Correct Answer:

Host 2 is correct.

Host 2 is a physical custom web application server. This is a prime candidate for physical to virtual (P2V) migration to the cloud as a virtual machine.

Incorrect Answers:

Host 1 is incorrect. Host 1, an on-premises hypervisor running virtual machines, is not a prime P2V candidate. The reason is that public cloud providers already use hypervisors’ pooled resources to be used by cloud tenants.

Host 3 is incorrect. Host 3, an on-premises storage server, is not a prime P2V candidate. The reason is that public cloud providers already use pooled storage resources to be used by cloud tenants.

Host 4 is incorrect. Host 4, an on-premises hypervisor running virtual machines, is not a prime P2V candidate. The reason is that public cloud providers already use hypervisors’ pooled resources to be used by cloud tenants.

Correct Answer:

Granular resource hardening is correct.

Micro-segmentation allows the application of granular security control to specific cloud resources and workloads.

Incorrect Answers:

VLAN isolation is incorrect. Virtual local area networks (VLANs) are used to isolate groups of network devices for network security or performance reasons.

VXLAN isolation is incorrect. VXLANs provide a friendly configuration method for underlying complex network technologies.

General resource hardening is incorrect. Micro-segmentation is specific, not general.

Correct Answer:

The certificate has expired is correct.

Of the given options, certificate expiration is the most likely culprit.

Incorrect Answers:

Only GRE supports PKI certificates is incorrect. Generic Routing Encapsulation (GRE) is not the only VPN protocol that supports public key infrastructure (PKI). Layer 2 Tunneling Protocol (L2TP) and Point-to-Point Tunneling Protocol (PPTP) also support PKI.

Only PPTP supports PKI certificates is incorrect. Point-to-Point Tunneling Protocol (PPTP) is not the only VPN protocol that supports public key infrastructure (PKI). Layer 2 Tunneling Protocol (L2TP) and Generic Routing Encapsulation (GRE) also support PKI.

The VPN connection is oversaturated with network traffic is incorrect. An oversaturated VPN network is not as likely in this scenario, since the VPN endpoint establishment is problematic.

Correct Answer:

Notify affected stakeholders is correct.

After a change has been approved by the change manager, the proper change management process includes notifying affected stakeholders prior to the change being executed. Changes should be scheduled such that there is minimal disruption to business operations, such as after hours.

Incorrect Answers:

The other listed items do not have to be done prior to executing the change.

Correct Answer:

Failover clustering is correct. Failover clustering offers the same service on multiple nodes so that the service remains available even if a cluster node fails.

Incorrect Answers:

Scaling in is incorrect. Scaling in reduces the number of virtual machines supporting an app.

Scaling down is incorrect. Scaling down decreases virtual machine compute power.

Scaling up is incorrect. Scaling up increases compute power, which does not make an app highly available, although it may perform better.

Correct Answer:

Database listening port is correct.

The target cloud database must support the data that will be migrated from the on-premises database. If it does not, the on-premises data can be exported to a standard format and then imported to the cloud database.

Incorrect Answers:

Database listening port is incorrect. The cloud database listening port can be easily changed if needed.

Database IP address is incorrect. The cloud database IP address can be easily changed if needed.

Names of database tables is incorrect. Target database table names don’t matter, since data will be migrated or imported to the cloud database.

Correct Answer:

Configure one network firewall rule set and associate it with each virtual machine is correct.

The solution that requires the least administrative effort is to create a firewall rule set for the network where the virtual machines are deployed. Each virtual machine is then configured to use the firewall rule set.

Incorrect Answers:

Use PowerShell to set the firewall on each virtual machine is incorrect. Using PowerShell to set the firewall on each virtual machine would require more administrative effort.

Use a shell script to set the firewall on each virtual machine is incorrect. Using a shell script to set the firewall on each virtual machine would require more administrative effort.

Configure six host firewall rule sets and associate each one with a virtual machine is incorrect. Configuring six host firewall rule sets and associating each one with a virtual machine would require more administrative effort.

Correct Answer:

The auto-scaling group is set up incorrectly is correct.

If only one of the servers in the auto-scaling group are loaded while the others are idle, the problem is most likely with the load balancer.

Incorrect Answers:

The auto-scaling group is set up incorrectly is incorrect. The auto-scaling group does not seem to be an issue, as other web servers are active.

The affected web server is infected is incorrect. Even if the affected web server was infected, it would not prevent the load balancer from sending requests to other web servers.

The other web servers are infected is incorrect. This would not explain why the other web servers are not receiving any requests and are idle.

Correct Answer:

254 is correct.

/24 means there are 24 of 32 bits assigned to the network. This leaves 8 bits, which, when set to a binary value of 1, equals 255. The range 0–255 is 256 possible values, but 0 and 255 are not used, thus leaving 254 usable IP addresses.

Incorrect Answers:

24 is incorrect. You cannot subnet an IPv4 address to allow for exactly 24 usable addresses.

256 is incorrect. You cannot subnet an IPv4 address to allow for exactly 256 usable addresses.

255 is incorrect. You cannot subnet an IPv4 address to allow for exactly 255 usable addresses.

Correct Answer:

Deploy the test virtual machines into an isolated cloud network is correct.

Sandboxing, or isolating the test environment from the production environment, is the best solution.

Incorrect Answers:

Configure the firewall on nontest machines to block traffic is incorrect. Configuring multiple host firewalls is not necessary.

Disable network connectivity for the test machines is incorrect. The test machines need network connectivity, since the application uses three servers.

Enable IPv6 on the test machines is incorrect. IPv6 will not provide any isolation if IPv4 is still enabled.