CompTIA CV0-004 Practice Test 38
Question 370
Before changing production at a regional health provider, a ransomware incident encrypts both production storage and online backups because they share administrator credentials. Which evidence should the engineer check first?
- Review recovery logs, data integrity, external dependencies and elapsed restore time.
- Inspect backup policy, identity separation, retention lock and restore runbook.
- Review differential base reference, file change rate and restore process.
- Inspect replica timing, backup version retention and deletion-protection settings.
Explanation
Correct Answer
B:This distinguishes the relevant dependency before changing cloud resources. Backup survivability requires access isolation and deletion resistance, not merely additional copies in the same trust zone.
Incorrect Answers
A:That approach would help when backup jobs report success for months but nobody has verified that an application can actually start after restoration. Inspect backup policy, identity separation, retention lock and restore runbook.
C:Review differential base reference, file change rate and restore process. The relevant cloud response here is: Inspect backup policy, identity separation, retention lock and restore runbook.
D:Inspect replica timing, backup version retention and deletion-protection settings. The relevant cloud response here is: Inspect backup policy, identity separation, retention lock and restore runbook.
Question 371
The deployment lead reviews a case where a shared file volume contains many teams' data and one analyst accidentally deletes a single document. What should the team change first?
- Use incremental backups after a known-good full backup and verify chain recovery.
- Restore a parallel isolated environment and validate it before traffic cutover.
- Restore only the required file from an eligible recovery point without rolling back unrelated directories.
- Use separately controlled immutable offsite backup copies with isolated recovery credentials.
Explanation
Correct Answer
C:Granular recovery minimizes collateral changes compared with a full-volume restore. The change should be verified, not just applied: The missing document reappears with correct contents and current unrelated files remain unchanged.
Incorrect Answers
A:That approach would help when a nightly backup job is too slow because it copies every unchanged file and the recovery requirement allows a backup chain. In this case, granular recovery minimizes collateral changes compared with a full-volume restore.
B:Parallel recovery permits verification while leaving existing systems untouched until acceptance. The relevant cloud response here is: Restore only the required file from an eligible recovery point without rolling back unrelated directories.
D:The proposed measure serves a related cloud task, but the present symptom calls for a more specific response. Granular recovery minimizes collateral changes compared with a full-volume restore. The targeted change is: Restore only the required file from an eligible recovery point without rolling back unrelated directories.
Question 372
A shared file volume contains many teams' data and one analyst accidentally deletes a single document. What underlying cloud behavior should the engineer recognize?
- Incremental jobs capture changes since the previous backup, reducing routine copy volume but complicating restore chains.
- Encryption protects backup confidentiality but unavailable keys make otherwise intact backups unusable.
- Incremental backups depend on a recoverable base and intervening backup history.
- Granular recovery minimizes collateral changes compared with a full-volume restore.
Explanation
Correct Answer
D:The evidence of success is: The missing document reappears with correct contents and current unrelated files remain unchanged.
Incorrect Answers
A:That approach would help when a nightly backup job is too slow because it copies every unchanged file and the recovery requirement allows a backup chain. Check the difference through: Inspect available snapshots, target path and newer user changes.
B:The alternative is aimed at a different condition: An encrypted offsite backup is intact but cannot be restored because its encryption key was destroyed during primary-site recovery.
C:The proposed measure serves a related cloud task, but the present symptom calls for a more specific response. Granular recovery minimizes collateral changes compared with a full-volume restore. Check the difference through: Inspect available snapshots, target path and newer user changes.
Question 373
During postchange validation at a global distribution company, a shared file volume contains many teams' data and one analyst accidentally deletes a single document. What outcome would prove the intended safeguard works?
- The missing document reappears with correct contents and current unrelated files remain unchanged.
- A deleted test record can be recovered from a prior retained point even after replication.
- A clean environment restores the complete database from the full and incremental chain.
- The recovered app passes tests in isolation then receives approved traffic after controlled switch.
Explanation
Correct Answer
A:The missing document reappears with correct contents and current unrelated files remain unchanged. This proves the service behavior rather than just showing a changed configuration. Granular recovery minimizes collateral changes compared with a full-volume restore.
Incorrect Answers
B:That approach would help when a workload replicates deletion events immediately into a secondary region and assumes that replica is sufficient for accidental deletion recovery. The required acceptance result is: The missing document reappears with correct contents and current unrelated files remain unchanged.
