A cloud security analyst is concerned about security vulnerabilities in publicly available container images. Which of the following is the most appropriate action for the analyst to recommend?

1. A. Using CIS-hardened images
2. B. Using watermarked images
3. C. Using digitally signed images
4. D. Using images that have an application firewall

Correct Answer: A

Which of the following strategies requires the development of new code before an application can be successfully migrated to a cloud provider?

1. A. Refactor
2. B. Rearchitect
3. C. Rehost
4. D. Replatform

Correct Answer: A
Refactoring requires the development of new code before an application can be successfully migrated to a cloud provider. It often involves restructuring and optimizing the existing code without changing its external behavior to fit into the new cloud environment.References: Application migration strategies and the requirements for each, like refactoring, are included in cloud migration best practices covered in CompTIA Cloud+.

A cloud administrator needs to collect process-level, memory-usage tracking for the virtual machines that are part of an autoscaling group. Which of the following is the best way to accomplish the goal by using cloud-native monitoring services?

1. A. Configuring page file/swap metrics
2. B. Deploying the cloud-monitoring agent software
3. C. Scheduling a script to collect the data
4. D. Enabling memory monitoring in the VM configuration

Correct Answer: B
To collect process-level, memory-usage tracking for virtual machines, deploying cloud- monitoring agent software is the best approach. The agent can gather detailed system metrics and send them to the cloud-native monitoring services for analysis and visualization. References: CompTIA Cloud+ Study Guide (Exam CV0-004) - Chapter on Cloud Monitoring

A systems administrator is configuring backups on a VM and needs the process to run as quickly as possible, reducing the bandwidth on the network during all times from Monday through Saturday. In the event of data corruption, the management team expects the mean time to recovery to be as low as possible. Which of the following backup methods can the administrator use to accomplish these goals?

1. A. Incremental backup daily to the cloud
2. B. Full backup on Sunday and incremental backups on all other days of the week
3. C. Differential backup daily to the cloud
4. D. Incremental backups during off-hours on Monday, Wednesday, and Friday

Correct Answer: B
To achieve a quick backup process and reduce bandwidth use, the administrator should perform a Full backup on Sunday and incremental backups on all other days of the week. This method ensures that only the changes made since the last full backup are copied, reducing the amount of data that needs to be transferred each time, and thus the time and bandwidth required.References: CompTIA Cloud+ Study Guide (Exam CV0-004) by Todd Montgomery and Stephen Olson

An organization wants to ensure its data is protected in the event of a natural disaster. To support this effort, the company has rented a colocation space in another part of the country. Which of the following disaster recovery practices can be used to best protect the data?

1. A. On-site
2. B. Replication
3. C. Retention
4. D. Off-site

Correct Answer: D
For an organization looking to protect its data in the event of a natural disaster, the best disaster recovery practice would be off-site replication. By renting a colocation space in another part of the country, the company can maintain copies of their data and critical systems in a geographically separate location, ensuring they are not affected by the same disaster. References: CompTIA Cloud+ Study Guide (Exam CV0-004) - Chapter on Disaster Recovery