CompTIA CV0-004 Practice Test 6
Question 50
At a regional health provider, a group has dozens of isolated virtual private cloud networks and a growing full-mesh of peering links. Which response most directly addresses this specific cloud challenge?
- Split front-end and data tiers into scoped subnets with enforced routing and access rules.
- Use a supported hub-and-spoke transit routing service with explicit route tables.
- Use a CDN with appropriate cache keys, time-to-live values and invalidation.
- Use a layer-seven application load balancer with host or path routing rules.
Explanation
Correct Answer
B:VPC peering commonly lacks transitive forwarding, while a transit hub can provide centrally controlled routes. The change should be verified, not just applied: Approved spokes communicate only through intended routes and unrelated tenants remain isolated.
Incorrect Answers
A:That approach would help when an application network mixes public load balancers and private database nodes in one broad address range. In this case, vPC peering commonly lacks transitive forwarding, while a transit hub can provide centrally controlled routes.
C:A CDN places cacheable objects near viewers, reducing origin latency and repeated transfer demand. The relevant cloud response here is: Use a supported hub-and-spoke transit routing service with explicit route tables.
D:Layer-seven routing can inspect HTTP request metadata rather than forwarding purely by transport address and port. The relevant cloud response here is: Use a supported hub-and-spoke transit routing service with explicit route tables.
Question 51
In a technical review for a global distribution company, a group has dozens of isolated virtual private cloud networks and a growing full-mesh of peering links. Which cloud principle is most relevant?
- Dedicated connectivity separates the transport from ordinary internet routing but still needs redundancy and encryption policy review.
- Layer-seven routing can inspect HTTP request metadata rather than forwarding purely by transport address and port.
- VPC peering commonly lacks transitive forwarding, while a transit hub can provide centrally controlled routes.
- A CDN places cacheable objects near viewers, reducing origin latency and repeated transfer demand.
Explanation
Correct Answer
C:The evidence of success is: Approved spokes communicate only through intended routes and unrelated tenants remain isolated.
Incorrect Answers
A:That approach would help when a trading platform requires predictable private connectivity to cloud workloads and regularly saturates its public internet VPN. Check the difference through: Inspect route tables, attachment policies, overlapping CIDRs and segmentation rules.
B:The alternative is aimed at a different condition: A web store requires host-based routing so API traffic reaches one service and image requests another. VPC peering commonly lacks transitive forwarding, while a transit hub can provide centrally controlled routes.
D:The proposed measure serves a related cloud task, but the present symptom calls for a more specific response. VPC peering commonly lacks transitive forwarding, while a transit hub can provide centrally controlled routes. Check the difference through: Inspect route tables, attachment policies, overlapping CIDRs and segmentation rules.
Question 52
The infrastructure architect has addressed this condition: a group has dozens of isolated virtual private cloud networks and a growing full-mesh of peering links. Which observation verifies the outcome?
- The load balancer reaches the database on its necessary port while internet clients cannot connect to the database directly.
- Cold and warm cache tests show lower edge response time while updated assets invalidate correctly.
- Private application routes remain encrypted and fail over when one tunnel is withdrawn.
- Approved spokes communicate only through intended routes and unrelated tenants remain isolated.
Explanation
Correct Answer
D:Approved spokes communicate only through intended routes and unrelated tenants remain isolated. This proves the service behavior rather than just showing a changed configuration. VPC peering commonly lacks transitive forwarding, while a transit hub can provide centrally controlled routes.
Incorrect Answers
A:That approach would help when an application network mixes public load balancers and private database nodes in one broad address range. The required acceptance result is: Approved spokes communicate only through intended routes and unrelated tenants remain isolated.
B:VPC peering commonly lacks transitive forwarding, while a transit hub can provide centrally controlled routes.
C:Private application routes remain encrypted and fail over when one tunnel is withdrawn. The relevant cloud response here is: Approved spokes communicate only through intended routes and unrelated tenants remain isolated.
Question 53
During initial triage, a group has dozens of isolated virtual private cloud networks and a growing full-mesh of peering links. Which check best narrows down the cause?
- Inspect route tables, attachment policies, overlapping CIDRs and segmentation rules.
- Inspect peer configuration, tunnel negotiation, advertised prefixes and link redundancy.
- Measure origin latency, cache-hit ratio, response headers and privacy suitability.
- Review request paths, listener rules, health checks and protocol termination.
Explanation
Correct Answer
A:Inspect route tables, attachment policies, overlapping CIDRs and segmentation rules. This distinguishes the relevant dependency before changing cloud resources. VPC peering commonly lacks transitive forwarding, while a transit hub can provide centrally controlled routes.
Incorrect Answers
B:That approach would help when a regional office needs an encrypted site-to-site connection to cloud subnets over its existing internet service. Inspect route tables, attachment policies, overlapping CIDRs and segmentation rules.
