When an organization can predict demand spikes (such as seasonal sales), the most cost-effective approach is to use scheduled scaling—a scaling configuration tied to a known timeline. In the CompTIA Cloud+ (CV0-004) objectives covering elasticity, scaling strategies, and cost optimization, scheduled scaling allows the business to increase capacity shortly before the surge begins and reduce it immediately after the event ends. This minimizes cost by ensuring resources run only for the required window, while still maintaining performance and availability during peak traffic.

Option A (least-connections) improves how traffic is distributed but does not add capacity; it cannot prevent resource exhaustion if the backend pool is undersized. Option C (reconfiguring to have more resources—vertical scaling) can help performance but often increases cost continuously and may introduce downtime or scaling limits. Option D (deploying additional compute in advance) can meet the requirement, but it may waste money if instances remain overprovisioned longer than necessary. Therefore, enabling a scheduled scaling configuration for the identified timeline best meets the need at minimal cost.

When a web application is accessible locally via an IP address but not via the internet, the issue likely lies with the Domain Name System (DNS). DNS is responsible for translating domain names into IP addresses. A misconfiguration in DNS records or failure in DNS resolution can prevent users from accessing the application through its domain name, even though the application itself is running and accessible via its direct IP address.

In the CompTIA Cloud+ curriculum, understanding cloud concepts and networking fundamentals, including DNS, is crucial for troubleshooting and ensuring applications are accessible and perform optimally in cloud environments.

Cloud flow logs are the most efficient way to identify suspected C2 activity over HTTPS because they provide network metadata (source/destination IPs, ports, protocol, bytes/packets, accept/deny decisions) at scale with low operational overhead. In the Cloud+ CV0-004 objectives, this aligns with implementing logging/monitoring to support threat detection, incident response, and continuous security validation. While HTTPS encrypts payload contents, flow logs still reveal high-value indicators such as repeated outbound connections to rare destinations, unusual session frequency, unexpected egress from sensitive subnets, and abnormal data transfer patterns—common traits of C2 beaconing.

An inline IPS can detect and block certain threats, but it adds latency, cost, and complexity, and it may be limited by encryption unless TLS inspection is used. Hourly cron jobs are ad hoc, incomplete, and not scalable compared with centralized telemetry. Traffic mirroring enables deep packet inspection, but it generates large volumes of data and is typically used selectively due to cost and performance impact. Therefore, flow logs provide the best efficiency-to-visibility balance for identifying HTTPS-based C2 patterns.

Comprehensive and Detailed 150 to 200 words of Explanation from CompTIA Cloud CV0-004 Study guide and objectives:

The most likely cause is a Layer 2 segmentation mismatch between the VM host’s storage uplink and the SAN’s iSCSI network. In the provided switch configuration, the VM host storage uplink on GigabitEthernet 1/0/2 is configured as an access port in VLAN 24 , while the SAN iSCSI controller ports ( GigabitEthernet 1/0/6 and 1/0/7 ) are placed in VLAN 25 . If the VM host’s iSCSI initiator interface is connected to Gi1/0/2, it will be in VLAN 24 and therefore cannot reach iSCSI targets in VLAN 25—preventing discovery entirely (no iSCSI SendTargets responses, no target login).

This aligns with Cloud+ (CV0-004) networking objectives emphasizing network segmentation, correct VLAN placement, and hybrid/virtualized storage connectivity. While jumbo frames (MTU 9000+) can improve iSCSI efficiency, MTU mismatch typically impacts performance or causes large-payload issues—not basic target discovery. Correcting Gi1/0/2 to access VLAN 25 restores Layer 2 adjacency to the iSCSI targets.

In a project handling sensitive data with a mix of internal and external team members, implementing Identity and Access Management (IAM) and Access Control Lists (ACL) is crucial for Data Loss Prevention (DLP). These controls ensure that only authorized individuals have access to specific resources, and actions are governed according to the principle of least privilege, minimizing the risk of data leakage or unauthorized access.

Sensors are used to detect signals and measure physical properties, such as temperature. They are devices that respond to a physical stimulus (like heat, light, sound, pressure, magnetism, or a particular motion) and transmit a resulting impulse for detection and measurement.

The use of sensors in cloud environments, particularly in IoT (Internet of Things) applications, is included in the technical domains of the CompTIA Cloud+ material.

A hybrid cloud deployment model is the best way to replicate workloads non-disruptively between on-premises servers and a public cloud. This model integrates on-premises infrastructure, or private clouds with public clouds, allowing data and applications to be shared between them. References: CompTIA Cloud+ Study Guide (Exam CV0-004) - Chapter on Cloud Deployment Models

Using CIS-hardened images (A): Center for Internet Security (CIS) images are pre-hardened and configured for best practices, reducing vulnerabilities.

Using watermarked images (B): Watermarking does not contribute to security hardening.

Using digitally signed images (C): Verifies authenticity but does not address vulnerabilities within the container.

Using images that have an application firewall (D): Firewalls offer runtime protection but don’t secure the container image itself.

For periodic bursts of traffic that are predictable, such as when a new video is launched, a scheduled scaling approach is suitable. This strategy involves scaling resources based on forecasted or known traffic patterns, ensuring that the infrastructure can handle the load during expected peak times.

The use of scheduled scaling to manage predictable traffic increases is discussed within the Management and Technical Operations section of the CompTIA Cloud+ exam objectives.