CV0-004 Practice Test

CV0-004 Practice Test practice questions, page 10 of 13, with answer review and explanations.

Question 46

A cloud engineer wants to deploy a new application to the cloud and is writing the following script: Which of the following actions will this script perform?

  1. Upload a new VM image.
  2. Create a new cloud resource.
  3. Build a local server.
  4. Import a cloud module.

Question 47

A network administrator is building a site-to-site VPN tunnel from the company’s headquarters office to the company’s public cloud development network. The network administrator confirms the following: The VPN tunnel is established on the headquarters office firewall. While inside the office, developers report that they cannot connect to the development network resources. While outside the office on a client VPN, developers report that they can connect to the development network resources. The office and the client VPN have different IP subnet ranges. The firewall flow logs show that traffic is reaching the development network from the office. Which of the following is the next step the network administrator should take to troubleshoot the VPN tunnel?

  1. Review the development network routing table.
  2. Change the ciphers on the site-to-site VPN.
  3. Restart the site-to-site VPN tunnel.
  4. Check the ACLs on the development workloads.

Question 48

A cross-site request forgery vulnerability exploited a web application that was hosted in a public IaaS network. A security engineer determined that deploying a WAF in blocking mode at a CDN would prevent the application from being exploited again. However, a week after implementing the WAF, the application was exploited again. Which of the following should the security engineer do to make the WAF control effective?

  1. Configure the DDoS protection on the CDN.
  2. Install endpoint protection software on the VMs.
  3. Add an ACL to the VM subnet.
  4. Deploy an IDS on the IaaS network.

Question 49

An organization’s critical data was exfiltrated from a computer system in a cyberattack. A cloud analyst wants to identify the root cause and is reviewing the following security logs of a software web application: Which of the following types of attacks occurred?

  1. SQL injection
  2. Cross-site scripting
  3. Reuse of leaked credentials
  4. Privilege escalation

Question 50

A banking firm’s cloud server will be decommissioned after a successful proof of concept using mirrored data. Which of the following is the best action to take regarding the storage used on the decommissioned server?

  1. Keep it temporarily
  2. Archive it.
  3. Delete it.
  4. Retain it permanently.