C:Measure origin latency, cache-hit ratio, response headers and privacy suitability. The relevant cloud response here is: Inspect route tables, attachment policies, overlapping CIDRs and segmentation rules.
D:Review request paths, listener rules, health checks and protocol termination. The relevant cloud response here is: Inspect route tables, attachment policies, overlapping CIDRs and segmentation rules.
Question 54
For the affected cloud environment, an application network mixes public load balancers and private database nodes in one broad address range. Which remedy best fits the requirement?
- Provision an appropriately sized dedicated private connection with a resilient backup path.
- Split front-end and data tiers into scoped subnets with enforced routing and access rules.
- Use a CDN with appropriate cache keys, time-to-live values and invalidation.
- Configure a site-to-site IPsec VPN with approved routing and redundant tunnels as required.
Explanation
Correct Answer
B:Subnets define address and routing boundaries while stateful firewalls or network ACLs enforce permitted connections. The change should be verified, not just applied: The load balancer reaches the database on its necessary port while internet clients cannot connect to the database directly.
Incorrect Answers
A:That approach would help when a trading platform requires predictable private connectivity to cloud workloads and regularly saturates its public internet VPN. In this case, subnets define address and routing boundaries while stateful firewalls or network ACLs enforce permitted connections.
C:A CDN places cacheable objects near viewers, reducing origin latency and repeated transfer demand. The relevant cloud response here is: Split front-end and data tiers into scoped subnets with enforced routing and access rules.
D:A VPN protects traffic over an untrusted network but does not guarantee dedicated bandwidth or immunity to internet outages. The relevant cloud response here is: Split front-end and data tiers into scoped subnets with enforced routing and access rules.
Question 55
The incident responder at a global distribution company investigates this condition: an application network mixes public load balancers and private database nodes in one broad address range. Which explanation best accounts for it?
- VPC peering commonly lacks transitive forwarding, while a transit hub can provide centrally controlled routes.
- Layer-seven routing can inspect HTTP request metadata rather than forwarding purely by transport address and port.
- Subnets define address and routing boundaries while stateful firewalls or network ACLs enforce permitted connections.
- Dedicated connectivity separates the transport from ordinary internet routing but still needs redundancy and encryption policy review.
Explanation
Correct Answer
C:The evidence of success is: The load balancer reaches the database on its necessary port while internet clients cannot connect to the database directly.
Incorrect Answers
A:That approach would help when a group has dozens of isolated virtual private cloud networks and a growing full-mesh of peering links. Check the difference through: Check subnet CIDRs, effective routes, source rules and traffic-flow logs.
B:The alternative is aimed at a different condition: A web store requires host-based routing so API traffic reaches one service and image requests another. Subnets define address and routing boundaries while stateful firewalls or network ACLs enforce permitted connections.
D:The proposed measure serves a related cloud task, but the present symptom calls for a more specific response. Subnets define address and routing boundaries while stateful firewalls or network ACLs enforce permitted connections. Check the difference through: Check subnet CIDRs, effective routes, source rules and traffic-flow logs.
Question 56
At a regional health provider, an engineer needs to close a case where an application network mixes public load balancers and private database nodes in one broad address range. What test is most decisive?
- Approved spokes communicate only through intended routes and unrelated tenants remain isolated.
- Load testing meets required throughput and private route failover works without violating security controls.
- Private application routes remain encrypted and fail over when one tunnel is withdrawn.
- The load balancer reaches the database on its necessary port while internet clients cannot connect to the database directly.
Explanation
Correct Answer
D:The load balancer reaches the database on its necessary port while internet clients cannot connect to the database directly. This proves the service behavior rather than just showing a changed configuration. Subnets define address and routing boundaries while stateful firewalls or network ACLs enforce permitted connections.
Incorrect Answers
A:That approach would help when a group has dozens of isolated virtual private cloud networks and a growing full-mesh of peering links. The required acceptance result is: The load balancer reaches the database on its necessary port while internet clients cannot connect to the database directly.
B:Subnets define address and routing boundaries while stateful firewalls or network ACLs enforce permitted connections. The alternative is aimed at a different condition: A trading platform requires predictable private connectivity to cloud workloads and regularly saturates its public internet VPN.
C:Subnets define address and routing boundaries while stateful firewalls or network ACLs enforce permitted connections. The proposed measure serves a related cloud task, but the present symptom calls for a more specific response.
Question 57
At a global distribution company, this issue is reported: an application network mixes public load balancers and private database nodes in one broad address range. What should be examined before applying a fix?
- Check subnet CIDRs, effective routes, source rules and traffic-flow logs.
- Inspect route tables, attachment policies, overlapping CIDRs and segmentation rules.
- Measure origin latency, cache-hit ratio, response headers and privacy suitability.
