Which of the following is a common method for protecting data in transit in a cloud environment?

Applying access control lists to storage buckets.

Using TLS/SSL to encrypt communication between clients and cloud services.

Storing data in a private cloud region.

Using a firewall to block unauthorized IP addresses.

Which of the following is a common access control mechanism in cloud environments?

Role-based access control (RBAC) that assigns permissions based on job roles.

Regular vulnerability scanning.

Network firewalls that block certain IP addresses.

What is the primary purpose of a security audit in a cloud environment?

To monitor network traffic in real time.

To encrypt all data stored in the cloud.

To evaluate the security posture and compliance of cloud systems against standards and policies.

To actively exploit vulnerabilities to test defenses.

A company develops a custom web application that handles customer data and deploys it to a public cloud. The security team wants to identify vulnerabilities in the application code, such as SQL injection and cross-site scripting, before the application is released. Which technique should the security team use?

Run an application security scan that includes static and dynamic analysis.

Perform a network vulnerability scan of the application servers.

Conduct a social engineering test on the development team.

Review the cloud provider's security group configurations.

A company uses a public cloud provider for its development and production environments. The security team wants to identify missing security patches and misconfigurations across all cloud resources on a recurring basis. Which action would BEST meet this requirement?

Conduct a one-time penetration test on the production environment.

Schedule automated vulnerability scans of all cloud resources.

Enable logging and monitoring on all resources.

Review the cloud provider's compliance certifications.

CompTIACloud Essentials+

Domain 4Objective 4

Explain Security Concerns, Measures, or Concepts of Cloud Operations. CLO-002 Practice Questions (Page 2)

Part of the Governance, Risk, Compliance, and Security for the Cloud domain, which accounts for 22% of the CLO-002 exam. CompTIA does not publish an official question count, but from its 60-minute exam (~25–40 total, ~6–9 in this domain), expect 2–2 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

16concepts

22%of the exam

Questions 6–10

6foundation · easy
Which of the following is a common method for protecting data in transit in a cloud environment?
Select an answer first
7foundation · easy
Which of the following is a common access control mechanism in cloud environments?
Select an answer first
8foundation · easy
What is the primary purpose of a security audit in a cloud environment?
Select an answer first
9application · easy
A company develops a custom web application that handles customer data and deploys it to a public cloud. The security team wants to identify vulnerabilities in the application code, such as SQL injection and cross-site scripting, before the application is released. Which technique should the security team use?
Select an answer first
10application · easy
A company uses a public cloud provider for its development and production environments. The security team wants to identify missing security patches and misconfigurations across all cloud resources on a recurring basis. Which action would BEST meet this requirement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CLO-002

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CLO-002” is a trademark of its owner, used for identification only.