C:A clean environment restores the complete database from the full and incremental chain. The relevant cloud response here is: The missing document reappears with correct contents and current unrelated files remain unchanged.
D:The recovered app passes tests in isolation then receives approved traffic after controlled switch. The relevant cloud response here is: The missing document reappears with correct contents and current unrelated files remain unchanged.
Question 374
A review identifies this symptom: a shared file volume contains many teams' data and one analyst accidentally deletes a single document. Which read-only investigation is most useful?
- Inspect backup chain completeness, integrity and storage access.
- Inspect available snapshots, target path and newer user changes.
- Review network isolation, recovery data age and cutover procedure.
- Check daily change rate, restore time and backup chain consistency.
Explanation
Correct Answer
B:Inspect available snapshots, target path and newer user changes. This distinguishes the relevant dependency before changing cloud resources. Granular recovery minimizes collateral changes compared with a full-volume restore.
Incorrect Answers
A:That approach would help when a database restoration plan cannot recover a complete system because it stores only incremental changes without a valid initial backup. Inspect available snapshots, target path and newer user changes.
C:Review network isolation, recovery data age and cutover procedure. The relevant cloud response here is: Inspect available snapshots, target path and newer user changes.
D:Check daily change rate, restore time and backup chain consistency. The relevant cloud response here is: Inspect available snapshots, target path and newer user changes.
Question 375
At a global distribution company, backup jobs report success for months but nobody has verified that an application can actually start after restoration. Which response most directly addresses this specific cloud challenge?
- Restore a parallel isolated environment and validate it before traffic cutover.
- Restore only the required file from an eligible recovery point without rolling back unrelated directories.
- Perform timed recovery drills with integrity and business-function checks.
- Combine replication with independent point-in-time backups and retention.
Explanation
Correct Answer
C:Backup completion logs do not prove application-consistent recoverability. The change should be verified, not just applied: A clean recovery exercise starts the workload with intact transactions inside its RTO/RPO.
Incorrect Answers
A:That approach would help when a broken production application needs testing before replacing the current environment with restored data. In this case, backup completion logs do not prove application-consistent recoverability. The targeted change is: Perform timed recovery drills with integrity and business-function checks.
B:Granular recovery minimizes collateral changes compared with a full-volume restore. The relevant cloud response here is: Perform timed recovery drills with integrity and business-function checks.
D:Replication can duplicate errors and deletions, while versioned backups provide historical restore points. The relevant cloud response here is: Perform timed recovery drills with integrity and business-function checks.
Question 376
In a technical review for a regional health provider, backup jobs report success for months but nobody has verified that an application can actually start after restoration. Which cloud principle is most relevant?
- Replication can duplicate errors and deletions, while versioned backups provide historical restore points.
- Differentials typically contain changes since the last full backup, so they may grow until a new full baseline.
- Encryption protects backup confidentiality but unavailable keys make otherwise intact backups unusable.
- Backup completion logs do not prove application-consistent recoverability.
Explanation
Correct Answer
D:The evidence of success is: A clean recovery exercise starts the workload with intact transactions inside its RTO/RPO.
Incorrect Answers
A:That approach would help when a workload replicates deletion events immediately into a secondary region and assumes that replica is sufficient for accidental deletion recovery. Check the difference through: Review recovery logs, data integrity, external dependencies and elapsed restore time.
B:The alternative is aimed at a different condition: A team expects each differential backup to contain only changes since the last differential but sizes keep growing during the week. Check the difference through: Review recovery logs, data integrity, external dependencies and elapsed restore time.
C:The proposed measure serves a related cloud task, but the present symptom calls for a more specific response. Backup completion logs do not prove application-consistent recoverability. Check the difference through: Review recovery logs, data integrity, external dependencies and elapsed restore time.
Question 377
The security administrator has addressed this condition: backup jobs report success for months but nobody has verified that an application can actually start after restoration. Which observation verifies the outcome?
- A clean recovery exercise starts the workload with intact transactions inside its RTO/RPO.
- Restore uses the latest full plus the chosen differential without needing all prior differentials.
- The recovered app passes tests in isolation then receives approved traffic after controlled switch.
- The missing document reappears with correct contents and current unrelated files remain unchanged.
