Which of the following are best practices when working with a source control system? (Select two).
A. Merging code often
B. Pushing code directly to production
C. Performing code deployment
D. Maintaining one branch for all features
E. Committing code often
F. Initiating a pull request
An engineer wants to scale several cloud workloads on demand. Which of the following approaches is the most suitable?
A. Load
B. Scheduled
C. Manual
D. Trending
An administrator needs to adhere to the following requirements when moving a customer's data to the cloud:
1.
The new service must be geographically dispersed.
2.
The customer should have local access to data
3.
Legacy applications should be accessible.
Which of the following cloud deployment models is most suitable?
A. On-premises
B. Private
C. Hybrid
D. Public
An organization's security policy states that software applications should not exchange sensitive data in cleartext. The security analyst is concerned about a software application that uses Base64 to encode credit card data.
Which of the following would be the best algorithm to replace Base64?
A. 3DES
B. AES
C. RC4
D. SHA-3
A cloud administrator needs to collect process-level, memory-usage tracking for the virtual machines that are part of an autoscaling group.
Which of the following is the best way to accomplish the goal by using cloud-native monitoring services?
A. Configuring page file/swap metrics
B. Deploying the cloud-monitoring agent software
C. Scheduling a script to collect the data
D. Enabling memory monitoring in the VM configuration
A cloud security analyst is concerned about security vulnerabilities in publicly available container images.
Which of the following is the most appropriate action for the analyst to recommend?
A. Using CIS-hardened images
B. Using watermarked images
C. Using digitally signed images
D. Using images that have an application firewall
A group of cloud administrators frequently uses the same deployment template to recreate a cloud-based development environment. The administrators are unable to go back and review the history of changes they have made to the template.
Which of the following cloud resource deployment concepts should the administrator start using?
A. Drift detection
B. Repeatability
C. Documentation
D. Versioning
A cloud service provider requires users to migrate to a new type of VM within three months. Which of the following is the best justification for this requirement?
A. Security flaws need to be patched.
B. Updates could affect the current state of the VMs.
C. The cloud provider will be performing maintenance of the infrastructure.
D. The equipment is reaching end of life and end of support.
A company wants to move to a multicloud environment and utilize the technology that provides the most portability. Which of the following technology solutions would BEST meet the company's needs?
A. Bootstrap
B. Virtual machines
C. Clusters
D. Containers
A cloud engineer is troubleshooting RSA key-based authentication from a local computer to a cloud-based server, which is running SSH service on a default port. The following file permissions are set on the authorized keys file:
-rw-rw-rw-1 ubuntu ubuntu 391 Mar S 01:36 authorized _ keys
Which of the following security practices are the required actions the engineer Should take to gain access to the server? (Select TWO).
A. Fix the file permissions with execute permissions to the owner of the file.
B. Open port 21 access for the computer's public IP address.
C. Fix the file permissions with read-only access to the owner Of the file.
D. Open port 22 access for the computer's public IP address.
E. Open port 21 access for 0.0.0.0/0 CIDR.
F. open port 22 access for 0.0.0.0/0 CIDR.