A cloud engineer wants to deploy a new application to the cloud and is writing the following script:Which of the following actions will this script perform?
Answer(s): B
The Terraform script shown in the attachment is intended to create a new cloud resource, specifically a server instance (app_server) in a specified region using the cloud provider (cloud_provider1). It defines a resource of type server_instance with attributes such as an Amazon Machine Image (ami) ID and an instance type (t2.micro). Terraform is an Infrastructure as Code (IaC) tool used for defining and provisioning infrastructure resources in the cloud.
A network administrator is building a site-to-site VPN tunnel from the company’s headquarters office to the company’s public cloud development network. The network administrator confirms the following:-The VPN tunnel is established on the headquarters office firewall.-While inside the office, developers report that they cannot connect to the development network resources.-While outside the office on a client VPN, developers report that they can connect to the development network resources.-The office and the client VPN have different IP subnet ranges.-The firewall flow logs show that traffic is reaching the development network from the office.Which of the following is the next step the network administrator should take to troubleshoot the VPN tunnel?
Answer(s): A
Since the VPN tunnel is established and traffic is reaching the development network, the issue may be related to routing. The next logical step is to check whether the development network has the correct routes to send return traffic back to the office subnet. If the development network routing table does not contain a route for the office subnet, the traffic cannot be properly returned, resulting in the developers not being able to connect.
A cross-site request forgery vulnerability exploited a web application that was hosted in a public IaaS network. A security engineer determined that deploying a WAF in blocking mode at a CDN would prevent the application from being exploited again. However, a week after implementing the WAF, the application was exploited again. Which of the following should the security engineer do to make the WAF control effective?
Answer(s): C
An organization’s critical data was exfiltrated from a computer system in a cyberattack. A cloud analyst wants to identify the root cause and is reviewing the following security logs of a software web application:Which of the following types of attacks occurred?
The log entries show multiple POST requests to a login page (/login.php) with the following patterns in the parameter values: u=administrator&p=or%201%20=1 u=admin&p=or%201%20=1These requests indicate the use of SQL injection techniques. The use of keywords like "or 1=1" is a common SQL injection pattern used to bypass authentication by manipulating SQL statements. This suggests that an attacker tried to manipulate the application's SQL queries to gain unauthorized access.
A banking firm’s cloud server will be decommissioned after a successful proof of concept using mirrored data. Which of the following is the best action to take regarding the storage used on the decommissioned server?
Since the server is being decommissioned and it used mirrored data (which implies the data is not the original but a copy used for proof of concept), the best action is to delete the storage. This prevents any potential unauthorized access to sensitive banking data and helps maintain data security and privacy. Retaining or archiving the data is unnecessary, especially when it is a mirrored copy that was used for testing purposes.
Post your Comments and Discuss CompTIA CV0-004 exam prep with other Community members: