972 お客様のコメント
質問 1：
A company that utilizes an IaaS service provider has contracted with a vendor to perform a penetration test on its environment.
The vendor is able to exploit the virtualization layer and obtain access to other instances within the cloud provider's environment that do not belong to the company.
Which of the following BEST describes this attack?
A. VM escape
B. Heap spraying
C. Buffer overflow
D. Directory traversal
正解：A
解説: (Pass4Test メンバーにのみ表示されます)
質問 2：
A vendor is installing a new retail store management application for a customer. The application license ensures software costs are low when the application is not being used, but costs go up when use is higher.
Which of the following licensing models is MOST likely being used?
A. Core-based
B. Socket-based
C. Volume-based
D. Subscription
正解：B
質問 3：
A company is doing a cloud-to-cloud migration to lower costs. A systems administrator has to plan the migration accordingly.
Which of the following considerations is MOST important for a successful, future-proof, and low-cost migration?
A. Estimated consumption
B. Feature compatibility
C. Tier pricing
D. Licensing
正解：B
質問 4：
A DevOps administrator is automating an existing software development workflow. The administrator wants to ensure that prior to any new code going into production, tests confirm the new code does not negatively impact existing automation activities.
Which of the following testing techniques would be BEST to use?
A. Penetration testing
B. Usability testing
C. Vulnerability testing
D. Regression testing
正解：D
解説: (Pass4Test メンバーにのみ表示されます)
質問 5：
After analyzing a web server's logs, a systems administrator sees that users are connecting to the company's application through HTTP instead of HTTPS. The administrator then configures a redirect from HTTP to HTTPS on the web server, and the application responds with a connection time-out message.
Which of the following should the administrator verify NEXT?
A. The concurrent connection limit
B. The firewall rules
C. The TLS certificate
D. The folder permissions
正解：C
解説: (Pass4Test メンバーにのみ表示されます)
A company that utilizes an IaaS service provider has contracted with a vendor to perform a penetration test on its environment.
The vendor is able to exploit the virtualization layer and obtain access to other instances within the cloud provider's environment that do not belong to the company.
Which of the following BEST describes this attack?
A. VM escape
B. Heap spraying
C. Buffer overflow
D. Directory traversal
正解：A
解説: (Pass4Test メンバーにのみ表示されます)
質問 2：
A vendor is installing a new retail store management application for a customer. The application license ensures software costs are low when the application is not being used, but costs go up when use is higher.
Which of the following licensing models is MOST likely being used?
A. Core-based
B. Socket-based
C. Volume-based
D. Subscription
正解：B
質問 3：
A company is doing a cloud-to-cloud migration to lower costs. A systems administrator has to plan the migration accordingly.
Which of the following considerations is MOST important for a successful, future-proof, and low-cost migration?
A. Estimated consumption
B. Feature compatibility
C. Tier pricing
D. Licensing
正解：B
質問 4：
A DevOps administrator is automating an existing software development workflow. The administrator wants to ensure that prior to any new code going into production, tests confirm the new code does not negatively impact existing automation activities.
Which of the following testing techniques would be BEST to use?
A. Penetration testing
B. Usability testing
C. Vulnerability testing
D. Regression testing
正解：D
解説: (Pass4Test メンバーにのみ表示されます)
質問 5：
After analyzing a web server's logs, a systems administrator sees that users are connecting to the company's application through HTTP instead of HTTPS. The administrator then configures a redirect from HTTP to HTTPS on the web server, and the application responds with a connection time-out message.
Which of the following should the administrator verify NEXT?
A. The concurrent connection limit
B. The firewall rules
C. The TLS certificate
D. The folder permissions
正解：C
解説: (Pass4Test メンバーにのみ表示されます)
Fukushima -
出た試験対策問題集は解き方がよくわかる詳しい解説が好きです。CV1-003参考書として、頼れる1冊です。