Free CV0-003 Exam Braindumps
CompTIA Cloud+ Certification (Retired and replaced with CV0-004) Questions 91–95 (page: 20)

Updated On: 10-Feb-2026

A system administrator has provisioned a new web server. Which of the following, in combination, form the best practice to secure the server's OS? (Choose three.)

  1. Install TLS certificates on the server.
  2. Forward port 80 traffic to port 443.
  3. Disable TLS 1.0/1.1 and SSL.
  4. Disable password authentication.
  5. Enable SSH key access only.
  6. Provision the server in a separate VPC.
  7. Disable the superuser/administrator account.
  8. Restrict access on port 22 to the IP address of the administrator's workstation.

Answer(s): A,F,G


Reference:

https://phoenixnap.com/kb/server-security-tips



A technician needs to deploy two virtual machines in preparation for the configuration of a financial application next week. Which of the following cloud deployment models should the technician use?

  1. XaaS
  2. IaaS
  3. PaaS
  4. SaaS

Answer(s): B

Explanation:

The technician should use the IaaS (Infrastructure-as-a-Service) cloud deployment model to provision the virtual machines. IaaS provides virtualized computing resources, such as servers, storage, and networking, on which the user can deploy and manage their own applications and operating systems. The technician can then install the financial application on the virtual machines and configure them as required.


Reference:

https://searchcloudcomputing.techtarget.com/definition/Platform-as-a-Service-PaaS



A system administrator supports an application in the cloud, which includes a restful API that receives an encrypted message that is passed to a calculator system. The administrator needs to ensure the proper function of the API using a new automation tool. Which of the following techniques would be BEST for the administrator to use to accomplish this requirement?

  1. Functional testing
  2. Performance testing
  3. Integration testing
  4. Unit testing

Answer(s): A

Explanation:

A) Functional testing would be the BEST technique for the administrator to use in order to ensure the proper function of the API using a new automation tool. Functional testing is a testing technique that involves testing the functionality of an application to ensure that it performs the intended tasks correctly. In this case, the API is expected to receive an encrypted message and pass it to a calculator system, so functional testing can help ensure that the API is working properly and is passing the message correctly to the calculator system. Other types of testing, such as performance testing, integration testing, and unit testing, may also be useful in some contexts, but functional testing is the most appropriate option for ensuring that the API is functioning properly.


Reference:

https://www.softwaretestinghelp.com/the-difference-between-unit-integration-and-functional-testing/



A cloud solutions architect needs to determine the best strategy to deploy an application environment in production, given the following requirements:
* No downtime
* Instant switch to a new version using traffic control for all users
Which of the following deployment strategies would be the BEST solution?

  1. Hot site
  2. Blue-green
  3. Canary
  4. Rolling

Answer(s): B

Explanation:

The BEST deployment strategy to meet the given requirements is the "Blue-green" deployment.

In a blue-green deployment, two identical environments are maintained, one for production (blue) and the other for the next version or release (green). All production traffic is initially directed to the blue environment, while the green environment is prepared and tested thoroughly without affecting the production environment. Once the green environment is ready, the traffic is switched instantly from the blue to the green environment using traffic control, with no downtime or impact on users.


Reference:

https://thenewstack.io/deployment-strategies/



A cloud security analyst is implementing a vulnerability scan of the web server in the DMZ, which is running in an IaaS compute instance. The default inbound firewall settings are as follows:



Which of the following will provide the analyst with the MOST accurate report?

  1. An agent-based scan
  2. A network vulnerability scan
  3. A default and common credentialed scan
  4. A network credentialed vulnerability scan

Answer(s): D


Reference:

https://docs.tenable.com/nessus/Content/NessusCredentialedChecks.htm



Viewing page 20 of 66
Viewing questions 96 - 100 out of 386 questions


Post your Comments and Discuss CompTIA CV0-003 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!