CompTIA® Cloud+® Study Guide Second Edition Exam CV0-002 Todd Montgomery Stephen Olson Senior Acquisitions Editor: Kenyon Brown Development Editor: David Clark Technical Editor: Kunal Mittal Production Manager: Kathleen Wisor Copy Editor: Kim Wimpsett Editorial Manager: Pete Gaughan Executive Editor: Jim Minatel Book Designer: Judy Fung and Bill Gibson Proofreader: Nancy Carrasco Indexer: Johnna VanHoose Dinse Project Coordinator, Cover: Brent Savage Cover Designer: Wiley Cover Image: @Jeremy Woodhouse/Getty Images, Inc Copyright © 2018 by John Wiley & Sons, Inc., Indianapolis, Indiana Published simultaneously in Canada ISBN: 978-1-119-44305-6 ISBN: 978-1-119-44306-3 (ebk.) ISBN: 978-1-119-44296-7 (ebk.) Manufactured in the United States of America No part of this publication may be reproduced, stored in a retrieval system or transmitted in any form or by any means, electronic, mechanical, photocopying, recording, scanning or otherwise, except as permitted under Sections 107 or 108 of the 1976 United States Copyright Act, without either the prior written permission of the Publisher, or authorization through payment of the appropriate per-copy fee to the Copyright Clearance Center, 222 Rosewood Drive, Danvers, MA 01923, (978) 750-8400, fax (978) 646-8600 Requests to the Publisher for permission should be addressed to the Permissions Department, John Wiley & Sons, Inc., 111 River Street, Hoboken, NJ 07030, (201) 7486011, fax (201) 748-6008, or online at http://www.wiley.com/go/permissions Limit of Liability/Disclaimer of Warranty: The publisher and the author make no representations or warranties with respect to the accuracy or completeness of the contents of this work and specifically disclaim all warranties, including without limitation warranties of fitness for a particular purpose No warranty may be created or extended by sales or promotional materials The advice and strategies contained herein may not be suitable for every situation This work is sold with the understanding that the publisher is not engaged in rendering legal, accounting, or other professional services If professional assistance is required, the services of a competent professional person should be sought Neither the publisher nor the author shall be liable for damages arising herefrom The fact that an organization or Web site is referred to in this work as a citation and/or a potential source of further information does not mean that the author or the publisher endorses the information the organization or Web site may provide or recommendations it may make Further, readers should be aware that Internet Web sites listed in this work may have changed or disappeared between when this work was written and when it is read For general information on our other products and services or to obtain technical support, please contact our Customer Care Department within the U.S at (877) 762-2974, outside the U.S at (317) 572-3993 or fax (317) 572-4002 Wiley publishes in a variety of print and electronic formats and by print-on-demand Some material included with standard print versions of this book may not be included in e-books or in print-on-demand If this book refers to media such as a CD or DVD that is not included in the version you purchased, you may download this material at http://booksupport.wiley.com For more information about Wiley products, visit www.wiley.com Library of Congress Control Number: 2018933560 TRADEMARKS: Wiley, the Wiley logo, and the Sybex logo are trademarks or registered trademarks of John Wiley & Sons, Inc and/or its affiliates, in the United States and other countries, and may not be used without written permission CompTIA and Cloud+ are registered trademarks of CompTIA Properties, LLC All other trademarks are the property of their respective owners John Wiley & Sons, Inc is not associated with any product or vendor mentioned in this book To my awesome son, William, and incredible daughter, Allison: This book is dedicated to both of you —Todd Montgomery To my amazing wife, Melissa, and children, Cole and Kate: I am humbled by your patience and love as I write and work long hours Thank you for keeping me grounded —Stephen Olson About the Authors Todd Montgomery has been in the networking industry for more than 35 years and holds many certifications from CompTIA, Cisco, Juniper, VMware, and other companies He is CompTIA Cloud+, Network+, and Security+ certified Todd has spent most of his career out in the field working on-site in data centers throughout North America and around the world He has worked for equipment manufacturers, systems integrators, and end users of data center equipment in the public, service provider, and government sectors