CompTIA Cloud + CV0-004 (V4) Exam Practice Test 5

Event-triggered scaling reacts to a sudden spike or specific occurrence within a short window, distinct from trending, which reacts to gradual patterns measured over a longer period. Load-triggered scaling reacts to sustained resource utilization levels rather than a sudden short-window spike specifically, and scheduled and manual scaling don't involve this kind of real-time reactive triggering at all.

A known, publicly disclosed flaw with an available but unapplied patch is a software vulnerability issue. Authorization issues concern permission-related problems, authentication issues concern credential-related problems, unauthorized software concerns unapproved applications running in the environment, and cipher suite deprecations concern outdated encryption algorithms rather than an unpatched known vulnerability.

A routing table with no entry at all for a destination is missing routes, distinct from a misconfigured route that exists but points incorrectly. Network overlap concerns duplicate address ranges, scope exhaustion concerns a DHCP pool running out of addresses, and VLAN misconfigured tags concerns incorrect tagging rather than a complete absence of a routing table entry.

A widespread disruption affecting an entire region and all customers within it is specifically a regional service availability disruption. A partial outage would affect only some services or a subset of customers rather than the whole region, sizing issues concern inappropriately sized individual resources, and misconfiguration generically describes a broader category of configuration errors rather than a provider-wide regional event.

Grafana is specifically designed to build, visualize, and query time-series metrics into customizable operational dashboards. Ansible automates configuration management, Terraform provisions infrastructure as code, Git provides version control, and Docker provides containerization rather than metrics visualization and dashboarding.

Branch management organizes isolated lines of development, allowing multiple features to progress in parallel without interfering with the stable main codebase. A code commit records a snapshot of changes, a code push uploads commits to a remote repository, a pull request submits changes for review before merging, and code review examines specific changes rather than organizing parallel lines of development.

Noticing an unusually high number of open ports on a server that should run only one service is specifically identifying unnecessary open ports. Deviation from the baseline is a related but broader behavioral comparison technique, metadata analysis examines embedded file or instance metadata, zombie instance detection identifies forgotten unused resources, and event monitoring generically describes watching for events broadly rather than this specific port-exposure observation.

DLP specifically identifies and blocks attempts to exfiltrate sensitive data, such as bulk downloads to unrecognized destinations. A WAF filters application-layer web attacks, a network ACL filters subnet-level traffic by IP and port, IPS/IDS generically covers broader intrusion detection, and a network security group filters instance-level traffic rather than specifically targeting data exfiltration patterns.

Secrets management centralizes storage and controlled retrieval of sensitive credentials like passwords, avoiding hardcoding them into application code.

OAuth 2.0 is an open standard specifically designed for delegated authorization, allowing an application to access limited resources on a user's behalf without seeing their password. SAML is primarily used for federated authentication rather than delegated authorization specifically, RBAC and discretionary access control are authorization models based on roles or owner discretion, and directory-based authentication centralizes identity in a directory service rather than describing this delegated token-based standard.

The Cloud Security Alliance publishes best practices and a certification framework specifically focused on cloud security assurance. PCI DSS addresses payment card data protection specifically, ISO 27001 is a general information security management standard, SOC2 addresses broader trust service criteria, and GDPR governs personal data protection rather than cloud-specific security assurance.

Verifying a patched system still functions correctly before wider rollout is testing. Patches and updates generically describe applying the fix itself, decommissioning concerns retiring a resource entirely, and ephemeral data handling concerns temporary data durability rather than validating a patch's compatibility before broad deployment.

Bulk recovery restores an entire resource, such as a full VM image, in one operation. Granular recovery instead restores only specific files or items, in-place and parallel describe where a recovery happens rather than its scope, and differential describes a backup type rather than a recovery scope option.

Non-relational databases are well suited to storing and querying large volumes of semi-structured data like JSON documents at scale. Relational databases enforce strict tabular schemas and relationships less suited to flexible document structures, and the remaining options all specifically constrain to relational deployment variants rather than addressing the semi-structured document need.

Ensuring sufficient processing power and memory is a compute requirement, while ensuring sufficient bandwidth and appropriate subnet placement is a network requirement. Storage requirements concern data storage type and capacity, cost requirements concern budget constraints, and security requirements concern protection controls rather than either of these two described provisioning considerations.

A function encapsulates reusable logic that accepts inputs and returns a result, allowing the same logic to be reused without repeating code. Variables store individual reusable values, conditionals make branching decisions, operators perform comparisons or calculations, and data types generically describe the kind of value stored rather than this reusable, input-accepting logic block.

Retaining means keeping the application where it currently is without migrating it, appropriate for low-priority applications with minimal cloud benefit. Rehosting moves the application as-is, replatforming makes minor adjustments, re-architecting substantially redesigns it, and retiring shuts the application down entirely rather than leaving it in place unchanged.

A canary deployment releases to a small percentage of users first, closely monitoring before expanding the rollout. Blue-green switches all traffic between two complete parallel environments at once, in-place updates every instance simultaneously, rolling incrementally replaces instances across the fleet while maintaining availability, and parallel recovery is a disaster recovery concept rather than a deployment strategy.

A private cloud deployed on premises runs entirely within the organization's own data center, giving full hardware control while adopting cloud-like self-service capabilities. Public cloud is operated by a third-party provider, hybrid combines multiple deployment models, community cloud is shared among multiple organizations, and multicloud describes using multiple different cloud providers rather than describing a single organization's on-premises private cloud.

Tracking whether alerts are being actively investigated, who is assigned, and resolution speed is specifically the triage and response aspects of alerting. Logging records discrete events, tracing follows individual requests across services, metrics alone measure quantitative system behavior, and collection alone gathers raw log data rather than describing this alert management and response tracking view.

A VPN terminates an encrypted tunnel between two networks, allowing traffic to travel securely across the public internet. A dedicated connection instead provides a private, non-internet physical link, a CDN caches and distributes content geographically, an application gateway manages layer-7 traffic routing and security features, and a route table stores routing entries rather than terminating an encrypted tunnel.

A partially configured site requiring hours of setup at moderate cost is a warm site, while a site with only basic infrastructure requiring substantial effort to activate is a cold site. A hot site is fully staffed and ready for near-immediate failover at significant cost, and an availability zone or region describe cloud infrastructure geography rather than a dedicated standby disaster recovery facility type.

IaaS provides virtualized infrastructure while the customer remains responsible for the operating system and everything running on top of it. PaaS additionally manages the runtime and OS layer, SaaS delivers a complete ready-to-use application, FaaS runs individual triggered functions with no server management at all, and community cloud is a deployment model rather than a service model.

Text recognition extracts printed or handwritten text from images, exactly matching automated data entry from scanned receipts. Sentiment analysis determines emotional tone, visual recognition generically identifies objects or scenes rather than extracting text specifically, voice-to-text transcribes spoken audio, and generative AI creates new content rather than extracting existing text from an image.

Latency measures the delay data takes to travel between points, such as geographically distant services, directly explaining slow response times despite sufficient capacity. Throughput measures data volume transferred over time rather than delay, IOPS measures storage operations per second, and compute resources and managed services generically describe resource categories rather than this specific network delay factor.