Correct Answer:

CDN is correct. Content delivery networks (CDNs) replicate website data from an origin server to a different geographical region to reduce latency for users in that region.

Incorrect Answers:

Runbook is incorrect. Runbooks are used for automation.

Batch jobs is incorrect. Batch jobs are used for automation.

Public IP address is incorrect. A public IP address will not reduce network latency.

Correct Answer:

10.0.0.1/8 is correct.

This IP address is contained within a private address range.

Incorrect Answers:

All of the remaining addresses are routable on the public Internet.

Correct Answer:

Insufficient permissions is correct. Runbook activities (such as running scripts) must execute with the required privileges.

Incorrect Answers:

Script syntax errors is incorrect. If the script ran during testing, the syntax is correct.

Runbooks cannot run scripts is incorrect. Runbooks can run many activities, including scripts.

Expired PKI certificate is incorrect. PKI is not mentioned in the scenario.

Correct Answer:

Renewing expired PKI certificates is correct.

Renewing certificates ensures they will still be usable and will not expire. This is not as directly related to hardening as the other listed options.

Incorrect Answers:

Deactivating default accounts is incorrect. Deactivating default accounts is an important part of hardening.

Account management auditing is incorrect. Account management auditing is an important part of hardening.

Disabling unneeded services is incorrect. Disabling unneeded services is an important part of hardening

Correct Answer:

Online migration is correct.

Online migration is the movement of a server’s configuration and data to another location, such as the cloud, while the original source computer remains online and available.

Incorrect Answers:

P2V is incorrect. P2V (physical to virtual) is the process of migrating a physical server’s data to a virtual machine.

Offline migration is incorrect. Offline migration is migration of a physical server while the source computer is offline or unavailable.

V2P is incorrect. V2P (virtual to physical) is the process of migrating a virtual machine to a physical machine.

Correct Answer:

SaaS is correct. Software as a Service places responsibility for security, compliance, and liability on the cloud provider.

Incorrect Answers:

CaaS is incorrect. The Communications as a Service cloud service model places responsibility on the cloud consumer.

IaaS is incorrect. The Infrastructure as a Service cloud service model places responsibility on the cloud consumer.

PaaS is incorrect. The Platform as a Service cloud service model places responsibility on the cloud consumer.

Correct Answer:

`nslookup` is correct.

Name server lookup (`nslookup`) is used to test and troubleshoot DNS name resolution.

Incorrect Answers:

`tracert` is incorrect. `tracert` is the proper command to trace the path of an IPv4 packet in Windows.

`ping` is incorrect. `ping` is the command to measure the round-trip latency of an ICMP request and reply.

`ipconfig` is incorrect. `ipconfig` will show the computer’s current IP configuration information.

Correct Answer:

Two simultaneous application environments, one testing, the other production is correct.

Blue-green testing uses two environments for a given application: one for testing, the other for production.

Incorrect Answers:

The remaining descriptions listed are incorrect.

Correct Answer:

Mandatory access control is correct.

Mandatory access control (MAC) labels resources, otherwise called data classification, and the operating system controls access to the resources.

Incorrect Answers:

Discretionary access control is incorrect. Discretionary access control (DAC) uses ACL entries controlled by data owners or custodians to determine resource access.

PKI is incorrect. Public key infrastructure (PKI) is a hierarchy of security certificates.

TPM is incorrect. Trusted Platform Module (TPM) is firmware used to store encryption keys and to check changes to bootup configurations.

Correct Answer:

IPSec is correct. IP Security (IPSec) can be applied to all TCP/IP traffic for encryption and authentication purposes.

Incorrect Answers:

SSL is incorrect. Secure Sockets Layer (SSL) requires PKI certificates for each service to secure traffic.

TLS is incorrect. Transport Layer Security (TLS) requires PKI certificates for each service to secure traffic.

VPN is incorrect. Virtual private networks (VPNs) establish an encrypted network tunnel between two endpoints and are not used for an entire local area network internally.