CompTIA Cloud+ Practice Test (CV0-003)

Static routing is the correct choice in this scenario because it allows network administrators to manually set up the network routes, ensuring that the path of the traffic is predictable and not subject to change, which meets the compliance requirements. Dynamic routing, on the other hand, would adjust the routes automatically based on the network traffic and topology changes, which might not be suitable for environments where route predictability is crucial. RIP and OSPF are dynamic routing protocols providing automatic path selection, which is not the requirement here.

The correct answer is 'RAM'. When more virtual machines (VMs) are deployed on a host, there is a greater need for memory to allocate to each VM so they can operate effectively. CPU cores might also seem like a correct choice, but the CPU requirement is more closely related to the processing power needed by the VMs’ workloads rather than the sheer number of VMs. Network bandwidth is associated with data transfer rates and the amount of traffic that can be handled, not directly with the number of VMs. Storage capacity does increase with more VMs, but it is more aligned with the data the VMs hold rather than their operation.

Infrastructure as a Service (IaaS) provides virtualized computing resources over the internet. In an IaaS model, the cloud provider hosts the hardware, software, servers, storage, and other infrastructure components on behalf of their users. IaaS also provides a range of services to accompany those infrastructure components, including monitoring, log access, security, load balancing, and clustering. This model allows for the most flexibility for the client who wants to manage everything from the operating system up to the application but does not want to maintain physical hardware. A Platform as a Service (PaaS) would not be suitable in this scenario, because it abstracts much of the server management away from the client, and PaaS environments are typically more opinionated about what tools and services can be used. An application with a very consistent workload and the need for direct control over the environment aligns with the IaaS model.

A high-availability cluster is specifically designed to ensure that applications remain accessible with minimal downtime. This is achieved by having redundant nodes and automatic failover processes in place, so if one node fails, another node can take over with little to no disruption in service. The failover cluster configuration is the correct answer because it is built with redundancy and automatic failover in mind, which is essential for applications demanding continuous uptime. Load-balanced and horizontal scaling clusters are incorrect, as they are primarily used to distribute workloads and increase capacity rather than to provide failover capabilities. A single-node cluster is not a cluster by definition and provides no redundancy or failover support; hence, it is incorrect.

Installing a digital certificate from a trusted certificate authority on the server is the most critical step for securing communications between a client and a server. This allows for the use of SSL/TLS, which ensures the authenticity and integrity of the data. Self-signed certificates may also encrypt the communication, but they do not provide the same level of trust as they might not be accepted by users' browsers without creating security exceptions. Renewing existing certificates is important, but only applicable if the certificates are near expiration or compromised. Generating a new public-private key pair is a part of the process but without certificate issuance, it doesn't ensure secure communications.

Setting up redundant switches in a failover configuration ensures continuous network availability, as if one switch fails, the other can immediately take over without disrupting the network. Stackable switches, while they can provide redundancy within a single unit if one module fails, still represent a single point of failure for the unit as a whole, as all modules are part of the same physical device. Unmanaged switches are not configurable and thus cannot support advanced features required for high availability. A single managed switch does not provide redundancy and represents a single point of failure.

The primary purpose of an incident response plan is to guide an organization in effectively managing and recovering from security incidents. A well-structured incident response plan ensures that incidents are handled promptly and systematically, thereby reducing impact and downtime, which is why preparing for potential security incidents is the correct answer. Alternative answers, while they may be components or consequences of incident response, are not the primary purpose of the plan.

The correct answer is 'Auto-scaling' because it refers to the process where the cloud environment can automatically adjust resource allocation based on the current demand, without manual intervention. This ensures that the system can handle increased workloads effectively. The other options, although related to cloud computing, do not accurately describe the automated process of adjusting resources to meet varying workloads.

Revoking certificates that are no longer valid and automatically renewing certificates aids in maintaining the integrity and trustworthiness of secure communications between services. Revocation of certificates ensures that compromised or obsolete certificates cannot be used to establish unauthorized connections, while renewal prevents communication disruptions due to expired certificates. Leaving certificates unchanged might lead to security risks once they expire or are compromised. Increasing certificate lifespan may reduce renewal overhead but can increase security risks if the private key is compromised. Decreasing the certificate’s bit length will result in weaker encryption and increased vulnerability to cryptographic attacks.

Secret management systems are designed to securely store, manage, and automatically rotate secrets such as API keys and passwords. They prevent hardcoding secrets into configuration files or source code, which is a common security vulnerability. Secret stores often provide APIs that can be queried by applications at runtime to retrieve the necessary secrets, making them a dynamic and secure solution for managing sensitive information. Additionally, secret management systems can handle permissions and policies governing who can access specific secrets, thus providing finer control over secret usage.

SaaS for collaboration is the best answer, as it is designed to offer a suite of tools including document editing, project management, and messaging as part of its package, which can integrate with various email systems. Other options, such as VDI or Cloud resources like IaaS and PaaS, do not inherently provide collaboration tools and would require additional configuration or separate services.

The correct answer is 'Scheduled scaling'. Scheduled scaling allows for the planning of resource allocation in advance based on known usage patterns, such as office hours, making it an optimal choice for workloads with predictable load changes. 'Auto-scaling' is used for unpredictably varying loads, which isn't the case here. 'Horizontal scaling' refers to adding more instances to handle load, but without a schedule, it won't address the predictable pattern identified. 'Container orchestration' facilitates application deployment and management in containers, but without specifics on scaling schedules, it’s not the best solution for the described scenario.

The correct answer is 'Community cloud', as this model provides a cloud computing environment where the infrastructure and services are shared among several organizations from a specific group with common computing concerns, such as security, compliance, jurisdiction, etc., which fits the needs of a consortium of educational institutes. A 'Public cloud' would not offer the exclusive shared environment tailored to their common needs. Though a 'Private cloud' would provide the security and compliance they require, it wouldn't be shared among the institutions. 'Hybrid cloud' is incorrect because it refers to a combination of private and public clouds, designed to facilitate a flexible, optimized environment, which may be more complex than needed for their purpose.

The correct answer is Community cloud because it is designed for organizations with common goals and requirements to share infrastructure and resources while maintaining privacy and operational compliance with relevant standards. It contrasts with a Public cloud that is open to any user over the internet, the Private cloud that is exclusive to one organization, and the Hybrid cloud that combines elements of public and private clouds but does not specifically cater to organizations with common goals and compliance needs.

Infrastructure as a Service (IaaS) provides virtualized computing resources over the internet. In an IaaS model, the cloud provider manages the physical hardware, while the user manages the virtual resources, such as virtual machines, storage, and networks. PaaS also provides hardware and software tools over the internet, but it goes a step further by also providing a platform on which software can be developed and deployed. SaaS delivers fully functional applications to users. Managed services provide specific services, such as databases or load balancing, with both hardware and software management.