cloud environments would ensure minimal-to-low latency and overhead?

Question41: An administrator needs to adhere to the following requirements when moving a customer's data to the cloud:
* The new service must be geographically dispersed.
* The customer should have local access to data
* Legacy applications should be accessible.
Which of the following cloud deployment models is most suitable?

Question42: A cloud engineer has provisioned a VM for a high-frequency trading application. After the VM is put into production, users report high latency in trades. The engineer checks the last six hours of VM metrics and sees the following:
* CPU utilization is between 30% to 60%.
* Networkln is between 50Kbps and 70Kbps.
* NetworkOut is between 3.000Kpbs and 5.000Kbps.
* DiskReadOps is at 30.
* DiskWriteOps is at 70
* Memory utilization is between 50% and 70%.
Which of the following steps should the engineer take next to solve the latency issue?

Question43: Which of the following best explains the concept of migrating from on premises to the cloud?

Question44: Which of the following network protocols is generally used in a NAS environment?

Question45: A cloud engineer is troubleshooting a connectivity issue. The application server with IP 192.168.1.10 in one subnet is not connecting to the MySQL database server with IP 192.168.2 20 in a different subnet. The cloud engineer reviews the following information:
Application Server Stateful Firewall


Which of the following should the cloud engineer address lo fix the communication issue?

Question46: An organization's security policy states that software applications should not exchange sensitive data in cleartext.
The security analyst is concerned about a software application that uses Base64 to encode credit card data.
Which of the following would be the best algorithm to replace Base64?

Question47: A developer is building a new application version using a CI/CD pipeline. The developer receives the following error message log when the build fails:

Which of the following is the most likely cause of this failure?