Which of the following best describes public data in a cloud environment?

Data that is intended for anyone to access without restrictions.

Data that is encrypted and stored in a secure cloud storage service.

Data that is restricted to a specific group of users within an organization.

Data that contains personally identifiable information (PII) and requires protection.

Which of the following is an example of a vulnerability that application scanning is designed to detect?

SQL injection in a web application's input fields.

An open port on a cloud firewall.

A missing operating system patch on a virtual machine.

A company uses a cloud-based project management tool. The company wants to ensure that only project managers can modify project settings, while team members can only view tasks. What should the company configure?

Enable multi-factor authentication for all users.

Assign different roles to users with appropriate permissions.

Conduct a security audit of the tool.

Use the same role for all users to simplify management.

What is the primary purpose of vulnerability scanning in cloud operations?

To encrypt data stored in the cloud.

To monitor user activity and detect unauthorized access.

To automatically detect known security weaknesses in systems and applications.

To actively exploit vulnerabilities to test defenses.

What is the primary purpose of authorization management in cloud services?

To verify the identity of users attempting to access the system.

To monitor user activity for suspicious behavior.

To encrypt data in transit and at rest.

To define and enforce what authenticated users are allowed to do.

CompTIACloud Essentials+

Domain 4Objective 4

Explain Security Concerns, Measures, or Concepts of Cloud Operations. CLO-002 Practice Questions (Page 9)

Part of the Governance, Risk, Compliance, and Security for the Cloud domain, which accounts for 22% of the CLO-002 exam. CompTIA does not publish an official question count, but from its 60-minute exam (~25–40 total, ~6–9 in this domain), expect 2–2 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

16concepts

22%of the exam

Questions 41–45

41foundation · easy
Which of the following best describes public data in a cloud environment?
Select an answer first
42foundation · easy
Which of the following is an example of a vulnerability that application scanning is designed to detect?
Select an answer first
43application · easy
A company uses a cloud-based project management tool. The company wants to ensure that only project managers can modify project settings, while team members can only view tasks. What should the company configure?
Select an answer first
44foundation · easy
What is the primary purpose of vulnerability scanning in cloud operations?
Select an answer first
45foundation · easy
What is the primary purpose of authorization management in cloud services?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CLO-002

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CLO-002” is a trademark of its owner, used for identification only.