He is currently working as a writer and technical editor and is involved in cloud projects Todd lives in Austin, Texas, and in his free time enjoys auto racing, general aviation, and Austin’s live music venues He can be reached at toddmont@thegateway.net Stephen Olson has been in the networking industry for almost 15 years and holds many certifications including Cisco’s CCIE #21910, the Cisco CCNA, and CCNP, among others Steve has spent the majority of his career working in large enterprises as well as consulting for service providers around the world in the cloud, WAN, and data center segments He is currently working on SDN projects in the WAN and data center spaces as well as cloud networking He resides in Austin, Texas, and enjoys music and guitar in his free time Steve can be reached at stephenjolson@gmail.com Acknowledgments There are many people who work to put a book together, and although as authors we dedicate an enormous amount of time to writing the book, it would never be published without the dedicated, hard work of the whole team at Wiley They are truly a fantastic group to work with, and without the Wiley team this book would have never been possible First, we’d like to thank Kenyon Brown, our senior acquisitions editor, who offered us support and guidance through the writing process Ken was always there to answer questions and point us in the right direction Without Ken as a mentor, we could never have pulled this one off We also can never thank our development editor, David Clark, too many times; David is a true professional who stayed on top of the schedule and professionally reminded us of the next upcoming deadline we were working to meet Without David’s help, putting this book together would have been much more difficult David has the ability to take the raw text from the authors, who are primarily engineers, and manage to turn it into presentable copy Thanks again, David! Kunal Mittal offered excellent input as our technical editor He gave us invaluable feedback on how to make the technical concepts more understandable to the readers and pointed out where we needed to modify our technical content for accuracy It was great that Kunal was able to be on this project with us A big thank you to Katie Wisor, the production editor on this project Kim Wimpsett worked the markup magic in the background as the copyeditor The authors are both amazed at how Katie and Kim along with their team of professionals could take our work and transform it into such a presentable book We’re sure there is a whole staff at Wiley lurking in the background, and we will never know how much they helped, but to everyone at Wiley, a big thank-you! You made the late nights and long weekends of writing and putting this book together all worthwhile Contents Introduction Cloud+ Assessment Test Chapter An Introduction to Cloud Computing Configurations and Deployments Introducing Cloud Computing Creating and Validating a Cloud Deployment Verifying System Requirements Summary Exam Essentials Written Lab Review Questions Chapter Cloud Deployments Executing a Cloud Deployment Matching Physical Resources to the Virtualized World of the Cloud Configuring and Deploying Storage Performing a Server Migration Local time zones and follow the sun migration constraints Managing User Identities and Roles Summary Exam Essentials Written Lab Review Questions Chapter Security in the Cloud Cloud Security Compliance and Configurations Access Control Summary Exam Essentials Written Lab Review Questions Chapter Implementing Cloud Security Implementing Security in the Cloud Automating Cloud Security Summary Exam Essentials Written Lab Review Questions Chapter Maintaining Cloud Operations Applying Security Patches Updating Cloud Elements Storage Operations Summary Exam Essentials Written Lab Review Questions Chapter Disaster Recovery, Business Continuity, and Ongoing Maintenance Implementing a Disaster Recovery and Business Continuity Plan Business Continuity Cloud Maintenance Summary Exam Essentials Written Lab Review Questions Chapter Cloud Management Introduction to Cloud Management Cloud Metrics Adding and Removing Cloud Resources Summary Exam Essentials Written Lab Review Questions Chapter Cloud Management Baselines, Performance, and SLAs Measuring Your Deployment Against the Baseline Summary Exam Essentials Written Lab Review Questions Chapter Troubleshooting Examining Common Cloud Issues Troubleshooting Cloud Capacity Issues not accomplish this requirement 10 A Logging into systems is referred to as authentication Also, the question references multifactor authentication (MFA) as part of the system Authorization is the access of services after the authentication