Misconfigurations CV0-004 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which service configuration mistake can lead to a denial-of-service condition?

   • ASetting the maximum number of concurrent connections to a very low value
   • BEnabling logging for the service
   • CUsing a managed service for the application
   • DConfiguring the service to use a load balancer
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which compliance configuration check is necessary to meet regulatory requirements for protecting sensitive data?

   • AConfirming that the virtual machine has a public IP address
   • BVerifying that the cloud provider's billing is set to monthly
   • CEnsuring that encryption is enabled for data at rest and in transit
   • DChecking that the resource group name is descriptive
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which network configuration error can cause a cloud application to be unreachable from the internet?

   • AThe application is running on a virtual machine
   • BThe application uses a load balancer
   • CIncorrect DNS records pointing to the wrong IP address
   • DThe application has a public IP address
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   A cloud administrator notices that a web application is not sending emails as expected. Which service configuration mistake could be the cause?

   • AThe application is deployed in a different region than the email service
   • BThe email service is configured with an incorrect SMTP server address
   • CThe application is using a load balancer
   • DThe application has a public IP address
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   A security group is configured to allow all inbound traffic from any IP address on port 22. What is the primary security risk of this configuration?

   • AIt increases the instance's processing load
   • BIt prevents the instance from receiving HTTP traffic
   • CIt exposes the SSH service to the entire internet, increasing the risk of unauthorized access
   • DIt blocks all outbound traffic from the instance
   Reveal Solution Discussion Select an answer first