A healthcare company stores patient records in a cloud object storage service. The company must protect the data from unauthorized access, both while it is stored and while it is transmitted between the application and the storage. Which combination of measures should the company implement?

Encrypt the data at rest and in transit using encryption keys managed by the company.

Enable logging and monitoring on the storage service.

Use a VPN for all access to the storage service.

Restrict access to the storage using identity-based policies.

What is the primary purpose of a breach response plan in a cloud environment?

To prevent all security breaches from occurring.

To outline steps to contain, eradicate, and recover from a security breach.

To monitor user activity for suspicious behavior.

To encrypt all data in the cloud.

Which of the following is a typical first step in responding to a data breach?

Notifying all customers before understanding the scope.

Deleting all logs to protect evidence.

Containing the breach to prevent further damage.

Restoring from backups immediately.

Which of the following is a common measure to ensure data availability in the cloud?

Encrypting data with strong encryption algorithms.

Applying strict access control policies.

Replicating data across multiple availability zones.

Regularly scanning for vulnerabilities.

Which of the following is a common data sanitization method?

Compressing the data into a zip file.

Overwriting the storage media with random data patterns.

Renaming the file to a different name.

Moving the data to a different cloud region.

CompTIACloud Essentials+

Domain 4Objective 4

Explain Security Concerns, Measures, or Concepts of Cloud Operations. CLO-002 Practice Questions (Page 3)

Part of the Governance, Risk, Compliance, and Security for the Cloud domain, which accounts for 22% of the CLO-002 exam. CompTIA does not publish an official question count, but from its 60-minute exam (~25–40 total, ~6–9 in this domain), expect 2–2 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

16concepts

22%of the exam

Questions 11–15

11application · medium
A healthcare company stores patient records in a cloud object storage service. The company must protect the data from unauthorized access, both while it is stored and while it is transmitted between the application and the storage. Which combination of measures should the company implement?
Select an answer first
12foundation · easy
What is the primary purpose of a breach response plan in a cloud environment?
Select an answer first
13foundation · easy
Which of the following is a typical first step in responding to a data breach?
Select an answer first
14foundation · easy
Which of the following is a common measure to ensure data availability in the cloud?
Select an answer first
15foundation · easy
Which of the following is a common data sanitization method?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CLO-002

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CLO-002” is a trademark of its owner, used for identification only.