241-250

Question 1

A systems administrator is using a configuration management tool to perform maintenance tasks in a system. The tool is leveraging the target system’s API to perform these maintenance tasks After a number of features and security updates are applied to the target system, the configuration management tool no longer works as expected. Which of the following is the MOST likely cause of the issue?

A. The target system’s API functionality has been deprecated
B. The password for the service account has expired
C. The IP addresses of the target system have changed
D. The target system has failed after the updates

Answer 1

A. The target system’s API functionality has been deprecated

Question 2

A systems administrator is responding to an outage in a cloud environment that was caused by a network-based flooding attack. Which of the following should the administrator configure to mitigate the attack?

A. NIPS
B. Network overlay using GENEVE
C. DDoS protection
D. DoH

Answer 2

C. DDoS protection

Question 3

A cloud administrator is troubleshooting a highly available web application running within three containers behind a Layer 7 load balancer with a WAF inspecting all traffic. The application frequently asks the users to log in again even when the session timeout has not been reached. Which of the following should the cloud administrator configure to solve this issue?

A. Firewall outbound rules
B. Firewall inbound rules
C. Load balancer certificates
D. Load balancer stickiness
E. WAF transaction throttling

Answer 3

D. Load balancer stickiness

Question 4

A cloud solutions architect has received guidance to migrate an application from on premises to a public cloud. Which of the following requirements will help predict the operational expenditures in the cloud?

A. Average resource consumption
B. Maximum resource consumption
C. Minimum resource consumption
D. Actual hardware configuration

Answer 4

B. Maximum resource consumption

Question 5

A systems administrator is working on the backup schedule for a critical business application that is running in a private cloud. Which of the following would help the administrator schedule the frequency of the backup job?

A. RPO
B. MTTR
C. SLA
D. RTO

Answer 5

A. RPO

Question 6

A systems administrator is helping to develop a disaster recovery solution. The solution must ensure all production capabilities are available within two hours. Which of the following will BEST meet this requirement?

A. A hot site
B. A warm site
C. A backup site
D. A cold site

Answer 6

A. A hot site

Question 7

A security audit related to confidentiality controls found the following transactions occurring in the system:

GET http://gateway.securetransaction.com/privileged/api/v1/changeResource?id=123&user=277

Which of the following solutions will solve the audit finding?

A. Using a TLS-protected API endpoint
B. Implementing a software firewall
C. Deploying a HIDS on each system
D. Implementing a Layer 4 load balancer

Answer 7

A. Using a TLS-protected API endpoint

Question 8

A cloud administrator needs to coordinate and automate the management of a company’s secrets and keys for all its cloud services with minimal effort and low cost. Which of the following is the BEST option to achieve the goal?

A. Implement database as a service
B. Configure Key Vault
C. Use password as a service
D. Implement KeePass

Answer 8

B. Configure Key Vault

Question 9

A systems administrator needs to implement a service to protect a web application from external attacks. The administrator must have session-based granular control of all HTTP traffic. Which of the following should the administrator configure?

A. IDS
B. WAF
C. DLP
D. NAC

Answer 9

B. WAF

Question 10

A systems administrator is diagnosing performance issues on a web application. The web application sends thousands of extremely complex SQL queries to a database server, which has trouble retrieving the information in time. The administrator checks the database server and notes the following resource utilization:

• CPU: 64%
• RAM: 97%
• Network throughput: 384,100Kbps.
• Disk throughput: 382,700Kbps

The administrator also looks at the storage for the database server and notices it is consistently near its OPS limit. Which of the following will BEST resolve these performance issues?

A. Increase CPU resources on the database server.
B. Increase caching on the database server.
C. Put the storage and the database on the same VLAN.
D. Enable compression on storage traffic.
E. Enable deduplication on the storage appliance.

Answer 10

B. Increase caching on the database server.