FreeQAs
 Request Exam  Contact
  • Home
  • View All Exams
  • New QA's
  • Upload
PRACTICE EXAMS:
  • Oracle
  • Fortinet
  • IBM
  • Juniper
  • Microsoft
  • Cisco
  • Citrix
  • CompTIA
  • VMware
  • ISC
  • SAP
  • EMC
  • PMI
  • HP
  • Salesforce
  • Other
  • Oracle
    Oracle
  • Fortinet
    Fortinet
  • IBM
    IBM
  • Juniper
    Juniper
  • Microsoft
    Microsoft
  • Cisco
    Cisco
  • Citrix
    Citrix
  • CompTIA
    CompTIA
  • VMware
    VMware
  • ISC
    ISC
  • SAP
    SAP
  • EMC
    EMC
  • PMI
    PMI
  • HP
    HP
  • Salesforce
    Salesforce
  1. Home
  2. CompTIA Certification
  3. CV0-003 Exam
  4. CompTIA.CV0-003.v2025-10-17.q113 Dumps
  • ««
  • «
  • …
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • …
  • »
  • »»
Download Now

Question 86

A cloud engineer is troubleshooting RSA key-based authentication from a local computer to a cloud-based server, which is running SSH service on a default port. The following file permissions are set on the authorized keys file:
-rw-rw-rw-1 ubuntu ubuntu 391 Mar S 01:36 authorized _ keys
Which Of the following security practices are the required actions the engineer Should take to gain access to the server? (Select TWO).

Correct Answer: C,D
The correct answer is C and D.
C: Fix the file permissions with read-only access to the owner of the file.
D: Open port 22 access for the computer's public IP address.
The authorized_keys file on the server should have read-only access for the owner of the file, and no access for anyone else. This ensures that only the owner can read the public keys that are authorized to log in, and no one can modify or delete them. The file permissions can be fixed with the command chmod 400 ~/.ssh
/authorized_keys on the server. This is a recommended security practice for SSH key-based authentication123.
The computer that wants to log in to the server using SSH key-based authentication needs to have access to port 22 on the server, which is the default port for SSH service. This can be done by opening port 22 access for the computer's public IP address on the server's firewall or security group settings. This allows the computer to initiate an SSH connection to the server and authenticate with its private key. Opening port 21, which is used for FTP service, is not relevant or secure for SSH key-based authentication1.
insert code

Question 87

An environment has a dual-stack infrastructure in an active-active configuration in two separate data centers.
Which of the following best describes replication between the two sites?

Correct Answer: D
A dual-stack infrastructure is a network that supports both IPv4 and IPv6 protocols. An active-active configuration is a high-availability cluster that distributes workloads across two or more nodes that are running the same service simultaneously. Replication between the two sites means that data is copied from one site to another to ensure consistency and redundancy. Data synchronization is the process of ensuring that data is identical across multiple locations. Therefore, data synchronization in real time means that data is replicated as soon as it changes on either site, without any delay or lag. References: Active-Active vs. Active- Passive High-Availability Clustering, Dual-stack IPv6 architectures for AWS and hybrid networks - Part
2, Understanding Dual Stacking of IPv4 and IPv6 Unicast Addresses
insert code

Question 88

The QA team is testing a newly implemented clinical trial management (CTM) SaaS application that uses a business intelligence application for reporting. The UAT users were instructed to use HTTP and HTTPS.
Refer to the application dataflow:
1A - The end user accesses the application through a web browser to enter and view clinical data.
2A - The CTM application server reads/writes data to/from the database server.
1B - The end user accesses the application through a web browser to run reports on clinical data.
2B - The CTM application server makes a SOAP call on a non-privileged port to the BI application server.
3B - The BI application server gets the data from the database server and presents it to the CTM application server.
When
UAT users try to access the application using https://ctm.app.com or http://ctm.app.com, they get a message stating: "Browser cannot display the webpage." The QA team has raised a ticket to troubleshoot the issue.
INSTRUCTIONS
You are a cloud engineer who is tasked with reviewing the firewall rules as well as virtual network settings.
You should ensure the firewall rules are allowing only the traffic based on the dataflow.
You have already verified the external DNS resolution and NAT are working.
Verify and appropriately configure the VLAN assignments and ACLs. Drag and drop the appropriate VLANs to each tier from the VLAN Tags table. Click on each Firewall to change ACLs as needed.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.



Correct Answer:
See explanation below.
Explanation:
On firewall 3, change the DENY 0.0.0.0 entry to rule 3 not rule 1.
insert code

Question 89

A cloud administrator needs to control the connections between a group of web servers and database servers as part of the financial application security review. Which of the following would be the BEST way to achieve this objective?

Correct Answer: D
A network security group is a service that allows the cloud administrator to filter and control the network traffic between different resources in a cloud environment. A network security group contains security rules that specify the source, destination, protocol, port, and direction of the traffic, and whether to allow or deny it.
A network security group can be associated with a subnet or a network interface in a virtual machine, and it can apply to inbound or outbound traffic. A network security group would be the best way to achieve the objective of controlling the connections between a group of web servers and database servers as part of the financial application security review, as it can provide granular and flexible control over the network access and security of the servers.
insert code

Question 90

Which of the following is a difference between cloud computing and visualization when implementing IaaS?

Correct Answer: C
insert code
  • ««
  • «
  • …
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • …
  • »
  • »»
[×]

Download PDF File

Enter your email address to download CompTIA.CV0-003.v2025-10-17.q113 Dumps

Email:

FreeQAs

Our website provides the Largest and the most Latest vendors Certification Exam materials around the world.

Using dumps we provide to Pass the Exam, we has the Valid Dumps with passing guranteed just which you need.

  • DMCA
  • About
  • Contact Us
  • Privacy Policy
  • Terms & Conditions
©2026 FreeQAs

www.freeqas.com materials do not contain actual questions and answers from Cisco's certification exams.