Free CompTIA CV0-004 Practice Questions & Answers 2026 Part4

Question #1

A support engineer wants to prevent users from running malware on several IaaS compute instances. Which of the following will BEST achieve this objective?

A. Encrypt all applications that users should not access

B. Set the execute filesystem permissions on the desired applications only

C. Implement an application whitelisting policy

D. Disable file sharing on the instance

View answer

Correct Answer: C

Question #2

Which of the following cloud-native architecture designs is the most easily maintained, decentralized, and decoupled?

A. Monolithic

B. Hybrid cloud

C. Mainframe

D. Microservices

View answer

Correct Answer: D

Question #3

A manager wants information about which users signed in to a certain VM during the past month.Which of the following can the cloud administrator use to obtain this information?

A. etention

B. lerting

C. ggregation

D. ollection

View answer

Correct Answer: D

Question #4

The change control board received a request to approve a configuration change 10 deploy in the cloud production environment. Which of the following should have already been competed?

A. Penetration test

B. End - to - end security testing

C. Cost benefit analysis

D. User acceptance testing

View answer

Correct Answer: D

Question #5

A DevOps administrator is automating an existing software development workflow. The administrator wants to ensure that prior to any new code going into production, tests confirm the new code does not negatively impact existing automation activities. Which of the following testing techniques would be BEST to use?

A. Usability testing

B. Regression testing

C. Vulnerability testing

D. Penetration testing

View answer

Correct Answer: B

Question #6

A cloud engineer is responsible for managing a public cloud environment. There is currently one virtual network that is used to host the servers in the cloud environment. The environment is rapidly growing, and the network does not have any more available IP addresses. Which of the following should the engineer do to accommodate additional servers in this environment?

A. Create a VPC and peer the networks

B. Implement dynamic routing

C. Enable DHCP on the networks

D. Obtain a new IPAM subscription

View answer

Correct Answer: A

Question #7

A cloud solutions architect is designing a VM-based solution that requires reducing the cost as much as possible.Which of the following solutions will best satisfy this requirement?

A. Using ephemeral storage on replicated VMs

B. Creating Spot VMs in one availability zone

C. Spreading the VMs across different regions

D. Using provisioned IOPS storage

View answer

Correct Answer: B

Question #8

A technician receives an email from a vendor who is requesting payment of an invoice for human resources services. The email contains a request for bank account numbers. Which of the following types of attacks does this behavior most likely indicate?

A. MaIware

B. Cryptojacking

C. Ransomware

D. Phishing

E. Reveal Answer

View answer

Correct Answer: D

Question #9

Your team is using IaC to provision resources but finds discrepancies between the actual infrastructure and the code. What should they implement?

A. Continuous deployment

B. Drift detection

C. Configuration logs

D. Multi-cloud integration

View answer

Correct Answer: B

Question #10

A critical security patch is required on a network load balancer in a public cloud. The organization has a major sales conference next week, and the Chief Executive Officer does not want any interruptions during the demonstration of an application behind the load balancer.Which of the following approaches should the cloud security engineer take?

A. Ask the management team to delay the conference

B. Apply the security patch after the event

C. Ask the upper management team to approve an emergency patch window

D. Apply the security patch immediately before the conference

View answer

Correct Answer: C

Question #11

Which of the following is a difference between a SAN and a NAS?

A. A SAN works only with fiber-based networks

B. A SAN works with any Ethernet-based network

C. A NAS uses a faster protocol than a SAN

D. A NAS uses a slower protocol than a SAN

View answer

Correct Answer: D

Question #12

A systems administrator would like to reduce the network delay between two servers. Which of the following will reduce the network delay without taxing other system resources?

A. Decrease the MTU size on both servers

B. Adjust the CPU resources on both servers

C. Enable compression between the servers

D. Configure a VPN tunnel between the servers

View answer

Correct Answer: A

Question #13

Which of the following service options would provide the best availability for critical applications in the event of a disaster?

A. Edge computing

B. Cloud bursting

C. Availability zones

D. Multicloud tenancy

View answer

Correct Answer: C

Question #14

Which of the following integration systems would best reduce unnecessary network traffic by allowing data to travel bidirectionally and facilitating real-time results for developers who need to display critical information within applications? Web sockets provide a full-duplex communication channel over a single, long-lived connection, allowing data to flow bidirectionally between a client and a server. This is ideal for real-time applications where developers need to display critical information without unnecessary network overhead, as it reduces the need for repetitive HTTP requests and allows for more efficient, instantaneous data updates and interactions.

