An engineer made a change to an application and needs to select a deployment strategy that meets the following requirements:

• Is simple and fast

• Can be performed on two Identical platforms

Which of the following strategies should the engineer use?

Reveal Solution Hide Solution

The change control board received a request to approve a configuration change 10 deploy in the cloud production environment.

Which of the following should have already been competed?

Reveal Solution Hide Solution

A customer is migrating applications to the cloud and wants to grant authorization based on the classification levels of each system.

Which of the following should the customer implement to ensure authorisation to systems is granted when the user and system classification properties match? (Select two).

Reveal Solution Hide Solution

A system surpasses 75% to 80% of resource consumption.

Which of the following scaling approaches is the most appropriate?

Reveal Solution Hide Solution

A network administrator is budding a site-to-site VPN tunnel from the company’s headquarters office 10 the company’s public cloud development network.

The network administrator confirms the following:

The VPN tunnel is established on the headquarter office firewall.

While inside the office, developers report that they cannot connect to the development network resources.

While outside the office on a client VPN, developers report that they can connect to the development network resources.

The office and the client VPN have different IP subnet ranges.

The firewall flow logs show VPN traffic is reaching the development network from the office.

Which of the following is the next step the next network administrator should take to troubleshoot the VPN tunnel?

Reveal Solution Hide Solution

A company’s man web application is no longer accessible via the internet. The cloud administrator investigates and discovers the application is accessible locally and only via an IP access.

Which of the following was misconfigured?

Reveal Solution Hide Solution

A cloud engineer is provisioning a new application that requires access to the organization’s public cloud resources.

Which of the following is the best way for the cloud engineer to authenticate the application?

Reveal Solution Hide Solution

A security engineer Identifies a vulnerability m a containerized application. The vulnerability can be exploited by a privileged process to read tie content of the host’s memory.

The security engineer reviews the following Dockerfile to determine a solution to mitigate similar exploits:

Which of the following is the best solution to prevent similar exploits by privileged processes?

Reveal Solution Hide Solution

A cross-site request forgery vulnerability exploited a web application that was hosted in a public laaS network. A security engineer determined that deploying a WAF in blocking mode at a CDN would prevent the application from being exploited again. However, a week after implementing the WAF, the application was exploited again.

Which of the following should the security engineer do to make the WAF control effective?

Reveal Solution Hide Solution

A cloud engineer wants containers to run the latest version of a container base image to reduce the number of vulnerabilities. The applications in use requite Python 3.10 and ate not compatible with any other version. The containers’ images are created every time a new version is released from the source image.

Given the container Dockerfile below:

Which of the following actions will achieve the objectives with the least effort?

Reveal Solution Hide Solution