Question 1

Which of the following deployment models includes application components on a company's network as well as on the Internet?
A) Private
B) Public
C) Community
D) Hybrid

Accepted Answer

A hybrid deployment model involves a mix of on-premises (company's network) and cloud-based (Internet) resources, allowing applications to run in both environments.

Question 2

A network team establishes a new connection to an IaaS CSP that is more efficient and has networking costs that are 25% less than previous monthly expenditures. The bill outlines the following costs: Storage:       $10000 Compute:     $12000 Network:      $7000 Which of the following will be the total cloud expenditure for the following month?
A) $26000
B) $26250
C) $27250
D) $29000

Accepted Answer

The total cloud expenditure is calculated by reducing the networking costs by 25%. The original network cost is $7000, so the reduced cost is $7000 - ($7000 * 0.25) = $5250. Adding the storage and compute costs: $10000 + $12000 + $5250 = $27250.

Question 3

A business analyst is reviewing a software upgrade plan. The plan mentions the term "hash" value. Which of the following BEST represents what this term implies?
A) Non-repudiation of data
B) Integrity of data
C) Confidentiality of data
D) Availability of data

Accepted Answer

A hash value is primarily used to ensure the integrity of data, as it can verify that the data has not been altered.

Question 4

A Chief Information Officer (CIO) wants to identify two business units to be pilots for a new cloud project. A business analyst who was recently assigned to this project will be selecting a cloud provider. Which of the following should the business analyst do FIRST?
A) Conduct a feasibility study of the environment.
B) Conduct a benchmark of all major systems.
C) Draw a matrix diagram of the capabilities of the cloud providers.
D) Gather business and technical requirements for key stakeholders.

Accepted Answer

The business analyst should first gather business and technical requirements from key stakeholders to ensure the cloud provider selection aligns with the organization's needs and objectives.

Question 5

A manufacturing company is selecting applications for a cloud migration. The company's main concern relates to the ERP system, which needs to receive data from multiple industrial systems to generate the executive reports. Which of the following will provide the details needed for the company's decision regarding the cloud migration?
A) Standard operating procedures
B) Feasibility studies
C) Statement of work
D) Benchmarks

Accepted Answer

Feasibility studies will provide an analysis of the technical, economic, and operational aspects of migrating the ERP system to the cloud, helping the company make an informed decision.

Question 6

An architect recently discovered new opportunities the cloud can provide to the company. A business analyst is currently working with the architect to document the business use-case scenarios. Which of the following should be the architect's NEXT step?
A) Initialize a PoC.
B) Conduct a feasibility study.
C) Perform a gap analysis.
D) Gather cloud requirements.

Accepted Answer

The answer of An architect recently discovered new opportunities the...

Question 7

Which of the following allows for the management of network policies from a central portal while maintaining a hardware-agnostic approach?
A) Virtual private network
B) Software-defined network
C) Load balancing
D) Direct Connect

Accepted Answer

Software-defined networking (SDN) allows for the management of network policies from a central portal and is hardware-agnostic, enabling flexibility and centralized control.

Question 8

A company is evaluating the capital expenditure necessary to modernize its on-premises datacenter. Management has directed that 50% of capital expenditure be reallocated to operating expenditure. Which of the following cloud characteristics applies?
A) BYOL
B) Billing chargeback
C) Pay-as-you-go
D) High availability

Accepted Answer

The "Pay-as-you-go" model is a cloud characteristic that allows companies to shift from capital expenditure (CapEx) to operating expenditure (OpEx) by paying only for the resources they use, rather than investing in physical infrastructure upfront.

Question 9

A company would like to improve its current DR plan with an emphasis on high availability. Which of the following metrics should the company focus on?
A) MTTR
B) RTO
C) QoS
D) RPO

Accepted Answer

RTO (Recovery Time Objective) is a critical metric for high availability, as it measures the maximum acceptable time for a system to be unavailable after a disaster.

Question 10

Which of the following cloud migration methods would take full advantage of the cloud computing model?
A) Rip and replace
B) Lift and shift
C) Phased
D) Hybrid

Accepted Answer

Phased migration allows for a gradual transition to the cloud, taking advantage of the cloud's scalability, flexibility, and cost-effectiveness.

Question 11

A business is experiencing an outage of a customer-facing e-commerce website after a SaaS-based CDN upgrade. The RTO is 5 minutes or less, but it has already been 10 minutes since the outage. After 15 minutes, the CDN recovers for the outage. The business loses $25000 in revenue per minute of the outage. Which of the following is the financial impact to the business?
A) $250000
B) $350000
C) $375000
D) $400000

Accepted Answer

The outage lasted for 15 minutes, and the business loses $25000 per minute. Therefore, the financial impact is 15 minutes * $25000 = $375000.

Question 12

Which of the following is true about the use of technologies such as JSON and XML for cloud data interchange and automation tasks?
A) It can cause cloud vendor lock-in
B) The company needs to define a specific programming language for cloud management.
C) The same message format can be used across different cloud platforms.
D) It is considered an unsafe format of communication.

