Font size
WorksheetsCompTIA Cloud+ CV0-004 Exam 2 Prep
Total questions: 82
Worksheet time: 1hrs 9mins
Which option best defines File Storage in cloud computing?
Divides a network into segments using IP addresses and network IDs in TCP/IP networks.
Data is stored as a discrete file, such as a document, a spreadsheet, or an image file.
Storage repositories for the container images your applications and developers need.
Used to prevent unauthorised users from removing data from a secure environment.
Select the statement that best describes Kubernetes.
A common open-source container orchestration utility known for flexibility, pluggability, and easy-to-integrate structure.
A security control that prevents accidental deletion of data in web applications.
A cloud billing model where customers only pay for storage capacity reserved in advance.
A network technique that maps private IPs to a single public IP to conserve addresses.
Complete the sentence with the correct term: (a) are storage repositories for the container images your applications and developers need.
Which description best matches Subnets in TCP/IP networking?
Divides a network into segments using IP addresses and network IDs.
Ensures that cloud providers do not over-allocate compute resources.
Allows applications to be built as independent components providing a single function.
Remotely manages customer devices under a subscription model.
Service Provider Oversubscription occurs when which situation happens?
Cloud entities may promise more resources than they can fully support, assuming not all customers will use their full allocation.
A provider stores data as discrete files such as documents and spreadsheets.
A company scales resources up or down to match demand and manage costs.
A container platform orchestrates pods across multiple nodes.
Explain the main goal of Data Loss Prevention in a cloud environment. Provide one example action it tries to stop.
Which term is best described as 'Your application was hosted in a single data centre in North America but accessed by customers worldwide' within a migration context?
Pre-Migration
Auto-Scaling
Managed Service Providers (MSPs)
Microservices
A company decomposes a monolithic app into small, independent services where each provides one function and can be deployed separately. Which term fits this architecture?
Microservices
Subnets
File Storage
Data Loss Prevention
Scenario: Your web application experiences a sudden traffic spike during a limited-time promotion. To manage cost while maintaining performance, the platform adds instances during the spike and removes them afterward. Which concept describes this behaviour?
Auto-Scaling
Service Provider Oversubscription
Image Registries
Managed Service Providers (MSPs)
Gateways provide IoT connectivity to the cloud and add a security layer by translating protocols for edge or cloud devices. Decide if this statement is true or false.
True
False
A community cloud is open to the public and serves a broad range of consumers, regardless of business or security needs. Decide if this statement is true or false.
True
False
CPU capabilities assigned to a virtual machine (VM) are known as Virtual CPU (vCPU) devices. Decide if this statement is true or false.
True
False
IOPS measures data transfer speed and is mainly limited by network bandwidth, not drive type. Decide if this statement is true or false.
True
False
Microsoft Office 365 is a one-time purchase that gives users permanent access to Office applications. Decide if this statement is true or false.
True
False
Virtual machines have a similar management lifecycle to physical servers, though they offer far more flexibility and scalability. Decide if this statement is true or false.
True
False
A Point-to-Site VPN connects entire office networks to cloud environments through a central router. Decide if this statement is true or false.
True
False
Repeatability enables quick, consistent, and automated deployments that reduce human error and support scalability. Decide if this statement is true or false.
True
False
SDKs provide code libraries, documentation, and tools to help developers build applications in languages like Java or .NET. Decide if this statement is true or false.
True
False
Security baselines and configuration management only react to security incidents and do not support compliance or vulnerability assessments. Decide if this statement is true or false.
True
False
Zombie resources are unmanaged cloud assets like VMs and containers that are likely unsecured and unpatched. Decide if this statement is true or false.
True
False
Data ownership defines who is responsible for data, including access control, governance, compliance, and accountability. Decide if this statement is true or false.
True
False
Antivirus and anti-malware use signature updates to detect threats and must be updated regularly. Decide if this statement is true or false.
True
False
Leaked credentials only pose a risk if the unauthorised user gains admin-level access; end-user level leaks are not a concern. Decide if this statement is true or false.
True
False
Instance types are physical servers with fixed CPU cores, and vCPU refers only to the number of physical cores available. Decide if this statement is true or false.
True
False
Triggered scaling automatically modifies resources in response to specific conditions. It is the main component of auto-scaling. Decide if this statement is true or false.
True
False
Logging automation prevents security threats by blocking malicious activity in real time. Decide if this statement is true or false.
True
False
Blue-green deployment is rarely used for testing major updates and doesn't support phased rollouts. Decide if this statement is true or false.
True
False
The 3-2-1 backup rule recommends keeping three copies of data on two identical media types, with one stored onsite. Decide if this statement is true or false.
True
False
NIC teaming combines two or more NICs into a single virtual NIC. This virtual NIC has a single Internet Protocol (IP) address configuration. Decide if this statement is true or false.
True
False
What is one key advantage of using virtual machine (VM) templates in a private cloud environment?
