CompTIA Cloud + CV0-004 (V4) Exam Practice Test 2

Automatically scaling based on a resource utilization metric like CPU crossing a threshold is triggered scaling based on load. Scheduled scaling activates at predefined times regardless of current load, manual scaling requires human initiation, triggered scaling based on a fixed calendar event would be closer to scheduled scaling rather than load-based, and vertical scaling specifically concerns resizing rather than the load-based trigger mechanism itself.

An API key accidentally exposed in a public repository, allowing unauthorized authentication, is specifically leaked credentials. Privilege escalation concerns gaining higher permissions than originally held, unauthorized software concerns unapproved applications running in the environment, cipher suite deprecation concerns outdated encryption algorithms, and software vulnerability issue generically concerns exploitable code flaws rather than an exposed credential.

HTTP status codes, such as a 404 indicating a resource was not found, are a specific diagnostic signal within network service unavailability troubleshooting for HTTP-based services. Latency concerns response time delay rather than status code meaning, bandwidth/throughput issues concern data transfer capacity, routing issues concern path selection, and switching issues concern Layer 2 forwarding rather than application-layer status codes.

API throttling rate-limits how many requests can be made in a given time window, returning errors when that limit is exceeded, exactly matching this too-many-requests failure.

The ELK stack, comprising Elasticsearch, Logstash, and Kibana, is purpose-built for centrally collecting, searching, and visualizing log data. Ansible automates configuration management, Terraform provisions infrastructure as code, Jenkins automates CI/CD pipeline execution, and GitHub Actions provides workflow automation tied to a GitHub repository rather than centralized log search and visualization.

Event-driven architectures let components react automatically to published state changes without polling or tight synchronous dependencies. REST, SOAP, and RPC are all specific web service communication styles rather than the broader reactive architectural pattern, and web sockets alone provide a persistent bidirectional connection mechanism rather than describing this event-reaction architecture broadly.

Comparing current behavior against an established normal pattern to flag unusual activity is deviation from the baseline. Event monitoring generically describes watching for events broadly without this specific baseline-comparison technique, unnecessary open ports concerns exposed network services, metadata analysis examines embedded file or instance metadata specifically, and zombie instance detection identifies forgotten, still-running resources rather than describing this baseline deviation detection approach.

The principle of least privilege grants only the minimum permissions necessary for a task, exactly matching this narrowly scoped storage bucket access. Zero Trust is a broader continuous-verification philosophy, hardening reduces attack surface generally, benchmark compliance checks configuration against published standards, and secrets management concerns credential storage rather than permission scoping specifically.

Authenticating using credentials tied to an existing corporate directory is directory-based authentication, while authenticating machine-to-machine calls using an issued token rather than a username and password is token-based authentication. Local users are accounts created directly within the cloud platform itself, MFA adds a second authentication factor, and discretionary is an authorization model concept rather than either of these two authentication approaches.

PCI DSS specifically defines requirements for protecting cardholder data, including network segmentation and encryption, making it most directly relevant to a payment processor. SOC2 addresses broader trust service criteria, ISO 27001 is a general information security management standard, Cloud Security Alliance generically provides broader cloud security guidance, and GDPR governs personal data protection rather than cardholder data specifically.

CVSS is the standardized system for scoring vulnerability severity, used to help prioritize remediation of disclosed CVEs. CWE catalogs common weakness categories rather than scoring specific disclosed vulnerabilities, and SOC2, PCI DSS, and ISO 27001 are compliance and industry standards rather than vulnerability severity scoring systems.

Ephemeral data is intentionally temporary and does not need to survive a restart, exactly matching disposable session data. Persistent data, by contrast, must survive restarts and be retained indefinitely.

A parallel recovery restores to a separate environment running alongside production, avoiding disruption to the existing system during testing or actual recovery. In-place recovery restores directly onto the existing system, bulk and granular describe the scope of what is restored rather than where, and differential describes a backup type rather than a recovery type.

Clustering groups hosts for pooled resources and high availability, cloning duplicates an existing VM, host affinity keeps a VM tied to a specific host, and hardware pass-through gives a VM direct device control bypassing hypervisor abstraction, each addressing a distinct virtualization need.

Metrics are the continuously updated numeric measurements like CPU utilization, request count, and error rate that summarize system health. Logging records discrete textual events, tracing follows individual requests across services, alerting notifies when a condition is met, and triage prioritizes alerts once they occur rather than describing the underlying numeric measurements themselves.

A strict latency target driving instance type, IOPS, and network placement decisions is a performance requirement. Storage requirements alone would concern storage type and capacity broadly, cost requirements concern budget constraints, compliance requirements concern regulatory constraints, and availability requirements concern uptime and redundancy targets rather than this latency-driven sizing decision.

A variable stores a reusable value, such as an instance count, that can be referenced throughout a script and changed in one place. Conditionals make branching decisions, operators perform comparisons or calculations, functions encapsulate reusable blocks of logic, and data types generically describe the kind of value stored rather than the reusable named storage concept itself.

Retiring an application means shutting it down entirely rather than migrating it, appropriate when an application is outdated and no longer justifies migration effort. Retaining keeps the application where it currently is without migrating, rehosting moves it as-is, replatforming makes minor adjustments, and re-architecting substantially redesigns it, none of which describe shutting the application down.

A rolling deployment updates instances incrementally, one or a few at a time, while keeping some capacity available throughout, exactly matching this description. Blue-green switches all traffic to a fully separate parallel environment at once, canary releases to a small percentage of traffic first for validation, in-place all at once updates every instance simultaneously with no rolling gradual replacement, and parallel recovery is a disaster recovery concept rather than a deployment strategy.

An on-premises deployment runs a private cloud within the organization's own data center, giving full hardware control while adopting cloud-like self-service capabilities. Public cloud is operated by a third-party provider for general use, hybrid combines multiple deployment models, community cloud is shared among multiple organizations, and multicloud describes using multiple different cloud providers rather than describing where a single private cloud is physically hosted.

FaaS runs individual functions triggered by specific events, with no server provisioning or management, billing only for actual execution time. IaaS provides virtualized infrastructure the customer still manages, PaaS provides a platform for deploying applications without managing infrastructure but still involves a persistent application, SaaS delivers a complete ready-to-use application, and the shared responsibility model describes the division of security duties rather than being a service model itself.

Sentiment analysis determines the emotional tone of text, such as frustration or satisfaction, exactly matching this message-prioritization use case. Text recognition extracts text from images, visual recognition identifies objects or scenes in images, voice-to-text transcribes spoken audio, and text-to-voice generates spoken audio from text rather than analyzing emotional tone.

Containers offer lower startup overhead than full VMs while retaining more runtime control than serverless functions, fitting this latency-sensitive, control-conscious requirement. A VM has heavier startup overhead, serverless offers less runtime control, managed services generically describes provider-operated components broadly, and orchestration generically describes managing compute resources rather than being a compute resource type itself.

Non-relational databases support flexible, evolving schemas and horizontal scalability, unlike the strict tabular structure and defined relationships of relational databases. Self-managed and provider-managed describe deployment responsibility rather than data structure, and this scenario clearly favors flexible schema support over relational structure rather than treating both as equally suited.

A spot instance offers steep discounts in exchange for the provider's ability to reclaim capacity with little notice, while reserved resources commit to a usage term for a discount without reclamation risk. A dedicated host reserves physical hardware exclusively, pay-as-you-go charges standard on-demand rates, and rightsizing is a cost optimization practice rather than either of these two billing commitment models.