81-90 Flashcards
A cloud administrator set up a link between the private and public cloud through a VPN tunnel. As part of the migration, a large set of files will be copied. Which of the following network ports are required from a security perspective?
A. 22, 53, 445
B. 22, 443, 445
C. 25, 123, 443
D. 137, 139, 445
B. 22, 443, 445
A company is preparing a hypervisor environment to implement a database cluster. One of the requirements is to share the disks between the nodes of the cluster to access the same LUN. Which of the following protocols should the company use? (Choose two.)
A. CIFS
B. FTP
C. iSCSI
D. RAID 10
E. NFS
F. FC
C. iSCSI
D. RAID 10
A cloud administrator is working in a secure government environment. The administrator needs to implement corrective action due to recently identified security issue on the OS of a VM that is running a facility-management application in a cloud environment. The administrator needs to consult the application vendor, so it might take some time to resolve the issue. Which of the following is the FIRST action the administrator should take while working on the resolution?
A. Shut down the server.
B. Upgrade the OS
C. Update the risk register.
D. Raise a problem ticket.
D. Raise a problem ticket.
A DevOps administrator is designing a new machine-learning platform. The application needs to be portable between public and private clouds and should be kept as small as possible. Which of the following approaches would BEST meet these requirements?
A. Virtual machines
B. Software as a service
C. Serverless computing
D. Containers
D. Containers
A cloud administrator wants to have a central repository for all the logs in the company’s private cloud. Which of the following should be implemented to BEST meet this requirement?
A. SNMP
B. Log scrubbing
C. CMDB
D. A syslog server
D. A syslog server
A company needs to rehost its ERP system to complete a datacenter migration to the public cloud. The company has already migrated other systems and configured VPN connections. Which of the following MOST likely needs to be analyzed before rehosting the ERP?
A. Software
B. Licensing
C. Right-sizing
D. The network
B. Licensing
An administrator is securing a private cloud environment and wants to ensure only approved systems can connect to switches. Which of the following would be
MOST useful to accomplish this task?
A. VLAN
B. NIPS
C. WAF
D. NAC
D. NAC
An organization is currently deploying a private cloud model. All devices should receive the time from the local environment with the least administrative effort.
Which of the following ports needs to be opened to fulfill this requirement?
A. 53
B. 67
C. 123
D. 161
C. 123
A cloud security analyst needs to ensure the web servers in the public subnet allow only secure communications and must remediate any possible issue. The stateful configuration for the public web servers is as follows:
Which of the following actions should the analyst take to accomplish the objective?
A. Remove rules 1, 2, and 5.
B. Remove rules 1, 3, and 4.
C. Remove rules 2, 3, and 4.
D. Remove rules 3, 4, and 5.
B. Remove rules 1, 3, and 4.
Which of the following definitions of serverless computing BEST explains how it is different from using VMs?
A. Serverless computing is a cloud-hosting service that utilizes infrastructure that is fully managed by the CSP.
B. Serverless computing uses predictable billing and offers lower costs than VM compute services.
C. Serverless computing is a scalable, highly available cloud service that uses SDN technologies.
D. Serverless computing allows developers to focus on writing code and organizations to focus on business.
C. Serverless computing is a scalable, highly available cloud service that uses SDN technologies.