They allow unlimited storage allocation for all developers
They standardise VM setups to avoid costly misconfigurations
They eliminate the need for any VM configuration
They prevent developers from accessing the self-service portal
What is the main purpose of a development environment?
To monitor application performance in production
To test user interfaces for end-user feedback
To manage code, fix bugs, and apply code-level security
To encrypt data backups for long-term storage
Engineers plan a migration for internal, proprietary services. Which combination best fits this move?
On premises-to-cloud, Private cloud
Cloud-to-on premises, Private cloud
On premises-to-cloud, Hybrid cloud
Cloud-to-cloud, Community cloud
In a basic troubleshooting methodology, what is step number 5?
Implement the solution
Test the theory
Determine the scope of the problem
Establish a plan of action
Database as a Service (DBaaS) hosting relies on infrastructure and deployments managed by the (a) , offloading maintenance from your staff but potentially causing vendor lock-in and loss of customisation.
Which type of firewall monitors detailed information about TCP connections and traffic characteristics?
Stateless firewall
Proxy firewall
Stateful firewall
Packet-filtering firewall
Which practice is CI/CD strongly tied to?
Agile Methodology
DevOps
Waterfall Model
Scrum
How can attackers use metadata and social engineering to gain unauthorised information?
By gathering personal details from metadata to appear as a trusted entity
By encrypting data shared on social media platforms to prevent detection
By deleting important user files and emails to disrupt communications
By improving network security settings to block unauthorised access
What does data sovereignty primarily concern?
Managing cloud storage costs and optimising resource usage for efficiency
Encrypting all stored data to prevent unauthorised access or theft
Backing up data regularly to protect against accidental loss or corruption
Ensuring data is stored within specific legal jurisdictions to comply with laws
Default accounts on newly deployed systems should be deactivated or secured. For example, the default (a) account on Linux systems has full system access.
What is the main purpose of data deduplication in a storage system?
To remove duplicate data blocks and replace them with pointers to a single instance
To encrypt files and prevent unauthorised access
To replicate data across multiple servers for redundancy
To compress files into a smaller format for faster transmission
Vertical scaling, also known as (a) , adds more compute capabilities to existing virtual machines to support increased workloads.
A company wants a client to receive a success message only after both database replicas confirm a write. Which replication method should be used?
Asynchronous replication, because it allows faster performance by sending confirmation immediately after the primary server writes data.
Incremental replication, since it tracks only the changes and doesn't require confirmation from both servers.
Snapshot replication, which periodically saves the database state and provides high availability.
Synchronous replication, because it ensures both servers have the data before confirming the transaction to the client.
Which of the following are examples of automation service configuration files that should be backed up?
JSON templates for deploying cloud resources manually via web console
Ansible playbooks, Chef recipes, Puppet modules, and PowerShell DSC MOF files
Windows Registry files and Linux kernel source code
Application logs and monitoring dashboards for DevOps workflows
Which option best describes an advantage of edge computing in an IoT environment?
It eliminates the need for cloud-based processing and central data storage completely.
It centralises all data from IoT devices to improve long-term archival and compliance.
It increases service availability and efficiency by processing data closer to where it is generated.
It reduces the number of sensors needed in large-scale IoT deployments by enhancing their accuracy.
During troubleshooting, which policy area focuses on rules for traffic flow, addressing, and connectivity between segments?
Security troubleshooting policies
Networking policies
Downtime policies
Procurement policies
List four corporate policy areas that should be carefully considered during troubleshooting.
An organisation runs testing on one platform but must deploy production on a different platform. Identify the VM migration reason that best fits this scenario.
Testing VMs on different hypervisors
Test or development work is done on one platform and production occurs on another
Migrating between cloud service providers that support different hypervisors
Converting the standard hypervisor from one vendor to another
Select the MOST appropriate reason for moving VMs when shifting from VMware to Hyper‑V across the enterprise.
Testing VMs on different hypervisors
Converting the organisation’s standard hypervisor from one vendor to another
Changing backup software
Upgrading guest operating systems only
Software Defined Networking separates network management into planes. Name any one of the planes and state its primary function.
Which SDN plane is responsible for programmable control that supplies forwarding information at IP and MAC layers, distinct from individual devices?
Application plane
Control plane
Data plane
Management plane
Google Cloud DNS supports several features. Choose the option that is NOT listed as a feature.
Zone forwarding
Reverse lookups
DNS peering
Automatic DHCP lease renewal
Access controls
Provide any five features of Google Cloud DNS mentioned in the study material.
What does ELK Stack stand for, and what core capability does the stack provide?
Fill in the blank with the exact term: The network setting that governs the amount of data transferred in TCP/IP communications and affects bandwidth and throughput is called (a) .
Define SLA as used in IT service contexts.
Identify the deployment strategy illustrated by two separate, identically shaped rectangles (left teal and right green) that represent parallel environments connected to a single load-balancer device below. Which strategy best matches this blue vs green setup?