- Inspect peer configuration, tunnel negotiation, advertised prefixes and link redundancy.
Explanation
Correct Answer
A:Check subnet CIDRs, effective routes, source rules and traffic-flow logs. This distinguishes the relevant dependency before changing cloud resources. Subnets define address and routing boundaries while stateful firewalls or network ACLs enforce permitted connections.
Incorrect Answers
B:That approach would help when a group has dozens of isolated virtual private cloud networks and a growing full-mesh of peering links. Check subnet CIDRs, effective routes, source rules and traffic-flow logs.
C:Measure origin latency, cache-hit ratio, response headers and privacy suitability. The relevant cloud response here is: Check subnet CIDRs, effective routes, source rules and traffic-flow logs.
D:Inspect peer configuration, tunnel negotiation, advertised prefixes and link redundancy. The relevant cloud response here is: Check subnet CIDRs, effective routes, source rules and traffic-flow logs.
Question 58
At a regional health provider, an operational review finds that a media company stores millions of immutable photos and needs HTTP retrieval and lifecycle expiration rather than a mounted file system. What is the best next step?
- Attach a suitable block volume with required IOPS and availability characteristics.
- Choose object storage with versioning and lifecycle policy appropriate to retention.
- Provision SSD-backed storage for latency-sensitive reads and evaluate cheaper bulk storage for archival streams.
- Choose managed shared file storage using a supported protocol and permission model.
Explanation
Correct Answer
B:Object stores address data by object keys and metadata and are not ordinary shared POSIX file systems. The change should be verified, not just applied: Application reads preserve object integrity and expired test objects transition or delete as policy specifies.
Incorrect Answers
A:That approach would help when a transactional database needs a low-latency device-like volume for its database files and write-ahead log. In this case, object stores address data by object keys and metadata and are not ordinary shared POSIX file systems.
C:Random IOPS and latency needs often favor SSD, whereas sequential capacity-oriented workloads can suit HDD-backed tiers. The relevant cloud response here is: Choose object storage with versioning and lifecycle policy appropriate to retention.
D:File services expose hierarchical files and directories to multiple clients while object and block storage have different access semantics. The relevant cloud response here is: Choose object storage with versioning and lifecycle policy appropriate to retention.
Question 59
An operator asks why the issue arises: a media company stores millions of immutable photos and needs HTTP retrieval and lifecycle expiration rather than a mounted file system. Which explanation is strongest?
- Random IOPS and latency needs often favor SSD, whereas sequential capacity-oriented workloads can suit HDD-backed tiers.
- Block storage exposes addressable volumes suited to file systems and databases but may require host-level formatting and backup.
- Object stores address data by object keys and metadata and are not ordinary shared POSIX file systems.
- File services expose hierarchical files and directories to multiple clients while object and block storage have different access semantics.
Explanation
Correct Answer
C:The evidence of success is: Application reads preserve object integrity and expired test objects transition or delete as policy specifies.
Incorrect Answers
A:That approach would help when a reporting database needs low random-read latency while a backup archive only streams large sequential files. Check the difference through: Check access patterns, size distribution, required consistency and lifecycle obligations.
B:The alternative is aimed at a different condition: A transactional database needs a low-latency device-like volume for its database files and write-ahead log. Object stores address data by object keys and metadata and are not ordinary shared POSIX file systems.
D:The proposed measure serves a related cloud task, but the present symptom calls for a more specific response. Object stores address data by object keys and metadata and are not ordinary shared POSIX file systems. Check the difference through: Check access patterns, size distribution, required consistency and lifecycle obligations.
Question 60
After correcting the following problem, what result would best confirm success? A media company stores millions of immutable photos and needs HTTP retrieval and lifecycle expiration rather than a mounted file system.
- Concurrent clients see consistent authorized updates and permissions restrict unrelated users.
- Benchmark shows required database p99 latency and acceptable archival throughput at planned cost.
- Archived sample records can be restored within audit deadlines and retention rules are respected.
- Application reads preserve object integrity and expired test objects transition or delete as policy specifies.
Explanation
Correct Answer
D:Application reads preserve object integrity and expired test objects transition or delete as policy specifies. This proves the service behavior rather than just showing a changed configuration. Object stores address data by object keys and metadata and are not ordinary shared POSIX file systems.
Incorrect Answers
A:That approach would help when several application servers must read and write the same directory tree with ordinary file permissions. The required acceptance result is: Application reads preserve object integrity and expired test objects transition or delete as policy specifies.
B:Object stores address data by object keys and metadata and are not ordinary shared POSIX file systems. The alternative is aimed at a different condition: A reporting database needs low random-read latency while a backup archive only streams large sequential files.
C:Object stores address data by object keys and metadata and are not ordinary shared POSIX file systems. The proposed measure serves a related cloud task, but the present symptom calls for a more specific response.