CompTIA CV0-004 Practice Test 4
Question 30
At a regional health provider, a factory sensor line must issue local safety alerts even when the internet link to central cloud is interrupted. Which response most directly addresses this specific cloud challenge?
- Design a tested cross-region recovery process for the stated RTO and RPO.
- Process time-critical alerts at the edge and synchronize historical events when links recover.
- Use a warm standby with current data and documented scale-up and cutover procedures.
- Build sanitized reusable golden images and personalize instances through approved initialization.
Explanation
Correct Answer
B:Edge computing keeps low-latency decisions close to their sources while cloud connectivity may be intermittent. The change should be verified, not just applied: The local alarm still triggers during a controlled WAN disconnect and queued records later synchronize.
Incorrect Answers
A:That approach would help when a payment platform needs service restored within one hour after a full region outage and can tolerate at most five minutes of lost transactions. In this case, edge computing keeps low-latency decisions close to their sources while cloud connectivity may be intermittent.
C:Warm standby balances cost and recovery speed; a cold site may require longer provisioning and restoration. The relevant cloud response here is: Process time-critical alerts at the edge and synchronize historical events when links recover.
D:VM cloning duplicates disk state including credentials unless generalized and sanitized, increasing secret reuse risk. The relevant cloud response here is: Process time-critical alerts at the edge and synchronize historical events when links recover.
Question 31
In a technical review for a global distribution company, a factory sensor line must issue local safety alerts even when the internet link to central cloud is interrupted. Which cloud principle is most relevant?
- RTO measures acceptable restoration time and RPO measures acceptable data-loss window, requiring distinct recovery controls.
- Availability zones help isolate infrastructure failures within a region but do not independently protect against a regional outage.
- Edge computing keeps low-latency decisions close to their sources while cloud connectivity may be intermittent.
- Container writable layers are often ephemeral, so durable application state belongs on separately managed persistent volumes.
Explanation
Correct Answer
C:The evidence of success is: The local alarm still triggers during a controlled WAN disconnect and queued records later synchronize.
Incorrect Answers
A:That approach would help when a payment platform needs service restored within one hour after a full region outage and can tolerate at most five minutes of lost transactions. Check the difference through: Check sensor deadline, gateway buffering and offline decision dependencies.
B:The alternative is aimed at a different condition: A customer portal runs on one VM in one fault domain and becomes inaccessible during localized infrastructure maintenance. It does not directly resolve the described failure. Edge computing keeps low-latency decisions close to their sources while cloud connectivity may be intermittent. Check the difference through: Check sensor deadline, gateway buffering and offline decision dependencies.
D:The proposed measure serves a related cloud task, but the present symptom calls for a more specific response. Edge computing keeps low-latency decisions close to their sources while cloud connectivity may be intermittent. Check the difference through: Check sensor deadline, gateway buffering and offline decision dependencies.
Question 32
The cloud engineer has addressed this condition: a factory sensor line must issue local safety alerts even when the internet link to central cloud is interrupted. Which observation verifies the outcome?
- An isolated zone failure leaves the portal reachable through healthy instances.
- A regional recovery drill restores service within an hour with no more than five minutes of lost data.
- A test file starts one authorized function and completes within its execution deadline.
- The local alarm still triggers during a controlled WAN disconnect and queued records later synchronize.
Explanation
Correct Answer
D:The local alarm still triggers during a controlled WAN disconnect and queued records later synchronize. This proves the service behavior rather than just showing a changed configuration. Edge computing keeps low-latency decisions close to their sources while cloud connectivity may be intermittent.
Incorrect Answers
A:That approach would help when a customer portal runs on one VM in one fault domain and becomes inaccessible during localized infrastructure maintenance. The required acceptance result is: The local alarm still triggers during a controlled WAN disconnect and queued records later synchronize.
B:Edge computing keeps low-latency decisions close to their sources while cloud connectivity may be intermittent. The alternative is aimed at a different condition: A payment platform needs service restored within one hour after a full region outage and can tolerate at most five minutes of lost transactions.
C:Edge computing keeps low-latency decisions close to their sources while cloud connectivity may be intermittent. The proposed measure serves a related cloud task, but the present symptom calls for a more specific response.
Question 33
During initial triage, a factory sensor line must issue local safety alerts even when the internet link to central cloud is interrupted. Which check best narrows down the cause?
- Check sensor deadline, gateway buffering and offline decision dependencies.
- Compare measured recovery provisioning time, ongoing replication cost and data freshness.
- Review tags, chargeback reports, peak CPU/memory use and rightsizing headroom.
- Inspect replication lag, failover orchestration, DNS behavior and recovery-test results.
Explanation
Correct Answer
A:Check sensor deadline, gateway buffering and offline decision dependencies. This distinguishes the relevant dependency before changing cloud resources. Edge computing keeps low-latency decisions close to their sources while cloud connectivity may be intermittent.