Canary rollout
Blue–green deployment
Lift-and-shift migration
Active–passive failover
In the diagram with two parallel environments feeding a single device, what network component is most likely represented by the rectangular hardware at the bottom that distributes traffic between environments?
Edge router
Layer-2 switch
Application load balancer
Network-attached storage
During a blue–green deployment, which environment receives live production traffic immediately after a successful release and cutover?
The blue environment only
The green environment after switch-over
Both environments simultaneously by default
Neither; traffic pauses during release
Fill in the blank: In a blue–green deployment diagram, the two large colored rectangles typically represent separate (a) environments with identical configurations.
Which benefit is the primary reason to route users through a load balancer in a blue–green setup?
To store persistent data centrally
To enable instant traffic switching between identical stacks
To encrypt database backups
To reduce the number of servers needed
Consider the network diagram showing two servers (top and bottom) connected around the perimeter to a black network device on the right, with a dashed line vertically between the servers. What does the dashed line most likely represent?
A dedicated storage network
A management out-of-band link
Synchronous replication or heartbeat between servers
Public internet connectivity
In the same network diagram, what role does the black rectangular device on the right most likely serve?
Firewall appliance for packet inspection
Access switch aggregating links from servers
WAN accelerator for branch offices
NAS array for shared file storage
In the network topology with two servers and a switch, which path is most appropriate for client devices to reach application services with high availability?
Clients connect directly to the dashed vertical link
Clients connect through the access switch which forwards to either server
Clients connect only to the top server via crossover cable
Clients broadcast ARP to every host on the internet
Explain why a heartbeat or replication link between two servers is useful in a highly available design like the one shown. Provide two concise reasons.
In the containerized application environment stack, three small boxes appear at the top (left labeled 6.3.1, right two labeled 6.3.2 and 6.3.3) above wider layers labeled 6.3.4 through 6.3.8. What do those three small top boxes most likely represent?
Containers running microservices
Worker nodes in a cluster
Developer laptops
Storage volumes for backups
In the same container stack, which layer best corresponds to 'orchestrator' functionality such as scheduling and service discovery?
6.3.6
6.3.7
6.3.8
6.3.4
Fill in the blank: In a modern container platform, the (a) provides the low-level capabilities to start and isolate containers on a host.
Which statement best explains the relationship between the containers (top tiles) and the orchestration layer in the diagram?
Containers define the orchestration API and run the control plane
The orchestrator schedules containers across nodes and manages scaling
Containers directly provision the underlying hardware
The orchestration layer exists only during deployment and is removed in production
In the blue–green deployment diagram, what is the safest next step after validating the new environment with test traffic but before switching all users?
Decommission the old environment immediately
Gradually shift a small percentage via the load balancer for final checks
Disable health checks to avoid false positives
Merge databases from both environments without backups
For the two-server network, which link is most critical to maintain client connectivity if one server fails?
The dashed inter-server link only
The client-to-switch uplink
The switch’s connection to the internet backbone
The management console cable
State one clear advantage of containerization as implied by the layered stack: portability across environments. Provide a concise explanation.
List five components commonly used to build a Virtual Private Cloud (VPC) using Software-defined Networking (SDN). Provide exactly five items.
In a hub-and-spoke VPC design, a central hub manages shared services. List and explain five scenarios when this design would be appropriate. Give a one-sentence justification for each scenario.
List five potential causes of network configuration errors.
Which term describes a disaster recovery location that can take over from the primary once some equipment is brought in and configured?
Cold Site
Warm Site
Hot Site
Edge Site
Which VPC component primarily provides logically isolated address ranges within a network?
Subnets
Instances
Web apps
VPNs
In the context of hub-and-spoke VPCs, which statement best explains why centralising services like DNS and Microsoft Entra ID in the hub is beneficial?
It eliminates the need for any security controls in the spokes.
It allows shared services to be centrally managed while multiple spokes remain isolated.
It ensures each spoke must maintain its own separate directory service.
It prevents resource limits across subscriptions from being reached.
Fill in the blank with the exact term: Collections of algorithms used for data security are called (a) .
Fill in the blank with the exact term: A read-only copy of data at a specific point in time, often used with VMs and services like Active Directory and Microsoft Exchange, is a (a) .
What is a primary benefit of using microservices architecture in application development?
It simplifies the deployment process by using a single codebase.
It reduces the need for automated testing and continuous integration.
It allows for independent scaling and deployment of services.
It centralises all application logic into a monolithic structure.
Which of the following best describes the concept of Infrastructure as Code (IaC)?
It refers to the manual configuration of hardware resources.
It allows infrastructure to be managed through code and automation.
It is a method for creating physical servers in a data center.
It focuses solely on network security configurations.
In the context of cloud computing, what does the term 'latency' refer to?
The time it takes for data to travel from the source to the destination.
The amount of data that can be transmitted in a given time period.
The total cost of cloud services over a specified period.
The security measures implemented to protect data in transit.