Accepted Answer

JSON and XML are standardized data interchange formats that can be used across different cloud platforms, facilitating interoperability and automation tasks.

Question 13

A company is planning to use cloud computing to extend the compute resources that will run a new resource-intensive application. A direct deployment to the cloud would cause unexpected billing. Which of the following must be generated while the application is running on-premises to predict the cloud budget for this project better?
A) Proof or concept
B) Benchmark
C) Baseline
D) Feasibility study

Accepted Answer

A baseline must be generated to understand the current resource usage and performance metrics. This data helps in predicting the cloud budget by estimating the resources needed when the application is moved to the cloud.

Question 14

An organization determines it cannot go forward with a cloud migration due to the risks involved. Which of the following types of risk response does this describe?
A) Acceptance
B) Transference
C) Avoidance
D) Mitigation

Accepted Answer

Avoidance is a risk response strategy where the organization decides not to engage in the activity that presents the risk, in this case, not proceeding with the cloud migration.

Question 15

A business analyst is comparing utilization for a company's cloud servers on a financial expenditures report. The usage report is as follows:  Which of the following instances represents the highest utilization?
A) Mail server
B) Application server
C) File server
D) Web server

Accepted Answer

The answer of A business analyst is comparing utilization for...

Question 16

Which of the following strategies allows an organization to plan for cloud expenditures in a way that most closely aligns with the capital expenditure model?
A) Simplifying contract requirements
B) Implementing consolidated billing
C) Considering a BYOL policy
D) Using reserved cloud instances

Accepted Answer

Reserved cloud instances allow organizations to commit to using cloud resources for a longer term, often at a discounted rate, which aligns more closely with the capital expenditure model by providing predictable costs similar to purchasing hardware.

Question 17

A project manager is interested in the notification process a CSP follows after discovering a breach of customer data. Which of the following is MOST likely to provide the necessary information?
A) Communication plans
B) Incident response policy
C) Service level agreement
D) Access controls

Accepted Answer

The answer of A project manager is interested in the...

Question 18

Which of the following allows an IP address to be referenced via an easily remembered name for a SaaS application?
A) DNS
B) CDN
C) VPN
D) WAN

Accepted Answer

DNS (Domain Name System) allows an IP address to be referenced via an easily remembered name.

Question 19

Which of the following BEST describes the open-source licensing model for application software?
A) Software is free to use, but the source code is not available to modify.
B) Modifications to existing software are not allowed.
C) Code modifications must be submitted for approval.
D) Source code is readily available to view and use.

Accepted Answer

Open-source licensing allows users to view, modify, and distribute the source code, promoting transparency and collaboration.

Question 20

A cloud administrator is reviewing the requirements for a SaaS application and estimates downtime will be very expensive for the organization. Which of the following should the administrator configure to minimize downtime? (Choose two.)
A) Continuous deployment
B) Right-sizing
C) Availability zones
D) Geo-redundancy
E) Hardening
F) Backups

Accepted Answer

The answer of A cloud administrator is reviewing the requirements...

Exam 4: CompTIA Advanced Security Practitioner (CASP+) CAS-004

Which of the following deployment models includes application components on a company's network as well as on the Internet?

A business analyst is reviewing a software upgrade plan. The plan mentions the term "hash" value. Which of the following BEST represents what this term implies?

A Chief Information Officer (CIO) wants to identify two business units to be pilots for a new cloud project. A business analyst who was recently assigned to this project will be selecting a cloud provider. Which of the following should the business analyst do FIRST?

An architect recently discovered new opportunities the cloud can provide to the company. A business analyst is currently working with the architect to document the business use-case scenarios. Which of the following should be the architect's NEXT step?

Which of the following allows for the management of network policies from a central portal while maintaining a hardware-agnostic approach?

A company is evaluating the capital expenditure necessary to modernize its on-premises datacenter. Management has directed that 50% of capital expenditure be reallocated to operating expenditure. Which of the following cloud characteristics applies?

A company would like to improve its current DR plan with an emphasis on high availability. Which of the following metrics should the company focus on?

Which of the following cloud migration methods would take full advantage of the cloud computing model?

Which of the following is true about the use of technologies such as JSON and XML for cloud data interchange and automation tasks?

An organization determines it cannot go forward with a cloud migration due to the risks involved. Which of the following types of risk response does this describe?

A business analyst is comparing utilization for a company's cloud servers on a financial expenditures report. The usage report is as follows: Which of the following instances represents the highest utilization?

Which of the following strategies allows an organization to plan for cloud expenditures in a way that most closely aligns with the capital expenditure model?

A project manager is interested in the notification process a CSP follows after discovering a breach of customer data. Which of the following is MOST likely to provide the necessary information?

Which of the following allows an IP address to be referenced via an easily remembered name for a SaaS application?

Which of the following BEST describes the open-source licensing model for application software?

A cloud administrator is reviewing the requirements for a SaaS application and estimates downtime will be very expensive for the organization. Which of the following should the administrator configure to minimize downtime? (Choose two.)