Free CompTIA CV0-004 Practice Questions & Answers 2026 Part3 | CompTIA Cloud+

A system administrator is migrating a bare-metal server to the cloud. Which of the following types of migration should the systems administrator perform to accomplish this task?

A junior cloud administrator was recently promoted to cloud administrator and has been added to the cloud administrator group. The cloud administrator group is the only one that can access the engineering VM. The new administrator unsuccessfully attempts to access the engineering VM. However, the other administrators can access it without issue.Which of the following is the best way to identify the root cause?

A cloud administrator has deployed a new VM. The VM cannot access the Internet or the VMs on any other subnet. The administrator runs a network command and sees the following output:The new VM can access another VM at 172.16.31.39. The administrator has verified the IP address is correct. Which of the following is the MOST likely cause of the connectivity issue?

After a hardware upgrade on a private cloud system, the systems administrator notices a considerable drop in network performance. Which of the following isMOST likely the cause?

A cloud security analyst is concerned about security vulnerabilities in publicly available container images. Which of the following is the most appropriate action for the analyst torecommend?

Some VMs that are hosted on a dedicated host server have each been allocated with 32GB of memory. Some of VMs are not utilizing more than 30% of the allocation. Which of the following should be enabled to optimize the memory utilization?

A critical security patch is required on a network load balancer in a public cloud. The organization has a major sales conference next week, and the Chief Executive Officer does not want any interruptions during the demonstration of an application behind the load balancer.Which of the following approaches should the cloud security engineer take?

To save on licensing costs, the on-premises, IaaS-hosted databases need to be migrated to a public DBaaS solution. Which of the following would be the BEST technique?

A security engineer recently discovered a vulnerability in the operating system of the company VMs. The operations team reviews the issue and decides all VMs need to be updated from version 3.4.0 to 3.4.1. Which of the following best describes the type of update that will be applied?

A newly configured VM fails to run application updates despite having internet access. The updates download automatically from a third-party network. Given the following output:Which of the following troubleshooting steps would be best to take?

A high-usage cloud resource needs to be monitored in real time on specific events to guarantee its availability.Which of the following actions should be used to meet this requirement?

An administrator needs to adhere to the following requirements when moving a customer's data to the cloud:· The new service must be geographically dispersed.· The customer should have local access to data· Legacy applications should be accessible.Which of the following cloud deployment models is most suitable?

A cloud engineer is designing a cloud-native, three-tier application. The engineer must adhere to the following security best practices:· Minimal services should run on all layers of the stack.· The solution should be vendor agnostic.· Virealization could be used over physical hardware.Which of the following concepts should the engineer use to design the system to best meet these requirements?

A VDI administrator has received reports from the drafting department that rendering is slower than normal. Which of the following should the administrator checkFIRST to optimize the performance of the VDI infrastructure?

The primary objective of a _______ in a virtual network is to route traffic between subnets.

An IaaS application has a two-hour RTO and four-hour RPO. The application takes one hour to back up its data or restore from a local backup file. A systems administrator is tasked with configuring the backup policy. Which of the following should the administrator configure to achieve the application requirements with the LEAST cost?

A systems administrator would like to reduce the network delay between two servers. Which of the following will reduce the network delay without taxing other system resources?

A government agency in the public sector is considering a migration from on premises to the cloud. Which of the following are the most important considerations for this cloud migration? (Choose two.)

A cloud administrator is working on the deployment of an e-commerce website. The administrator evaluates the scaling methods to be implemented when seasonal or flash sales are launched. Which of the following scaling approaches should the administrator use to best manage this scenario?

A company has developed an online trading platform. The engineering team selected event-based scaling for the platform's underlying resources. The platform resources scale upwith every 2,000 subscribed users. The engineering team finds out that although compute utilization is low, scaling is still occurring. Which of the following statements best explainswhy this is the case?

A company has developed a cloud-ready application. Before deployment, an administrator needs to select a deployment technology that provides a high level of portability and is lightweight in terms of footprint and resource requirements. Which of the following solutions will be BEST to help the administrator achieve the requirements?

A cloud engineer wants containers to run the latest version of a container base image to reduce the number of vulnerabilities. The applications in use requite Python 3.10 and ate not compatible with any other version. The containers' images are created every time a new version is released from the source image. Given the container Dockerfile below:Which of the following actions will achieve the objectives with the least effort?

An IaaS provider has numerous devices and services that are commissioned and decommissioned automatically on an ongoing basis. The cloud administrator needs to implement a solution that will help reduce administrative overhead. Which of the following will accomplish this task?

A systems engineer is migrating a batch of 25 VMs from an on-premises compute cluster to a public cloud using the public cloud's migration agent. The migration job shows datacopies at a rate of 250Mbps. After five servers migrate, the data copies at a rate of 25Mbps. Which of the following should the engineer review first to troubleshoot?

A company developed a product using a cloud provider's PaaS platform and many of the platform-based components within the application environment. Which of the following would the company MOST likely be concerned about when utilizing a multicloud strategy or migrating to another cloud provider?

An SQL injection vulnerability was reported on a web application, and the cloud platform team needs to mitigate the vulnerability while it is corrected by the development team. Which of the following controls will BEST mitigate the risk of exploitation?

To save on licensing costs, the on-premises, IaaS-hosted databases need to be migrated to a public DBaaS solution. Which of the following would be the BEST technique?

A critical security patch is required on a network load balancer in a public cloud. The organization has a major sales conference next week, and the Chief Executive Officer does not want any interruptions during the demonstration of an application behind the load balancer.Which of the following approaches should the cloud security engineer take?

A developer is building a new application version using a CI/CD pipeline. The developer receives the following error message log when the build fails:

To save on licensing costs, the on-premises, IaaS-hosted databases need to be migrated to a public DBaaS solution. Which of the following would be the BEST technique?

A high-usage cloud resource needs to be monitored in real time on specific events to guarantee its availability.Which of the following actions should be used to meet this requirement?

A high-usage cloud resource needs to be monitored in real time on specific events to guarantee its availability.Which of the following actions should be used to meet this requirement?

A critical security patch is required on a network load balancer in a public cloud. The organization has a major sales conference next week, and the Chief Executive Officer does not want any interruptions during the demonstration of an application behind the load balancer.Which of the following approaches should the cloud security engineer take?

A marketing team is using a SaaS-based service to send emails to large groups of potential customers. The internally managed CRM system is configured to generate a list of target customers automatically on a weekly basis, and then use that list to send emails to each customer as part of a marketing campaign. Last week, the first email campaign sent emails successfully to 3,000 potential customers. This week, the email campaign attempted to send out 50,000 emails, but only 10,000 were sent. Which of the following is the MOST likely reason for not sending all the emails?

A developer is deploying a new version of a containerized application The DevOps team wants:- No disruption- No performance degradation- Cost-effective deployment- Minimal deployment timeWhich of the following is the best deployment strategy given the requirements?

A cloud solutions architect is designing a VM-based solution that requires reducing the cost as much as possible.Which of the following solutions will best satisfy this requirement?

A customer relationship management application, which is hosted in a public cloud laaS network, is vulnerable to a remote command execution vulnerability. Which of the following is the best solution for the security engineer to implement to prevent the application from being exploited by basic attacks? A Web Application Firewall (WAF) is the best solution to implement for a public cloud IaaS hosted customer relationship management application vulnerable to remote command execution attacks. WAFs are designed to monitor, filter, and block malicious HTTP/S traffic to and from a web application to protect against various application layer attacks, including remote command execution. References: CompTIA Cloud+ Study Guide (Exam CV0-004) - Chapter on Security in the Cloud

Servers in the hot site are clustered with the main site.

A cloud engineer is reviewing the following Dockerfile to deploy a Python web application:Which of the following changes should the engineer make to the file to improve container security?

A cloud solutions architect is designing a VM-based solution that requires reducing the cost as much as possible.Which of the following solutions will best satisfy this requirement?

An DevOps engineer is receiving reports that users can no longer access the company's web application after hardening of a web server. The users are receiving the following error:ERR_SSLJ/ERSION_OR_CIPHER_MISMATCH.Which of the following actions should the engineer take to resolve the issue?

A systems administrator is deploying a VM and would like to minimize storage utilization by ensuring the VM uses only the storage if needs. Which of the following will BEST achieve this goal?

A cloud solutions architect is designing a VM-based solution that requires reducing the cost as much as possible.Which of the following solutions will best satisfy this requirement?

A company just learned that the data in its object storage was accessed by an unauthorized party. Which of the following should the company have done to make the data unusable?

Which of the following best explains why a project manager would choose to sign a fixed-price contract with a vendor?

A critical security patch is required on a network load balancer in a public cloud. The organization has a major sales conference next week, and the Chief Executive Officer does not want any interruptions during the demonstration of an application behind the load balancer.Which of the following approaches should the cloud security engineer take?

A cloud solutions architect is designing a VM-based solution that requires reducing the cost as much as possible.Which of the following solutions will best satisfy this requirement?

A systems administrator is trying to reduce storage consumption. Which of the following file types would benefit the MOST from compression?

An on-call cloud engineer receives a critical alert about an e-commerce web server being unresponsive. Which of the following steps should the engineer take first? In CompTIA Cloud+ (CV0-004) objectives covering operations, incident response, and troubleshooting, the first action after receiving a critical alert is triage. Triage is the rapid initial assessment that confirms the alert is real, determines the scope and impact (single host vs. entire service), identifies immediate risks (customer impact, revenue loss, security implications), and prioritizes the response. During triage, the engineer checks key indicators such as health checks, uptime monitors, recent deployments, system metrics (CPU, memory, disk, network), and logs to establish what is failing and how widespread it is. This step guides the most effective next actions and prevents wasting time on incorrect assumptions. Remediation (B) comes after triage because you need enough facts to choose the correct fix (restart service, fail over, scale out, roll back, etc.). Escalation (C) may be required, but it is typically based on triage findings---severity, ownership, and whether additional expertise is needed. Monitoring (D) is ongoing and supports detection and validation, but it is not the first step once an incident has already been detected. Therefore, triage is the correct first step.

A company just learned that the data in its object storage was accessed by an unauthorized party. Which of the following should the company have done to make the data unusable?

A healthcare organization must follow strict compliance requirements to ensure that Pll is not leaked.The cloud administrator needs to ensure the cloud email system can support this requirement Whichof the following should the organization enable?

A junior cloud administrator was recently promoted to cloud administrator and has been added to the cloud administrator group. The cloud administrator group is the only one that can access the engineering VM. The new administrator unsuccessfully attempts to access the engineering VM. However, the other administrators can access it without issue.Which of the following is the best way to identify the root cause?

A cloud engineer wants to implement a monitoring solution to detect cryptojacking and other cryptomining malware on cloud instances.Which of the following metrics would most likely be used to identify the activity?

A network administrator is budding a site-to-site VPN tunnel from the company's headquarters office 10 the company's public cloud development network. The network administrator confirms the following:The VPN tunnel is established on the headquarter office firewall.While inside the office, developers report that they cannot connect to the development network resources.While outside the office on a client VPN, developers report that they can connect to the development network resources.The office and the client VPN have different IP subnet ranges. The firewall flow logs show VPN traffic is reaching the development network from the office.Which of the following is the next step the next network administrator should take to troubleshoot the VPN tunnel?

Which of the following can reduce the risk of CI/CD pipelines leaking secrets?

A cloud solutions architect is designing a VM-based solution that requires reducing the cost as much as possible.Which of the following solutions will best satisfy this requirement?

Which of the following is the best type of database for storing different types of unstructured data that may change frequently?

An update is being deployed to a web application, and a systems administrator notices the cloud SQL database has stopped running. The VM is responding to pings, and there were not any configuration changes scheduled for the VM. Which of the following should the administrator check NEXT?

Which of the transfer when comparing a multiregional to a single-region cloud platform design?

A systems administrator would like to reduce the network delay between two servers. Which of the following will reduce the network delay without taxing other system resources?

Which of the following best explains the concept of migrating from on premises to the cloud?

A cloud engineer deploys a group of new VMs to the cloud environment. The VMs have access to sensitive data. Which of the following data protection methods should the engineer use to protect this data from ransomware?

A company needs to deploy its own code directly in the cloud without provisioning additional infrastructure. Which of the following is the best cloud service model for the company to use?

A company wants to check its infrastructure and application for security issues regularly. Which of the following should the company implement?

A cloud administrator is reviewing a new application implementation document. The administrator needs to make sure all the known bugs and fixes are applied, and unwanted ports and services are disabled. Which of the following techniques would BEST help the administrator assess these business requirements?

A junior cloud administrator was recently promoted to cloud administrator and has been added to the cloud administrator group. The cloud administrator group is the only one that can access the engineering VM. The new administrator unsuccessfully attempts to access the engineering VM. However, the other administrators can access it without issue.Which of the following is the best way to identify the root cause?

Which of the following models will best reduce the cost of running short-term, non-critical workloads?

An engineer is responsible for configuring a new firewall solution that will be deployed in a new public cloud environment. All traffic must pass through the firewall.The SLA for the firewall is 99.999%. Which of the following should be deployed?

A software engineer is integrating an application lo The cloud that is web socket based. Which of thefollowing applications is the engineer most likely deploying?

A company is switching from one cloud provider to another and needs to complete the migration as quickly as possible. Which of the following is the MOST important consideration to ensure a seamless migration?