A. REST API

B. RPC

C. GraphQL

D. Web sockets

View answer

Correct Answer: D

Question #15

A high-usage cloud resource needs to be monitored in real time on specific events to guarantee its availability.Which of the following actions should be used to meet this requirement?

A. Configure a ping command to identify when the cloud instance is out of service

B. Create a dashboard with visualizations to filter the status of critical activities

C. Collect all the daily activity from the cloud instance and create a dump file for analysis

D. Schedule an hourly scan of the network to check for the availability of the resource

View answer

Correct Answer: B

Question #16

A company uses two mobile applications. Application A is used in the United States market, and Application B is used in the European Union market with GDPR restrictions. Both applications must comply with PCI standards. The company is consolidating both mobile applications into a single application and must standardize its database back-end system. Which of the following is the best option to provision the database for the consolidated mobile application?

A. eploying one global database across multiple regions

B. rovisioning one database in one region with separate IAM permissions

C. sing two databases in the same region with different access controls

D. mplementing two databases in two different regions

View answer

Correct Answer: D

Question #17

An DevOps engineer is receiving reports that users can no longer access the company's webapplication after hardening of a web server. The users are receiving the following error:ERR_SSLJ/ERSION_OR_CIPHER_MISMATCH.Which of the following actions should the engineer take to resolve the issue?

A. estart the web server

B. onfigure TLS 1

C. pdate the web server

D. eview logs on the WAF

View answer

Correct Answer: B

Question #18

An organization requires the following to be achieved between the finance and marketing departments:-Allow HTTPS/HTTP.-Disable FTP and SMB traffic.Which of the following is the MOST suitable method to meet the requirements?

A. Implement an ADC solution to load balance the VLAN traffic

B. Configure an ACL between the VLANs

C. Implement 802

D. Configure on-demand routing between the VLANs

View answer

Correct Answer: B

Question #19

A critical security patch is required on a network load balancer in a public cloud. The organization has a major sales conference next week, and the Chief Executive Officer does not want any interruptions during the demonstration of an application behind the load balancer.Which of the following approaches should the cloud security engineer take?

A. Ask the management team to delay the conference

B. Apply the security patch after the event

C. Ask the upper management team to approve an emergency patch window

D. Apply the security patch immediately before the conference

View answer

Correct Answer: C

Question #20

An DevOps engineer is receiving reports that users can no longer access the company's web application after hardening of a web server. The users are receiving the following error: ERR_SSLJ/ERSION_OR_CIPHER_MISMATCH.Which of the following actions should the engineer take to resolve the issue?

A. Restart the web server

B. Configure TLS 1

C. Update the web server

D. Review logs on the WAF

E. Reveal Answer

View answer

Correct Answer: B

Question #21

A junior cloud administrator was recently promoted to cloud administrator and has been added to the cloud administrator group. The cloud administrator group is the only one that can access the engineering VM. The new administrator unsuccessfully attempts to access the engineering VM. However, the other administrators can access it without issue.Which of the following is the best way to identify the root cause?

A. Rebooting the engineering VM

B. Reviewing the administrator's permissions to access the engineering VM

C. Allowing connections from 0

D. Performing a packet capture on the engineering VM

View answer

Correct Answer: B

Question #22

A junior cloud administrator was recently promoted to cloud administrator and has been added to the cloud administrator group. The cloud administrator group is the only one that can access the engineering VM. The new administrator unsuccessfully attempts to access the engineering VM. However, the other administrators can access it without issue.Which of the following is the best way to identify the root cause?

A. Rebooting the engineering VM

B. Reviewing the administrator's permissions to access the engineering VM

C. Allowing connections from 0

D. Performing a packet capture on the engineering VM

View answer

Correct Answer: B

Question #23

A cloud engineer is running a latency-sensitive workload that must be resilient and highly available across multiple regions. Which of the following concepts best addresses these requirements?

A. Cloning

B. Clustering

C. Hardware passthrough

D. Stand-alone container

View answer

Correct Answer: B

Question #24

A software engineer is integrating an application lo The cloud that is web socket based.Which of the following applications is the engineer most likely deploying?

A. Image-sharing

B. Data visualization

C. Chat

D. File transfer

View answer

Correct Answer: C

Question #25

A security audit reveals that several cloud resources are not encrypted. Which steps should you prioritize?

A. Enable encryption for data at rest

B. Disable public access for unencrypted resources

C. Apply key rotation policies

D. Use shared keys for encryption

View answer

Correct Answer: AC

Question #26

A customer relationship management application, which is hosted in a public cloud IaaS network, is vulnerable to a remote command execution vulnerability. Which of the following is the best solution for the security engineer to implement to prevent the application from being exploited by basic attacks?

A. IPS

B. ACL

C. DLP

D. WAF

View answer

Correct Answer: D

Question #27

After accidentally uploading a password for an IAM user in plain text, which of the following should a cloud administrator do FIRST? (Choose two.)

A. Identify the resources that are accessible to the affected IAM user

B. Remove the published plain-text password

C. Notify users that a data breach has occurred

D. Change the affected IAM user's password

E. Delete the affected IAM user

View answer

Correct Answer: BD

Question #28

A junior cloud administrator was recently promoted to cloud administrator and has been added to the cloud administrator group. The cloud administrator group is the only one that can access the engineering VM. The new administrator unsuccessfully attempts to access the engineering VM. However, the other administrators can access it without issue.Which of the following is the best way to identify the root cause?

A. Rebooting the engineering VM

B. Reviewing the administrator's permissions to access the engineering VM

C. Allowing connections from 0

D. Performing a packet capture on the engineering VM

View answer

Correct Answer: B

Question #29

A software development team must manage changes to source code for different clients who utilize the same product with different features. Which of the following meets this requirement?

A. Branch

B. Commit

C. Push

D. Merge

View answer

Correct Answer: A

Question #30

A DevOps administrator is automating an existing software development workflow. The administrator wants to ensure that prior to any new code going into production, tests confirm the new code does not negatively impact existing automation activities. Which of the following testing techniques would be BEST to use?

A. Usability testing

B. Regression testing

C. Vulnerability testing

D. Penetration testing

View answer

Correct Answer: B

Question #31

A group of cloud administrators frequently uses the same deployment template to recreate a cloud-based development environment. The administrators are unable to go back and review the history of changes they have made to the template. Which of the following cloud resource deployment concepts should the administrator start using?

A. rift detection

B. epeatability

C. ocumentation

D. ersioning

View answer

Correct Answer: D

Question #32

A company uses containers stored in Docker Hub to deploy workloads (or its laaS infrastructure. The development team releases changes to the containers several times per hour. Which of the following should a cloud engineer do to prevent the proprietary code from being exposed to third parties?

A. Use laC to deploy the laaS infrastructure

B. Convert the containers to VMs

C. Deploy the containers over SSH

D. Use private repositories for the containers

View answer

Correct Answer: D

Question #33

A company has been using a CRM application that was developed in-house and is hosted on local servers. Due to internal changes, the company wants to migrate the application to the cloud without having to manage the infrastructure. Which of the following services should the company consider?

A. SaaS

B. PaaS

C. XaaS

D. laaS

View answer

Correct Answer: B

Question #34

A company recently experienced a power outage that lasted 30 minutes. During this time, a whole rack of servers was inaccessible, even though the servers did not lose power. Which of the following should be investigated FIRST?

A. Server power

B. Rack power

C. Switch power

D. SAN power

View answer

Correct Answer: C

Question #35

A cloud engineer is designing a cloud-native, three-tier application. The engineer must adhere to the following security best practices:· Minimal services should run on all layers of the stack.· The solution should be vendor agnostic.· Virealization could be used over physical hardware.Which of the following concepts should the engineer use to design the system to best meet these requirements?

A. Virtual machine

B. Micro services

C. Fan-out

D. Cloud-provided managed services

View answer

Correct Answer: B

Question #36

A system surpasses 75% to 80% of resource consumption. Which of the following scaling approaches is the most appropriate?

A. Trending

B. Manual

C. Load

D. Scheduled

View answer

Correct Answer: C

Question #37

A cloud architect is designing the VPCs for a new hybrid cloud deployment. The business requires the following:-High availability-Horizontal auto-scaling-60 nodes peak capacity per region-Five reserved network IP addresses per subnet-/24 rangeWhich of the following would BEST meet the above requirements?

A. Create two /25 subnets in different regions

B. Create three /25 subnets in different regions

C. Create two /26 subnets in different regions

D. Create three /26 subnets in different regions

E. Create two /27 subnets in different regions

F. Create three /27 subnets in different regions

View answer

Correct Answer: A

Question #38

A company's engineering department is conducting a month-long test on the scalability of an in-house-developed software that requires a cluster of 100 or more servers. Which of the following models is the best to use? For testing the scalability of an in-house-developed software that requires a cluster of 100 or more servers, Infrastructure as a Service (IaaS) is the best model. IaaS provides the necessary compute resources and allows the engineering department to configure the environment as needed for their specific test without the constraints that might be present in PaaS or SaaS offerings. References: CompTIA Cloud+ Study Guide (Exam CV0-004) - Chapter on Cloud Service Models

A. PaaS

B. SaaS

C. DBaaS

D. laaS

View answer

Correct Answer: D

Question #39

A security engineer Identifies a vulnerability m a containerized application. The vulnerability can be exploited by a privileged process to read tie content of the host's memory. The security engineer reviews the following Dockerfile to determine a solution to mitigate similar exploits:Which of the following is the best solution to prevent similar exploits by privileged processes?

A. Adding the USER myappuserinstruction

B. Patching the host running the Docker daemon

C. Changing FROM alpiner3

D. Running the container with the ready-only filesystem configuration

View answer

Correct Answer: A

Question #40

A company requests that its cloud administrator provision virtual desktops for every user. Given the following information:

A. Provisioning VMs of varying sizes to match user needs

B. Configuring a group of VMs to share with multiple users

C. Using VMs that have spot availability

D. Setting up the VMs to turn off outside of business hours at night

View answer

Correct Answer: D

Question #41

A group of cloud administrators frequently uses the same deployment template to recreate a cloud-based development environment. The administrators are unable to go back and review the history of changes they have made to the template. Which of the following cloud resource deployment concepts should the administrator start using?

A. Drift detection

B. Repeatability

C. Documentation

D. Versioning

View answer

Correct Answer: D

Question #42

A resource pool in a cloud tenant has 90 GB of memory and 120 cores. The cloud administrator needs to maintain a 30% buffer for resources for optimal performance of the hypervisor. Which of the following would allow for the maximum number of two-core machines with equal memory?

A. 30 VMs, 3GB of memory

B. 40 VMs, 1,5GB of memory

C. 45 VMs, 2 GB of memory

D. 60 VMs, 1 GB of memory

View answer

Correct Answer: B

Question #43

A cloud engineer is designing a cloud-native, three-tier application. The engineer must adhere to the following security best practices:· Minimal services should run on all layers of the stack.· The solution should be vendor agnostic.· Virealization could be used over physical hardware.Which of the following concepts should the engineer use to design the system to best meet these requirements?

A. Virtual machine

B. Micro services

C. Fan-out

D. Cloud-provided managed services

View answer

Correct Answer: B

Question #44

A company's website development team made some code changes to implement a new feature. The development team published the changes via a code pipeline and verified that the feature is in the development environment. However, the testing team is unable to see the new feature when executing the test plan.

A. Roll back the development pipeline to revert and reapply the changes

B. Confirm that the deployment has been completed in the QA environment

C. Switch the application load balancer to use the blue environment

D. Update the policies on the CASB to allow access to the test environment

View answer

Correct Answer: B

Question #45

A cloud engineer is designing a cloud-native, three-tier application. The engineer must adhere to the following security best practices:· Minimal services should run on all layers of the stack.· The solution should be vendor agnostic.· Virealization could be used over physical hardware.Which of the following concepts should the engineer use to design the system to best meet these requirements?

A. Virtual machine

B. Micro services

C. Fan-out

D. Cloud-provided managed services

View answer

Correct Answer: B

Question #46

A company's man web application is no longer accessible via the internet. The cloud administrator investigates and discovers the application is accessible locally and only via an IP access.Which of the following was misconfigured?

A. IP

B. DHCP

C. NAT

D. DNS

View answer

Correct Answer: D

Question #47

A company just successfully completed a DR test and is ready to shut down its DR site and resume normal operations. Which of the following actions should the cloud administrator take FIRST?

A. Initiate a failover

B. Restore backups

C. Configure the network

D. Perform a failback

View answer

Correct Answer: D

Question #48

A critical security patch is required on a network load balancer in a public cloud. The organization has a major sales conference next week, and the Chief Executive Officer does not want any interruptions during the demonstration of an application behind the load balancer.Which of the following approaches should the cloud security engineer take?

A. Ask the management team to delay the conference

B. Apply the security patch after the event

C. Ask the upper management team to approve an emergency patch window

D. Apply the security patch immediately before the conference

View answer

Correct Answer: C

Question #49

A cloud solutions architect is designing a VM-based solution that requires reducing the cost as much as possible.Which of the following solutions will best satisfy this requirement?

A. Using ephemeral storage on replicated VMs

B. Creating Spot VMs in one availability zone

C. Spreading the VMs across different regions

D. Using provisioned IOPS storage

View answer

Correct Answer: B

Question #50

A systems administrator is reviewing two CPU models for a cloud deployment. Both CPUs have the same number of cores/threads and run at the same clock speed. Which of the following will BEST identify the CPU with more computational power?

