CV0-004 Exam Dumps : CompTIA Cloud+ (V4)

The security logs of the software web application show patterns that are typical of an SQL injection attack. This is evidenced by the inclusion of SQL syntax in the user input fields in an attempt to manipulate the database. References: CompTIA Cloud+ Study Guide (Exam CV0-004) - Chapter on Cloud Security Threats

Cloud flow logs are the most efficient way to identify suspected C2 activity over HTTPS because they provide network metadata (source/destination IPs, ports, protocol, bytes/packets, accept/deny decisions) at scale with low operational overhead. In the Cloud+ CV0-004 objectives, this aligns with implementing logging/monitoring to support threat detection, incident response, and continuous security validation. While HTTPS encrypts payload contents, flow logs still reveal high-value indicators such as repeated outbound connections to rare destinations, unusual session frequency, unexpected egress from sensitive subnets, and abnormal data transfer patterns—common traits of C2 beaconing.

An inline IPS can detect and block certain threats, but it adds latency, cost, and complexity, and it may be limited by encryption unless TLS inspection is used. Hourly cron jobs are ad hoc, incomplete, and not scalable compared with centralized telemetry. Traffic mirroring enables deep packet inspection, but it generates large volumes of data and is typically used selectively due to cost and performance impact. Therefore, flow logs provide the best efficiency-to-visibility balance for identifying HTTPS-based C2 patterns.

A company that requires low operational overhead and highly accessible enterprise resources would benefit from implementing Software as a Service (SaaS). SaaS provides access to applications hosted in the cloud, eliminating the need for internal infrastructure or application development, which aligns with the requirement of having low operational overhead. References: CompTIA Cloud+ Study Guide (Exam CV0-004) by Todd Montgomery and Stephen Olson