Question 1

A CSA needs to apply new OS security patches to the application cluster server farm in a public cloud provider. The CSA wants to ensure the security patch and configuration are consistent for all members of the server farm. Which of the following deployment practices is the BEST approach to do this?

Options :

A : Update and validate the runbook procedures prior to the patch rollout

B : Leverage the infrastructure as code and replace each server farm member.

C : Configure and patch each server individually and take an OS differential backup.

D : Snapshot all existing server farm members before installing the patch.

Answer: D

Question 2

A manufacturing company's current security policy mandates PII is not stored in the SaaS solution. Which of the following configuration controls should be used to block sensitive information from being stored in the SaaS solution?

Options :

A : Implement file-level encryption

B : Implement a network ACL.

C : Implement an IPS

D : Implement content filtering

Answer: B

Question 3

During troubleshooting of a performance problem with an all-flash array that is used to store the primary production data of multiple virtualization clusters in a private cloud, the storage vendor wants to perform an upgrade of the array firmware. Which of the following should be done NEXT?

Options :

A : Open a change request and ask for approval.

B : Establish a plan of action and implement it.

C : Download the array firmware and apply it on the affected array.

D : Document the findings.

Answer: B

Question 4

An engineer is configuring the monitoring for a new application server. During the day, the CPU on the server is baselined at approximately 30% utilization. At midnight, a batch job is scheduled to run that will drive the CPU utilization up to 75% for approximately an hour. Any time the CPU utilization is at 40% or higher for longer than ten minutes, administrators will receive an alert. Which of the following is the BEST method to ensure administrators do not experience message fatigue due to false alerts?

Options :

A : Set a different threshold during the batch peak time

B : Increase the alert time threshold to 65 minutes

C : Increase the alert utilization threshold to 80%.

D : Manually disable monitoring during the batch job

Answer: A

Question 5

An engineer is responsible for managing a private cloud environment at a software company.

Company developers perform all programming in the cloud environment. There are two

departments working on a highly classified product that now requires dedicated resources,

which cannot be viewed or accessed by other departments in the cloud environment. Which of

the following should the engineer perform to ensure the requirements are met? (Choose

three.)

Options :

A : Create a baseline

B : Assign an ACL

C : Verify segmentation

D : Use thin provisioned storage

E : Automate patch deployments

F : Create a tenant

G : Deploy a PKI solution

Answer: A,B,C

Higher Test Marks with Free Online CV0-002 Exam Practice

Buying Options: