After a WAF deployment fails to prevent an exploit, adding an Access Control List (ACL) to the Virtual Machine (VM) subnet can be an effective control. ACLs provide an additional layer of security by explicitly defining which traffic can or cannot enter a network segment. By setting granular rules based on IP addresses, protocols, and ports, ACLs help to restrict access to resources, thereby mitigating potential exploits and enhancing the security of the IaaS network.
CompTIA Cloud+ materials cover governance, risk, compliance, and security for the cloud, including the implementation of network security controls like ACLs, to protect cloud environments from unauthorized access and potential security threats.

To resolve the ERR_SSL_VERSION_OR_CIPHER_MISMATCH error after hardening a web server, the engineer should configure the server to use TLS 1.2 or newer. This error often occurs when the server or client supports an outdated version of SSL/TLS or incompatible cipher suites. Updating to a modern, secure version of TLS ensures compatibility and enhances security.
The CompTIA Cloud+ certification includes governance, risk, compliance, and security for the cloud, emphasizing the importance of implementing up-to-date security protocols like TLS to protect data in transit and ensure secure communications in cloud environments.

For periodic bursts of traffic that are predictable, such as when a new video is launched, a scheduled scaling approach is suitable. This strategy involves scaling resources based on forecasted or known traffic patterns, ensuring that the infrastructure can handle the load during expected peak times.
The use of scheduled scaling to manage predictable traffic increases is discussed within the Management and Technical Operations section of the CompTIA Cloud+ exam objectives.

The most cost-effective way to store data that is infrequently accessed is typically an off-site storage service, often referred to as cold or archival storage. This type of storage is designed for data that is rarely accessed, providing lower storage costs.
Data storage solutions and their cost implications, including off-site (cold or archival) storage for infrequently accessed data, are part of the cloud storage options discussed in CompTIA Cloud+.

When backing up data that will traverse a third-party, untrusted network, encryption is the most important feature to ensure the confidentiality and integrity of the data. Encryption will protect the data from potential interception or tampering during transit to the backup data center. References: CompTIA Cloud+ Guide to Cloud Computing (ISBN: 978-1-64274-282-2)