CompTIA Cloud+ (CV0-004) emphasizes reducing configuration errors through governance, change control, and automation-especially when using infrastructure as code (IaC) and deployment templates (for example, ARM, CloudFormation, Terraform). Opening pull requests (PRs) is a key DevOps control that helps prevent misconfigurations by enforcing peer review, standardized workflows, and automated validation before changes reach production. In a PR-based process, teams can require approvals, run CI checks (linting, policy- as-code validation, security scanning, and test deployments), and confirm that changes align with organizational standards and architecture requirements. This directly reduces the likelihood of accidental misconfigurations (wrong CIDR ranges, open security groups, incorrect IAM permissions, or missing tags).
By comparison, doing a git fetch (A) only updates local references and does not add quality controls. Using a web interface to edit files (C) can bypass local tooling and consistency checks, increasing risk. Committing directly to the main branch (D) removes review gates and increases the chance of untested or incorrect template changes being deployed. Therefore, PRs are the best option for minimizing misconfiguration risk.

The best justification for a cloud service provider requiring users to migrate to a new type of VM within a specific time frame is that the equipment is reaching end of life and end of support (EOL/EOS). This means that the older type of VM will no longer receive updates or support, which could include important security patches, so it is necessary to move to newer VM types to maintain security and performance. References:
CompTIA Cloud+ Study Guide (Exam CV0-004) by Todd Montgomery and Stephen Olson

MQTT (Message Queuing Telemetry Transport) is widely used for IoT device-to-gateway communication because it is lightweight, efficient, and designed for unreliable or low-bandwidth networks-common conditions for sensors and embedded devices. MQTT uses a publish/subscribe model where devices publish telemetry data (temperature, humidity, status) to topics, and gateways or cloud services subscribe to those topics. This decouples senders and receivers, improves scalability, and supports asynchronous messaging- key design considerations emphasized in Cloud+ CV0-004 objectives around selecting appropriate communication protocols and integrating cloud services with edge/IoT workloads. MQTT also supports QoS levels (delivery guarantees), retained messages, and persistent sessions, which help ensure data delivery despite intermittent connectivity.
By contrast, ICMP is primarily used for network diagnostics (ping/traceroute), not application telemetry. RPC is a general method for invoking procedures remotely, but it is not the most common lightweight IoT gateway protocol compared to MQTT. SSH is used for secure remote administration, not continuous sensor messaging.
Therefore, MQTT best fits IoT-to-gateway communication requirements.

The Common Vulnerability Scoring System (CVSS) is what the organization should use to calculate the severity of the risk from using an old version of Apache Log4j software component. CVSS provides an open framework for communicating the characteristics and impacts of IT vulnerabilities. References: CompTIA Cloud+ Study Guide (Exam CV0-004) - Chapter on Risk Management

Given the provided table, the VMs have been allocated 2GB of RAM each, which may be insufficient for their workload, especially during peak hours which could lead to performance degradation. Insufficient RAM can cause the VMs to use swap space on disk, which is significantly slower and can lead to poor performance.
References: CompTIA Cloud+ Certification Study Guide (Exam CV0-004) by Scott Wilson and Eric Vanderburg.