A. Simultaneous multithreading

B. Bus speed

C. L3 cache

D. Instructions per cycle

View answer

Correct Answer: D

Question #51

A cloud engineer is designing a cloud-native, three-tier application. The engineer must adhere to the following security best practices:· Minimal services should run on all layers of the stack.· The solution should be vendor agnostic.· Virealization could be used over physical hardware.Which of the following concepts should the engineer use to design the system to best meet these requirements?

A. Virtual machine

B. Micro services

C. Fan-out

D. Cloud-provided managed services

View answer

Correct Answer: B

Question #52

A company migrated its CRM system to a SaaS solution. The security team is updating the RAG matrix for the newly migrated CRM. Given the following table:Which of the following responsibility assignments best aligns with the shared responsibility model for the new CRM?

A. Data-center security

B. CRM software security

C. CRM server patching

D. CRM development life cycle

View answer

Correct Answer: A

Question #53

A high-usage cloud resource needs to be monitored in real time on specific events to guarantee its availability.Which of the following actions should be used to meet this requirement?

A. Configure a ping command to identify when the cloud instance is out of service

B. Create a dashboard with visualizations to filter the status of critical activities

C. Collect all the daily activity from the cloud instance and create a dump file for analysis

D. Schedule an hourly scan of the network to check for the availability of the resource

View answer

Correct Answer: B

Question #54

A customer relationship management application, which is hosted in a public cloud IaaS network, is vulnerable to a remote command execution vulnerability. Which of the following is the best solution for the security engineer to implement to prevent the application from being exploited by basic attacks?

A. PS

B. CL

C. LP

D. AF

View answer

Correct Answer: D

Question #55

A cloud solutions architect is designing a VM-based solution that requires reducing the cost as much as possible.Which of the following solutions will best satisfy this requirement?

A. Using ephemeral storage on replicated VMs

B. Creating Spot VMs in one availability zone

C. Spreading the VMs across different regions

D. Using provisioned IOPS storage

View answer

Correct Answer: B

Question #56

A cloud developer receives a security vulnerability scan report and needs to analyze and record the true positives. Which of the following vulnerability management steps is this an example of?

A. Assessment

B. Identification

C. Scanning scope

D. Remediation

View answer

Correct Answer: B

Question #57

An SQL injection vulnerability was reported on a web application, and the cloud platform team needs to mitigate the vulnerability while it is corrected by the development team. Which of the following controls will BEST mitigate the risk of exploitation?

A. DLP

B. HIDS

C. NAC

D. WAF

View answer

Correct Answer: D

Question #58

A systems administrator would like to reduce the network delay between two servers. Which of the following will reduce the network delay without taxing other system resources?

A. Decrease the MTU size on both servers

B. Adjust the CPU resources on both servers

C. Enable compression between the servers

D. Configure a VPN tunnel between the servers

View answer

Correct Answer: A

Question #59

A government agency in the public sector is considering a migration from on premises to the cloud. Which of the following are the most important considerations for this cloud migration? (Choose two.)

A. Compliance

B. IaaS vs

C. Firewall capabilities

D. Regulatory

E. Implementation timeline

F. Service availability

View answer

Correct Answer: AD

Question #60

A customer is migrating applications to the cloud and wants to grant authorization based on the classification levels of each system. Which of the following should the customer implement to ensure authorisation to systems is granted when the user and system classification properties match? (Select two).

A. Resource tagging

B. Discretionary access control

C. Multifactor authentication

D. Role - based access control

E. Token - based authentication

F. Bastion host

View answer

Correct Answer: BD

Question #61

A Chief Information Security Officer (CISO) is evaluating the company's security management program. The CISO needs to locate all the assets with identified deviations and mitigation measures. Which of the following would help the CISO with these requirements?

A. An SLA document

B. A DR plan

C. SOC procedures

D. A risk register

View answer

Correct Answer: D

DON'T WANT TO MISS A THING?

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE
Get Now

Free CompTIA CV0-004 Practice Questions & Answers 2026 Part4 | CompTIA Cloud+

View The Updated CompTIA Exam Questions

View Answers after Submission

DON'T WANT TO MISS A THING?

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE Get Now

Free CompTIA CV0-004 Practice Questions & Answers 2026 Part4 | CompTIA Cloud+

View The Updated CompTIA Exam Questions

View Answers after Submission

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE
Get Now