CompTIA Updated CV0-004 Exam Questions and Answers by kyla

When migrating a highly available application normally hosted on a local VM cluster for usage with an external user population, the best migration type would be on-premises to cloud. This allows the application to leverage the cloud's scalability and reach, providing better access to the external users. References: CompTIA Cloud+ Study Guide (Exam CV0-004) - Chapter on Cloud Migration

Part 1: Router 2

The problematic device is Router 2, which has an incorrect configuration for the IPSec tunnel. The IPSec tunnel is a secure connection between the on-premises datacenter and the cloud provider, which allows the traffic to flow between the two networks. The IPSec tunnel requires both endpoints to have matching parameters, such as the IP addresses, the pre-shared key (PSK), the encryption and authentication algorithms, and the security associations (SAs) .

According to the network diagram and the configuration files, Router 2 has a different PSK and a different address space than Router 1. Router 2 has a PSK of “1234567890”, while Router 1 has a PSK of “0987654321”. Router 2 has an address space of 10.0.0.0/8, while Router 1 has an address space of 192.168.0.0/16. These mismatches prevent the IPSec tunnel from establishing and encrypting the traffic between the two networks.

The other devices do not have any obvious errors in their configuration. The DNS provider has two CNAME records that point to the application servers in the cloud provider, with different weights to balance the load. The firewall rules allow the traffic from and to the application servers on port 80 and port 443, as well as the traffic from and to the VPN server on port 500 and port 4500. The orchestration server has a script that installs and configures the application servers in the cloud provider, using the DHCP server to assign IP addresses.

Part 2:

The correct options to provide adequate configuration for hybrid cloud architecture are:

Update the PSK in Router 2.

Change the address space on Router 2.

These options will fix the IPSec tunnel configuration and allow the traffic to flow between the on-premises datacenter and the cloud provider. The PSK should match the one on Router 1, which is “0987654321”. The address space should also match the one on Router 1, which is 192.168.0.0/16.

B. Update the PSK (Pre-shared key in Router2)

E. Change the Address Space on Router2

The IP address of Server 1 to 172.16.12.36 (A): Changes the IP but remains within the same subnet range as Server 2.

The IP address of Server 1 to 172.16.12.2 (B): Also keeps Server 1 within the same subnet as Server 2.

The IP address of Server 2 to 172.16.12.18 (C): Falls within the next subnet range but does not isolate Server 2 completely.

The IP address of Server 2 to 172.16.14.14 (D): Moves Server 2 to a different subnet, preventing direct communication with Server 1 and Server 3.

Refactoring is the process of restructuring existing computer code without changing its external behavior. In cloud computing, it often means modifying the application to better leverage cloud-native features and services. This can address user demand and reduce maintenance costs by making the application more scalable, resilient, and manageable. References: CompTIA Cloud+ Certification Study Guide (Exam CV0-004) by Scott Wilson and Eric Vanderburg