Incorrect Answers
B:That approach would help when a regional claims service has a four-hour recovery target but cannot justify a continuously active second production stack. Check sensor deadline, gateway buffering and offline decision dependencies.
C:Review tags, chargeback reports, peak CPU/memory use and rightsizing headroom. The relevant cloud response here is: Check sensor deadline, gateway buffering and offline decision dependencies.
D:Inspect replication lag, failover orchestration, DNS behavior and recovery-test results. The relevant cloud response here is: Check sensor deadline, gateway buffering and offline decision dependencies.
Question 34
For the affected cloud environment, a regional office needs an encrypted site-to-site connection to cloud subnets over its existing internet service. Which remedy best fits the requirement?
- Use a layer-seven application load balancer with host or path routing rules.
- Configure a site-to-site IPsec VPN with approved routing and redundant tunnels as required.
- Use a supported hub-and-spoke transit routing service with explicit route tables.
- Provision an appropriately sized dedicated private connection with a resilient backup path.
Explanation
Correct Answer
B:A VPN protects traffic over an untrusted network but does not guarantee dedicated bandwidth or immunity to internet outages. The change should be verified, not just applied: Private application routes remain encrypted and fail over when one tunnel is withdrawn.
Incorrect Answers
A:That approach would help when a web store requires host-based routing so API traffic reaches one service and image requests another. In this case, a VPN protects traffic over an untrusted network but does not guarantee dedicated bandwidth or immunity to internet outages.
C:VPC peering commonly lacks transitive forwarding, while a transit hub can provide centrally controlled routes. The relevant cloud response here is: Configure a site-to-site IPsec VPN with approved routing and redundant tunnels as required.
D:Dedicated connectivity separates the transport from ordinary internet routing but still needs redundancy and encryption policy review. The relevant cloud response here is: Configure a site-to-site IPsec VPN with approved routing and redundant tunnels as required.
Question 35
The deployment lead at a global distribution company investigates this condition: a regional office needs an encrypted site-to-site connection to cloud subnets over its existing internet service. Which explanation best accounts for it?
- Subnets define address and routing boundaries while stateful firewalls or network ACLs enforce permitted connections.
- VPC peering commonly lacks transitive forwarding, while a transit hub can provide centrally controlled routes.
- A VPN protects traffic over an untrusted network but does not guarantee dedicated bandwidth or immunity to internet outages.
- A CDN places cacheable objects near viewers, reducing origin latency and repeated transfer demand.
Explanation
Correct Answer
C:The evidence of success is: Private application routes remain encrypted and fail over when one tunnel is withdrawn.
Incorrect Answers
A:That approach would help when an application network mixes public load balancers and private database nodes in one broad address range. Check the difference through: Inspect peer configuration, tunnel negotiation, advertised prefixes and link redundancy.
B:The alternative is aimed at a different condition: A group has dozens of isolated virtual private cloud networks and a growing full-mesh of peering links. It does not directly resolve the described failure. A VPN protects traffic over an untrusted network but does not guarantee dedicated bandwidth or immunity to internet outages. Check the difference through: Inspect peer configuration, tunnel negotiation, advertised prefixes and link redundancy.
D:The proposed measure serves a related cloud task, but the present symptom calls for a more specific response. A VPN protects traffic over an untrusted network but does not guarantee dedicated bandwidth or immunity to internet outages. Check the difference through: Inspect peer configuration, tunnel negotiation, advertised prefixes and link redundancy.
Question 36
At a regional health provider, an engineer needs to close a case where a regional office needs an encrypted site-to-site connection to cloud subnets over its existing internet service. What test is most decisive?
- Load testing meets required throughput and private route failover works without violating security controls.
- Cold and warm cache tests show lower edge response time while updated assets invalidate correctly.
- Requests for each host or path reach the intended healthy backend without cross-service leakage.
- Private application routes remain encrypted and fail over when one tunnel is withdrawn.
Explanation
Correct Answer
D:Private application routes remain encrypted and fail over when one tunnel is withdrawn. This proves the service behavior rather than just showing a changed configuration. A VPN protects traffic over an untrusted network but does not guarantee dedicated bandwidth or immunity to internet outages.
Incorrect Answers
A:That approach would help when a trading platform requires predictable private connectivity to cloud workloads and regularly saturates its public internet VPN. The required acceptance result is: Private application routes remain encrypted and fail over when one tunnel is withdrawn.
B:A VPN protects traffic over an untrusted network but does not guarantee dedicated bandwidth or immunity to internet outages. The alternative is aimed at a different condition: Global users download identical public product images but overseas round trips create slow page renders.
C:A VPN protects traffic over an untrusted network but does not guarantee dedicated bandwidth or immunity to internet outages. The proposed measure serves a related cloud task, but the present symptom calls for a more specific response.
Question 37
At a global distribution company, this issue is reported: a regional office needs an encrypted site-to-site connection to cloud subnets over its existing internet service. What should be examined before applying a fix?
- Inspect peer configuration, tunnel negotiation, advertised prefixes and link redundancy.
