A cloud security analyst is investigating the impact of a recent cyberattack. The analyst is reviewing the following information:
Which of the following has occurred?
A. The corporate administration page was defaced by the attacker
B. A denial-of-service attack was successfully performed on the web server
C. A new user was created on the web server by the attacker
D. Sensitive information from the corporate web server was leaked
Show Answer
Correct Answer: D
Explanation: The evidence indicates that data from the corporate web server was accessed across separate sessions and exposed externally, which aligns with information disclosure. There is no indication of service unavailability (DoS), page modification (defacement), or account creation; rather, the key issue is leakage of sensitive information.
Question 26
Which of the following best describes the list of known security vulnerabilities?
A. Common Weaknesses and Enumerations
B. Data Security Standards
C. Zero Trust
D. Common Vulnerabilities and Exposures
Show Answer
Correct Answer: D
Explanation: The list of known security vulnerabilities is the Common Vulnerabilities and Exposures (CVE) system, which catalogs publicly disclosed vulnerabilities with unique identifiers. CWE lists weakness types (not specific vulnerabilities), while the other options are unrelated.
Question 27
An administrator is creating a cron job that shuts down the virtual machines at night to save on costs. Which of the following is the best way to achieve this task?
A.
B.
C.
D.
Show Answer
Correct Answer: C
Explanation: A cron job should invoke a script or command that checks the current VM power state and gracefully shuts down only running virtual machines. Option C aligns with this best practice by automating shutdown based on VM status, avoiding errors and unnecessary actions.
Question 27
Which of the following best describes a system that keeps all different versions of a software separate from each other while giving access to all of the versions?
A. Code documentation
B. Code control
C. Code repository
D. Code versioning
Show Answer
Correct Answer: D
Explanation: The description refers to a system designed to track, manage, and provide access to multiple versions of software over time. Code versioning (often implemented via version control systems) explicitly focuses on maintaining separate versions and allowing users to access, compare, or revert to them. A code repository is primarily a storage location, not the system that manages version history and separation.
Question 28
A cloud engineer is reviewing the following Dockerfile to deploy a Python web application:
Which of the following changes should the engineer make to the file to improve container security?
A. Add the instruction USER nonroot.
B. Change the version from latest to 3.11.
C. Remove the ENTRYPOINT instruction.
D. Ensure myapp/main/py is owned by root.
Show Answer
Correct Answer: A
Explanation: Running containers as a non-root user is a core security best practice because it limits the impact of a container compromise. Adding a USER nonroot instruction reduces privileges inside the container. Changing the Python version tag, removing ENTRYPOINT, or ensuring files are owned by root do not directly improve runtime container security in the same way.
Question 28
A cloud engineer deploys two virtual machines and migrates a local web application and database, respectively. After the engineer updates the DNS records, the web application does not respond. Which of the following should the cloud engineer do to troubleshoot the issue?
A. Increase the size and throughput of the virtual machines to allow more concurrent sessions.
B. Verify whether the operating systems in the virtual machines are compatible with the web application and database.
C. Check to ensure the new web application server configuration file points to the correct database location.
D. Repeat the migration to discard any inconsistencies during the data transfer.
Show Answer
Correct Answer: C
Explanation: After migrating the web application and database to separate virtual machines, the most common cause of the application not responding is a broken backend connection. Application configuration files often still reference the old on‑premises database hostname or localhost. Even if DNS for the public site is updated correctly, the web server will fail if it cannot reach the database at the new cloud location. Verifying and correcting the database connection settings directly addresses this issue.
Question 29
A company uses containers to implement a web application. The development team completed internal testing of a new feature and is ready to move the feature to the production environment. Which of the following deployment models would best meet the company’s needs while minimizing cost and targeting a specific subset of its users?
A. Canary
B. Blue-green
C. Rolling
D. In-place
Show Answer
Correct Answer: A
Explanation: A canary deployment releases the new feature to a small, targeted subset of users in the production environment. This allows the team to validate behavior and performance with minimal risk and without duplicating full environments, which keeps costs low. It directly meets the requirement to target a specific subset of users while moving the feature to production.
Question 29
A cloud vendor notifies an administrator that the router version currently in use will no longer be made. Which of the following describes the stage the router has reached and what needs to be done?
A. The router has reached end of support. The router’s software should be updated.
B. The router has reached end of support. The router should be replaced.
C. The router has reached end of life. The router’s software should be updated.
D. The router has reached end of life. The router should be replaced.
Show Answer
Correct Answer: D
Explanation: The notification states that the router version will no longer be made, which indicates end of life (EOL), not merely end of support. At EOL, the product is discontinued and will eventually lose updates, patches, and replacement availability. The correct administrative action is to replace the router with a supported model rather than attempt software updates.
Question 30
Which of the following best describes a characteristic of a hot site?
A. Servers in the hot site are clustered with the main site.
B. Network traffic is balanced between the main site and hot site servers
C. Offline server backups are replicated hourly from the main site
D. All servers are replicated from the main site in an online status.
Show Answer
Correct Answer: D
Explanation: A hot site is a fully operational duplicate of the primary site, with systems and data kept continuously online and synchronized to enable rapid or near-immediate failover. This matches the description that all servers are replicated from the main site in an online status.
Question 30
Which of the following has the most influence when determining the maximum data loss in the event of a disaster?
A. Recovery point objective
B. Business continuity and disaster recovery
C. Mean time to recover
D. Recovery time objective
Show Answer
Correct Answer: A
Explanation: Maximum data loss is defined by how much data an organization can afford to lose after a disruption. The Recovery Point Objective (RPO) explicitly specifies the acceptable amount of data loss measured in time (e.g., minutes or hours). RTO and MTTR relate to recovery time, and BC/DR is a broader discipline, not a specific metric.
$19
Get all 179 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.