CompTIA Cloud+ CV0-003 Reddit Questions

The correct answer is C. Legal hold.

A legal hold is a process that organizations use to preserve relevant electronic information when they anticipate litigation or have an active e-discovery request. A legal hold requires that certain email messages be retained and unaltered until they are no longer required for court use. Legal hold requirements apply both to the content of messages as well as the metadata which can provide proof of delivery and other critical non-repudiation information12.

Email archiving is a process that organizations use to store email messages for long-term retention, compliance, and backup purposes. Email archiving does not necessarily imply that the email messages are preserved for legal purposes, although some email archiving solutions may offer legal hold capabilities1.

Version control is a process that software developers use to manage changes to source code and other files in a project. Version control allows developers to track, compare, and revert changes, as well as collaborate with other developers. Version control does not apply to email messages or legal hold.

File integrity monitoring is a process that security professionals use to detect unauthorized or malicious changes to files and directories on a system. File integrity monitoring helps to protect the system from malware, data breaches, and configuration errors. File integrity monitoring does not apply to email messages or legal hold.

FIM stands for File Integrity Monitoring, and it is a security technique that monitors and detects changes in files and directories. FIM can help the systems administrator to be notified every time an application’s configuration files are updated by generating alerts or reports when the files are modified, added, deleted, or accessed. FIM can also help verify the integrity and authenticity of the files by comparing their hashes or signatures with a baseline or a trusted source. FIM can be implemented using software tools or agents that run on the host or the network. References: CompTIA Cloud+ CV0-003 Certification Study Guide, Chapter 9, Objective 9.1: Given a scenario, apply security controls and techniques.

The correct answer is B. Implementing deduplication would best help the administrator reduce storage costs.

Deduplication is a technique that eliminates redundant copies of data and stores only one unique instance of the data. This can reduce the amount of storage space required and lower the storage costs. Deduplication can be applied at different levels, such as file-level, block-level, or object-level. Deduplication can also improve the performance and efficiency of backup and recovery operations.

Enabling compression is another technique that can reduce storage costs, but it may not be as effective as deduplication, depending on the type and amount of data. Compression reduces the size of data by applying algorithms that remove or replace redundant or unnecessary bits. Compression can also affect the quality and accessibility of the data, depending on the compression ratio and method.

Using containers and rightsizing the VMs are techniques that can reduce compute costs, but not necessarily storage costs. Containers are lightweight and portable units of software that run on a shared operating system and include only the necessary dependencies and libraries. Containers can reduce the overhead and resource consumption of virtual machines (VMs), which require a full operating system for each instance. Rightsizing the VMs means adjusting the CPU, memory, disk, and network resources of the VMs to match their workload requirements. Rightsizing the VMs can optimize their performance and utilization, and avoid overprovisioning or underprovisioning.

To improve performance, cache static content, protect against DDoS attacks, and reduce costs, the best solution is to use a Content Delivery Network (CDN) (Option C).

CDNs distribute static content across multiple geographically distributed edge servers, reducing latency and improving load times for users worldwide.

CDNs include built-in DDoS protection by absorbing traffic and filtering out malicious requests before they reach the origin server.

Cost savings: Instead of overloading the origin server, cached content is served from edge locations, reducing compute and storage costs.

Major CDN providers: AWS CloudFront, Azure CDN, Cloudflare, Akamai, and Google Cloud CDN.

A. Site-to-site VPN tunnel between multiple availability zones

VPN tunnels improve security and private connectivity but do not address caching or DDoS protection.

VPNs increase overhead costs and do not optimize content delivery for geographically distributed users.

B. Server-based caching within multiple availability zones

Server-based caching only helps within a specific cloud region but does not optimize performance for global users.

Managing cache across multiple instances increases complexity and costs compared to using a CDN.

D. DNS-based load balancing and caching

DNS-based load balancing helps distribute traffic but does not provide actual caching capabilities for static content.

DNS resolution alone does not mitigate DDoS attacks or reduce latency as effectively as a CDN.

A CDN is the most efficient and cost-effective solution for caching static content, improving global performance, mitigating DDoS attacks, and maintaining low operational costs.