A cloud administrator is responsible for managing a cloud-based content management solution. According to the security policy, any data that is hosted in the cloud must be protected against data exfiltration. Which of the following solutions should the administrator implement?
Answer(s): D
To protect against data exfiltration, a cloud administrator should implement a Data Loss Prevention (DLP) solution. DLP solutions can identify, monitor, and protect sensitive data by enforcing policies that prevent unauthorized access, sharing, or copying of data. By monitoring outbound traffic, DLP solutions can also detect and prevent data exfiltration attempts, ensuring that data remains secure while hosted in the cloud. HIDS (Host-based Intrusion Detection System) can detect unauthorized access or suspicious activity on the server. FIM (File Integrity Monitoring) can detect changes to files or configurations, helping to identify any unauthorized modifications. WAF (Web Application Firewall) can protect web applications against common attacks such as SQL injection, cross-site scripting, and cross-site request forgery. However, WAF is not specifically designed to protect against data exfiltration.
Lateral-moving malware has infected the server infrastructure. Which of the following network changes would MOST effectively prevent lateral movement in the future?
Answer(s): C
"Another characteristic of APTs is that they move laterally by exploiting open ports and gaps in firewall rules. This lateral movement can be contained by micro-segmenting the network and applying intent-based security policies".
https://colortokens.com/blog/advanced-persistent-threats-apt/
A systems administrator is creating a playbook to run tasks against a server on a set schedule. Which of the following authentication techniques should the systems administrator use within the playbook?
Which of the following should be considered for capacity planning?
Answer(s): A
Service management is a system that helps organizations to manage IT incidents, problems, and changes. It typically includes a ticketing system that is used to track incidents and problems.The assignment group is a group of users who are responsible for handling incidents and problems. When an incident is created, it is assigned to the appropriate assignment group.In this case, the storage team is receiving incidents that should have gone to the web server team. This is most likely because the assignment group for the web servers has been incorrectly configured.
A cloud administrator is setting up a new coworker for API access to a public cloud environment. The administrator creates a new user and gives the coworker access to a collection of automation scripts. When the coworker attempts to use a deployment script, a 403 error is returned. Which of the following is the MOST likely cause of the error?
Answer(s): B
Post your Comments and Discuss CompTIA CV0-003 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CV0-003 content, but please register or login to continue.