Explanation
Correct Answer
A:A clean recovery exercise starts the workload with intact transactions inside its RTO/RPO. This proves the service behavior rather than just showing a changed configuration. Backup completion logs do not prove application-consistent recoverability.
Incorrect Answers
B:That approach would help when a team expects each differential backup to contain only changes since the last differential but sizes keep growing during the week. The required acceptance result is: A clean recovery exercise starts the workload with intact transactions inside its RTO/RPO.
C:The recovered app passes tests in isolation then receives approved traffic after controlled switch. The relevant cloud response here is: A clean recovery exercise starts the workload with intact transactions inside its RTO/RPO.
D:The missing document reappears with correct contents and current unrelated files remain unchanged. The relevant cloud response here is: A clean recovery exercise starts the workload with intact transactions inside its RTO/RPO.
Question 378
During initial triage, backup jobs report success for months but nobody has verified that an application can actually start after restoration. Which check best narrows down the cause?
- Inspect available snapshots, target path and newer user changes.
- Review recovery logs, data integrity, external dependencies and elapsed restore time.
- Inspect replica timing, backup version retention and deletion-protection settings.
- Review differential base reference, file change rate and restore process.
Explanation
Correct Answer
B:Review recovery logs, data integrity, external dependencies and elapsed restore time. This distinguishes the relevant dependency before changing cloud resources. Backup completion logs do not prove application-consistent recoverability.
Incorrect Answers
A:That approach would help when a shared file volume contains many teams' data and one analyst accidentally deletes a single document. Review recovery logs, data integrity, external dependencies and elapsed restore time.
C:Inspect replica timing, backup version retention and deletion-protection settings. The relevant cloud response here is: Review recovery logs, data integrity, external dependencies and elapsed restore time.
D:Review differential base reference, file change rate and restore process. The relevant cloud response here is: Review recovery logs, data integrity, external dependencies and elapsed restore time.
Question 379
For the affected cloud environment, a workload replicates deletion events immediately into a secondary region and assumes that replica is sufficient for accidental deletion recovery. Which remedy best fits the requirement?
- Perform timed recovery drills with integrity and business-function checks.
- Create a valid full backup and test restores alongside the incremental chain.
- Combine replication with independent point-in-time backups and retention.
- Use separately controlled immutable offsite backup copies with isolated recovery credentials.
Explanation
Correct Answer
C:Replication can duplicate errors and deletions, while versioned backups provide historical restore points. The change should be verified, not just applied: A deleted test record can be recovered from a prior retained point even after replication.
Incorrect Answers
A:That approach would help when backup jobs report success for months but nobody has verified that an application can actually start after restoration. In this case, replication can duplicate errors and deletions, while versioned backups provide historical restore points.
B:Incremental backups depend on a recoverable base and intervening backup history. The relevant cloud response here is: Combine replication with independent point-in-time backups and retention.
D:The proposed measure serves a related cloud task, but the present symptom calls for a more specific response. Replication can duplicate errors and deletions, while versioned backups provide historical restore points. The targeted change is: Combine replication with independent point-in-time backups and retention.
Question 380
The infrastructure architect at a regional health provider investigates this condition: a workload replicates deletion events immediately into a secondary region and assumes that replica is sufficient for accidental deletion recovery. Which explanation best accounts for it?
- Parallel recovery permits verification while leaving existing systems untouched until acceptance.
- Incremental backups depend on a recoverable base and intervening backup history.
- Backup completion logs do not prove application-consistent recoverability.
- Replication can duplicate errors and deletions, while versioned backups provide historical restore points.
Explanation
Correct Answer
D:The evidence of success is: A deleted test record can be recovered from a prior retained point even after replication.
Incorrect Answers
A:That approach would help when a broken production application needs testing before replacing the current environment with restored data. Check the difference through: Inspect replica timing, backup version retention and deletion-protection settings.
B:The alternative is aimed at a different condition: A database restoration plan cannot recover a complete system because it stores only incremental changes without a valid initial backup. Check the difference through: Inspect replica timing, backup version retention and deletion-protection settings.
C:The proposed measure serves a related cloud task, but the present symptom calls for a more specific response. Replication can duplicate errors and deletions, while versioned backups provide historical restore points. Check the difference through: Inspect replica timing, backup version retention and deletion-protection settings.