process, federations interconnect external user accounts to the cloud, and single sign-on (SSO) allows a user to authenticate one time to access all resources in the cloud 11 A The top-down approach references the OSI model; it starts at the application layer and works downward until the problem is identified The application is checked first, and if that is operational, you continue to work down the network stack until you identify the problem 12 B The bottom-up approach starts at the lowest level of the ISO model with the physical network connections, such as cabling, and works upward by investigating VLANs, IP addressing, and so on, until the issue is located 13 C The divide-and-conquer troubleshooting approach starts in the middle of the OSI networking stack and, depending on the results, directs future tests In this case, the troubleshooter began at the network layer, which is in the middle of the OSI model This is the divide-and-conquer approach 14 A, B, C, D, E All of the answers given are common troubleshooting steps 15 C Infrastructure security is the hardening of the facility and includes the steps outlined in the question including nondescript facilities, video surveillance, and biometric access 16 C A secure Internet-based connection would be a VPN 17 B The Windows Remote Desktop Protocol allows for remote connections to a Windows graphical user desktop 18 D The ping utility verifies end-to-end network connectivity and is the correct answer The other options offered either not apply such as tcpdump and netstat or are not valid utilities such as arproute 19 B, D nslookup is a Windows command-line utility for resolving domain names to IP addressing The Linux equivalent is the dig utility The other answers offered are not valid for the solution required in the question 20 C The Linux command ifconfig will display all network-related configuration information for that computer and is the correct answer ipconfig is the Windows equivalent and is not relevant to this question netstat and the query string are not applicable to the question Appendix B Answers to Written Labs Chapter 1: An Introduction to Cloud Computing Configurations and Deployments Software Infrastructure Platform Ubiquitous access Virtualization Direct connection, VPN Replication Load balancers SSH, RDP 10 Baselines Chapter 2: Cloud Deployments Memory ballooning Storage area network Fault tolerance Synchronous replication Virtual-to-virtual Application portability Federations Load balancer Benchmark 10 Intrusion prevention system Chapter 3: Security in the Cloud Know, have Security policy Discretionary access Single sign-on Cipher Automation Object Shared Public key infrastructure 10 Software as a Service Chapter 4: Implementing Cloud Security Data classification Segmentation At rest Know, have Automation API Graphical user interface Intrusion prevention systems CPU 10 Automation Chapter 5: Maintaining Cloud Operations Blue-green Rolling update Rollback Snapshots cloning Backup target Replicas Hotfix Differential backup System alerts 10 Backup window Chapter 6: Disaster Recovery, Business Continuity, and Ongoing Maintenance Archiving Disaster recovery Business continuity Disaster recovery Inactive Replication RPO, RTO Logs Orphaned resources 10 Synchronous Chapter 7: Cloud Management Metric Orchestration Anomaly Trigger Infrastructure, SLA Change management Lifecycle management Permissions Complexity 10 Back out Chapter 8: Cloud Management Baselines, Performance, and SLAs Baseline Metric Objects Horizontal Memory Latency Resiliency Service level agreement Vertical scaling 10 Auditing Chapter 9: Troubleshooting Templates Network Time Protocol Capacity Reduce load, add capacity Mergers, acquisitions Domain name, IP address Validate Log files Configuration 10 Diagrams Chapter 10: Troubleshooting Networking and Security Issues and Understanding Methodologies QoS Jumbo frame Proxy 123 netstat dig nslookup Documentation Research Internal 10 Privilege escalation WILEY END USER LICENSE AGREEMENT Go to www.wiley.com/go/eula to access Wiley’s ebook EULA ... Figure 5. 3 Cluster updates on each server with no downtime Figure 5. 4 Virtual machine snapshot Figure 5. 5 Virtual machine cloning Figure 5. 6 Image backup Figure 5. 7 File backup Figure 5. 8 Local... going to happen! According to the CompTIA website, the Cloud+ exam details are as follows: Exam code: CV0- 002 Exam description: CompTIA Cloud+ covers competency in cloud models, virtualization, infrastructure,... continuing education program outlined at https://certification .comptia. org/continuing-education CompTIA Cloud+ Study Guide: Exam CV0- 002 Objective Map The following objective map will assist you