A cloud administrator is building a company-standard VM image, which will be based on a public image. Which of the following should the administrator implement to secure the image?
Answer(s): C
Hardening is the process of securing a system by reducing its surface of vulnerability, which includes disabling unnecessary services, removing default accounts, applying security patches, and configuring security settings. When building a company-standard VM image based on a public image, hardening is essential to ensure that the image is secure and protected from potential threats.
A cloud deployment uses three different VPCs. The subnets on each VPC need to communicate with the others over private channels. Which of the following will achieve this objective?
Answer(s): B
VPC peering allows direct communication between virtual private clouds (VPCs) over private IP addresses, enabling subnets in different VPCs to communicate securely without going over the public internet. By creating peering connections between all three VPCs, they will be able to send traffic to each other privately and securely.
A cloud resource increases its capacity based on seasonal activity. Which of the following best describes this type of cloud instance and the scaling approach?
Elastic cloud resources can automatically adjust capacity (increase or decrease) based on demand. This flexibility is well-suited for workloads with seasonal activity where the resource needs change based on predictable or observed trends. The scaling is triggered by trend, meaning that changes in usage patterns over time (like seasonal variations) prompt the capacity adjustments.
Which of the following can eliminate the risk of CI/CD pipelines leaking secrets on containers?
Private image repositories help protect secrets and sensitive information by ensuring that only authorized users can access the container images. Storing container images in public repositories increases the risk of inadvertently exposing secrets, such as API keys or passwords, if these secrets are embedded in the container. By using private repositories, access is restricted, and the risk of secrets being leaked is minimized.
A company uses containers to implement a web application. The development team completes internal testing of a new feature and is ready to move the feature to the production environment. Which of the following deployment models best meets the company’s needs while minimizing cost and targeting a specific subset of its users?
Answer(s): A
Canary deployment is a deployment model where a new feature or version of an application is released to a small subset of users first before rolling it out to the entire user base. This allows the team to validate the new feature in a real production environment with minimal risk and lower cost, as they can monitor the performance and user experience before scaling up to all users. If issues are detected, only a small portion of users are impacted, making it easier to roll back or make adjustments.
Post your Comments and Discuss CompTIA CV0-004 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CV0-004 content, but please register or login to continue.