FREE CompTIA Cloud+ Cloud Environment Troubleshooting Questions and Answers

Question 1

A cloud engineer is troubleshooting a connectivity issue where an application on a virtual machine (VM) in a private subnet cannot access a public API on the internet.
A NAT gateway exists in a public subnet, and the security group for the VM allows all outbound traffic.
What is the MOST likely misconfiguration causing this issue?

Accepted Answer

The route table for the private subnet does not have a route pointing to the NAT gateway.

Answer

The Internet Gateway is not attached to the Virtual Private Cloud (VPC).

Answer

The Network ACL associated with the private subnet is denying outbound traffic.

Answer

The VM's host-based firewall is blocking outbound traffic.

Question 2

An e-commerce application is experiencing slow performance. Monitoring dashboards show that the database instances have CPU utilization consistently above 90% but normal memory and I/O metrics. The database is primarily handling a large volume of read requests. Which of the following is the MOST effective solution to resolve this performance bottleneck?

Accepted Answer

Implement a read replica and direct read queries to it.

Answer

Increase the IOPS of the database's storage volumes.

Answer

Vertically scale the database instance by increasing its memory.

Answer

Enable multi-region replication for the database.

Question 3

A deployment of a new application version using an Infrastructure as Code (IaC) script fails with an error message: "The requested resource is not available in the specified availability zone." The script attempts to create a virtual machine using a specific instance type. Which of the following is the MOST likely cause of this error?

Accepted Answer

The specified instance type is not offered in the selected availability zone.

Answer

The account has exceeded its service quota for that instance type.

Answer

The user executing the script lacks the IAM permissions to launch instances.

Answer

The cloud provider has temporarily disabled the availability zone for maintenance.

Question 4

A cloud administrator receives an alert that a storage bucket containing sensitive data is publicly accessible, which violates company policy. Which of the following tools should the administrator use to proactively and continuously scan the cloud environment for such misconfigurations and policy violations?

Accepted Answer

A Cloud Security Posture Management (CSPM) tool

Answer

A Security Information and Event Management (SIEM) system

Answer

A Cloud Access Security Broker (CASB)

Answer

A Web Application Firewall (WAF)

Question 5

An application hosted in the cloud has stopped responding. A cloud engineer discovers that a critical service on the virtual machine has crashed. The engineer restarts the service, and the application recovers. To prevent manual intervention for this issue in the future, which of the following should be implemented?

Accepted Answer

Create an automated health check that restarts the service upon failure.

Answer

Increase the size of the virtual machine instance.

Answer

Take a snapshot of the VM's disk for forensic analysis.

Answer

Configure a more detailed logging agent on the VM.

Question 6

A user reports being unable to access a newly deployed web application via its domain name. An engineer confirms the application is running correctly on its virtual machine and that security groups allow inbound traffic. Pinging the server's public IP address is successful, but attempting to resolve the domain name fails. Which of the following is the MOST likely service to investigate to resolve this issue?

Accepted Answer

Domain Name System (DNS)

Answer

Network Address Translation (NAT)

Answer

Load Balancer Health Checks

Answer

Identity and Access Management (IAM)