CV1-003

CV1-003 practice questions, page 3 of 5, with answer review and explanations.

Question 11

A systems administrator is informed that a database server containing PHI and PII is unencrypted. The environment does not support VM encryption, nor does it have a key management system. The server needs to be able to be rebooted for patching without manual intervention. Which of the following will BEST resolve this issue?

  1. Ensure all database queries are encrypted
  2. Create an IPSec tunnel between the database server and its clients
  3. Enable protocol encryption between the storage and the hypervisor
  4. Enable volume encryption on the storage
  5. Enable OS encryption

Question 12

An OS administrator is reporting slow storage throughput on a few VMs in a private IaaS cloud. Performance graphs on the host show no increase in CPU or memory. However, performance graphs on the storage show a decrease of throughput in both IOPS and MBps but not much increase in latency. There is no increase in workload, and latency is stable on the NFS storage arrays that are used by those VMs. Which of the following should be verified NEXT?

  1. Application
  2. SAN
  3. VM GPU settings
  4. Network

Question 13

An organization has multiple VLANs configured to segregate the network traffic. Following is the breakdown of the network segmentation: ✑ Production traffic (10.10.0.0/24) ✑ Network backup (10.20.0.0/25) Virtual IP network (10.20.0.128/25) The following configuration exists on the server: The backup administrator observes that the weekly backup is failing for this server. Which of the following commands should the administrator run to identify the issue?

  1. ROUTE PRINT
  2. NETSTAT -A
  3. IPCONFIG /ALL
  4. NET SM

Question 14

A systems administrator is configuring RAID for a new server. This server will host files for users and replicate to an identical server. While redundancy is necessary, the most important need is to maximize storage. Which of the following RAID types should the administrator choose?

  1. 5
  2. 6
  3. 10
  4. 50

Question 15

Which of the following will mitigate the risk of users who have access to an instance modifying the system configurations?

  1. Implement whole-disk encryption
  2. Deploy the latest OS patches
  3. Deploy an anti-malware solution
  4. Implement mandatory access control