- Measure origin latency, cache-hit ratio, response headers and privacy suitability.
- Check subnet CIDRs, effective routes, source rules and traffic-flow logs.
- Compare traffic demand, provider circuit options, BGP routes and single points of failure.
Explanation
Correct Answer
A:Inspect peer configuration, tunnel negotiation, advertised prefixes and link redundancy. This distinguishes the relevant dependency before changing cloud resources. A VPN protects traffic over an untrusted network but does not guarantee dedicated bandwidth or immunity to internet outages.
Incorrect Answers
B:That approach would help when global users download identical public product images but overseas round trips create slow page renders. Inspect peer configuration, tunnel negotiation, advertised prefixes and link redundancy.
C:Check subnet CIDRs, effective routes, source rules and traffic-flow logs. The relevant cloud response here is: Inspect peer configuration, tunnel negotiation, advertised prefixes and link redundancy.
D:Compare traffic demand, provider circuit options, BGP routes and single points of failure. The relevant cloud response here is: Inspect peer configuration, tunnel negotiation, advertised prefixes and link redundancy.
Question 38
At a regional health provider, an operational review finds that a trading platform requires predictable private connectivity to cloud workloads and regularly saturates its public internet VPN. What is the best next step?
- Configure a site-to-site IPsec VPN with approved routing and redundant tunnels as required.
- Provision an appropriately sized dedicated private connection with a resilient backup path.
- Use a CDN with appropriate cache keys, time-to-live values and invalidation.
- Use a supported hub-and-spoke transit routing service with explicit route tables.
Explanation
Correct Answer
B:Dedicated connectivity separates the transport from ordinary internet routing but still needs redundancy and encryption policy review. The change should be verified, not just applied: Load testing meets required throughput and private route failover works without violating security controls.
Incorrect Answers
A:That approach would help when a regional office needs an encrypted site-to-site connection to cloud subnets over its existing internet service. In this case, dedicated connectivity separates the transport from ordinary internet routing but still needs redundancy and encryption policy review.
C:A CDN places cacheable objects near viewers, reducing origin latency and repeated transfer demand. The relevant cloud response here is: Provision an appropriately sized dedicated private connection with a resilient backup path.
D:VPC peering commonly lacks transitive forwarding, while a transit hub can provide centrally controlled routes. The relevant cloud response here is: Provision an appropriately sized dedicated private connection with a resilient backup path.
Question 39
An operator asks why the issue arises: a trading platform requires predictable private connectivity to cloud workloads and regularly saturates its public internet VPN. Which explanation is strongest?
- Subnets define address and routing boundaries while stateful firewalls or network ACLs enforce permitted connections.
- A VPN protects traffic over an untrusted network but does not guarantee dedicated bandwidth or immunity to internet outages.
- Dedicated connectivity separates the transport from ordinary internet routing but still needs redundancy and encryption policy review.
- VPC peering commonly lacks transitive forwarding, while a transit hub can provide centrally controlled routes.
Explanation
Correct Answer
C:The evidence of success is: Load testing meets required throughput and private route failover works without violating security controls.
Incorrect Answers
A:That approach would help when an application network mixes public load balancers and private database nodes in one broad address range. Check the difference through: Compare traffic demand, provider circuit options, BGP routes and single points of failure.
B:The alternative is aimed at a different condition: A regional office needs an encrypted site-to-site connection to cloud subnets over its existing internet service. Dedicated connectivity separates the transport from ordinary internet routing but still needs redundancy and encryption policy review.
D:The proposed measure serves a related cloud task, but the present symptom calls for a more specific response. Dedicated connectivity separates the transport from ordinary internet routing but still needs redundancy and encryption policy review.
Question 40
After correcting the following problem, what result would best confirm success? A trading platform requires predictable private connectivity to cloud workloads and regularly saturates its public internet VPN.
- The load balancer reaches the database on its necessary port while internet clients cannot connect to the database directly.
- Requests for each host or path reach the intended healthy backend without cross-service leakage.
- Approved spokes communicate only through intended routes and unrelated tenants remain isolated.
- Load testing meets required throughput and private route failover works without violating security controls.
Explanation
Correct Answer
D:Load testing meets required throughput and private route failover works without violating security controls. This proves the service behavior rather than just showing a changed configuration. Dedicated connectivity separates the transport from ordinary internet routing but still needs redundancy and encryption policy review.
Incorrect Answers
A:That approach would help when an application network mixes public load balancers and private database nodes in one broad address range. The required acceptance result is: Load testing meets required throughput and private route failover works without violating security controls.
B:Dedicated connectivity separates the transport from ordinary internet routing but still needs redundancy and encryption policy review. The alternative is aimed at a different condition: A web store requires host-based routing so API traffic reaches one service and image requests another.
C:Dedicated connectivity separates the transport from ordinary internet routing but still needs redundancy and encryption policy review. The proposed measure serves a related cloud task, but the present symptom calls for a more specific response.